12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061 |
- <testcase>
- <info>
- <keywords>
- HTTPS
- HTTP GET
- PEM certificate
- </keywords>
- </info>
- #
- # Server-side
- <reply>
- <data>
- HTTP/1.1 200 OK
- Date: Tue, 09 Nov 2010 14:49:00 GMT
- Server: test-server/fake
- Content-Length: 7
- MooMoo
- </data>
- </reply>
- #
- # Client-side
- <client>
- <features>
- SSL
- SSLpinning
- Schannel
- </features>
- <server>
- https Server-localhost-sv.pem
- </server>
- <name>
- simple HTTPS GET with base64-sha256 public key pinning (Schannel variant)
- </name>
- <setenv>
- # This test is pointless if we're not using the schannel backend
- CURL_SSL_BACKEND=schannel
- </setenv>
- <command>
- --cacert %SRCDIR/certs/EdelCurlRoot-ca.crt --pinnedpubkey sha256//AAUDLk4c98xcFUDvA9i/MnA9HuO03IPi15r+Cx9OXnc= --ssl-revoke-best-effort https://localhost:%HTTPSPORT/%TESTNUMBER
- </command>
- # Ensure that we're running on localhost because we're checking the host name
- <precheck>
- perl -e "print 'Test requires default test server host' if ( '%HOSTIP' ne '127.0.0.1' );"
- </precheck>
- </client>
- #
- # Verify data after the test has been "shot"
- <verify>
- <protocol>
- GET /%TESTNUMBER HTTP/1.1
- Host: localhost:%HTTPSPORT
- User-Agent: curl/%VERSION
- Accept: */*
- </protocol>
- </verify>
- </testcase>
|