mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-12-24 19:11:00 +01:00
6e94b69665
Move all these files and others for OCSP tests found into reg-tests/ssl
to reg-test/ssl/certs and adapt all the VTC files which use them.
This patch is needed by other tests which have to include the SSL tests.
Indeed, some VTC commands contain paths to these files which cannot
be customized with environment variables, depending on the location the VTC file
is runi from, because VTC does not resolve the environment variables. Only macros
as ${testdir} can be resolved.
For instance this command run from a VTC file from reg-tests/ssl directory cannot
be reused from another directory, except if we add a symbolic link for each certs,
key etc.
haproxy h1 -cli {
send "del ssl crt-list ${testdir}/localhost.crt-list ${testdir}/common.pem:1"
}
This is not what we want. We add a symbolic link to reg-test/ssl/certs to the
directory and modify the command above as follows:
haproxy h1 -cli {
send "del ssl crt-list ${testdir}/certs/localhost.crt-list ${testdir}/certs/common.pem:1"
}
28 lines
576 B
Plaintext
28 lines
576 B
Plaintext
global
|
|
log stdout local0
|
|
tune.ssl.default-dh-param 2048
|
|
tune.ssl.capture-buffer-size 1
|
|
|
|
defaults
|
|
mode http
|
|
|
|
timeout connect 5s
|
|
timeout client 30s
|
|
timeout client-fin 1s
|
|
timeout server 30s
|
|
timeout server-fin 1s
|
|
timeout http-request 10s
|
|
timeout http-keep-alive 300s
|
|
|
|
option logasap
|
|
option http-buffer-request
|
|
|
|
frontend h2
|
|
mode http
|
|
bind 127.0.0.1:8443 ssl crt reg-tests/ssl/certs/common.pem alpn h2,http/1.1
|
|
default_backend h2b
|
|
|
|
backend h2b
|
|
errorfile 200 .github/errorfile
|
|
http-request deny deny_status 200
|