maskit opened a new pull request, #13717:
URL: https://github.com/apache/trafficserver/pull/13717
`proxy.config.ssl.server.session_ticket.number` had no coverage for a nonzero
value. Three autests set the record, but none assert its effect:
- `tls_session_reuse.test.py` sets it to 2 and 0, then counts only
`Reused, TLSv1.2` lines; TLS 1.2 does not use the ticket count.
- `tls_sni_ticket.test.py` counts `NewSessionTicket` messages, but every
expectation is driven by the `ssl_ticket_number` override in `sni.yaml`.
- `h3_session_ticket.test.py` sets it to 2 and asserts only that the QUIC
handshake completes.
This adds `tls_ticket_number.test.py`, which starts two ATS processes with no
`sni.yaml` and different non-default ticket counts, then counts the
`NewSessionTicket` messages each sends. Two distinct values mean an
implementation that ignores the record cannot satisfy both runs.
### Verification
Passes against both OpenSSL and BoringSSL. With `SSL_CTX_set_num_tickets()`
removed from `SSLMultiCertConfigLoader::_setup_session_ticket()`, both runs
fail, each observing the library default instead of the configured count.
Each
assertion was confirmed to fail independently, since AuTest skips remaining
runs once one fails.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
