| <testcase> |
| <info> |
| <keywords> |
| HTTP |
| HTTP proxy |
| HSTS |
| trailing-dot |
| </keywords> |
| </info> |
| |
| <reply> |
| |
| # we use this as response to a CONNECT |
| <connect nocheck="yes"> |
| HTTP/1.1 403 not OK at all
|
| Date: Tue, 09 Nov 2010 14:49:00 GMT
|
| Server: test-server/fake
|
| Content-Length: 6
|
| Connection: close
|
| Funny-head: yesyes
|
|
|
| -foo- |
| </connect> |
| </reply> |
| |
| <client> |
| <server> |
| http |
| </server> |
| <features> |
| HSTS |
| proxy |
| https |
| </features> |
| |
| # no trailing dot in the file only in the URL |
| <file name="%LOGDIR/input%TESTNUMBER"> |
| this.hsts.example "99991001 04:47:41" |
| </file> |
| |
| <name> |
| HSTS with trailing-dot host name in URL but none in hsts file |
| </name> |
| <command> |
| -x http://%HOSTIP:%HTTPPORT http://this.hsts.example./%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER -w '%{url_effective}\n' |
| </command> |
| </client> |
| |
| <verify> |
| # we let it CONNECT to the server to confirm HSTS but deny from there |
| <protocol> |
| CONNECT this.hsts.example.:443 HTTP/1.1
|
| Host: this.hsts.example.:443
|
| User-Agent: curl/%VERSION
|
| Proxy-Connection: Keep-Alive
|
|
|
| </protocol> |
| <stdout> |
| HTTP/1.1 403 not OK at all
|
| Date: Tue, 09 Nov 2010 14:49:00 GMT
|
| Server: test-server/fake
|
| Content-Length: 6
|
| Connection: close
|
| Funny-head: yesyes
|
|
|
| https://this.hsts.example./%TESTNUMBER |
| </stdout> |
| # Proxy CONNECT aborted |
| <errorcode> |
| 56 |
| </errorcode> |
| </verify> |
| </testcase> |
