Changeset c825c3a in mod_gnutls
- Timestamp:
- Jul 3, 2019, 1:52:50 AM (4 years ago)
- Branches:
- asyncio, main, master, proxy-ticket
- Children:
- 59afe51
- Parents:
- e5546be
- Location:
- test
- Files:
-
- 42 edited
- 3 moved
Legend:
- Unmodified
- Added
- Removed
-
test/Makefile.am
re5546be rc825c3a 58 58 shared_identities = authority authority/client 59 59 pgp_identities = $(shared_identities) 60 x509_only_identities = server rogueca imposter rogueclient60 x509_only_identities = authority/server rogueca imposter rogueclient 61 61 if ENABLE_OCSP_TEST 62 62 x509_only_identities += ocsp-responder … … 93 93 # running at any time, so test cases actually have to wait for each 94 94 # other - just not in any particular order. 95 check_DATA = $(tokens) server/crl.pem96 97 MOSTLYCLEANFILES = cache/* logs/* outputs/* server/crl.pem95 check_DATA = $(tokens) authority/server/crl.pem 96 97 MOSTLYCLEANFILES = cache/* logs/* outputs/* authority/server/crl.pem 98 98 99 99 cert_templates = authority/template.in authority/client/template.in \ 100 100 imposter/template.in ocsp-responder/template rogueca/template \ 101 rogueclient/template.in server/template.in101 rogueclient/template.in authority/server/template.in 102 102 generated_templates = authority/template authority/client/template \ 103 imposter/template rogueclient/template server/template103 imposter/template rogueclient/template authority/server/template 104 104 105 105 # Delete X.509 private keys on full clean. Note that unless you need … … 161 161 MOSTLYCLEANFILES += authority/ocsp_index.txt authority/ocsp_index.txt.attr 162 162 authority/ocsp_index.txt: $(x509_tokens) gen_ocsp_index authority/ocsp_index.txt.attr 163 ./gen_ocsp_index server/x509.pem authority/client/x509.pem > $@163 ./gen_ocsp_index authority/server/x509.pem authority/client/x509.pem > $@ 164 164 165 165 authority/ocsp_index.txt.attr: authority/secret.key … … 167 167 168 168 # build certificate chain file for server 169 check_DATA += server/x509-chain.pem170 MOSTLYCLEANFILES += server/x509-chain.pem169 check_DATA += authority/server/x509-chain.pem 170 MOSTLYCLEANFILES += authority/server/x509-chain.pem 171 171 %/x509-chain.pem: %/x509.pem authority/x509.pem 172 172 cat $< authority/x509.pem > $@ … … 175 175 # SoftHSM tokens. Note that the SoftHSM 2 token is a directory and 176 176 # hence has to be treated slightly differently. 177 SOFTHSM_TOKEN = server/softhsm.db178 SOFTHSM2_TOKEN = server/softhsm2.db177 SOFTHSM_TOKEN = authority/server/softhsm.db 178 SOFTHSM2_TOKEN = authority/server/softhsm2.db 179 179 180 180 # Tokens should be cleaned whether or not the matching SoftHSM version … … 233 233 234 234 EXTRA_DIST = $(apache_data) $(cert_templates) $(shared_identities:=/uid.in) \ 235 apache_service.bash common.bash runtests server/crl.template \235 apache_service.bash common.bash runtests authority/server/crl.template \ 236 236 softhsm.bash 237 237 -
test/runtests
re5546be rc825c3a 213 213 fi 214 214 echo "---- Testing OCSP server ----" 215 wait_ready "ocsptool --ask --nonce --load-issuer authority/x509.pem --load-cert server/x509.pem ${store_ocsp}"215 wait_ready "ocsptool --ask --nonce --load-issuer authority/x509.pem --load-cert authority/server/x509.pem ${store_ocsp}" 216 216 echo "---- OCSP test done ----" 217 217 fi -
test/test-24_pkcs11_cert.bash
re5546be rc825c3a 22 22 cat - >"${tmp_softhsm_conf}" <<EOF 23 23 objectstore.backend = file 24 directories.tokendir = $(realpath $(pwd))/ server/softhsm2.db24 directories.tokendir = $(realpath $(pwd))/authority/server/softhsm2.db 25 25 EOF 26 26 export SOFTHSM2_CONF="${tmp_softhsm_conf}" -
