a035ebe8d6
Make it look closer to standard Transport.DialTLS, because it's good to be like standard things. This also allows usage of thrid party TLS stacks, enabling https://github.com/refraction-networking/utls.Roller integration.
96 lines
3 KiB
Go
96 lines
3 KiB
Go
// tests ./httpclient/ but is in root as it needs access to test files in root
|
|
package forwardproxy
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"net"
|
|
"sync"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/caddyserver/forwardproxy/httpclient"
|
|
)
|
|
|
|
func TestHttpClient(t *testing.T) {
|
|
_test := func(proxyUrl string) {
|
|
for _, httpProxyVer := range testHttpProxyVersions {
|
|
for _, httpTargetVer := range testHttpTargetVersions {
|
|
for _, resource := range testResources {
|
|
dialer, err := httpclient.NewHTTPConnectDialer(proxyUrl)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
dialer.DialTLS = func(network string, address string) (net.Conn, string, error) {
|
|
conn, err := tls.Dial(network, address, &tls.Config{InsecureSkipVerify: true,
|
|
NextProtos: []string{httpVersionToAlpn[httpProxyVer]}})
|
|
if err != nil {
|
|
return nil, "", err
|
|
}
|
|
return conn, conn.ConnectionState().NegotiatedProtocol, nil
|
|
}
|
|
conn, err := dialer.Dial("tcp", caddyTestTarget.addr)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
response, err := getResourceViaProxyConn(conn, caddyTestTarget.addr, resource, httpTargetVer, credentialsCorrect)
|
|
if err != nil {
|
|
t.Fatal(httpProxyVer, httpTargetVer, err)
|
|
} else if err = responseExpected(response, caddyTestTarget.contents[resource]); err != nil {
|
|
t.Fatal(httpProxyVer, httpTargetVer, err)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
_test("https://" + credentialsCorrectPlain + "@" + caddyForwardProxyAuth.addr)
|
|
_test("http://" + credentialsCorrectPlain + "@" + caddyHTTPForwardProxyAuth.addr)
|
|
}
|
|
|
|
func TestHttpClientH2Multiplexing(t *testing.T) {
|
|
// doesn't actually confirm that it is multiplexed, just that it doesn't break things
|
|
// but it was manually inspected in Wireshark when this code was committed
|
|
httpProxyVer := "HTTP/2.0"
|
|
httpTargetVer := "HTTP/1.1"
|
|
|
|
dialer, err := httpclient.NewHTTPConnectDialer("https://" + credentialsCorrectPlain + "@" + caddyForwardProxyAuth.addr)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
dialer.DialTLS = func(network string, address string) (net.Conn, string, error) {
|
|
conn, err := tls.Dial(network, address, &tls.Config{InsecureSkipVerify: true,
|
|
NextProtos: []string{httpVersionToAlpn[httpProxyVer]}})
|
|
if err != nil {
|
|
return nil, "", err
|
|
}
|
|
return conn, conn.ConnectionState().NegotiatedProtocol, nil
|
|
}
|
|
|
|
retries := 20
|
|
sleepInterval := time.Millisecond * 100
|
|
|
|
var wg sync.WaitGroup
|
|
wg.Add(retries + 1) // + for one serial launch
|
|
_test := func() {
|
|
defer wg.Done()
|
|
for _, resource := range testResources {
|
|
conn, err := dialer.Dial("tcp", caddyTestTarget.addr)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
response, err := getResourceViaProxyConn(conn, caddyTestTarget.addr, resource, httpTargetVer, credentialsCorrect)
|
|
if err != nil {
|
|
t.Fatal(httpProxyVer, httpTargetVer, err)
|
|
} else if err = responseExpected(response, caddyTestTarget.contents[resource]); err != nil {
|
|
t.Fatal(httpProxyVer, httpTargetVer, err)
|
|
}
|
|
}
|
|
}
|
|
|
|
_test() // do serially at least once
|
|
|
|
for i := 0; i < retries; i++ {
|
|
go _test()
|
|
time.Sleep(sleepInterval)
|
|
}
|
|
}
|