Mercurial > hg > nginx-tests
comparison stream_ssl_conf_command.t @ 1964:3cae7b54841e
Tests: fixed hangs with Net::SSLeay with LibreSSL on macOS.
On macOS (as seen on 14.4.1, latest at the moment), Net::SSLeay compiled
with LibreSSL is shipped with the OS (Net::SSLeay 1.88, LibreSSL 3.3.6).
And for some reason mail_ssl_conf_command.t and stream_ssl_conf_command.t
tests hang after the test, waiting indefinitely in reused SSL socket close().
This seems to be an LibreSSL bug in SSL_shutdown() (at least a couple was
fixed in LibreSSL 3.5.0), probably related to session reuse (which do work
in these particular tests due to TLSv1.2 explicitly used for testing).
Still, calling close(SSL_no_shutdown => 1) explicitly is a trivial workaround,
and hence it is implemented.
| author | Maxim Dounin <mdounin@mdounin.ru> |
|---|---|
| date | Mon, 06 May 2024 00:01:33 +0300 |
| parents | dbb7561a9441 |
| children |
comparison
equal
deleted
inserted
replaced
| 1963:5656138f2e46 | 1964:3cae7b54841e |
|---|---|
| 102 SSL => 1, | 102 SSL => 1, |
| 103 SSL_reuse_ctx => $s->socket() | 103 SSL_reuse_ctx => $s->socket() |
| 104 ); | 104 ); |
| 105 ok($s->socket()->get_session_reused(), 'SessionTicket'); | 105 ok($s->socket()->get_session_reused(), 'SessionTicket'); |
| 106 | 106 |
| 107 $s->socket()->close(SSL_no_shutdown => 1); | |
| 108 | |
| 107 $s = stream( | 109 $s = stream( |
| 108 PeerAddr => '127.0.0.1:' . port(8443), | 110 PeerAddr => '127.0.0.1:' . port(8443), |
| 109 SSL => 1, | 111 SSL => 1, |
| 110 SSL_cipher_list => | 112 SSL_cipher_list => |
| 111 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384' | 113 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384' |