Function TestUseTLSServer

rest/server_context_test.go:491–567

CBG-1535 - test Bootstrap.UseTLSServer option

(t *testing.T)

// CBG-1535 - test Bootstrap.UseTLSServer option
func TestUseTLSServer(t *testing.T) {
	base.SetUpTestLogging(t, base.LevelInfo, base.KeyAll)
	errorMustBeSecure := "Must use secure scheme in Couchbase Server URL, or opt out by setting bootstrap.use_tls_server to false. Current URL: %v"
	errorAllowInsecureAndBeSecure := "Couchbase server URL cannot use secure protocol when bootstrap.use_tls_server is false. Current URL: %v"
	testCases := []struct {
		name          string
		useTLSServer  bool
		server        string
		expectedError *string
	}{
		{
			name:          "Walrus allowed without flag",
			useTLSServer:  false,
			server:        "walrus://",
			expectedError: nil,
		},
		{
			name:          "Walrus allowed with flag",
			useTLSServer:  true,
			server:        "walrus://",
			expectedError: nil,
		},
		{
			name:          "couchbase: not allowed",
			useTLSServer:  true,
			server:        "couchbase://localhost:1212",
			expectedError: &errorMustBeSecure,
		},
		{
			name:          "http not allowed",
			useTLSServer:  true,
			server:        "http://localhost:1212",
			expectedError: &errorMustBeSecure,
		},
		{
			name:          "http allowed",
			useTLSServer:  false,
			server:        "http://localhost:1212",
			expectedError: nil,
		},
		{
			name:          "Https not secure (due to unsupported)",
			useTLSServer:  true,
			server:        "https://localhost:1234",
			expectedError: &errorMustBeSecure,
		},
		{
			name:          "couchbases:",
			useTLSServer:  true,
			server:        "couchbases://localhost:1234",
			expectedError: nil,
		},
		{
			name:          "ftps:", // Testing if the S at the end is what makes it secure
			useTLSServer:  true,
			server:        "ftps://localhost:1234",
			expectedError: &errorMustBeSecure,
		},