]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
REGTESTS: ssl/log: test the log-forward with SSL
authorWilliam Lallemand <wlallemand@haproxy.org>
Tue, 13 Sep 2022 10:41:29 +0000 (12:41 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 13 Sep 2022 15:03:30 +0000 (17:03 +0200)
Test the log-forward section with an SSL server and an SSL bind.

Must be backported as far as 2.3.

reg-tests/ssl/log_forward_ssl.vtc [new file with mode: 0644]

diff --git a/reg-tests/ssl/log_forward_ssl.vtc b/reg-tests/ssl/log_forward_ssl.vtc
new file mode 100644 (file)
index 0000000..6b7515b
--- /dev/null
@@ -0,0 +1,60 @@
+varnishtest "Test the TCP+SSL load-forward"
+feature cmd "$HAPROXY_PROGRAM -cc 'version_atleast(2.3-dev1)'"
+feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'"
+feature ignore_unknown_macro
+
+server s1 {
+    rxreq
+       txresp
+} -repeat 500 -start
+
+syslog Slg1 -level info {
+    recv
+    expect ~ "[^:\\[ ]\\[${h1_pid}\\]: .* \"GET /client_c1 HTTP/1.1\""
+} -repeat 50 -start
+
+haproxy h1 -conf {
+       global
+               insecure-fork-wanted
+       defaults
+               mode http
+               option httplog
+               timeout connect "${HAPROXY_TEST_TIMEOUT-5s}"
+               timeout client  "${HAPROXY_TEST_TIMEOUT-5s}"
+               timeout server  "${HAPROXY_TEST_TIMEOUT-5s}"
+
+       frontend fe1
+               bind "fd@${fe_1}"
+               log 127.0.0.1:1514 local0
+#              log ${Slg1_addr}:${Slg1_port} local0
+               default_backend be
+
+       backend be
+               server app1 ${s1_addr}:${s1_port}
+
+       ring myring
+               description "My local buffer"
+               format rfc5424
+               maxlen 1200
+               size 32764
+               timeout connect 5s
+               timeout server 10s
+               # syslog tcp server
+               server mysyslogsrv 127.0.0.1:2514 ssl verify none
+
+       log-forward syslog2tcp
+               dgram-bind 127.0.0.1:1514
+               log ring@myring local0 # To TCP log
+
+       log-forward syslog2local
+               bind 127.0.0.1:2514 ssl crt ${testdir}/common.pem
+               log ${Slg1_addr}:${Slg1_port} local0 # To VTest syslog
+} -start
+
+client c1 -connect ${h1_fe_1_sock} {
+    txreq -url "/client_c1"
+    rxresp
+    expect resp.status == 200
+} -repeat 50 -start
+
+syslog Slg1 -wait