Changeset e3e0de1 in mod_gnutls for test/tests/21_TLS_reverse_proxy_wrong_cert

Timestamp:

Dec 7, 2019, 9:42:07 AM (2 years ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master, proxy-ticket

Children:

8b72599

Parents:

09d923b

Message:

https-test-client.py: Make host and port configurable per connection

Both variables can use environment variables. If unset they default to
TEST_TARGET and TEST_PORT. This makes it possible to connect to
different servers in one test, for example in proxy tests to check
that the backend server is behaving as expected.

File:

• test/tests/21_TLS_reverse_proxy_wrong_cert/test.yml (modified) (1 diff)

test/tests/21_TLS_reverse_proxy_wrong_cert/test.yml

@@ -1 @@
-!connection
-gnutls_params:
-  - x509cafile=authority/x509.pem
-actions:
-  - !request
-    path: /proxy/test.txt
-    expect:
-      status: 502
-      body:
-        contains:
-          - 'Proxy Error'
-          - 'Error reading from remote server'
+# The reverse proxy can't access the backend (certificate validation
+# fails)
+- !connection
+  gnutls_params:
+    - x509cafile=authority/x509.pem
+  actions:
+    - !request
+      path: /proxy/test.txt
+      expect:
+        status: 502
+        body:
+          contains:
+            - 'Proxy Error'
+            - 'Error reading from remote server'
+
+# Check if the proxy itself works correctly and presents the expected
+# bad certificate
+- !connection
+  host: '${BACKEND_HOST}'
+  port: '${BACKEND_PORT}'
+  gnutls_params:
+    - x509cafile=authority/x509.pem
+    - verify-hostname=imposter.example
+  actions:
+    - !request
+      path: /test.txt
+      expect:
+        status: 200
+        body:
+          exactly: |
+            test