Projects
Mega:23.03
curl
_service:tar_scm:backport-0005-CVE-2023-23914-C...
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _service:tar_scm:backport-0005-CVE-2023-23914-CVE-2023-23915.patch of Package curl
From ea5aaaa5ede53819f8bc7ae767fc2d13d3704d37 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg <daniel@haxx.se> Date: Tue, 27 Dec 2022 11:50:23 +0100 Subject: [PATCH] test446: verify hsts with two URLs Conflict: NA Reference: https://github.com/curl/curl/commit/ea5aaaa5ede53819f8bc7ae767fc2d13d3704d37 --- tests/data/Makefile.inc | 2 +- tests/data/test446 | 84 +++++++++++++++++++++++++++++++++++++++++ 2 files changed, 85 insertions(+), 1 deletion(-) create mode 100644 tests/data/test446 diff --git a/tests/data/Makefile.inc b/tests/data/Makefile.inc index 3a6356bd122bc..fe1bb1c74c2ab 100644 --- a/tests/data/Makefile.inc +++ b/tests/data/Makefile.inc @@ -71,7 +71,7 @@ test408 test409 test410 test411 test412 test413 test414 test415 test416 \ \ test430 test431 test432 test433 test434 test435 test436 \ \ -test440 test441 test442 test443 test444 test445 \ +test440 test441 test442 test443 test444 test445 test446 \ \ test490 test491 test492 test493 test494 test495 test496 \ \ diff --git a/tests/data/test446 b/tests/data/test446 new file mode 100644 index 0000000000000..0e2dfdcfe33b6 --- /dev/null +++ b/tests/data/test446 @@ -0,0 +1,84 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<testcase> +<info> +<keywords> +HTTP +HTTP proxy +HSTS +trailing-dot +</keywords> +</info> + +<reply> + +# we use this as response to a CONNECT +<connect nocheck="yes"> +HTTP/1.1 200 OK + +</connect> +<data crlf="yes"> +HTTP/1.1 200 OK +Content-Length: 6 +Strict-Transport-Security: max-age=604800 + +-foo- +</data> +<data2 crlf="yes"> +HTTP/1.1 200 OK +Content-Length: 6 +Strict-Transport-Security: max-age=6048000 + +-baa- +</data2> +</reply> + +<client> +<server> +https +http-proxy +</server> +<features> +HSTS +proxy +https +debug +</features> +<setenv> +CURL_HSTS_HTTP=yes +CURL_TIME=2000000000 +</setenv> + +<name> +HSTS with two URLs +</name> +<command> +-x http://%HOSTIP:%PROXYPORT --hsts log/hsts%TESTNUMBER http://this.hsts.example./%TESTNUMBER http://another.example.com/%TESTNUMBER0002 +</command> +</client> + +<verify> +# we let it CONNECT to the server to confirm HSTS but deny from there +<proxy crlf="yes"> +GET http://this.hsts.example./%TESTNUMBER HTTP/1.1 +Host: this.hsts.example. +User-Agent: curl/%VERSION +Accept: */* +Proxy-Connection: Keep-Alive + +GET http://another.example.com/%TESTNUMBER0002 HTTP/1.1 +Host: another.example.com +User-Agent: curl/%VERSION +Accept: */* +Proxy-Connection: Keep-Alive + +</proxy> + +<file name="log/hsts%TESTNUMBER" mode="text"> +# Your HSTS cache. https://curl.se/docs/hsts.html +# This file was generated by libcurl! Edit at your own risk. +this.hsts.example "20330525 03:33:20" +another.example.com "20330727 03:33:20" +</file> + +</verify> +</testcase>
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.
浙ICP备2022010568号-2