summaryrefslogtreecommitdiff
path: root/regress/usr.sbin/syslogd/args-client-tls-cert.pl
blob: 38ba81ff016b91854ca6cf300da189ae546b78db (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
# The syslogd listens on localhost TLS socket with client verification.
# The client connects with a client certificate and writes a message.
# The syslogd writes it into a file and through a pipe.
# The syslogd passes it via UDP to the loghost.
# The server receives the message on its UDP socket.
# Find the message in client, file, pipe, syslogd, server log.
# Check that the syslogd accepts client.

use strict;
use warnings;
use Socket;

our %args = (
    client => {
	connect => { domain => AF_UNSPEC, proto => "tls", addr => "localhost",
	    port => 6514 },
	sslcert => "client.crt",
	sslkey => "client.key",
	loggrep => {
	    qr/connect sock: (127.0.0.1|::1) \d+/ => 1,
	    get_testgrep() => 1,
	},
    },
    syslogd => {
	options => ["-S", "localhost", "-K", "ca.crt"],
	ktrace => {
	    qr{NAMI  "ca.crt"} => 1,
	},
	loggrep => {
	    qr{Server CAfile ca.crt} => 1,
	    qr{tls logger .* accepted} => 1,
	},
    },
);

1;