From 11c4a22b0a2098d2ad7b9d210bc4a1bfc9742ff8 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Sun, 5 May 2019 18:54:45 +0100 Subject: Testsuite: check variables under resumption --- test/confs/5890 | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'test/confs/5890') diff --git a/test/confs/5890 b/test/confs/5890 index 6daf59667..ca205f621 100644 --- a/test/confs/5890 +++ b/test/confs/5890 @@ -32,6 +32,13 @@ begin acl check_helo: accept condition = ${if def:tls_in_cipher} logwrite = tls_in_resumption ${listextract {$tls_in_resumption} {_RESUME_DECODE}} + logwrite = our cert subject\t${certextract {subject}{$tls_in_ourcert}} + logwrite = peer cert subject\t${certextract {subject}{$tls_in_peercert}} + logwrite = peer cert verified\t${tls_in_certificate_verified} + logwrite = peer dn\t${tls_in_peerdn} + logwrite = ocsp\t${tls_in_ocsp} + logwrite = cipher\t${tls_in_cipher} + logwrite = bits\t${tls_in_bits} accept check_recipient: @@ -42,6 +49,13 @@ log_resumption: accept condition = ${if def:tls_out_cipher} condition = ${if eq {$event_name}{tcp:close}} logwrite = tls_out_resumption ${listextract {$tls_out_resumption} {_RESUME_DECODE}} + logwrite = our cert subject\t${certextract {subject}{$tls_out_ourcert}} + logwrite = peer cert subject\t${certextract {subject}{$tls_out_peercert}} + logwrite = peer cert verified\t${tls_out_certificate_verified} + logwrite = peer dn\t${tls_out_peerdn} + logwrite = ocsp\t${tls_out_ocsp} + logwrite = cipher\t${tls_out_cipher} + logwrite = bits\t${tls_out_bits} # ----- Routers ----- @@ -73,6 +87,8 @@ send_to_server1: .else tls_resumption_hosts = : .endif + tls_verify_certificates = DIR/aux-fixed/cert1 + tls_verify_cert_hostnames = : event_action = ${acl {log_resumption}} send_to_server2: @@ -80,6 +96,8 @@ send_to_server2: allow_localhost hosts = HOSTIPV4 port = PORT_D + tls_verify_certificates = DIR/aux-fixed/cert1 + tls_verify_cert_hostnames = : event_action = ${acl {log_resumption}} -- cgit v1.2.3