test/tests/00_basic/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 </VirtualHost> -
test/tests/01_serverwide_priorities/apache.conf
re5546be rc825c3a 8 8 ServerName ${TEST_HOST} 9 9 GnuTLSEnable On 10 GnuTLSCertificateFile 11 GnuTLSKeyFile 10 GnuTLSCertificateFile authority/server/x509.pem 11 GnuTLSKeyFile authority/server/secret.key 12 12 </VirtualHost> -
test/tests/02_cache_in_vhost/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 </VirtualHost> -
test/tests/03_cachetimeout_in_vhost/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 </VirtualHost> -
test/tests/04_basic_nosni/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 </VirtualHost> -
test/tests/05_mismatched-priorities/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL:-VERS-SSL3.0 11 11 </VirtualHost> -
test/tests/06_verify_sni_a/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 </VirtualHost> -
test/tests/07_verify_sni_b/apache.conf
re5546be rc825c3a 16 16 ServerName ${TEST_HOST} 17 17 GnuTLSEnable On 18 GnuTLSCertificateFile 19 GnuTLSKeyFile 18 GnuTLSCertificateFile authority/server/x509.pem 19 GnuTLSKeyFile authority/server/secret.key 20 20 GnuTLSPriorities NORMAL 21 21 </VirtualHost> -
test/tests/08_verify_no_sni_fallback_to_first_vhost/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 </VirtualHost> -
test/tests/09_verify_no_sni_fails_with_wrong_order/apache.conf
re5546be rc825c3a 16 16 ServerName ${TEST_HOST} 17 17 GnuTLSEnable On 18 GnuTLSCertificateFile 19 GnuTLSKeyFile 18 GnuTLSCertificateFile authority/server/x509.pem 19 GnuTLSKeyFile authority/server/secret.key 20 20 GnuTLSPriorities NORMAL 21 21 </VirtualHost> -
test/tests/10_basic_client_verification/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 GnuTLSClientCAFile authority/x509.pem -
test/tests/11_basic_client_verification_fail/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 GnuTLSClientCAFile authority/x509.pem -
test/tests/12_cgi_variables/apache.conf
re5546be rc825c3a 11 11 ServerName ${TEST_HOST} 12 12 GnuTLSEnable On 13 GnuTLSCertificateFile 14 GnuTLSKeyFile 13 GnuTLSCertificateFile authority/server/x509.pem 14 GnuTLSKeyFile authority/server/secret.key 15 15 GnuTLSDHFile ${srcdir}/ffdhe3072.pem 16 16 GnuTLSPriorities NORMAL -
test/tests/13_cgi_variables_no_client_cert/apache.conf
re5546be rc825c3a 11 11 ServerName ${TEST_HOST} 12 12 GnuTLSEnable On 13 GnuTLSCertificateFile 14 GnuTLSKeyFile 13 GnuTLSCertificateFile authority/server/x509.pem 14 GnuTLSKeyFile authority/server/secret.key 15 15 GnuTLSPriorities NORMAL 16 16 GnuTLSClientCAFile authority/x509.pem -
test/tests/14_resume_session/apache.conf
re5546be rc825c3a 7 7 ServerName ${TEST_HOST} 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile 10 GnuTLSKeyFile 9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 GnuTLSPriorities NORMAL 12 12 </VirtualHost> -
test/tests/15_basic_msva/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSClientVerify require 11 11 GnuTLSClientVerifyMethod msva -
test/tests/16_view-status/apache.conf
re5546be rc825c3a 12 12 ServerName ${TEST_HOST} 13 13 GnuTLSEnable On 14 GnuTLSCertificateFile 15 GnuTLSKeyFile 14 GnuTLSCertificateFile authority/server/x509.pem 15 GnuTLSKeyFile authority/server/secret.key 16 16 GnuTLSPriorities NORMAL 17 17 </VirtualHost> -
test/tests/17_cgi_vars_large_cert/apache.conf
re5546be rc825c3a 11 11 ServerName ${TEST_HOST} 12 12 GnuTLSEnable On 13 GnuTLSCertificateFile 14 GnuTLSKeyFile 13 GnuTLSCertificateFile authority/server/x509.pem 14 GnuTLSKeyFile authority/server/secret.key 15 15 GnuTLSDHFile ${srcdir}/ffdhe3072.pem 16 16 GnuTLSPriorities NORMAL -
