| # |
| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # |
| use t::APISIX 'no_plan'; |
| |
| no_root_location(); |
| |
| run_tests; |
| |
| __DATA__ |
| |
| === TEST 1: set ssl(id: 1) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local etcd = require("apisix.core.etcd") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com" |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| |
| local res = assert(etcd.get('/ssl/1')) |
| local prev_create_time = res.body.node.value.create_time |
| assert(prev_create_time ~= nil, "create_time is nil") |
| local update_time = res.body.node.value.update_time |
| assert(update_time ~= nil, "update_time is nil") |
| |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 2: get ssl(id: 1) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local t = require("lib.test_admin").test |
| local code, body = t('/apisix/admin/ssl/1', |
| ngx.HTTP_GET, |
| nil, |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com", |
| "key": null |
| }, |
| |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "get" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 3: delete ssl(id: 1) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local t = require("lib.test_admin").test |
| local code, message = t('/apisix/admin/ssl/1', |
| ngx.HTTP_DELETE, |
| nil, |
| [[{ |
| "action": "delete" |
| }]] |
| ) |
| ngx.say("[delete] code: ", code, " message: ", message) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| [delete] code: 200 message: passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 4: delete ssl(id: 99999999999999) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local t = require("lib.test_admin").test |
| local code = t('/apisix/admin/ssl/99999999999999', |
| ngx.HTTP_DELETE, |
| nil, |
| [[{ |
| "action": "delete" |
| }]] |
| ) |
| ngx.say("[delete] code: ", code) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| [delete] code: 404 |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 5: push ssl + delete |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "foo.com"} |
| |
| local code, message, res = t.test('/apisix/admin/ssl', |
| ngx.HTTP_POST, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "foo.com" |
| } |
| }, |
| "action": "create" |
| }]] |
| ) |
| |
| if code ~= 200 then |
| ngx.status = code |
| ngx.say(message) |
| return |
| end |
| |
| ngx.say("[push] code: ", code, " message: ", message) |
| |
| local id = string.sub(res.node.key, #"/apisix/ssl/" + 1) |
| code, message = t.test('/apisix/admin/ssl/' .. id, |
| ngx.HTTP_DELETE, |
| nil, |
| [[{ |
| "action": "delete" |
| }]] |
| ) |
| ngx.say("[delete] code: ", code, " message: ", message) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| [push] code: 200 message: passed |
| [delete] code: 200 message: passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 6: missing certificate information |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {sni = "foo.com"} |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "foo.com" |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.print(body) |
| } |
| } |
| --- request |
| GET /t |
| --- error_code: 400 |
| --- response_body |
| {"error_msg":"invalid configuration: value should match only one schema, but matches none"} |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 7: wildcard host name |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "*.foo.com"} |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "*.foo.com" |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 8: store sni in `snis` |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = { |
| cert = ssl_cert, key = ssl_key, |
| snis = {"*.foo.com", "bar.com"}, |
| } |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "snis": ["*.foo.com", "bar.com"] |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 9: store exptime |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = { |
| cert = ssl_cert, key = ssl_key, |
| sni = "bar.com", |
| exptime = 1588262400 + 60 * 60 * 24 * 365, |
| } |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "bar.com", |
| "exptime": 1619798400 |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 10: string id |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} |
| |
| local code, body = t.test('/apisix/admin/ssl/a-b-c-ABC_0123', |
| ngx.HTTP_PUT, |
| core.json.encode(data) |
| ) |
| if code > 300 then |
| ngx.status = code |
| end |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 11: string id(delete) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} |
| |
| local code, body = t.test('/apisix/admin/ssl/a-b-c-ABC_0123', |
| ngx.HTTP_DELETE |
| ) |
| if code > 300 then |
| ngx.status = code |
| end |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 12: invalid id |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} |
| |
| local code, body = t.test('/apisix/admin/ssl/*invalid', |
| ngx.HTTP_PUT, |
| core.json.encode(data) |
| ) |
| if code > 300 then |
| ngx.status = code |
