Commit Graph

887 Commits

Author SHA1 Message Date
Thales Macedo Garitezi a92a68c1e0 fix(ocsp): ensure request path is URL encoded (v4.4)
Fixes https://emqx.atlassian.net/browse/EMQX-10624
2023-07-26 09:19:36 -03:00
Shawn 414f6af663 chore: sync some code from ee 2023-06-01 00:26:40 +08:00
Shawn d6282e9156 feat: configurable TCP keepalive 2023-05-29 17:48:03 +08:00
William Yang 9c76bd2c4b feat(tls-partial-chains): update schema 2023-05-23 09:10:04 +02:00
William Yang dfabc7ca72 chore: improve coverage 2023-05-12 18:13:21 +02:00
William Yang 64955e9083 test(tls-keyusage): add some comments 2023-05-12 11:36:56 +02:00
William Yang 7346dfe510 refactor: verify_fun_peer_extKeyUsage/3 2023-05-12 11:36:56 +02:00
William Yang 5fa060a43c feat: enhanced tls handshake 2023-05-12 11:36:56 +02:00
William Yang 285d3dabc7 feat(tls-partial-chain): support CAcert renewal
The listener could support two versions of CAcerts if partial_chain is set to `two_cacerts_from_cacertfile`
2023-05-09 17:00:32 +02:00
William Yang 151176a6be test(tls-partial-chain): add more tests 2023-05-09 17:00:32 +02:00
William Yang 90efea4765 fix(test): sign CSR2 2023-05-09 17:00:32 +02:00
William Yang 6d0a76805a feat(tls-partial-chains): error handling for invalid cacertfile 2023-05-09 17:00:32 +02:00
William Yang 30cccab387 chore: review comments 2023-05-09 17:00:32 +02:00
William Yang c3430b8883 feat(tls-partial-chain): just return trusted CA. 2023-05-09 17:00:32 +02:00
William Yang 8503d3c6dd test(tls-partial-chains): renewed intermediate_cacert 2023-05-09 17:00:32 +02:00
William Yang ea35b20035 test(tls): test refactoring 2023-05-09 17:00:32 +02:00
William Yang a18018bee0 feat(tls-partial-chain): add partial_chain support for TLS listeners 2023-05-09 16:05:49 +02:00
zhongwencool 5b898d2f7a test: check plugins's enabled/disabled 2023-04-21 18:22:18 +08:00
zhongwencool a3e263676a fix: ensure default_plugins/0 is the same as loaded_plugins.tmpl. 2023-04-21 18:20:32 +08:00
Xinyu Liu 4c197548ee
Merge pull request #10221 from terry-xiaoyu/remove-peercert-from-conninfo
chore: remove peercert from the state of connection processes
2023-03-27 09:23:17 +08:00
Shawn 4142a47e66 chore: remove peercert from the state of connection processes 2023-03-27 09:22:46 +08:00
Shawn 2e50985f35 fix: update testcase t_discard_session_race 2023-03-24 11:40:36 +08:00
Shawn 071162ed4c chore: add a testcase for subscribe non-utf8 topics 2023-03-23 18:25:58 +08:00
Shawn 753f70bab8 chore: final EMQ X -> EMQX 2023-03-09 01:58:40 +08:00
Shawn 05d14119fa fix: keep v4.4 files sync with e4.4 2023-02-13 13:08:22 +08:00
firest d4df2ddf25 feat(banned): session will be kicked when client is banned by `clientid` 2023-02-03 15:32:42 +08:00
firest 3973fff23f fix: the exclusive topics aren't removed when the session has already been cleaned 2023-02-01 17:23:53 +08:00
Thales Macedo Garitezi cac3f44cdc
Merge pull request #9744 from thalesmg/test-crl-revoke-then-refresh-v44
test(crl): add test case for revoke-then-refresh (v4.4)
2023-01-13 18:14:55 -03:00
Thales Macedo Garitezi f08aa9f5f5 test(crl): add test case for revoke-then-refresh (v4.4)
Investigation for https://github.com/emqx/emqx/issues/9732.

Apparently, there is no problem if a CRL is cached without
revocations, a client cert is revoked, and later the CRL is refreshed.
The test case indicates that the same client can at first connect to
the server and later is denied connection because the CRL was
refreshed.

