def getServerCertificate(self):
conn = self.openTLSConnection(self._tlsServerPort, self._serverName, self._caCert)
- return conn.getpeercert()
+ cert = conn.getpeercert()
+ conn.close()
+ return cert
def getTLSProvider(self):
return self.sendConsoleCommand("getBind(0):getEffectiveTLSProvider()").rstrip()
self.generateNewCertificateAndKey()
self.sendConsoleCommand("reloadAllCertificates()")
+ conn.close()
# open a new connection
conn = self.openTLSConnection(self._tlsServerPort, self._serverName, self._caCert)
# and that the serial is different
self.assertNotEqual(serialNumber, cert['serialNumber'])
+ conn.close()
def testTLKA(self):
"""
self.assertEqual(query, receivedQuery)
self.assertEqual(response, receivedResponse)
+ conn.close()
+
def testTLSPipelining(self):
"""
TLS: Several queries over the same connection without waiting for the responses
self.assertEqual(query, receivedQuery)
self.assertEqual(response, receivedResponse)
+ conn.close()
+
def testTLSSNIRouting(self):
"""
TLS: SNI Routing
self.assertTrue(receivedResponse)
self.assertEqual(expectedResponse, receivedResponse)
+ conn.close()
# this one should not
conn = self.openTLSConnection(self._tlsServerPort, self._serverName, self._caCert)
receivedQuery.id = query.id
self.assertEqual(query, receivedQuery)
self.assertEqual(response, receivedResponse)
+ conn.close()
def testTLSSNIRoutingAfterResumption(self):
# we have more complicated tests about session resumption itself,
self.assertEqual(expectedQuery, receivedQuery)
self.checkQueryNoEDNS(expectedQuery, receivedQuery)
self.assertEqual(response, receivedResponse)
+ conn.close()
for _ in range(numberOfQueries):
conn = self.openTLSConnection(self._tlsServerPort, self._serverName, self._caCert)
self.sendTCPQueryOverConnection(conn, query, response=None)
receivedResponse = self.recvTCPResponseOverConnection(conn, useQueue=False)
self.assertEqual(receivedResponse, response)
+ conn.close()
class TestTLSFrontendLimits(DNSDistTest):
receivedQuery.id = query.id
self.assertEqual(query, receivedQuery)
self.assertEqual(response, receivedResponse)
+ conn.close()
class TestPKCSTLSCertificate(DNSDistTest, TLSTests):
_consoleKey = DNSDistTest.generateConsoleKey()