diff options
author | Andrei Zeliankou <zelenkov@nginx.com> | 2021-07-23 15:37:03 +0100 |
---|---|---|
committer | Andrei Zeliankou <zelenkov@nginx.com> | 2021-07-23 15:37:03 +0100 |
commit | 960ffc99677b8451a3cc4ea7bc053b3c123e4e1b (patch) | |
tree | 84b042193040e7c5990f8ac20cbc9305e562a8f3 | |
parent | f965e358b6ca878ead629dffb2f0df57230995ea (diff) | |
download | unit-960ffc99677b8451a3cc4ea7bc053b3c123e4e1b.tar.gz unit-960ffc99677b8451a3cc4ea7bc053b3c123e4e1b.tar.bz2 |
Tests: added SNI test without hostname in request.
-rw-r--r-- | test/test_tls_sni.py | 20 | ||||
-rw-r--r-- | test/unit/http.py | 2 |
2 files changed, 21 insertions, 1 deletions
diff --git a/test/test_tls_sni.py b/test/test_tls_sni.py index 2e5424e2..eba6140a 100644 --- a/test/test_tls_sni.py +++ b/test/test_tls_sni.py @@ -168,6 +168,26 @@ basicConstraints = critical,CA:TRUE""" self.check_cert('alt2.example.com', bundles['example.com']['subj']) self.check_cert('blah', bundles['default']['subj']) + def test_tls_sni_no_hostname(self): + bundles = { + "localhost.com": {"subj": "localhost.com", "alt_names": []}, + "example.com": { + "subj": "example.com", + "alt_names": ["example.com"], + }, + } + self.config_bundles(bundles) + self.add_tls(["localhost.com", "example.com"]) + + resp, sock = self.get_ssl( + headers={'Content-Length': '0', 'Connection': 'close'}, start=True, + ) + assert resp['status'] == 200 + assert ( + sock.getpeercert()['subject'][0][0][1] + == bundles['localhost.com']['subj'] + ) + def test_tls_sni_upper_case(self): bundles = { "localhost.com": {"subj": "LOCALHOST.COM", "alt_names": []}, diff --git a/test/unit/http.py b/test/unit/http.py index 797b7681..dcfcd232 100644 --- a/test/unit/http.py +++ b/test/unit/http.py @@ -45,7 +45,7 @@ class TestHTTP: sock.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1) if 'wrapper' in kwargs: - server_hostname = headers.get('Host', 'localhost') + server_hostname = headers.get('Host', None) sock = kwargs['wrapper'](sock, server_hostname=server_hostname) connect_args = addr if sock_type == 'unix' else (addr, port) |