From: William Lallemand <wlallemand@haproxy.com>
Date: Mon, 8 Apr 2024 15:52:08 +0000 (+0200)
Subject: REGTESTS: ssl: test simple case of crt-store
X-Git-Tag: v3.0-dev8~70
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=860b562b921840e04ca6383c96ce8e7cb76211f4;p=thirdparty%2Fhaproxy.git

REGTESTS: ssl: test simple case of crt-store

Test the crt-store loading with some basic cases.
---

diff --git a/reg-tests/ssl/crt_store.vtc b/reg-tests/ssl/crt_store.vtc
new file mode 100644
index 0000000000..685183ed93
--- /dev/null
+++ b/reg-tests/ssl/crt_store.vtc
@@ -0,0 +1,31 @@
+#REGTEST_TYPE=devel
+varnishtest "Test the crt-store section"
+feature cmd "$HAPROXY_PROGRAM -cc 'version_atleast(3.0-dev7)'"
+feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'"
+feature ignore_unknown_macro
+
+#
+# Basic check for the crt-store, ensure that loading works and that we can't
+# load a crt which was used before
+#
+
+
+haproxy h1 -arg -V -conf-OK {
+    crt-store
+       load crt "${testdir}/common.crt" key "${testdir}/common.key"
+
+    listen ssl-lst
+        bind "${tmpdir}/ssl.sock" ssl crt ${testdir}/common.crt strict-sni
+
+}
+
+haproxy h2 -arg -V -conf-BAD {} {
+
+    listen ssl-lst
+        bind "${tmpdir}/ssl.sock" ssl crt ${testdir}/common.pem strict-sni
+
+    crt-store
+       load crt "${testdir}/common.pem" key "${testdir}/common.key"
+
+}
+