test/tests/18_client_verification_wrong_cert/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 GnuTLSClientCAFile authority/x509.pem -
test/tests/19_TLS_reverse_proxy/apache.conf
re5546be rc825c3a 7 7 ServerName ${TEST_HOST} 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile 10 GnuTLSKeyFile 9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 12 12 GnuTLSProxyEngine On -
test/tests/19_TLS_reverse_proxy/backend.conf
re5546be rc825c3a 6 6 ServerName ${BACKEND_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 </VirtualHost> -
test/tests/20_TLS_reverse_proxy_client_auth/apache.conf
re5546be rc825c3a 7 7 ServerName ${TEST_HOST} 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile 10 GnuTLSKeyFile 9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 GnuTLSPriorities NORMAL 12 12 -
test/tests/20_TLS_reverse_proxy_client_auth/backend.conf
re5546be rc825c3a 6 6 ServerName ${BACKEND_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 GnuTLSClientCAFile authority/x509.pem -
test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf
re5546be rc825c3a 7 7 ServerName ${TEST_HOST} 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile 10 GnuTLSKeyFile 9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 GnuTLSPriorities NORMAL 12 12 -
test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf
re5546be rc825c3a 7 7 ServerName ${TEST_HOST} 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile 10 GnuTLSKeyFile 9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 GnuTLSPriorities NORMAL 12 12 13 13 GnuTLSProxyEngine On 14 14 GnuTLSProxyCAFile authority/x509.pem 15 GnuTLSProxyCRLFile server/crl.pem15 GnuTLSProxyCRLFile authority/server/crl.pem 16 16 GnuTLSProxyPriorities NORMAL 17 17 ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/ -
test/tests/22_TLS_reverse_proxy_crl_revoke/backend.conf
re5546be rc825c3a 6 6 ServerName ${BACKEND_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL 11 11 </VirtualHost> -
test/tests/23_TLS_reverse_proxy_mismatched_priorities/apache.conf
re5546be rc825c3a 7 7 ServerName ${TEST_HOST} 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile 10 GnuTLSKeyFile 9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 GnuTLSPriorities NORMAL 12 12 -
test/tests/23_TLS_reverse_proxy_mismatched_priorities/backend.conf
re5546be rc825c3a 6 6 ServerName ${BACKEND_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile 9 GnuTLSKeyFile 8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL:-AES-256-GCM 11 11 </VirtualHost> -
test/tests/25_Disable_TLS_1.0/apache.conf
re5546be rc825c3a 6 6 ServerName ${TEST_HOST} 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile server/x509.pem9 GnuTLSKeyFile server/secret.key8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 GnuTLSPriorities NORMAL:-VERS-TLS1.0 11 11 </VirtualHost> -
test/tests/26_redirect_HTTP_to_HTTPS/apache.conf
re5546be rc825c3a 29 29 RewriteOptions Inherit 30 30 GnuTLSEnable On 31 GnuTLSCertificateFile server/x509.pem32 GnuTLSKeyFile server/secret.key31 GnuTLSCertificateFile authority/server/x509.pem 32 GnuTLSKeyFile authority/server/secret.key 33 33 GnuTLSPriorities NORMAL 34 34 </VirtualHost> -
test/tests/27_OCSP_server/apache.conf
re5546be rc825c3a 12 12 #GnuTLSOCSPStapling On 13 13 GnuTLSOCSPCacheTimeout 60 14 GnuTLSCertificateFile server/x509-chain.pem15 GnuTLSKeyFile server/secret.key14 GnuTLSCertificateFile authority/server/x509-chain.pem 15 GnuTLSKeyFile authority/server/secret.key 16 16 GnuTLSPriorities NORMAL 17 17 </VirtualHost> -
test/tests/28_HTTP2_support/apache.conf
