Mercurial > hg > nginx-tests
view quic_migration.t @ 1912:f61d1b4ac638
Tests: unbreak quic_ciphers.t with AEAD_AES_128_CCM enabled.
Although CCM ciphers are disabled in a stock OpenSSL as rarely used,
"to reduce ClientHello bloat", AEAD_AES_128_CCM is apparently turned
back in certain distributions such as RHEL. Previously, this caused
testing connections to fail as the CCM cipher being negotiated isn't
supported yet in nginx. Now the test is skipped instead on failure.
While here, fixed nearby style.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Wed, 14 Jun 2023 16:57:01 +0400 |
parents | 8b74936ff2ac |
children | b68471aee5ad |
line wrap: on
line source
#!/usr/bin/perl # (C) Sergey Kandaurov # (C) Nginx, Inc. # Tests for quic connection migration. ############################################################################### use warnings; use strict; use Test::More; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx; use Test::Nginx::HTTP3; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; plan(skip_all => '127.0.0.20 local address required') unless defined IO::Socket::INET->new( LocalAddr => '127.0.0.20' ); my $t = Test::Nginx->new()->has(qw/http http_v3 cryptx/) ->has_daemon('openssl')->plan(2); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } http { %%TEST_GLOBALS_HTTP%% ssl_certificate_key localhost.key; ssl_certificate localhost.crt; server { listen 127.0.0.1:%%PORT_8980_UDP%% quic; server_name localhost; location / { add_header X-IP $remote_addr; } } } EOF $t->write_file('openssl.conf', <<EOF); [ req ] default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] EOF my $d = $t->testdir(); foreach my $name ('localhost') { system('openssl req -x509 -new ' . "-config $d/openssl.conf -subj /CN=$name/ " . "-out $d/$name.crt -keyout $d/$name.key " . ">>$d/openssl.out 2>&1") == 0 or die "Can't create certificate for $name: $!\n"; } $t->write_file('index.html', ''); $t->run(); ############################################################################### # test that $remote_addr is not truncated after migration (ticket #2488), # to test, we migrate to another address large enough in text representation, # then send a request on the new path my $s = Test::Nginx::HTTP3->new(); $s->new_connection_id(1, 0, "connection_id_1", "reset_token_0001"); my $frames = $s->read(all => [{ type => 'NCID' }]); my ($frame) = grep { $_->{type} eq "NCID" } @$frames; $s->{socket} = IO::Socket::INET->new( Proto => "udp", LocalAddr => '127.0.0.20', PeerAddr => '127.0.0.1:' . port(8980), ); $s->{scid} = "connection_id_1"; $s->{dcid} = $frame->{cid}; $s->ping(); $frames = $s->read(all => [{ type => 'PATH_CHALLENGE' }]); ($frame) = grep { $_->{type} eq "PATH_CHALLENGE" } @$frames; $s->path_response($frame->{data}); $frames = $s->read(all => [{ sid => $s->new_stream(), fin => 1 }]); ($frame) = grep { $_->{type} eq "HEADERS" } @$frames; is($frame->{headers}{'x-ip'}, '127.0.0.20', 'remote addr after migration'); # test that $remote_addr is not truncated while in the process of migration; # the same but migration occurs on receiving a request stream itself, # which is the first non-probing frame on the new path; # this might lead to $remote_addr truncation in the following order: # - stream held original sockaddr/addr_text references on stream creation # - values were rewritten as part of handling connection migration # - stream was handled referencing rewritten values, with old local lengths # sockaddr and addr_text are expected to keep copies on stream creation $s = Test::Nginx::HTTP3->new(); $s->new_connection_id(1, 0, "connection_id_1", "reset_token_0001"); $frames = $s->read(all => [{ type => 'NCID' }]); ($frame) = grep { $_->{type} eq "NCID" } @$frames; $s->{socket} = IO::Socket::INET->new( Proto => "udp", LocalAddr => '127.0.0.20', PeerAddr => '127.0.0.1:' . port(8980), ); $s->{scid} = "connection_id_1"; $s->{dcid} = $frame->{cid}; $frames = $s->read(all => [{ sid => $s->new_stream(), fin => 1 }]); ($frame) = grep { $_->{type} eq "HEADERS" } @$frames; is($frame->{headers}{'x-ip'}, '127.0.0.1', 'remote addr on migration'); ###############################################################################