use strict; use warnings FATAL => 'all'; use Apache::Test; use Apache::TestRequest; use Apache::TestUtil; plan tests => 10, need 'ssl', need_min_apache_version('2.0'); Apache::TestRequest::user_agent( ssl_opts => { SSL_cipher_list => 'ALL'}); Apache::TestRequest::user_agent_keepalive(1); Apache::TestRequest::scheme('https'); my $r; # Send a series of POST requests with varying size request bodies. # Alternate between the location which requires a AES128-SHA ciphersuite # and one which requires AES256-SHA; mod_ssl will attempt to perform the # renegotiation between each request, and hence needs to perform the # buffering of request body data. $r = POST "/require-aes256-cgi/perl_echo.pl", content => "hello world"; ok t_cmp($r->code, 200, "renegotiation on POST works"); ok t_cmp($r->content, "hello world", "request body matches response"); $r = POST "/require-aes128-cgi/perl_echo.pl", content => "hello world"; ok t_cmp($r->code, 200, "renegotiation on POST works"); ok t_cmp($r->content, "hello world", "request body matches response"); $r = POST "/require-aes256-cgi/perl_echo.pl", content => 'x'x10000; ok t_cmp($r->code, 200, "renegotiation on POST works"); ok t_cmp($r->content, $r->request->content, "request body matches response"); $r = POST "/require-aes128-cgi/perl_echo.pl", content => 'x'x60000; ok t_cmp($r->code, 200, "renegotiation on POST works"); ok t_cmp($r->content, $r->request->content, "request body matches response"); # Test that content-level input filters are still run as expected by # using a request which triggers the mod_case_filter_in: my @filter = ('X-AddInputFilter' => 'CaseFilterIn'); #mod_client_add_filter if (have_module('case_filter_in')) { $r = POST "/require-aes256-cgi/perl_echo.pl", @filter, content => "hello"; ok t_cmp($r->code, 200, "renegotiation on POST works"); ok t_cmp($r->content, "HELLO", "request body matches response"); } else { skip "mod_case_filter_in not available" foreach (1..2); }