nginx-tests: stream_ssl_session

annotate stream_ssl_session_reuse.t @ 1863:dbb7561a9441

Tests: reworked stream SSL tests to use IO::Socket::SSL. Relevant infrastructure is provided in Test::Nginx::Stream. This also ensures that SSL handshake and various read operations are guarded with timeouts. The stream_ssl_verify_client.t test uses IO::Socket::SSL::_get_ssl_object() to access the Net::SSLeay object directly, as it seems to be the only way to obtain CA list with IO::Socket::SSL. While not exactly correct, this seems to be good enough for tests.

author	Maxim Dounin <mdounin@mdounin.ru>
date	Thu, 18 May 2023 18:07:12 +0300
parents	df96e9d6c095
children	f7f1f349dd26

rev	line source
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	2
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	3 # (C) Sergey Kandaurov
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	4 # (C) Maxim Dounin
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	5 # (C) Nginx, Inc.
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	6
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	7 # Tests for stream ssl module, session reuse.
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	8
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	9 ###############################################################################
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	10
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	11 use warnings;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	12 use strict;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	13
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	14 use Test::More;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	15
1621 fd440d324700 Tests: simplified get_ssl_socket() functions that use Net::SSLeay. Sergey Kandaurov <pluknet@nginx.com> parents: 1609 diff changeset	16 use Socket qw/ $CRLF /;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	17
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	18 BEGIN { use FindBin; chdir($FindBin::Bin); }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	19
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	20 use lib 'lib';
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	21 use Test::Nginx;
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	22 use Test::Nginx::Stream qw/ stream /;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	23
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	24 ###############################################################################
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	25
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	26 select STDERR; $\| = 1;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	27 select STDOUT; $\| = 1;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	28
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	29 my $t = Test::Nginx->new()->has(qw/stream stream_ssl socket_ssl_sslversion/)
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	30 ->has_daemon('openssl')->plan(7);
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	31
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	32 $t->write_file_expand('nginx.conf', <<'EOF');
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	33
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	34 %%TEST_GLOBALS%%
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	35
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	36 daemon off;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	37
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	38 events {
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	39 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	40
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	41 stream {
1609 f3ba4c74de31 Tests: added TEST_GLOBALS_STREAM variable support. Andrei Belov <defan@nginx.com> parents: 1488 diff changeset	42 %%TEST_GLOBALS_STREAM%%
f3ba4c74de31 Tests: added TEST_GLOBALS_STREAM variable support. Andrei Belov <defan@nginx.com> parents: 1488 diff changeset	43
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	44 ssl_certificate localhost.crt;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	45 ssl_certificate_key localhost.key;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	46
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	47 server {
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	48 listen 127.0.0.1:8443 ssl;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	49 proxy_pass 127.0.0.1:8081;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	50 }
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	51
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	52 server {
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	53 listen 127.0.0.1:8444 ssl;
974 882267679006 Tests: simplified parallel modifications in tests. Andrey Zelenkov <zelenkov@nginx.com> parents: 952 diff changeset	54 proxy_pass 127.0.0.1:8081;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	55
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	56 ssl_session_cache shared:SSL:1m;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	57 ssl_session_tickets on;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	58 }
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	59
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	60 server {
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	61 listen 127.0.0.1:8445 ssl;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	62 proxy_pass 127.0.0.1:8081;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	63
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	64 ssl_session_cache shared:SSL:1m;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	65 ssl_session_tickets off;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	66 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	67
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	68 server {
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	69 listen 127.0.0.1:8446 ssl;
974 882267679006 Tests: simplified parallel modifications in tests. Andrey Zelenkov <zelenkov@nginx.com> parents: 952 diff changeset	70 proxy_pass 127.0.0.1:8081;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	71
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	72 ssl_session_cache builtin;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	73 ssl_session_tickets off;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	74 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	75
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	76 server {
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	77 listen 127.0.0.1:8447 ssl;
974 882267679006 Tests: simplified parallel modifications in tests. Andrey Zelenkov <zelenkov@nginx.com> parents: 952 diff changeset	78 proxy_pass 127.0.0.1:8081;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	79
645 ed103c38b115 Tests: more ssl_session_cache tests in stream_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 636 diff changeset	80 ssl_session_cache builtin:1000;
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	81 ssl_session_tickets off;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	82 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	83
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	84 server {
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	85 listen 127.0.0.1:8448 ssl;
974 882267679006 Tests: simplified parallel modifications in tests. Andrey Zelenkov <zelenkov@nginx.com> parents: 952 diff changeset	86 proxy_pass 127.0.0.1:8081;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	87
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	88 ssl_session_cache none;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	89 ssl_session_tickets off;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	90 }
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	91
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	92 server {
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	93 listen 127.0.0.1:8449 ssl;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	94 proxy_pass 127.0.0.1:8081;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	95
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	96 ssl_session_cache off;
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	97 ssl_session_tickets off;
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	98 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	99 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	100
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	101 EOF
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	102
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	103 $t->write_file('openssl.conf', <<EOF);
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	104 [ req ]
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	105 default_bits = 2048
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	106 encrypt_key = no
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	107 distinguished_name = req_distinguished_name
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	108 [ req_distinguished_name ]
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	109 EOF
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	110
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	111 my $d = $t->testdir();
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	112
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	113 foreach my $name ('localhost') {
