Mercurial > hg > nginx-tests
view stream_proxy_protocol_ssl.t @ 1951:1867428f1673
Tests: fixed h3_limit_req.t spurious failures.
In the "reset stream - cancellation" test, HTTP/3 stream is closed without
sending the request body when the request is waiting in the limit_req
module, and this results in error 444. However, when the request is received
with some minor delay due to system load, it is not delayed by limit_req,
and the stream is closed during reading the request body, which results
in error 400 instead, breaking the test.
Fix is to introduce yet another request before the "reset stream" test,
so the stream in question is always delayed by limit_req.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Thu, 14 Mar 2024 02:25:49 +0300 |
parents | cdcd75657e52 |
children | 6d3a8f4eb9b2 |
line wrap: on
line source
#!/usr/bin/perl # (C) Sergey Kandaurov # (C) Nginx, Inc. # Tests for stream proxy module with haproxy protocol to ssl backend. ############################################################################### use warnings; use strict; use Test::More; use Socket qw/ CR LF CRLF /; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx qw/ :DEFAULT http_end /; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; my $t = Test::Nginx->new()->has(qw/stream stream_ssl socket_ssl/) ->has_daemon('openssl')->plan(2); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } stream { %%TEST_GLOBALS_STREAM%% proxy_ssl on; proxy_protocol on; server { listen 127.0.0.1:8080; proxy_pass 127.0.0.1:8081; } server { listen 127.0.0.1:8082; proxy_pass 127.0.0.1:8083; proxy_protocol off; } } EOF $t->write_file('openssl.conf', <<EOF); [ req ] default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] EOF my $d = $t->testdir(); foreach my $name ('localhost') { system('openssl req -x509 -new ' . "-config $d/openssl.conf -subj /CN=$name/ " . "-out $d/$name.crt -keyout $d/$name.key " . ">>$d/openssl.out 2>&1") == 0 or die "Can't create certificate for $name: $!\n"; } $t->run_daemon(\&stream_daemon_ssl, port(8081), path => $d, pp => 1); $t->run_daemon(\&stream_daemon_ssl, port(8083), path => $d, pp => 0); $t->run(); $t->waitforsocket('127.0.0.1:' . port(8081)); $t->waitforsocket('127.0.0.1:' . port(8083)); ############################################################################### my $dp = port(8080); my %r = pp_get('test', '127.0.0.1:' . $dp); is($r{'data'}, "PROXY TCP4 127.0.0.1 127.0.0.1 $r{'sp'} $dp" . CRLF . 'test', 'protocol on'); %r = pp_get('test', '127.0.0.1:' . port(8082)); is($r{'data'}, 'test', 'protocol off'); ############################################################################### sub pp_get { my ($data, $peer) = @_; my $s = http($data, socket => getconn($peer), start => 1); my $sockport = $s->sockport(); $data = http_end($s); return ('data' => $data, 'sp' => $sockport); } sub getconn { my $peer = shift; my $s = IO::Socket::INET->new( Proto => 'tcp', PeerAddr => $peer ) or die "Can't connect to nginx: $!\n"; return $s; } ############################################################################### sub stream_daemon_ssl { my ($port, %extra) = @_; my $d = $extra{path}; my $pp = $extra{pp}; my $server = IO::Socket::INET->new( Proto => 'tcp', LocalHost => "127.0.0.1:$port", Listen => 5, Reuse => 1 ) or die "Can't create listening socket: $!\n"; local $SIG{PIPE} = 'IGNORE'; while (my $client = $server->accept()) { my ($buffer, $data) = ('', ''); $client->autoflush(1); log2c("(new connection $client on $port)"); # read no more than haproxy header of variable length while ($pp) { my $prev = $buffer; $client->sysread($buffer, 1) or last; $data .= $buffer; last if $prev eq CR && $buffer eq LF; } log2i("$client $data"); # would fail on waitforsocket eval { IO::Socket::SSL->start_SSL($client, SSL_server => 1, SSL_cert_file => "$d/localhost.crt", SSL_key_file => "$d/localhost.key", SSL_error_trap => sub { die $_[1] } ); }; next if $@; $client->sysread($buffer, 65536) or next; log2i("$client $buffer"); $data .= $buffer; log2o("$client $data"); $client->syswrite($data); close $client; } } sub log2i { Test::Nginx::log_core('|| <<', @_); } sub log2o { Test::Nginx::log_core('|| >>', @_); } sub log2c { Test::Nginx::log_core('||', @_); } ###############################################################################