e071084ebe
govulncheck / govulncheck (push) Has been cancelled
Lint / golangci-lint (push) Has been cancelled
Run Tests / Unit Tests (push) Has been cancelled
Run Tests / Etcd Integration Tests (push) Has been cancelled
Harness (E2E) / Harnesses (mock LLM) (push) Has been cancelled
Harness (E2E) / Provider harnesses (live LLM conformance) (push) Has been cancelled
104 lines
2.2 KiB
Go
104 lines
2.2 KiB
Go
package tls
|
|
|
|
import (
|
|
"os"
|
|
"testing"
|
|
)
|
|
|
|
func TestConfig(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
envVar string
|
|
envValue string
|
|
wantInsecure bool
|
|
description string
|
|
}{
|
|
{
|
|
name: "secure_by_default",
|
|
envVar: "",
|
|
envValue: "",
|
|
wantInsecure: false,
|
|
description: "v6: certificate verification is on by default",
|
|
},
|
|
{
|
|
name: "insecure_opt_out",
|
|
envVar: "MICRO_TLS_INSECURE",
|
|
envValue: "true",
|
|
wantInsecure: true,
|
|
description: "MICRO_TLS_INSECURE=true skips verification (dev/self-signed)",
|
|
},
|
|
{
|
|
name: "insecure_disabled_stays_secure",
|
|
envVar: "MICRO_TLS_INSECURE",
|
|
envValue: "false",
|
|
wantInsecure: false,
|
|
description: "MICRO_TLS_INSECURE=false stays secure",
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
// Clean up environment
|
|
os.Unsetenv("MICRO_TLS_SECURE")
|
|
os.Unsetenv("MICRO_TLS_INSECURE")
|
|
// Suppress warning in tests
|
|
os.Setenv("IN_TRAVIS_CI", "yes")
|
|
defer os.Unsetenv("IN_TRAVIS_CI")
|
|
|
|
// Set environment variable if specified
|
|
if tt.envVar != "" {
|
|
os.Setenv(tt.envVar, tt.envValue)
|
|
defer os.Unsetenv(tt.envVar)
|
|
}
|
|
|
|
config := Config()
|
|
|
|
if config == nil {
|
|
t.Fatal("Config() returned nil")
|
|
}
|
|
|
|
if config.InsecureSkipVerify != tt.wantInsecure {
|
|
t.Errorf("%s: InsecureSkipVerify = %v, want %v",
|
|
tt.description, config.InsecureSkipVerify, tt.wantInsecure)
|
|
}
|
|
|
|
// Verify MinVersion is set correctly
|
|
if config.MinVersion == 0 {
|
|
t.Error("MinVersion should be set")
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestSecureConfig(t *testing.T) {
|
|
config := SecureConfig()
|
|
|
|
if config == nil {
|
|
t.Fatal("SecureConfig() returned nil")
|
|
}
|
|
|
|
if config.InsecureSkipVerify {
|
|
t.Error("SecureConfig should have InsecureSkipVerify set to false")
|
|
}
|
|
|
|
if config.MinVersion == 0 {
|
|
t.Error("MinVersion should be set")
|
|
}
|
|
}
|
|
|
|
func TestInsecureConfig(t *testing.T) {
|
|
config := InsecureConfig()
|
|
|
|
if config == nil {
|
|
t.Fatal("InsecureConfig() returned nil")
|
|
}
|
|
|
|
if !config.InsecureSkipVerify {
|
|
t.Error("InsecureConfig should have InsecureSkipVerify set to true")
|
|
}
|
|
|
|
if config.MinVersion == 0 {
|
|
t.Error("MinVersion should be set")
|
|
}
|
|
}
|