blob: 53dd1b81c6ed7efdd3a807b62e5414ebbed35bb1 [file] [log] [blame]
William Lallemandbfa3e812020-06-25 20:07:18 +02001#REGTEST_TYPE=devel
2
3varnishtest "Test the ssl_s_* sample fetches"
Christopher Fauletb28d62d2020-11-13 17:10:51 +01004#REQUIRE_VERSION=2.2
William Lallemandbfa3e812020-06-25 20:07:18 +02005#REQUIRE_OPTIONS=OPENSSL
6feature ignore_unknown_macro
7
8server s1 -repeat 3 {
9 rxreq
10 txresp
11} -start
12
13haproxy h1 -conf {
14 global
15 tune.ssl.default-dh-param 2048
16 tune.ssl.capture-cipherlist-size 1
17 crt-base ${testdir}
18 stats socket "${tmpdir}/h1/stats" level admin
19
20 defaults
21 mode http
22 option httplog
23 ${no-htx} option http-use-htx
24 log stderr local0 debug err
25 option logasap
26 timeout connect 1s
27 timeout client 1s
28 timeout server 1s
29
30
31 listen clear-lst
32 bind "fd@${clearlst}"
33 balance roundrobin
34 http-response add-header x-ssl-sha1 %[ssl_s_sha1,hex]
35 http-response add-header x-ssl-notafter %[ssl_s_notafter]
36 http-response add-header x-ssl-notbefore %[ssl_s_notbefore]
37 http-response add-header x-ssl-sig_alg %[ssl_s_sig_alg]
38 http-response add-header x-ssl-i_dn %[ssl_s_i_dn]
39 http-response add-header x-ssl-s_dn %[ssl_s_s_dn]
40 http-response add-header x-ssl-s_serial %[ssl_s_serial,hex]
41 http-response add-header x-ssl-key_alg %[ssl_s_key_alg]
42 http-response add-header x-ssl-der %[ssl_s_der,hex]
William Dauchya598b502020-08-06 18:11:38 +020043 http-response add-header x-ssl-chain-der %[ssl_s_chain_der,hex]
William Lallemandbfa3e812020-06-25 20:07:18 +020044 http-response add-header x-ssl-version %[ssl_s_version]
45
46 server s1 "${tmpdir}/ssl.sock" ssl verify none sni str(www.test1.com)
47
48 listen ssl-lst
49 mode http
50 ${no-htx} option http-use-htx
51
52 bind "${tmpdir}/ssl.sock" ssl strict-sni crt-list ${testdir}/localhost.crt-list
53
54 server s1 ${s1_addr}:${s1_port}
55} -start
56
57
58client c1 -connect ${h1_clearlst_sock} {
59 txreq
60 rxresp
61 expect resp.status == 200
62 expect resp.http.x-ssl-sha1 == "2195C9F0FD58470313013FC27C1B9CF9864BD1C6"
63 expect resp.http.x-ssl-notafter == "180116230238Z"
64 expect resp.http.x-ssl-notbefore == "160117230238Z"
65 expect resp.http.x-ssl-sig_alg == "RSA-SHA256"
66 expect resp.http.x-ssl-i_dn == "/C=FR/ST=Ile-de-France/L=Paris/O=ozon.io/CN=Ozon Test CA/emailAddress=support@ozon.io"
67 expect resp.http.x-ssl-s_dn == "/C=FR/ST=Ile-de-France/L=Neuilly-sur-Seine/O=TOAD Consulting/OU=eParapher Team/CN=www.test1.com/emailAddress=arnault.michel@toad-consulting.fr"
68 expect resp.http.x-ssl-s_serial == "02"
69 expect resp.http.x-ssl-key_alg == "rsaEncryption"
70 expect resp.http.x-ssl-version == "3"
William Dauchya598b502020-08-06 18:11:38 +020071 expect resp.http.x-ssl-der ~ 3082067930820461A0030201020201.*5E3D4498BB847BC4DE093F9AD1AD3
72 expect resp.http.x-ssl-chain-der ~ 3082067930820461A0030201020201.*527A6D6780A610484CE356C4C4E1C
William Lallemandbfa3e812020-06-25 20:07:18 +020073} -run
74
75