Tests: basic ALPN tests in the mail module.
diff --git a/mail_ssl.t b/mail_ssl.t index af29205..ad183f0 100644 --- a/mail_ssl.t +++ b/mail_ssl.t
@@ -33,8 +33,11 @@ }; plan(skip_all => 'Net::SSLeay not installed') if $@; +eval { exists &Net::SSLeay::P_alpn_selected or die; }; +plan(skip_all => 'Net::SSLeay with OpenSSL ALPN support required') if $@; + my $t = Test::Nginx->new()->has(qw/mail mail_ssl imap pop3 smtp/) - ->has_daemon('openssl')->plan(20); + ->has_daemon('openssl')->plan(22); $t->write_file_expand('nginx.conf', <<'EOF'); @@ -210,6 +213,17 @@ ($s, $ssl) = get_ssl_socket(8148); like(Net::SSLeay::dump_peer_certificate($ssl), qr/CN=inherits/, 'CN inner'); +# alpn + +ok(get_ssl_socket(8148, undef, ['imap']), 'alpn'); + +TODO: { +local $TODO = 'not yet' unless $t->has_version('1.21.4'); + +ok(!get_ssl_socket(8148, undef, ['unknown']), 'alpn rejected'); + +} + # starttls imap $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149)); @@ -291,13 +305,14 @@ ############################################################################### sub get_ssl_socket { - my ($port, $ses) = @_; + my ($port, $ses, $alpn) = @_; my $s = IO::Socket::INET->new('127.0.0.1:' . port($port)); my $ssl = Net::SSLeay::new($ctx) or die("Failed to create SSL $!"); Net::SSLeay::set_session($ssl, $ses) if defined $ses; + Net::SSLeay::set_alpn_protos($ssl, $alpn) if defined $alpn; Net::SSLeay::set_fd($ssl, fileno($s)); - Net::SSLeay::connect($ssl) or die("ssl connect"); + Net::SSLeay::connect($ssl) == 1 or return; return ($s, $ssl); }