Skip to content

enable more test cases for ci.yml#1684

Merged
wa5i merged 3 commits into
alibaba:masterfrom
chobits:master
Nov 11, 2022
Merged

enable more test cases for ci.yml#1684
wa5i merged 3 commits into
alibaba:masterfrom
chobits:master

Conversation

@chobits

@chobits chobits commented Nov 11, 2022

Copy link
Copy Markdown
Member
  1. enable ssl module for ngx_dtls.t (this case is skipped before)
  2. enable addition module for http_raw_uri_variable.t
  3. fixed ngx_dtls.t: 1. too small certificate key error 2. check verification string with case insensitivity
  4. fixed segfault found by ngx_dtls.t, for details see here: Support Stream module's server_name directive by using SNI extension o… #1205 (comment)

With this pr, all test cases in tests/nginx-tests/tengine-tests will be checked.

1. fix error: Ssl_ctx_use_certificate key too small
2. make it case insensitive for checking "Verification: OK"
@chobits
chobits requested a review from wangfakang November 11, 2022 08:41
@chobits

chobits commented Nov 11, 2022

Copy link
Copy Markdown
Member Author

aslo cc @u5surf for ci.yml modified

Comment thread .github/workflows/ci.yml
--with-ipv6 \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_addition_module \

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new compiled addtion module

Comment thread .github/workflows/ci.yml
--with-stream_realip_module \
--with-stream_geoip_module \
--with-stream_ssl_preread_module \
--with-stream_sni \

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new compiled stream and stream_* module


#if (NGX_STREAM_SNI)
ngx_conf_merge_value(conf->sni_force, prev->sni_force, 0);
if (!conf->listen)

@chobits chobits Nov 11, 2022

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this line trigger potential segfault in ngx_ssl_error because it make conf->ssl.log NULL.

This line is duplicated with following line 882

    if (!conf->listen) {
        return NGX_CONF_OK;
    }

$t->write_file('openssl.conf', <<EOF);
[ req ]
default_bits = 1024
default_bits = 2048

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ssl certificate key too small error


$t->run();
my $ret1 = `openssl s_client -connect 127.0.0.1:8980 -dtls1 | grep "ok"`;
my $ret1 = `openssl s_client -connect 127.0.0.1:8980 -dtls1 | grep -i "ok"`;

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ignore case of string checking

@chobits

chobits commented Nov 11, 2022

Copy link
Copy Markdown
Member Author

@chobits
chobits requested a review from mrpre November 11, 2022 09:49
@wa5i
wa5i merged commit b161f32 into alibaba:master Nov 11, 2022
@chobits chobits added this to the 2.4.0 milestone Feb 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants