mirror of
https://github.com/facebook/sapling.git
synced 2024-10-12 01:39:21 +03:00
5e4a97cecc
Summary: In order to do more complete tests around authentication we need to provide fb identity in to our test certificates. Reviewed By: StanislavGlebik Differential Revision: D15046017 fbshipit-source-id: 3f3cd450425944a2970c6f02e7eb92a878076a05
57 lines
1.9 KiB
Perl
57 lines
1.9 KiB
Perl
setup
|
|
$ . $TESTDIR/library.sh
|
|
|
|
setup configuration
|
|
$ setup_common_config
|
|
$ cd $TESTTMP
|
|
|
|
setup repo
|
|
$ hginit_treemanifest repo-hg
|
|
$ cd repo-hg
|
|
$ echo "a file content" > a
|
|
$ hg add a
|
|
$ hg ci -ma
|
|
|
|
setup data
|
|
$ cd $TESTTMP
|
|
$ blobimport repo-hg/.hg repo
|
|
|
|
start mononoke
|
|
$ mononoke
|
|
$ wait_for_mononoke $TESTTMP/repo
|
|
$ function s_client () { openssl s_client -connect localhost:$MONONOKE_SOCKET -CAfile "$TESTDIR/certs/root-ca.crt" -cert "$TESTDIR/certs/localhost.crt" -key "$TESTDIR/certs/localhost.key" -ign_eof "$@"; }
|
|
|
|
test TLS Session/Ticket resumption when using client certs
|
|
$ TMPFILE=$(mktemp)
|
|
$ RUN1=$(echo -e "hello\n" | s_client -sess_out $TMPFILE | grep -E "^(HTTP|\s+Session-ID:)")
|
|
depth=1 C = US, ST = CA, O = FakeRootCanal, CN = fbmononoke.com
|
|
verify return:1
|
|
depth=0 CN = localhost, O = Mononoke, C = US, ST = CA
|
|
verify return:1
|
|
read:errno=0
|
|
$ RUN2=$(echo -e "hello\n" | s_client -sess_in $TMPFILE | grep -E "^(HTTP|\s+Session-ID:)")
|
|
read:errno=0
|
|
$ echo "$RUN1"
|
|
Session-ID: [A-Z0-9]{64} (re)
|
|
$ if [ "$RUN1" == "$RUN2" ]; then echo "SUCCESS"; fi
|
|
SUCCESS
|
|
|
|
test TLS Tickets use encryption keys from seeds - sessions should persist across restarts
|
|
$ kill -9 $MONONOKE_PID && wait $MONONOKE_PID
|
|
$TESTTMP.sh: * Killed * (glob)
|
|
[137]
|
|
$ mononoke
|
|
$ wait_for_mononoke $TESTTMP/repo
|
|
$ alias s_client="openssl s_client -connect localhost:$MONONOKE_SOCKET -CAfile \"$TESTDIR/certs/root-ca.crt\" -cert \"$TESTDIR/certs/localhost.crt\" -key \"$TESTDIR/certs/localhost.key\" -ign_eof"
|
|
$ echo -e "hello\n" | s_client -sess_in $TMPFILE -state | grep -E "^SSL_connect"
|
|
SSL_connect:before/connect initialization
|
|
SSL_connect:SSLv3 write client hello A
|
|
SSL_connect:SSLv3 read server hello A
|
|
SSL_connect:SSLv3 read finished A
|
|
SSL_connect:SSLv3 write change cipher spec A
|
|
SSL_connect:SSLv3 write finished A
|
|
SSL_connect:SSLv3 flush data
|
|
read:errno=0
|
|
SSL3 alert write:warning:close notify
|
|
[1]
|