summaryrefslogtreecommitdiffstats
path: root/test/modules/tls/test_05_proto.py
blob: d874a905efb0083d7fc04b6a8c786b3956087efc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
import time
from datetime import timedelta
import socket
from threading import Thread

import pytest

from .conf import TlsTestConf
from .env import TlsTestEnv


class TestProto:

    @pytest.fixture(autouse=True, scope='class')
    def _class_scope(self, env):
        conf = TlsTestConf(env=env, extras={
            env.domain_a: "TLSProtocol TLSv1.3+",
            env.domain_b: [
                "# the commonly used name",
                "TLSProtocol TLSv1.2+",
                "# the numeric one (yes, this is 1.2)",
                "TLSProtocol TLSv0x0303+",
            ],
        })
        conf.add_tls_vhosts(domains=[env.domain_a, env.domain_b])
        conf.install()
        assert env.apache_restart() == 0

    @pytest.fixture(autouse=True, scope='function')
    def _function_scope(self, env):
        pass

    def test_tls_05_proto_1_2(self, env):
        r = env.tls_get(env.domain_b, "/index.json", options=["--tlsv1.2"])
        assert r.exit_code == 0, r.stderr

    @pytest.mark.skip('curl does not have TLSv1.3 on all platforms')
    def test_tls_05_proto_1_3(self, env):
        r = env.tls_get(env.domain_a, "/index.json", options=["--tlsv1.3", '-v'])
        if True: # testing TlsTestEnv.curl_supports_tls_1_3() is unreliable (curl should support TLS1.3 nowadays..)
            assert r.exit_code == 0, f'{r}'
        else:
            assert r.exit_code == 4, f'{r}'

    def test_tls_05_proto_close(self, env):
        s = socket.create_connection(('localhost', env.https_port))
        time.sleep(0.1)
        s.close()

    def test_tls_05_proto_ssl_close(self, env):
        conf = TlsTestConf(env=env, extras={
            'base': "LogLevel ssl:debug",
            env.domain_a: "SSLProtocol TLSv1.3",
            env.domain_b: "SSLProtocol TLSv1.2",
        })
        for d in [env.domain_a, env.domain_b]:
            conf.add_vhost(domains=[d], port=env.https_port)
        conf.install()
        assert env.apache_restart() == 0
        s = socket.create_connection(('localhost', env.https_port))
        time.sleep(0.1)
        s.close()