mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-12-06 02:01:01 +01:00
277b14144b
ssl/issuers_chain_path.vtc was rename to ssl/issuers_chain_path.vtci
to produce a common part runnable both for QUIC and TCP connections.
Then issuers_chain_path.vtc files were created both under ssl and quic directories
to call this .vtci file with correct VTC_SOCK_TYPE environment values
("quic" for QUIC connection and "stream" for TCP connections);
38 lines
1.0 KiB
Plaintext
38 lines
1.0 KiB
Plaintext
feature ignore_unknown_macro
|
|
|
|
haproxy h1 -conf {
|
|
global
|
|
.if feature(THREAD)
|
|
thread-groups 1
|
|
.endif
|
|
|
|
stats socket "${tmpdir}/h1/stats" level admin
|
|
issuers-chain-path "${testdir}/certs/issuers-chain-path/ca/"
|
|
crt-base "${testdir}/certs/issuers-chain-path"
|
|
|
|
defaults
|
|
mode http
|
|
option httplog
|
|
log stderr local0 debug err
|
|
option logasap
|
|
timeout connect "${HAPROXY_TEST_TIMEOUT-5s}"
|
|
timeout client "${HAPROXY_TEST_TIMEOUT-5s}"
|
|
timeout server "${HAPROXY_TEST_TIMEOUT-5s}"
|
|
|
|
frontend ssl-fe
|
|
bind "${VTC_SOCK_TYPE}+fd@${ssl_fe}" ssl crt server.pem
|
|
http-request return status 200
|
|
} -start
|
|
|
|
|
|
# We should have two distinct ocsp responses known that were loaded at build time
|
|
haproxy h1 -cli {
|
|
send "show ssl cert ${testdir}/certs/issuers-chain-path/server.pem"
|
|
expect ~ ".*Chain Filename.*"
|
|
send "show ssl cert ${testdir}/certs/issuers-chain-path/server.pem"
|
|
expect ~ ".*Chain Subject.*"
|
|
}
|
|
|
|
haproxy h1 -wait
|
|
|