From ec2a355fdc961aba7ace27c624c01accd58dc1ed Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Fri, 15 Apr 2022 10:36:56 +0100 Subject: TLS resumption: support Outlook hosts-behind-loadbalancer --- test/scripts/5891-Resume-GnuTLS-OCSP/5890 | 69 ------------------------------- test/scripts/5891-Resume-GnuTLS-OCSP/5891 | 69 +++++++++++++++++++++++++++++++ 2 files changed, 69 insertions(+), 69 deletions(-) delete mode 100644 test/scripts/5891-Resume-GnuTLS-OCSP/5890 create mode 100644 test/scripts/5891-Resume-GnuTLS-OCSP/5891 (limited to 'test/scripts/5891-Resume-GnuTLS-OCSP') diff --git a/test/scripts/5891-Resume-GnuTLS-OCSP/5890 b/test/scripts/5891-Resume-GnuTLS-OCSP/5890 deleted file mode 100644 index 449b0eb3d..000000000 --- a/test/scripts/5891-Resume-GnuTLS-OCSP/5890 +++ /dev/null @@ -1,69 +0,0 @@ -# TLS session resumption with OCSP -gnutls -# -# For keying info: -# (requires SSLKEYLOGFILE added to /etc/sudoers) -# SSLKEYLOGFILE=/home/jgh/git/exim/test/foo sudo exim -DSERVER=server -bd -oX PORT_D -# -### TLS1.2 -exim -DSERVER=server -DOPTION=NORMAL:!VERS-TLS1.3 -bd -oX PORT_D -**** -exim -DVALUE=resume -odf getticket@test.ex -Test message. Contains FF: ÿ -**** -exim -DVALUE=resume -odf resume@test.ex abcd@test.ex xyz@test.ex -Test message to two different hosts, one does not support resume -**** -# allow time for ticket to hit renewal time -sleep 3 -exim -DVALUE=resume -odf renewal@test.ex -Test message. -**** -exim -DVALUE=resume -odf postrenewal@test.ex -Test message. -**** -sleep 3 -exim -DVALUE=resume -odf timeout@test.ex -Test message. -**** -exim -odf notreq@test.ex -Test message, not requesting resumption. -**** -sudo rm -f DIR/spool/db/tls -exim -odf -DVALUE=resume noverify_getticket@test.ex -Dest on this means the server cert will not verify (but try_verify will permit it) -**** -exim -odf -DVALUE=resume noverify_resume@test.ex -Dest on this means the server cert will not verify (but try_verify will permit it) -**** -killdaemon -sleep 1 -sudo rm -f DIR/spool/db/tls -# -# -### TLS1.3 -exim -DSERVER=server -DOPTION=NORMAL -bd -oX PORT_D -**** -exim -DVALUE=resume -odf getticket@test.ex -Test message. Contains FF: ÿ -**** -exim -DVALUE=resume -odf resume@test.ex abcd@test.ex xyz@test.ex -Test message to two different hosts, one does not support resume -**** -# allow time for ticket to hit renewal time -sleep 3 -exim -DVALUE=resume -odf renewal@test.ex -Test message. -**** -exim -DVALUE=resume -odf postrenewal@test.ex -Test message. -**** -sleep 3 -exim -DVALUE=resume -odf timeout@test.ex -Test message. -**** -exim -odf notreq@test.ex -Test message, not requesting resumption. -**** -killdaemon -no_msglog_check diff --git a/test/scripts/5891-Resume-GnuTLS-OCSP/5891 b/test/scripts/5891-Resume-GnuTLS-OCSP/5891 new file mode 100644 index 000000000..a497fbb0b --- /dev/null +++ b/test/scripts/5891-Resume-GnuTLS-OCSP/5891 @@ -0,0 +1,69 @@ +# TLS session resumption with OCSP +gnutls +# +# For keying info: +# (requires SSLKEYLOGFILE added to /etc/sudoers) +# SSLKEYLOGFILE=/home/jgh/git/exim/test/foo sudo exim -DSERVER=server -bd -oX PORT_D +# +### TLS1.2 +exim -DSERVER=server -DOPTION=NORMAL:!VERS-TLS1.3 -bd -oX PORT_D +**** +exim -DVALUE=resume -odf getticket@test.ex +Test message. Contains FF: ÿ +**** +exim -DVALUE=resume -odf resume@test.ex abcd@test.ex xyz@test.ex +Test message to two different hosts, one does not support resume +**** +# allow time for ticket to hit renewal time +sleep 3 +exim -DVALUE=resume -odf renewal@test.ex +Test message. +**** +exim -DVALUE=resume -odf postrenewal@test.ex +Test message. +**** +sleep 3 +exim -DVALUE=resume -odf timeout@test.ex +Test message. +**** +exim -odf notreq@test.ex +Test message, not requesting resumption. +**** +sudo rm -f DIR/spool/db/tls* +exim -odf -DVALUE=resume noverify_getticket@test.ex +Dest on this means the server cert will not verify (but try_verify will permit it) +**** +exim -odf -DVALUE=resume noverify_resume@test.ex +Dest on this means the server cert will not verify (but try_verify will permit it) +**** +killdaemon +sleep 1 +sudo rm -f DIR/spool/db/tls +# +# +### TLS1.3 +exim -DSERVER=server -DOPTION=NORMAL -bd -oX PORT_D +**** +exim -DVALUE=resume -odf getticket@test.ex +Test message. Contains FF: ÿ +**** +exim -DVALUE=resume -odf resume@test.ex abcd@test.ex xyz@test.ex +Test message to two different hosts, one does not support resume +**** +# allow time for ticket to hit renewal time +sleep 3 +exim -DVALUE=resume -odf renewal@test.ex +Test message. +**** +exim -DVALUE=resume -odf postrenewal@test.ex +Test message. +**** +sleep 3 +exim -DVALUE=resume -odf timeout@test.ex +Test message. +**** +exim -odf notreq@test.ex +Test message, not requesting resumption. +**** +killdaemon +no_msglog_check -- cgit v1.2.3