mirror of
https://github.com/3proxy/3proxy.git
synced 2026-11-05 01:15:48 +08:00
629a978c00
Some checks failed
C/C++ CI Linux / ${{ matrix.target }} (ubuntu-24.04-arm) (push) Has been cancelled
C/C++ CI Linux / ${{ matrix.target }} (ubuntu-latest) (push) Has been cancelled
C/C++ CI MacOS / ${{ matrix.target }} (macos-15) (push) Has been cancelled
C/C++ CI Windows / ${{ matrix.target }} (windows-2022) (push) Has been cancelled
C/C++ CI cmake / ${{ matrix.target }} (macos-15) (push) Has been cancelled
C/C++ CI cmake / ${{ matrix.target }} (ubuntu-24.04-arm) (push) Has been cancelled
C/C++ CI cmake / ${{ matrix.target }} (ubuntu-latest) (push) Has been cancelled
C/C++ CI cmake / ${{ matrix.target }} (windows-2022) (push) Has been cancelled
C/C++ CI cmake / ubuntu-latest (wolfSSL) (push) Has been cancelled
3proxy --help (and the usage message of a bad invocation) now lists what the build was made with: TLS and its backend, RADIUS, PCRE, IPv6, UNIX sockets, the built-in HTTP server, transparency, ODBC and the optional proxy services. The test runner reads the list before the first case and the cases state the features they need with t.skip_unless(), so a build without a feature skips its cases instead of failing them; a binary too old to report anything skips the cases with needs and runs the rest.
50 lines
1.5 KiB
Python
50 lines
1.5 KiB
Python
"""tlspr: the destination comes from the name in the TLS handshake."""
|
|
|
|
|
|
def run(t):
|
|
if not t.skip_unless("httpsrv", "ssl"):
|
|
return
|
|
certs = t.certs()
|
|
if not certs:
|
|
t.skip("tlspr (openssl is not available to generate certificates)")
|
|
return
|
|
|
|
origin = t.free_port()
|
|
sni = t.free_port()
|
|
|
|
server = t.start("tlspr", f"""
|
|
log
|
|
ssl_server_cert {certs.server}
|
|
ssl_server_key {certs.server_key}
|
|
ssl_serv
|
|
auth iponly
|
|
allow *
|
|
http echo * /echo**
|
|
httpsrv -p{origin}
|
|
|
|
flush
|
|
ssl_noserv
|
|
nserver 127.0.0.1
|
|
nscache 1024
|
|
nsrecord sni.test 127.0.0.1
|
|
auth iponly
|
|
allow *
|
|
tlspr -p{sni} -P{origin}
|
|
""", ports=[origin, sni])
|
|
|
|
if "Unknown command" in server.output():
|
|
t.skip("tlspr (this build has no SSL support)")
|
|
return
|
|
|
|
# The certificate names sni.test, so the name in the handshake is both
|
|
# what picks the destination and what the client checks.
|
|
r = t.https(f"https://sni.test:{sni}/echo", ca=certs.ca, strict=False,
|
|
connect_to=("127.0.0.1", sni))
|
|
t.eq(200, r.status, "the name in the handshake reaches its destination")
|
|
t.contains(r, "path=/echo", "the request arrives at the origin")
|
|
|
|
# a name the proxy cannot resolve has nowhere to go
|
|
r = t.https(f"https://nowhere.test:{sni}/echo", ca=certs.ca, strict=False,
|
|
verify_name=False, connect_to=("127.0.0.1", sni))
|
|
t.ne(200, r.status, "a name that does not resolve is refused")
|