Skip to content
Snippets Groups Projects
no_ta.t 1.16 KiB
Newer Older
  • Learn to ignore specific revisions
  • use Test::Nginx::Socket 'no_plan';
    
    run_tests();
    
    __DATA__
    
    
    === TEST 1: Valid proxy, wrong client trust-anchor 
    
    --- main_config
        env X509_VOMS_DIR=t/vomsdir;
    
        load_module /etc/nginx/modules/ngx_http_voms_module.so;
    
    --- http_config
    
    lcappelli's avatar
    lcappelli committed
        client_body_temp_path /tmp/client_temp;
        proxy_temp_path       /tmp/proxy_temp_path;
        fastcgi_temp_path     /tmp/fastcgi_temp;
        uwsgi_temp_path       /tmp/uwsgi_temp;
        scgi_temp_path        /tmp/scgi_temp;
    
        server {
            error_log logs/error.log debug;
            listen 8443 ssl;
    
            ssl_certificate ../../certs/star_test_example.cert.pem;
            ssl_certificate_key ../../certs/star_test_example.key.pem;
            ssl_client_certificate ../../trust-anchors/igi_test_ca2.pem;
    
            ssl_verify_depth 10;
            ssl_verify_client on;
    
            location = / {
    
                default_type text/plain;
    
                return 200 "$voms_fqans\n";
    
            }
        }
    --- config
        location = / {
    
            error_log logs/error-proxy.log debug;
    
            proxy_pass https://localhost:8443/;
            proxy_ssl_certificate ../../certs/3.cert.pem;
            proxy_ssl_certificate_key ../../certs/3.key.pem;
        }
    --- request
    GET / 
    
    --- error_code: 200