Mercurial > hg > nginx-tests

comparison ssl_reject_handshake.t @ 1904:c04134b0290b

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: removed deprecated "ssl" directive tests. In preparation for the directive removal.
author Sergey Kandaurov <pluknet@nginx.com>
date Mon, 05 Jun 2023 18:55:36 +0400
parents a797d7428fa5
children
comparison
equal deleted inserted replaced
1903:4b41550ebdb3 1904:c04134b0290b
21 21
22 select STDERR; $| = 1; 22 select STDERR; $| = 1;
23 select STDOUT; $| = 1; 23 select STDOUT; $| = 1;
24 24
25 my $t = Test::Nginx->new()->has(qw/http http_ssl sni socket_ssl/) 25 my $t = Test::Nginx->new()->has(qw/http http_ssl sni socket_ssl/)
26 ->has_daemon('openssl'); 26 ->has_daemon('openssl')->plan(7);
27 27
28 $t->write_file_expand('nginx.conf', <<'EOF'); 28 $t->write_file_expand('nginx.conf', <<'EOF');
29 29
30 %%TEST_GLOBALS%% 30 %%TEST_GLOBALS%%
31 31
45 45
46 ssl_reject_handshake on; 46 ssl_reject_handshake on;
47 } 47 }
48 48
49 server { 49 server {
50 listen 127.0.0.1:8081;
51 server_name ssl;
52
53 ssl on;
54 ssl_reject_handshake on;
55 }
56
57 server {
58 listen 127.0.0.1:8080; 50 listen 127.0.0.1:8080;
59 listen 127.0.0.1:8081;
60 server_name virtual; 51 server_name virtual;
61 52
62 ssl_certificate localhost.crt; 53 ssl_certificate localhost.crt;
63 ssl_certificate_key localhost.key; 54 ssl_certificate_key localhost.key;
64 } 55 }
103 . ">>$d/openssl.out 2>&1") == 0 94 . ">>$d/openssl.out 2>&1") == 0
104 or die "Can't create certificate for $name: $!\n"; 95 or die "Can't create certificate for $name: $!\n";
105 } 96 }
106 97
107 $t->write_file('index.html', ''); 98 $t->write_file('index.html', '');
108 99 $t->run();
109 # suppress deprecation warning
110
111 open OLDERR, ">&", \*STDERR; close STDERR;
112 $t->run()->plan(9);
113 open STDERR, ">&", \*OLDERR;
114 100
115 ############################################################################### 101 ###############################################################################
116 102
117 # default virtual server rejected 103 # default virtual server rejected
118 104
119 like(get('default', 8080), qr/unrecognized name/, 'default rejected'); 105 like(get('default', 8080), qr/unrecognized name/, 'default rejected');
120 like(get(undef, 8080), qr/unrecognized name/, 'absent sni rejected'); 106 like(get(undef, 8080), qr/unrecognized name/, 'absent sni rejected');
121 like(get('virtual', 8080), qr/virtual/, 'virtual accepted'); 107 like(get('virtual', 8080), qr/virtual/, 'virtual accepted');
122
123 # default virtual server rejected - ssl on
124
125 like(get('default', 8081), qr/unrecognized name/, 'default rejected - ssl on');
126 like(get('virtual', 8081), qr/virtual/, 'virtual accepted - ssl on');
127 108
128 # non-default server "virtual2" rejected 109 # non-default server "virtual2" rejected
129 110
130 like(get('default', 8082), qr/default/, 'default accepted'); 111 like(get('default', 8082), qr/default/, 'default accepted');
131 like(get(undef, 8082), qr/200 OK(?!.*X-Name)/is, 'absent sni accepted'); 112 like(get(undef, 8082), qr/200 OK(?!.*X-Name)/is, 'absent sni accepted');