diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-03-09 13:19:48 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-03-09 13:20:02 +0000 |
commit | 58daab21cd043e1dc37024a7f99b396788372918 (patch) | |
tree | 96771e43bb69f7c1c2b0b4f7374cb74d7866d0cb /web/server/h2o/libh2o/t/40ssl-cipher-suite.t | |
parent | Releasing debian version 1.43.2-1. (diff) | |
download | netdata-58daab21cd043e1dc37024a7f99b396788372918.tar.xz netdata-58daab21cd043e1dc37024a7f99b396788372918.zip |
Merging upstream version 1.44.3.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'web/server/h2o/libh2o/t/40ssl-cipher-suite.t')
-rw-r--r-- | web/server/h2o/libh2o/t/40ssl-cipher-suite.t | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/web/server/h2o/libh2o/t/40ssl-cipher-suite.t b/web/server/h2o/libh2o/t/40ssl-cipher-suite.t new file mode 100644 index 000000000..bda718421 --- /dev/null +++ b/web/server/h2o/libh2o/t/40ssl-cipher-suite.t @@ -0,0 +1,38 @@ +use strict; +use warnings; +use File::Temp qw(tempfile); +use Net::EmptyPort qw(check_port empty_port); +use Scope::Guard qw(scope_guard); +use Test::More; +use t::Util; + +my $port = empty_port(); + +# spawn server that only accepts AES128-SHA +my ($conffh, $conffn) = tempfile(UNLINK => 1); +print $conffh <<"EOT"; +listen: + host: 127.0.0.1 + port: $port + ssl: + key-file: examples/h2o/server.key + certificate-file: examples/h2o/server.crt + cipher-suite: AES128-SHA +hosts: + default: + paths: + /: + file.dir: @{[ DOC_ROOT ]} +EOT +my ($guard, $pid) = spawn_server( + argv => [ bindir() . "/h2o", "-c", $conffn ], + is_ready => sub { + check_port($port); + }, +); + +# connect to the server with AES256-SHA as the first choice, and check that AES128-SHA was selected +my $log = `openssl s_client -cipher AES256-SHA:AES128-SHA -host 127.0.0.1 -port $port < /dev/null 2>&1`; +like $log, qr/^\s*Cipher\s*:\s*AES128-SHA\s*$/m; + +done_testing; |