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	114 system('openssl req -x509 -new '
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1204 diff changeset	115 . "-config $d/openssl.conf -subj /CN=$name/ "
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	116 . "-out $d/$name.crt -keyout $d/$name.key "
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	117 . ">>$d/openssl.out 2>&1") == 0
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	118 or die "Can't create certificate for $name: $!\n";
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	119 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	120
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	121 $t->run_daemon(\&http_daemon);
1087 534d209f6ae4 Tests: fixed ssl_password_file test hang with missing FIFO reader. Sergey Kandaurov <pluknet@nginx.com> parents: 1039 diff changeset	122
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	123 $t->run();
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	124
974 882267679006 Tests: simplified parallel modifications in tests. Andrey Zelenkov <zelenkov@nginx.com> parents: 952 diff changeset	125 $t->waitforsocket('127.0.0.1:' . port(8081));
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	126
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	127 ###############################################################################
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	128
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	129 # session reuse:
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	130 #
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	131 # - only tickets, the default
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	132 # - tickets and shared cache, should work always
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	133 # - only shared cache
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	134 # - only builtin cache
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	135 # - only builtin cache with explicitly configured size
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	136 # - only cache none
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	137 # - only cache off
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	138
1834 df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	139 TODO: {
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	140 local $TODO = 'no TLSv1.3 sessions, old Net::SSLeay'
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	141 if $Net::SSLeay::VERSION < 1.88 && test_tls13();
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	142 local $TODO = 'no TLSv1.3 sessions, old IO::Socket::SSL'
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	143 if $IO::Socket::SSL::VERSION < 2.061 && test_tls13();
1834 df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	144 local $TODO = 'no TLSv1.3 sessions in LibreSSL'
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	145 if $t->has_module('LibreSSL') && test_tls13();
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	146
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	147 is(test_reuse(8443), 1, 'tickets reused');
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	148 is(test_reuse(8444), 1, 'tickets and cache reused');
1834 df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	149
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	150 TODO: {
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	151 local $TODO = 'no TLSv1.3 session cache in BoringSSL'
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	152 if $t->has_module('BoringSSL') && test_tls13();
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	153
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	154 is(test_reuse(8445), 1, 'cache shared reused');
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	155 is(test_reuse(8446), 1, 'cache builtin reused');
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	156 is(test_reuse(8447), 1, 'cache builtin size reused');
1834 df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	157
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	158 }
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	159 }
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	160
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	161 is(test_reuse(8448), 0, 'cache none not reused');
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	162 is(test_reuse(8449), 0, 'cache off not reused');
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	163
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	164 ###############################################################################
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	165
1834 df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	166 sub test_tls13 {
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	167 my $s = stream(
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	168 PeerAddr => '127.0.0.1:' . port(8443),
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	169 SSL => 1
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	170 );
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	171 return ($s->socket()->get_sslversion_int() > 0x303);
1834 df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	172 }
df96e9d6c095 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1833 diff changeset	173
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	174 sub test_reuse {
fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	175 my ($port) = @_;
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	176
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	177 my $s = stream(
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	178 PeerAddr => '127.0.0.1:' . port($port),
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	179 SSL => 1,
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	180 SSL_session_cache_size => 100
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	181 );
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	182 $s->io("GET / HTTP/1.0$CRLF$CRLF");
1833 fd9d077fee02 Tests: separate SSL session reuse tests in stream. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	183
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	184 $s = stream(
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	185 PeerAddr => '127.0.0.1:' . port($port),
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	186 SSL => 1,
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	187 SSL_reuse_ctx => $s->socket()
dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	188 );
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	189
1863 dbb7561a9441 Tests: reworked stream SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1834 diff changeset	190 return $s->socket()->get_session_reused();
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	191 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	192
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	193 ###############################################################################
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	194
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	195 sub http_daemon {
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	196 my $server = IO::Socket::INET->new(
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	197 Proto => 'tcp',
974 882267679006 Tests: simplified parallel modifications in tests. Andrey Zelenkov <zelenkov@nginx.com> parents: 952 diff changeset	198 LocalHost => '127.0.0.1:' . port(8081),
559 9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	199 Listen => 5,
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	200 Reuse => 1
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	201 )
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	202 or die "Can't create listening socket: $!\n";
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	203
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	204 local $SIG{PIPE} = 'IGNORE';
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	205
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	206 while (my $client = $server->accept()) {
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	207 $client->autoflush(1);
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	208
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	209 while (<$client>) {
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	210 last if (/^\x0d?\x0a?$/);
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	211 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	212
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	213 print $client <<EOF;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	214 HTTP/1.1 200 OK
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	215 Connection: close
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	216
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	217 EOF
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	218
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	219 close $client;
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	220 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	221 }
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	222
9208d8243926 Tests: stream ssl and proxy ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	223 ###############################################################################

Mercurial > hg > nginx-tests

annotate stream_ssl_session_reuse.t @ 1863:dbb7561a9441