Mercurial > hg > nginx-tests
view ssl_conf_command.t @ 1888:cc13f7b098db
Tests: avoid premature stream reset in h3_limit_req.t.
STREAM and RESET_STREAM frames could be batched, which prevents the stream
from being processed and changes the status code. The fix is to wait for
the stream acknowledgment. Here we just look at the largest acknowledged,
this should be enough for simple cases.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Tue, 04 Apr 2023 00:33:54 +0400 |
parents | 0e1865aa9b33 |
children |
line wrap: on
line source
#!/usr/bin/perl # (C) Sergey Kandaurov # (C) Nginx, Inc. # Tests for http ssl module, ssl_conf_command. ############################################################################### use warnings; use strict; use Test::More; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx qw/ :DEFAULT http_end /; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; my $t = Test::Nginx->new() ->has(qw/http http_ssl openssl:1.0.2 socket_ssl_reused/) ->has_daemon('openssl'); plan(skip_all => 'no ssl_conf_command') if $t->has_module('BoringSSL'); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } http { %%TEST_GLOBALS_HTTP%% server { listen 127.0.0.1:8443 ssl; server_name localhost; ssl_protocols TLSv1.2; ssl_session_tickets off; ssl_conf_command Options SessionTicket; ssl_prefer_server_ciphers on; ssl_conf_command Options -ServerPreference; ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256; ssl_certificate localhost.crt; ssl_certificate_key localhost.key; ssl_conf_command Certificate override.crt; ssl_conf_command PrivateKey override.key; } } EOF $t->write_file('openssl.conf', <<EOF); [ req ] default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] EOF my $d = $t->testdir(); foreach my $name ('localhost', 'override') { system('openssl req -x509 -new ' . "-config $d/openssl.conf -subj /CN=$name/ " . "-out $d/$name.crt -keyout $d/$name.key " . ">>$d/openssl.out 2>&1") == 0 or die "Can't create certificate for $name: $!\n"; } $t->run()->plan(3); ############################################################################### my $s; $s = http_get( '/', start => 1, SSL => 1, SSL_session_cache_size => 100 ); like($s->dump_peer_certificate(), qr/CN=override/, 'Certificate'); http_end($s); $s = http_get( '/', start => 1, SSL => 1, SSL_reuse_ctx => $s ); ok($s->get_session_reused(), 'SessionTicket'); $s = http_get( '/', start => 1, SSL => 1, SSL_cipher_list => 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384' ); is($s->get_cipher(), 'ECDHE-RSA-AES128-GCM-SHA256', 'ServerPreference'); ###############################################################################