haproxy/reg-tests/ssl/crt_store.vtc
Willy Tarreau 48d5ef363d REGTESTS: restrict execution to a single thread group
When threads are enabled and running on a machine with multiple CCX
or multiple nodes, thread groups are now enabled since 3.3-dev2, causing
load-balancing algorithms to randomly fail due to incoming connections
spreading over multiple groups and using different load balancing indexes.

Let's just force "thread-groups 1" into all configs when threads are
enabled to avoid this.
2025-06-30 18:54:35 +02:00

42 lines
920 B
Plaintext

#REGTEST_TYPE=devel
varnishtest "Test the crt-store section"
feature cmd "$HAPROXY_PROGRAM -cc 'version_atleast(3.0-dev7)'"
feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'"
feature ignore_unknown_macro
#
# Basic check for the crt-store, ensure that loading works and that we can't
# load a crt which was used before
#
haproxy h1 -arg -V -conf-OK {
global
.if feature(THREAD)
thread-groups 1
.endif
crt-store
load crt "${testdir}/common.crt" key "${testdir}/common.key"
defaults
timeout client 30s
timeout server 30s
timeout connect 30s
listen ssl-lst
bind "${tmpdir}/ssl.sock" ssl crt ${testdir}/common.crt strict-sni
}
haproxy h2 -arg -V -conf-BAD {} {
listen ssl-lst
bind "${tmpdir}/ssl.sock" ssl crt ${testdir}/common.pem strict-sni
crt-store
load crt "${testdir}/common.pem" key "${testdir}/common.key"
}