37 lines
849 B
Plaintext
37 lines
849 B
Plaintext
#REGTEST_TYPE=devel
|
|
varnishtest "Test the crt-store section"
|
|
feature cmd "$HAPROXY_PROGRAM -cc 'version_atleast(3.0-dev7)'"
|
|
feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'"
|
|
feature ignore_unknown_macro
|
|
|
|
#
|
|
# Basic check for the crt-store, ensure that loading works and that we can't
|
|
# load a crt which was used before
|
|
#
|
|
|
|
|
|
haproxy h1 -arg -V -conf-OK {
|
|
crt-store
|
|
load crt "${testdir}/common.crt" key "${testdir}/common.key"
|
|
|
|
defaults
|
|
timeout client 30s
|
|
timeout server 30s
|
|
timeout connect 30s
|
|
|
|
listen ssl-lst
|
|
bind "${tmpdir}/ssl.sock" ssl crt ${testdir}/common.crt strict-sni
|
|
|
|
}
|
|
|
|
haproxy h2 -arg -V -conf-BAD {} {
|
|
|
|
listen ssl-lst
|
|
bind "${tmpdir}/ssl.sock" ssl crt ${testdir}/common.pem strict-sni
|
|
|
|
crt-store
|
|
load crt "${testdir}/common.pem" key "${testdir}/common.key"
|
|
|
|
}
|
|
|