|
@@ -26,7 +26,6 @@ import (
|
|
|
"github.com/coreos/etcd/etcdserver/api/v3rpc/rpctypes"
|
|
"github.com/coreos/etcd/etcdserver/api/v3rpc/rpctypes"
|
|
|
pb "github.com/coreos/etcd/etcdserver/etcdserverpb"
|
|
pb "github.com/coreos/etcd/etcdserver/etcdserverpb"
|
|
|
"github.com/coreos/etcd/pkg/testutil"
|
|
"github.com/coreos/etcd/pkg/testutil"
|
|
|
- "github.com/coreos/etcd/version"
|
|
|
|
|
|
|
|
|
|
"github.com/grpc-ecosystem/grpc-gateway/runtime"
|
|
"github.com/grpc-ecosystem/grpc-gateway/runtime"
|
|
|
)
|
|
)
|
|
@@ -350,48 +349,6 @@ func testV3CurlResignMissiongLeaderKey(cx ctlCtx) {
|
|
|
}
|
|
}
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
-func TestV3CurlCipherSuitesValid(t *testing.T) { testV3CurlCipherSuites(t, true) }
|
|
|
|
|
-func TestV3CurlCipherSuitesMismatch(t *testing.T) { testV3CurlCipherSuites(t, false) }
|
|
|
|
|
-func testV3CurlCipherSuites(t *testing.T, valid bool) {
|
|
|
|
|
- cc := configClientTLS
|
|
|
|
|
- cc.clusterSize = 1
|
|
|
|
|
- cc.cipherSuites = []string{
|
|
|
|
|
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
|
|
|
|
|
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
|
|
|
|
|
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
|
|
|
|
|
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
|
|
|
|
|
- "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
|
|
|
|
|
- "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
|
|
|
|
|
- }
|
|
|
|
|
- testFunc := cipherSuiteTestValid
|
|
|
|
|
- if !valid {
|
|
|
|
|
- testFunc = cipherSuiteTestMismatch
|
|
|
|
|
- }
|
|
|
|
|
- testCtl(t, testFunc, withCfg(cc))
|
|
|
|
|
-}
|
|
|
|
|
-
|
|
|
|
|
-func cipherSuiteTestValid(cx ctlCtx) {
|
|
|
|
|
- if err := cURLGet(cx.epc, cURLReq{
|
|
|
|
|
- endpoint: "/metrics",
|
|
|
|
|
- expected: fmt.Sprintf(`etcd_server_version{server_version="%s"} 1`, version.Version),
|
|
|
|
|
- metricsURLScheme: cx.cfg.metricsURLScheme,
|
|
|
|
|
- ciphers: "ECDHE-RSA-AES128-GCM-SHA256", // TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
|
|
|
- }); err != nil {
|
|
|
|
|
- cx.t.Fatalf("failed get with curl (%v)", err)
|
|
|
|
|
- }
|
|
|
|
|
-}
|
|
|
|
|
-
|
|
|
|
|
-func cipherSuiteTestMismatch(cx ctlCtx) {
|
|
|
|
|
- if err := cURLGet(cx.epc, cURLReq{
|
|
|
|
|
- endpoint: "/metrics",
|
|
|
|
|
- expected: "alert handshake failure",
|
|
|
|
|
- metricsURLScheme: cx.cfg.metricsURLScheme,
|
|
|
|
|
- ciphers: "ECDHE-RSA-DES-CBC3-SHA", // TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
|
|
|
|
|
- }); err != nil {
|
|
|
|
|
- cx.t.Fatalf("failed get with curl (%v)", err)
|
|
|
|
|
- }
|
|
|
|
|
-}
|
|
|
|
|
-
|
|
|
|
|
// to manually decode; JSON marshals integer fields with
|
|
// to manually decode; JSON marshals integer fields with
|
|
|
// string types, so can't unmarshal with epb.CampaignResponse
|
|
// string types, so can't unmarshal with epb.CampaignResponse
|
|
|
type campaignResponse struct {
|
|
type campaignResponse struct {
|