Replace deprecated IO::Socket::INET6 with IO::Socket::IP.

Set TCP option NODELAY in relayd and in client and server. This
speeds up transferring data and avoids to run into timeout. The
test was broken since switching to TLS 1.3 if running relayd on a
rem

Set TCP option NODELAY in relayd and in client and server. This
speeds up transferring data and avoids to run into timeout. The
test was broken since switching to TLS 1.3 if running relayd on a
remote machine. With no delay in tcp, https-multi using TLS 1.3
is slightly faster than TLS 1.2 on i386.

show more ...

Put some padding in Perl pack of struct timeval. On armv7 struct
timeval is 16 bytes, on i386 only 12 bytes were needed. The
additional space makes setsockopt(2) succeed in armv7 regress.
from Mori

Put some padding in Perl pack of struct timeval. On armv7 struct
timeval is 16 bytes, on i386 only 12 bytes were needed. The
additional space makes setsockopt(2) succeed in armv7 regress.
from Moritz Buhl

show more ...

Mark the IO::Socket::SSL server socket with SSL_server to avoid
OCSP error messages.

Call setsockopt(2) before listen(2) in relayd tests and adjust some
error messages.

Make relayd test slow-consumer more reliable. Set SO_SNDTIMEO
sockopt correctly with Perl pack on i386. Make it possible to grep
in each others client and server logfile. Client does not simply
sl

Make relayd test slow-consumer more reliable. Set SO_SNDTIMEO
sockopt correctly with Perl pack on i386. Make it possible to grep
in each others client and server logfile. Client does not simply
sleep but waits for short write at server.

show more ...

add relayd regression test args-http-slow-consumer.pl
ok reyk@, bluhm@

Add tests for relayd TLS inspection with plain SSL and HTTPS.

Create CA and certificates for TLS tests consistently. Better
logging of SSL errors. Do not import unneeded Socket constants.

Implement non-persistent connections in a cleaner way. Every test
that offers multiple requets per HTTP connection is run twice.
First all requests are run over a single TCP connection. Then for
ea

Implement non-persistent connections in a cleaner way. Every test
that offers multiple requets per HTTP connection is run twice.
First all requests are run over a single TCP connection. Then for
each requests a separate TCP connection is established. If a
requests during a persistent connection fails, a reconnect is done
as relayd cancels the whole connection. This allows stricter tests
for filters.
OK reyk@

show more ...

Update and extend the regress tests to use the new grammar of the
filtering rules. Some of the filenames are based on the old grammar,
we keep them for now and just update the contents to have a
bef

Update and extend the regress tests to use the new grammar of the
filtering rules. Some of the filenames are based on the old grammar,
we keep them for now and just update the contents to have a
before/after comparison of the features.

Most of the work was done by Andre de Oliveira (andre@)

OK bluhm@ benno@

show more ...

Set SSL_VERIFY_NONE as the regression test uses self-signed untrusted
certificates. Newer IO::Socket::SSL versions verify by default.

Sync relayd tests with socket splicing tests.

Allow the relayd regression tests to run the relayd on a different
host from client and server. Real TCP connections not running on
localhost provide a different timing uncovering more bugs.

Add regression tests for relaying connections through relayd. This
is useful to ensure that socket splicing is working correctly.
Server, relayd, client with different config are started for each
su

Add regression tests for relaying connections through relayd. This
is useful to ensure that socket splicing is working correctly.
Server, relayd, client with different config are started for each
subtest. Data must pass unmodified.

show more ...