Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

enable more test cases for ci.yml #1684

Merged
merged 3 commits into from
Nov 11, 2022
Merged

enable more test cases for ci.yml #1684

merged 3 commits into from
Nov 11, 2022

Conversation

chobits
Copy link
Member

@chobits chobits commented Nov 11, 2022

  1. enable ssl module for ngx_dtls.t (this case is skipped before)
  2. enable addition module for http_raw_uri_variable.t
  3. fixed ngx_dtls.t: 1. too small certificate key error 2. check verification string with case insensitivity
  4. fixed segfault found by ngx_dtls.t, for details see here: Support Stream module's server_name directive by using SNI extension o… #1205 (comment)

With this pr, all test cases in tests/nginx-tests/tengine-tests will be checked.

1. fix error: Ssl_ctx_use_certificate key too small
2. make it case insensitive for checking "Verification: OK"
@chobits chobits requested a review from wangfakang November 11, 2022 08:41
@chobits
Copy link
Member Author

chobits commented Nov 11, 2022

aslo cc @u5surf for ci.yml modified

--with-ipv6 \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_addition_module \
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new compiled addtion module

--with-stream_realip_module \
--with-stream_geoip_module \
--with-stream_ssl_preread_module \
--with-stream_sni \
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new compiled stream and stream_* module

@@ -875,7 +875,6 @@ ngx_stream_ssl_merge_conf(ngx_conf_t *cf, void *parent, void *child)

#if (NGX_STREAM_SNI)
ngx_conf_merge_value(conf->sni_force, prev->sni_force, 0);
if (!conf->listen)
Copy link
Member Author

@chobits chobits Nov 11, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this line trigger potential segfault in ngx_ssl_error because it make conf->ssl.log NULL.

This line is duplicated with following line 882

    if (!conf->listen) {
        return NGX_CONF_OK;
    }

@@ -45,7 +45,7 @@ EOF

$t->write_file('openssl.conf', <<EOF);
[ req ]
default_bits = 1024
default_bits = 2048
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ssl certificate key too small error

@@ -63,7 +63,8 @@ foreach my $name ('localhost') {


$t->run();
my $ret1 = `openssl s_client -connect 127.0.0.1:8980 -dtls1 | grep "ok"`;
my $ret1 = `openssl s_client -connect 127.0.0.1:8980 -dtls1 | grep -i "ok"`;
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ignore case of string checking

@chobits
Copy link
Member Author

chobits commented Nov 11, 2022

@chobits chobits requested a review from mrpre November 11, 2022 09:49
@wa5i wa5i merged commit b161f32 into alibaba:master Nov 11, 2022
@chobits chobits added this to the 2.4.0 milestone Feb 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants