Skip to content
Snippets Groups Projects
eec_subject2.t 1.17 KiB
Newer Older
  • Learn to ignore specific revisions
  • use Test::Nginx::Socket 'no_plan';
    
    run_tests();
    
    __DATA__
    
    === TEST 1: standard x.509 certificate 
    --- main_config
        env X509_VOMS_DIR=t/vomsdir;
        env X509_CERT_DIR=t/trust-anchors;
        load_module /etc/nginx/modules/ngx_http_voms_module.so;
    --- http_config
        server {
            error_log logs/error.log debug;
            listen 8443 ssl;
    
    lcappelli's avatar
    lcappelli committed
            ssl_certificate ../../certs/star.test.example.cert.pem;
            ssl_certificate_key ../../certs/star.test.example.key.pem;
    
            ssl_client_certificate ../../trust-anchors/igi-test-ca.pem;
            ssl_verify_depth 10;
            ssl_verify_client on;
    	location = / {
                default_type text/plain;
                return 200 "$ssl_client_ee_s_dn\n$ssl_client_s_dn\n$ssl_client_ee_i_dn\n$ssl_client_i_dn\n";
            }
        }
    --- config
        location = / {
            error_log logs/error-proxy.log debug;
            proxy_pass https://localhost:8443/;
    
    lcappelli's avatar
    lcappelli committed
            proxy_ssl_certificate ../../certs/star.test.example.cert.pem;
            proxy_ssl_certificate_key ../../certs/star.test.example.key.pem;
    
        }
    --- request
    GET / 
    --- response_body
    
    lcappelli's avatar
    lcappelli committed
    CN=*.test.example,O=IGI,C=IT
    CN=*.test.example,O=IGI,C=IT
    
    CN=Test CA,O=IGI,C=IT
    CN=Test CA,O=IGI,C=IT
    --- error_code: 200