changeset | 0b5ec15c62ed |
---|---|
branch | default |
bookmark | |
tag | tip |
user | Maxim Dounin <mdounin@mdounin.ru> |
description | Tests: compatibility with "openssl" app from OpenSSL 3.2.0. OpenSSL 3.2.0's "openssl" app generates X.509v3 certificates unless explicitly asked not to. Such certificates, even self-signed ones, cannot be used to sign other certificates without CA:TRUE explicitly set in the basicConstraints extension. As a result, tests doing so are now failing. Fix is to provide basicConstraints with CA:TRUE for self-signed root certificates used in "openssl ca" calls. |
files | ssl.t ssl_certificate_chain.t ssl_crl.t ssl_ocsp.t ssl_stapling.t ssl_verify_depth.t |
changeset | c287864444f8 |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: fixed http_resolver_ipv4.t with parallel tests. Broken in 1786f49cca17. |
files | http_resolver_ipv4.t |
changeset | 1786f49cca17 |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: fixed spurious http_resolver_ipv4.t failures. Previously, to get resolved addresses, the test relied on cached random rotation in resolver, such that a chosen address is eventually changed, which may not happen after several client requests. For this reason, the test is rewritten to get all addresses by switching to the next upstream. |
files | http_resolver_ipv4.t |
changeset | 00124c7d0ef1 |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: made sure migrated QUIC connection didn't get stall. While working on connection migration patches, it was observed that connections could easly stuck due to bugs in bytes in-flight accounting. Added a simple test to make sure more data can be sent after confirming a client's ownership of its new address. |
files | quic_migration.t |
changeset | 2c4f1019ee0d |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: extended interface for sending QUIC PINGs. It is useful to experiment with packet expansion on limited paths, particularly during QUIC connection migration. |
files | lib/Test/Nginx/HTTP3.pm |
changeset | aec72dcee93b |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: unconditional QUIC datagram expansion with Initial packets. Used to get rid of "quic UDP datagram is too small for initial packet" messages. In future, we may need this to reconsider to allow mocking with custom padding, but for now suppressing such messages is sufficiently good enough. |
files | lib/Test/Nginx/HTTP3.pm |
changeset | 24482e311749 |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: added QUIC test with resending Initial packets on Retry. |
files | quic_retry.t |
changeset | e1059682aeef |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: fixed ClientHello with resending Initial QUIC packets. Previously it was rebuilt each time using distinct ClientHello.random resulting in different CRYPTO payload. As such, it led to TLS digest hash and derived secrets mismatch when resending Initial packet. Now ClientHello is built once and reused when resending Initial packets. Additionally, this required to preserve a generated secret value used in shared secret calculation as part of TLS key schedule. Previously it was regenerated when receiving a Retry packet, but this won't work with reused ClientHello as the resulting shared secrets won't match. |
files | lib/Test/Nginx/HTTP3.pm |
changeset | 2a0a6035a1af |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: removed TODO and try_run() checks for legacy versions. |
files | body_chunked.t dav.t grpc.t h2.t h2_absolute_redirect.t h2_headers.t h2_request_body_extra.t h2_ssl.t http_absolute_redirect.t http_host.t |
changeset | 716d7500317d |
---|---|
branch | |
bookmark | |
tag | |
user | Sergey Kandaurov <pluknet@nginx.com> |
description | Tests: keep HTTP/2 test for "return 444" in error_page as TODO. |
files | h2_error_page.t |