re5546be rc825c3a 15 15 ServerName vhost.example.com 16 16 GnuTLSEnable On 17 GnuTLSCertificateFile server/x509.pem18 GnuTLSKeyFile server/secret.key17 GnuTLSCertificateFile authority/server/x509.pem 18 GnuTLSKeyFile authority/server/secret.key 19 19 GnuTLSPriorities NORMAL 20 20 </VirtualHost> … … 25 25 ServerName ${TEST_HOST} 26 26 GnuTLSEnable On 27 GnuTLSCertificateFile server/x509.pem28 GnuTLSKeyFile server/secret.key27 GnuTLSCertificateFile authority/server/x509.pem 28 GnuTLSKeyFile authority/server/secret.key 29 29 GnuTLSPriorities NORMAL 30 30 </VirtualHost> -
test/tests/29_force_handshake_vhost/apache.conf
re5546be rc825c3a 7 7 ServerName vhost.example.com 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile server/x509.pem10 GnuTLSKeyFile server/secret.key9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 12 12 <Directory ${srcdir}/data> … … 18 18 ServerName ${TEST_HOST} 19 19 GnuTLSEnable On 20 GnuTLSCertificateFile server/x509.pem21 GnuTLSKeyFile server/secret.key20 GnuTLSCertificateFile authority/server/x509.pem 21 GnuTLSKeyFile authority/server/secret.key 22 22 </VirtualHost> -
test/tests/30_ip_based_vhosts/apache.conf
re5546be rc825c3a 8 8 ServerName ${TEST_HOST} 9 9 GnuTLSEnable On 10 GnuTLSCertificateFile server/x509.pem11 GnuTLSKeyFile server/secret.key10 GnuTLSCertificateFile authority/server/x509.pem 11 GnuTLSKeyFile authority/server/secret.key 12 12 </VirtualHost> 13 13 … … 15 15 ServerName ${TEST_HOST} 16 16 GnuTLSEnable On 17 GnuTLSCertificateFile server/x509.pem18 GnuTLSKeyFile server/secret.key17 GnuTLSCertificateFile authority/server/x509.pem 18 GnuTLSKeyFile authority/server/secret.key 19 19 20 20 # Use mod_rewrite to set up a path that will work only on this -
test/tests/31_vhost_SNI_serveralias_match/apache.conf
re5546be rc825c3a 6 6 ServerName vhost.example.com 7 7 GnuTLSEnable On 8 GnuTLSCertificateFile server/x509.pem9 GnuTLSKeyFile server/secret.key8 GnuTLSCertificateFile authority/server/x509.pem 9 GnuTLSKeyFile authority/server/secret.key 10 10 </VirtualHost> 11 11 … … 14 14 ServerAlias *.virtual.host 15 15 GnuTLSEnable On 16 GnuTLSCertificateFile server/x509.pem17 GnuTLSKeyFile server/secret.key16 GnuTLSCertificateFile authority/server/x509.pem 17 GnuTLSKeyFile authority/server/secret.key 18 18 </VirtualHost> -
test/tests/32_vhost_SNI_serveralias_mismatch/apache.conf
re5546be rc825c3a 7 7 ServerAlias *.virtual.host 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile server/x509.pem10 GnuTLSKeyFile server/secret.key9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 </VirtualHost> -
test/tests/33_vhost_SNI_serveralias_missinghost/apache.conf
re5546be rc825c3a 7 7 ServerAlias *.virtual.host 8 8 GnuTLSEnable On 9 GnuTLSCertificateFile server/x509.pem10 GnuTLSKeyFile server/secret.key9 GnuTLSCertificateFile authority/server/x509.pem 10 GnuTLSKeyFile authority/server/secret.key 11 11 </VirtualHost> -
test/tests/34_TLS_reverse_proxy_h2/apache.conf
re5546be rc825c3a 9 9 ServerName ${TEST_HOST} 10 10 GnuTLSEnable On 11 GnuTLSCertificateFile server/x509.pem12 GnuTLSKeyFile server/secret.key11 GnuTLSCertificateFile authority/server/x509.pem 12 GnuTLSKeyFile authority/server/secret.key 13 13 14 14 GnuTLSProxyEngine On -
test/tests/34_TLS_reverse_proxy_h2/backend.conf
re5546be rc825c3a 9 9 Protocols h2 http/1.1 10 10 GnuTLSEnable On 11 GnuTLSCertificateFile server/x509.pem12 GnuTLSKeyFile server/secret.key11 GnuTLSCertificateFile authority/server/x509.pem 12 GnuTLSKeyFile authority/server/secret.key 13 13 </VirtualHost>
Note: See TracChangeset
for help on using the changeset viewer.