| end |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- error_code: 400 |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 13: set ssl with multicerts(id: 1) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local ssl_ecc_cert = t.read_file("t/certs/apisix_ecc.crt") |
| local ssl_ecc_key = t.read_file("t/certs/apisix_ecc.key") |
| local data = { |
| cert = ssl_cert, |
| key = ssl_key, |
| sni = "test.com", |
| certs = {ssl_ecc_cert}, |
| keys = {ssl_ecc_key} |
| } |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com" |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 14: mismatched certs and keys |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_ecc_cert = t.read_file("t/certs/apisix_ecc.crt") |
| |
| local data = { |
| sni = "test.com", |
| certs = { ssl_ecc_cert }, |
| keys = {}, |
| } |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com" |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.print(body) |
| } |
| } |
| --- request |
| GET /t |
| --- error_code: 400 |
| --- response_body |
| {"error_msg":"invalid configuration: value should match only one schema, but matches none"} |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 15: set ssl(with labels) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com", labels = { version = "v2", build = "16", env = "production"}} |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com", |
| "labels": { |
| "version": "v2", |
| "build": "16", |
| "env": "production" |
| } |
| }, |
| |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 16: invalid format of label value: set ssl |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com", labels = { env = {"production", "release"}}} |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com", |
| "labels": { |
| "env": ["production", "release"] |
| } |
| }, |
| |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.print(body) |
| } |
| } |
| --- request |
| GET /t |
| --- error_code: 400 |
| --- response_body |
| {"error_msg":"invalid configuration: property \"labels\" validation failed: failed to validate env (matching \".*\"): wrong type: expected string, got table"} |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 17: create ssl with manage fields(id: 1) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = { |
| cert = ssl_cert, |
| key = ssl_key, |
| sni = "test.com", |
| create_time = 1602883670, |
| update_time = 1602893670, |
| validity_start = 1602873670, |
| validity_end = 1603893670 |
| } |
| |
| local code, body = t.test('/apisix/admin/ssl/1', |
| ngx.HTTP_PUT, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com", |
| "create_time": 1602883670, |
| "update_time": 1602893670, |
| "validity_start": 1602873670, |
| "validity_end": 1603893670 |
| }, |
| "key": "/apisix/ssl/1" |
| }, |
| "action": "set" |
| }]] |
| ) |
| |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 18: delete test ssl(id: 1) |
| --- config |
| location /t { |
| content_by_lua_block { |
| local t = require("lib.test_admin").test |
| local code, message = t('/apisix/admin/ssl/1', |
| ngx.HTTP_DELETE, |
| nil, |
| [[{ |
| "action": "delete" |
| }]] |
| ) |
| ngx.say("[delete] code: ", code, " message: ", message) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| [delete] code: 200 message: passed |
| --- no_error_log |
| [error] |
| |
| |
| |
| === TEST 19: create/patch ssl |
| --- config |
| location /t { |
| content_by_lua_block { |
| local core = require("apisix.core") |
| local etcd = require("apisix.core.etcd") |
| local t = require("lib.test_admin") |
| |
| local ssl_cert = t.read_file("t/certs/apisix.crt") |
| local ssl_key = t.read_file("t/certs/apisix.key") |
| local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} |
| |
| local code, body, res = t.test('/apisix/admin/ssl', |
| ngx.HTTP_POST, |
| core.json.encode(data), |
| [[{ |
| "node": { |
| "value": { |
| "sni": "test.com" |
| } |
| }, |
| "action": "create" |
| }]] |
| ) |
| |
| if code ~= 200 then |
| ngx.status = code |
| ngx.say(body) |
| return |
| end |
| |
| local id = string.sub(res.node.key, #"/apisix/ssl/" + 1) |
| local res = assert(etcd.get('/ssl/' .. id)) |
| local prev_create_time = res.body.node.value.create_time |
| assert(prev_create_time ~= nil, "create_time is nil") |
| local update_time = res.body.node.value.update_time |
| assert(update_time ~= nil, "update_time is nil") |
| |
| local code, body = t.test('/apisix/admin/ssl/' .. id, |
| ngx.HTTP_PATCH, |
| core.json.encode({create_time = 0, update_time = 1}) |
| ) |
| |
| if code ~= 201 then |
| ngx.status = code |
| ngx.say(body) |
| return |
| end |
| |
| local res = assert(etcd.get('/ssl/' .. id)) |
| local create_time = res.body.node.value.create_time |
| assert(create_time == 0, "create_time mismatched") |
| local update_time = res.body.node.value.update_time |
| assert(update_time == 1, "update_time mismatched") |
| |
| -- clean up |
| local code, body = t.test('/apisix/admin/ssl/' .. id, |
| ngx.HTTP_DELETE |
| ) |
| ngx.status = code |
| ngx.say(body) |
| } |
| } |
| --- request |
| GET /t |
| --- response_body |
| passed |
| --- no_error_log |
| [error] |
