# # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # use t::APISIX 'no_plan'; no_root_location(); run_tests; __DATA__ === TEST 1: set ssl(id: 1) --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "test.com" }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 2: get ssl(id: 1) --- config location /t { content_by_lua_block { local t = require("lib.test_admin").test local code, body = t('/apisix/admin/ssl/1', ngx.HTTP_GET, nil, [[{ "node": { "value": { "sni": "test.com", "key": null }, "key": "/apisix/ssl/1" }, "action": "get" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 3: delete ssl(id: 1) --- config location /t { content_by_lua_block { local t = require("lib.test_admin").test local code, message = t('/apisix/admin/ssl/1', ngx.HTTP_DELETE, nil, [[{ "action": "delete" }]] ) ngx.say("[delete] code: ", code, " message: ", message) } } --- request GET /t --- response_body [delete] code: 200 message: passed --- no_error_log [error] === TEST 4: delete ssl(id: 99999999999999) --- config location /t { content_by_lua_block { local t = require("lib.test_admin").test local code = t('/apisix/admin/ssl/99999999999999', ngx.HTTP_DELETE, nil, [[{ "action": "delete" }]] ) ngx.say("[delete] code: ", code) } } --- request GET /t --- response_body [delete] code: 404 --- no_error_log [error] === TEST 5: push ssl + delete --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "foo.com"} local code, message, res = t.test('/apisix/admin/ssl', ngx.HTTP_POST, core.json.encode(data), [[{ "node": { "value": { "sni": "foo.com" } }, "action": "create" }]] ) if code ~= 200 then ngx.status = code ngx.say(message) return end ngx.say("[push] code: ", code, " message: ", message) local id = string.sub(res.node.key, #"/apisix/ssl/" + 1) code, message = t.test('/apisix/admin/ssl/' .. id, ngx.HTTP_DELETE, nil, [[{ "action": "delete" }]] ) ngx.say("[delete] code: ", code, " message: ", message) } } --- request GET /t --- response_body [push] code: 200 message: passed [delete] code: 200 message: passed --- no_error_log [error] === TEST 6: missing certificate information --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {sni = "foo.com"} local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "foo.com" }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.print(body) } } --- request GET /t --- error_code: 400 --- response_body {"error_msg":"invalid configuration: value should match only one schema, but matches none"} --- no_error_log [error] === TEST 7: wildcard host name --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "*.foo.com"} local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "*.foo.com" }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 8: store sni in `snis` --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = { cert = ssl_cert, key = ssl_key, snis = {"*.foo.com", "bar.com"}, } local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "snis": ["*.foo.com", "bar.com"] }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 9: store exptime --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = { cert = ssl_cert, key = ssl_key, sni = "bar.com", exptime = 1588262400 + 60 * 60 * 24 * 365, } local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "bar.com", "exptime": 1619798400 }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 10: string id --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} local code, body = t.test('/apisix/admin/ssl/a-b-c-ABC_0123', ngx.HTTP_PUT, core.json.encode(data) ) if code > 300 then ngx.status = code end ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 11: string id(delete) --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} local code, body = t.test('/apisix/admin/ssl/a-b-c-ABC_0123', ngx.HTTP_DELETE ) if code > 300 then ngx.status = code end ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 12: invalid id --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "test.com"} local code, body = t.test('/apisix/admin/ssl/*invalid', ngx.HTTP_PUT, core.json.encode(data) ) if code > 300 then ngx.status = code end ngx.say(body) } } --- request GET /t --- error_code: 400 --- no_error_log [error] === TEST 13: set ssl with multicerts(id: 1) --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local ssl_ecc_cert = t.read_file("conf/cert/apisix_ecc.crt") local ssl_ecc_key = t.read_file("conf/cert/apisix_ecc.key") local data = { cert = ssl_cert, key = ssl_key, sni = "test.com", certs = {ssl_ecc_cert}, keys = {ssl_ecc_key} } local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "test.com" }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 14: mismatched certs and keys --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_ecc_cert = t.read_file("conf/cert/apisix_ecc.crt") local data = { sni = "test.com", certs = { ssl_ecc_cert }, keys = {}, } local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "test.com" }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.print(body) } } --- request GET /t --- error_code: 400 --- response_body {"error_msg":"invalid configuration: value should match only one schema, but matches none"} --- no_error_log [error] === TEST 15: set ssl(with labels) --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "test.com", labels = { version = "v2", build = "16", env = "production"}} local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "test.com", "labels": { "version": "v2", "build": "16", "env": "production" } }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.say(body) } } --- request GET /t --- response_body passed --- no_error_log [error] === TEST 16: invalid format of label value: set ssl --- config location /t { content_by_lua_block { local core = require("apisix.core") local t = require("lib.test_admin") local ssl_cert = t.read_file("conf/cert/apisix.crt") local ssl_key = t.read_file("conf/cert/apisix.key") local data = {cert = ssl_cert, key = ssl_key, sni = "test.com", labels = { env = {"production", "release"}}} local code, body = t.test('/apisix/admin/ssl/1', ngx.HTTP_PUT, core.json.encode(data), [[{ "node": { "value": { "sni": "test.com", "labels": { "env": ["production", "release"] } }, "key": "/apisix/ssl/1" }, "action": "set" }]] ) ngx.status = code ngx.print(body) } } --- request GET /t --- error_code: 400 --- response_body {"error_msg":"invalid configuration: property \"labels\" validation failed: failed to validate env (matching \".*\"): wrong type: expected string, got table"} --- no_error_log [error]