Adds autest to test error cases loading ssl_multicert.config#8532
Adds autest to test error cases loading ssl_multicert.config#8532randall merged 1 commit intoapache:masterfrom
Conversation
|
[approve ci] |
| tr.Processes.Default.StartBefore(server) | ||
| tr.StillRunningAfter = ts | ||
| tr.StillRunningAfter = server | ||
| tr.Processes.Default.Command = f"curl -q -s -v -k --resolve '{sni_domain}:{ts.Variables.ssl_port}:127.0.0.1' https://{sni_domain}:{ts.Variables.ssl_port}" |
There was a problem hiding this comment.
What would you think about adding a comment here about why -k is needed for our future selves. I presume its something about a self signed cert / chain doesn't validate?
There was a problem hiding this comment.
Almost all the tests that use curl to do https use -k or --insecure and the ones that don't, specify --cacert.
It's all copy paste!
bneradt
left a comment
There was a problem hiding this comment.
I have a few minor comments, but overall this looks good. Thanks for adding coverage for this!
| tr2.Processes.Default.Env = ts.Env | ||
| tr2.Processes.Default.ReturnCode = 0 | ||
|
|
||
| ts.Disk.diags_log.Content = Testers.ContainsExpression('ERROR: ', 'ERROR') |
There was a problem hiding this comment.
Maybe this should be added as a TestRun (tr2reload) file like you did for the multicert_config above? I think that way it will check during the execution of the reload and not globally after all the tests complete.
46f6cbf to
a59067e
Compare
With this test in place, we might've caught apache#8515 and apache#8256 earlier
a59067e to
3bdc3ea
Compare
|
Cherry-picked to v9.2.x |
* asf/9.2.x: Updated ChangeLog remove unused function (apache#8525) Adds autest to test error cases loading ssl_multicert.config (apache#8532) Set an appropriate callback function for OpenSSL3 (apache#8524) Eliminate unused code in LogObject. (apache#8541) Enable conf_remap_float test and remove special case for local config file (apache#8540) ssl_verify_test: clang-analyzer fix to account for nul sni_name (apache#8462) Updated ChangeLog
…8532) With this test in place, we might've caught apache#8515 and apache#8256 earlier (cherry picked from commit 7bc025c)
With this test in place, we might've caught #8515 and #8256 earlier