d1be5b5f9e
Support TLS >=1.2 only and strong cipher suites. Signed-off-by: Evgenii Stratonikov <evgeniy@nspcc.ru>
54 lines
1.2 KiB
Go
54 lines
1.2 KiB
Go
package grpcconfig
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/nspcc-dev/neofs-node/cmd/neofs-node/config"
|
|
configtest "github.com/nspcc-dev/neofs-node/cmd/neofs-node/config/test"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestGRPCSection(t *testing.T) {
|
|
t.Run("defaults", func(t *testing.T) {
|
|
require.Panics(t, func() {
|
|
IterateEndpoints(configtest.EmptyConfig(), nil)
|
|
})
|
|
})
|
|
|
|
const path = "../../../../config/example/node"
|
|
|
|
var fileConfigTest = func(c *config.Config) {
|
|
num := 0
|
|
|
|
IterateEndpoints(c, func(sc *Config) {
|
|
defer func() {
|
|
num++
|
|
}()
|
|
|
|
tls := sc.TLS()
|
|
|
|
switch num {
|
|
case 0:
|
|
require.Equal(t, "s01.neofs.devenv:8080", sc.Endpoint())
|
|
|
|
require.NotNil(t, tls)
|
|
require.Equal(t, "/path/to/cert", tls.CertificateFile())
|
|
require.Equal(t, "/path/to/key", tls.KeyFile())
|
|
require.False(t, tls.UseInsecureCrypto())
|
|
case 1:
|
|
require.Equal(t, "s02.neofs.devenv:8080", sc.Endpoint())
|
|
require.Nil(t, tls)
|
|
case 2:
|
|
require.Equal(t, "s03.neofs.devenv:8080", sc.Endpoint())
|
|
require.NotNil(t, tls)
|
|
require.True(t, tls.UseInsecureCrypto())
|
|
}
|
|
})
|
|
}
|
|
|
|
configtest.ForEachFileType(path, fileConfigTest)
|
|
|
|
t.Run("ENV", func(t *testing.T) {
|
|
configtest.ForEnvFileType(path, fileConfigTest)
|
|
})
|
|
}
|