Mercurial > hg > nginx-tests
comparison ssl_sni_sessions.t @ 1858:cdcd75657e52
Tests: added has_feature() tests for IO::Socket::SSL.
The following distinct features supported:
- "socket_ssl", which requires IO::Socket::SSL and also implies
existance of the IO::Socket::SSL::SSL_VERIFY_NONE() symbol.
It is used by most of the tests.
- "socket_ssl_sni", which requires IO::Socket::SSL with the can_client_sni()
function (1.84), and SNI support available in Net::SSLeay and the OpenSSL
library being used. Used by ssl_sni.t, ssl_sni_sessions.t,
stream_ssl_preread.t. Additional Net::SSLeay testing is believed to be
unneeded and was removed.
- "socket_ssl_alpn", which requires IO::Socket::SSL with ALPN support (2.009),
and ALPN support in Net::SSLeay and the OpenSSL library being used.
Used by h2_ssl.t, h2_ssl_verify_client.t, stream_ssl_alpn.t,
stream_ssl_preread_alpn.t.
- "socket_ssl_sslversion", which requires IO::Socket::SSL with
the get_sslversion() and get_sslversion_int() methods (1.964).
Used by mail_imap_ssl.t.
- "socket_ssl_reused", which requires IO::Socket::SSL with
the get_session_reused() method (2.057). To be used in the following
patches.
This makes it possible to simplify and unify various SSL tests.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Thu, 18 May 2023 18:07:02 +0300 |
parents | a68d1313c3fc |
children | a797d7428fa5 |
comparison
equal
deleted
inserted
replaced
1857:da3889ba0b96 | 1858:cdcd75657e52 |
---|---|
19 ############################################################################### | 19 ############################################################################### |
20 | 20 |
21 select STDERR; $| = 1; | 21 select STDERR; $| = 1; |
22 select STDOUT; $| = 1; | 22 select STDOUT; $| = 1; |
23 | 23 |
24 my $t = Test::Nginx->new()->has(qw/http http_ssl sni rewrite/); | 24 my $t = Test::Nginx->new()->has(qw/http http_ssl sni rewrite socket_ssl_sni/) |
25 | 25 ->has_daemon('openssl') |
26 $t->has_daemon('openssl')->write_file_expand('nginx.conf', <<'EOF'); | 26 ->write_file_expand('nginx.conf', <<'EOF'); |
27 | 27 |
28 %%TEST_GLOBALS%% | 28 %%TEST_GLOBALS%% |
29 | 29 |
30 daemon off; | 30 daemon off; |
31 | 31 |
84 } | 84 } |
85 } | 85 } |
86 } | 86 } |
87 | 87 |
88 EOF | 88 EOF |
89 | |
90 eval { require IO::Socket::SSL; die if $IO::Socket::SSL::VERSION < 1.56; }; | |
91 plan(skip_all => 'IO::Socket::SSL version >= 1.56 required') if $@; | |
92 | |
93 eval { | |
94 if (IO::Socket::SSL->can('can_client_sni')) { | |
95 IO::Socket::SSL->can_client_sni() or die; | |
96 } | |
97 }; | |
98 plan(skip_all => 'IO::Socket::SSL with OpenSSL SNI support required') if $@; | |
99 | |
100 eval { | |
101 my $ctx = Net::SSLeay::CTX_new() or die; | |
102 my $ssl = Net::SSLeay::new($ctx) or die; | |
103 Net::SSLeay::set_tlsext_host_name($ssl, 'example.org') == 1 or die; | |
104 }; | |
105 plan(skip_all => 'Net::SSLeay with OpenSSL SNI support required') if $@; | |
106 | 89 |
107 $t->write_file('openssl.conf', <<EOF); | 90 $t->write_file('openssl.conf', <<EOF); |
108 [ req ] | 91 [ req ] |
109 default_bits = 2048 | 92 default_bits = 2048 |
110 encrypt_key = no | 93 encrypt_key = no |