| <?xml version="1.0" encoding="US-ASCII"?> |
| <testcase> |
| <info> |
| <keywords> |
| HTTP |
| HTTPS proxy |
| HSTS |
| trailing-dot |
| </keywords> |
| </info> |
| |
| <reply> |
| <data crlf="headers"> |
| HTTP/1.1 200 OK |
| Content-Length: 6 |
| Strict-Transport-Security: max-age=604800 |
| |
| -foo- |
| </data> |
| <data2 crlf="headers"> |
| HTTP/1.1 200 OK |
| Content-Length: 6 |
| Strict-Transport-Security: max-age=6048000 |
| |
| -baa- |
| </data2> |
| </reply> |
| |
| <client> |
| <server> |
| http |
| https-proxy |
| </server> |
| <features> |
| HSTS |
| proxy |
| http |
| </features> |
| <setenv> |
| </setenv> |
| |
| <name> |
| HSTS via https: proxy ignored for http: URLs |
| </name> |
| <command> |
| -x https://%HOSTIP:%HTTPSPROXYPORT --proxy-insecure --hsts %LOGDIR/hsts%TESTNUMBER http://this.hsts.example./%TESTNUMBER http://another.example.com/%TESTNUMBER0002 |
| </command> |
| </client> |
| |
| <verify> |
| <proxy crlf="headers"> |
| GET http://this.hsts.example./%TESTNUMBER HTTP/1.1 |
| Host: this.hsts.example. |
| User-Agent: curl/%VERSION |
| Accept: */* |
| Proxy-Connection: Keep-Alive |
| |
| GET http://another.example.com/%TESTNUMBER0002 HTTP/1.1 |
| Host: another.example.com |
| User-Agent: curl/%VERSION |
| Accept: */* |
| Proxy-Connection: Keep-Alive |
| |
| </proxy> |
| |
| # The saved HSTS file must be empty as the HSTS headers were not secured |
| <file name="%LOGDIR/hsts%TESTNUMBER" mode="text"> |
| # Your HSTS cache. https://curl.se/docs/hsts.html |
| # This file was generated by libcurl! Edit at your own risk. |
| </file> |
| |
| </verify> |
| </testcase> |