Function TestOptionsTLSConfig

skipper_test.go:177–231

(t *testing.T)

}

func TestOptionsTLSConfig(t *testing.T) {
	cr := certregistry.NewCertRegistry()
	proxyTLS := &tls.Config{}

	cert, err := tls.LoadX509KeyPair("fixtures/test.crt", "fixtures/test.key")
	require.NoError(t, err)

	cert2, err := tls.LoadX509KeyPair("fixtures/test2.crt", "fixtures/test2.key")
	require.NoError(t, err)

	// empty without registry
	o := &Options{}
	c, err := o.TlsConfig(nil)
	require.NoError(t, err)
	require.Nil(t, c)

	// empty with registry
	o = &Options{}
	c, err = o.TlsConfig(cr)
	require.NoError(t, err)
	require.NotNil(t, c.GetCertificate)

	// proxy tls config
	o = &Options{ProxyTLS: proxyTLS}
	c, err = o.TlsConfig(cr)
	require.NoError(t, err)
	require.Same(t, proxyTLS, c)

	// proxy tls config priority
	o = &Options{ProxyTLS: proxyTLS, CertPathTLS: "fixtures/test.crt", KeyPathTLS: "fixtures/test.key"}
	c, err = o.TlsConfig(cr)
	require.NoError(t, err)
	require.Same(t, proxyTLS, c)

	// cert key path
	o = &Options{TLSMinVersion: tls.VersionTLS12, CertPathTLS: "fixtures/test.crt", KeyPathTLS: "fixtures/test.key"}
	c, err = o.TlsConfig(cr)
	require.NoError(t, err)
	require.Equal(t, uint16(tls.VersionTLS12), c.MinVersion)
	require.Equal(t, []tls.Certificate{cert}, c.Certificates)

	// multiple cert key paths
	o = &Options{TLSMinVersion: tls.VersionTLS13, CertPathTLS: "fixtures/test.crt,fixtures/test2.crt", KeyPathTLS: "fixtures/test.key,fixtures/test2.key"}
	c, err = o.TlsConfig(cr)
	require.NoError(t, err)
	require.Equal(t, uint16(tls.VersionTLS13), c.MinVersion)
	require.Equal(t, []tls.Certificate{cert, cert2}, c.Certificates)

	// TLS Cipher Suites
	o = &Options{CipherSuites: []uint16{1}}
	c, err = o.TlsConfig(cr)
	require.NoError(t, err)
	assert.Equal(t, len(c.CipherSuites), 1)

}

func TestOptionsTLSConfigInvalidPaths(t *testing.T) {
	cr := certregistry.NewCertRegistry()