diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2019-05-05 18:54:45 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2019-05-05 19:15:51 +0100 |
| commit | 11c4a22b0a2098d2ad7b9d210bc4a1bfc9742ff8 (patch) | |
| tree | 1b2959f1a3ddf3fe950335828214c0ac42c4366b /test/confs/5890 | |
| parent | 68c62739bf8acd0074fbcc5b129252a0b44cbc09 (diff) | |
Testsuite: check variables under resumption
Diffstat (limited to 'test/confs/5890')
| -rw-r--r-- | test/confs/5890 | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/test/confs/5890 b/test/confs/5890 index 6daf59667..ca205f621 100644 --- a/test/confs/5890 +++ b/test/confs/5890 @@ -32,6 +32,13 @@ begin acl check_helo: accept condition = ${if def:tls_in_cipher} logwrite = tls_in_resumption ${listextract {$tls_in_resumption} {_RESUME_DECODE}} + logwrite = our cert subject\t${certextract {subject}{$tls_in_ourcert}} + logwrite = peer cert subject\t${certextract {subject}{$tls_in_peercert}} + logwrite = peer cert verified\t${tls_in_certificate_verified} + logwrite = peer dn\t${tls_in_peerdn} + logwrite = ocsp\t${tls_in_ocsp} + logwrite = cipher\t${tls_in_cipher} + logwrite = bits\t${tls_in_bits} accept check_recipient: @@ -42,6 +49,13 @@ log_resumption: accept condition = ${if def:tls_out_cipher} condition = ${if eq {$event_name}{tcp:close}} logwrite = tls_out_resumption ${listextract {$tls_out_resumption} {_RESUME_DECODE}} + logwrite = our cert subject\t${certextract {subject}{$tls_out_ourcert}} + logwrite = peer cert subject\t${certextract {subject}{$tls_out_peercert}} + logwrite = peer cert verified\t${tls_out_certificate_verified} + logwrite = peer dn\t${tls_out_peerdn} + logwrite = ocsp\t${tls_out_ocsp} + logwrite = cipher\t${tls_out_cipher} + logwrite = bits\t${tls_out_bits} # ----- Routers ----- @@ -73,6 +87,8 @@ send_to_server1: .else tls_resumption_hosts = : .endif + tls_verify_certificates = DIR/aux-fixed/cert1 + tls_verify_cert_hostnames = : event_action = ${acl {log_resumption}} send_to_server2: @@ -80,6 +96,8 @@ send_to_server2: allow_localhost hosts = HOSTIPV4 port = PORT_D + tls_verify_certificates = DIR/aux-fixed/cert1 + tls_verify_cert_hostnames = : event_action = ${acl {log_resumption}} |