Mercurial > hg > nginx-tests

comparison ssl_sni.t @ 1858:cdcd75657e52

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: added has_feature() tests for IO::Socket::SSL. The following distinct features supported: - "socket_ssl", which requires IO::Socket::SSL and also implies existance of the IO::Socket::SSL::SSL_VERIFY_NONE() symbol. It is used by most of the tests. - "socket_ssl_sni", which requires IO::Socket::SSL with the can_client_sni() function (1.84), and SNI support available in Net::SSLeay and the OpenSSL library being used. Used by ssl_sni.t, ssl_sni_sessions.t, stream_ssl_preread.t. Additional Net::SSLeay testing is believed to be unneeded and was removed. - "socket_ssl_alpn", which requires IO::Socket::SSL with ALPN support (2.009), and ALPN support in Net::SSLeay and the OpenSSL library being used. Used by h2_ssl.t, h2_ssl_verify_client.t, stream_ssl_alpn.t, stream_ssl_preread_alpn.t. - "socket_ssl_sslversion", which requires IO::Socket::SSL with the get_sslversion() and get_sslversion_int() methods (1.964). Used by mail_imap_ssl.t. - "socket_ssl_reused", which requires IO::Socket::SSL with the get_session_reused() method (2.057). To be used in the following patches. This makes it possible to simplify and unify various SSL tests.
author Maxim Dounin <mdounin@mdounin.ru>
date Thu, 18 May 2023 18:07:02 +0300
parents db6fd9184fa0
children a797d7428fa5
comparison
equal deleted inserted replaced
1857:da3889ba0b96 1858:cdcd75657e52
20 ############################################################################### 20 ###############################################################################
21 21
22 select STDERR; $| = 1; 22 select STDERR; $| = 1;
23 select STDOUT; $| = 1; 23 select STDOUT; $| = 1;
24 24
25 my $t = Test::Nginx->new()->has(qw/http http_ssl sni rewrite/) 25 my $t = Test::Nginx->new()->has(qw/http http_ssl sni rewrite socket_ssl_sni/)
26 ->has_daemon('openssl') 26 ->has_daemon('openssl')->plan(8)
27 ->write_file_expand('nginx.conf', <<'EOF'); 27 ->write_file_expand('nginx.conf', <<'EOF');
28 28
29 %%TEST_GLOBALS%% 29 %%TEST_GLOBALS%%
30 30
31 daemon off; 31 daemon off;
76 } 76 }
77 } 77 }
78 } 78 }
79 79
80 EOF 80 EOF
81
82 eval { require IO::Socket::SSL; die if $IO::Socket::SSL::VERSION < 1.56; };
83 plan(skip_all => 'IO::Socket::SSL version >= 1.56 required') if $@;
84
85 eval {
86 if (IO::Socket::SSL->can('can_client_sni')) {
87 IO::Socket::SSL->can_client_sni() or die;
88 }
89 };
90 plan(skip_all => 'IO::Socket::SSL with OpenSSL SNI support required') if $@;
91
92 eval {
93 my $ctx = Net::SSLeay::CTX_new() or die;
94 my $ssl = Net::SSLeay::new($ctx) or die;
95 Net::SSLeay::set_tlsext_host_name($ssl, 'example.org') == 1 or die;
96 };
97 plan(skip_all => 'Net::SSLeay with OpenSSL SNI support required') if $@;
98
99 $t->plan(8);
100 81
101 $t->write_file('openssl.conf', <<EOF); 82 $t->write_file('openssl.conf', <<EOF);
102 [ req ] 83 [ req ]
103 default_bits = 2048 84 default_bits = 2048
104 encrypt_key = no 85 encrypt_key = no