Also, we take the opportunity in this PR to refresh the test
certificate and CRL files which would expire in June 2023.
2023-01-12 11:12:22 -03:00
JimMoen 7b76982be9
test: fix a disturbed test environment `$mqtt_sub_caps` 2023-01-12 11:12:49 +08:00
Thales Macedo Garitezi 4b8d4b3583 test: fix hang when calling `ct_slave:stop` on a `slave` started node
Some tests use the `slave` module for better readability.  But, when
shutting those nodes down, if one uses `ct_slave` on them, they will
hang.  This'll make CT wait until the timetrap (default 30 min) before
failing `end_per_testcase`.
2023-01-05 15:51:54 -03:00
Zaiming (Stone) Shi 14ba75502f chore: update copyright year 2023-01-02 14:54:38 +01:00
Zaiming (Stone) Shi 1f9b2a7e69 Merge remote-tracking branch 'origin/release-v44' into main-v4.4 2022-12-29 11:21:26 +01:00
Zaiming (Stone) Shi 2662c52a88 chore: sync test/emqx_client_SUITE.erl from ee to ce 2022-12-28 14:37:23 +01:00
Zaiming (Stone) Shi 351b1ce1a1 test: restore boot_modules to all in all SUITEs which change it 2022-12-22 12:03:03 +01:00
Zaiming (Stone) Shi 2f23f2708e test: ensure all listeners started 2022-12-22 11:57:31 +01:00
Zaiming (Stone) Shi d891197256 feat: add emqx_misc:safe_io_device/0 2022-12-21 19:59:34 +01:00
Thales Macedo Garitezi 8d20c5a00c test(flaky): fix flaky test
```
%%% emqx_crl_cache_SUITE ==> t_empty_cache: FAILED
%%% emqx_crl_cache_SUITE ==> {{badmatch,{error,econnrefused}},
 [{emqx_crl_cache_SUITE,t_empty_cache,1,
                        [{file,"/home/thales/dev/emqx/emqx2/test/emqx_crl_cache_SUITE.erl"},
                         {line,450}]},
  {test_server,ts_tc,3,[{file,"test_server.erl"},{line,1783}]},
  {test_server,run_test_case_eval1,6,[{file,"test_server.erl"},{line,1292}]},
  {test_server,run_test_case_eval,9,[{file,"test_server.erl"},{line,1224}]}]}
```
2022-12-07 11:32:54 -03:00
JimMoen 97bfe359d1
chore: fix typo 2022-12-07 16:01:33 +08:00
JimMoen fe0f2bc4e7
test(session): ensure 'message.dropped' hook ran with named reason 2022-12-07 16:01:33 +08:00
Zaiming (Stone) Shi 71299a2bcf Merge remote-tracking branch 'origin/main-v4.3' into main-v4.4 2022-11-28 10:02:29 +01:00
Zaiming (Stone) Shi 027c05af99 test(emqx_channel): fix two flaky tests 2022-11-27 13:15:06 +01:00
Thales Macedo Garitezi 5df513f277 refactor: flatten crl_cache config namespace into root 2022-11-14 09:57:04 -03:00
Thales Macedo Garitezi 0ca7492515 feat(crl): add refresh config API 2022-11-11 12:21:03 -03:00
Thales Macedo Garitezi c9e05acb4c fix(crl): make http timeout global for all listeners
We make the CRL HTTP timeout the same for all listeners for simplicity
of understanding and implementation.
2022-11-11 10:50:47 -03:00
Thales Macedo Garitezi 445e176898 refactor(crl): rename `s/enable_crl_cache/enable_crl_check/g` 2022-11-10 16:26:06 -03:00
Zaiming (Stone) Shi fb81c35cd7 refactor: introduce emqx_const_v1 for immutable anonymous funs 2022-11-08 17:00:57 -03:00
Thales Macedo Garitezi 2b30f95dee
test(ocsp): another fix for macos openssl versions
Co-authored-by: Ivan Dyachkov <dev@dyachkov.org>
2022-11-08 16:45:03 -03:00
Thales Macedo Garitezi 2dcecafce6 test(fix): account for non-openssl programs 2022-11-08 15:54:41 -03:00
Thales Macedo Garitezi bb249834f7 test(ocsp): add more tests 2022-11-08 15:46:16 -03:00