Select TLS test crypto provider under workspace features

This commit is contained in:
ms2k 2026-07-17 04:06:56 +09:00
commit 3041257d78

View file

@ -78,6 +78,10 @@ fn ip(input: &str) -> IpAddr {
input.parse().expect("valid test address") input.parse().expect("valid test address")
} }
fn install_crypto_provider() {
let _ = rustls::crypto::ring::default_provider().install_default();
}
fn local_policy(port: u16, max_redirects: usize) -> remora_outbound::OutboundPolicy { fn local_policy(port: u16, max_redirects: usize) -> remora_outbound::OutboundPolicy {
OutboundPolicyBuilder::new() OutboundPolicyBuilder::new()
.allow_scheme_port("http", port) .allow_scheme_port("http", port)
@ -389,6 +393,7 @@ fn ambient_proxy_child() {
#[tokio::test] #[tokio::test]
async fn tls_verification_uses_canonical_hostname_not_pinned_address() { async fn tls_verification_uses_canonical_hostname_not_pinned_address() {
install_crypto_provider();
let certified = let certified =
rcgen::generate_simple_self_signed(vec!["source.test".to_owned()]).expect("certificate"); rcgen::generate_simple_self_signed(vec!["source.test".to_owned()]).expect("certificate");
let certificate_der = certified.cert.der().clone(); let certificate_der = certified.cert.der().clone();
@ -436,6 +441,7 @@ async fn tls_verification_uses_canonical_hostname_not_pinned_address() {
#[tokio::test] #[tokio::test]
async fn ipv6_pinning_preserves_http_authority_and_tls_server_name() { async fn ipv6_pinning_preserves_http_authority_and_tls_server_name() {
install_crypto_provider();
let certified = let certified =
rcgen::generate_simple_self_signed(vec!["source6.test".to_owned()]).expect("certificate"); rcgen::generate_simple_self_signed(vec!["source6.test".to_owned()]).expect("certificate");
let certificate_der = certified.cert.der().clone(); let certificate_der = certified.cert.der().clone();
@ -492,6 +498,7 @@ async fn ipv6_pinning_preserves_http_authority_and_tls_server_name() {
#[tokio::test] #[tokio::test]
async fn https_redirect_cannot_downgrade_to_http() { async fn https_redirect_cannot_downgrade_to_http() {
install_crypto_provider();
let certified = let certified =
rcgen::generate_simple_self_signed(vec!["source.test".to_owned()]).expect("certificate"); rcgen::generate_simple_self_signed(vec!["source.test".to_owned()]).expect("certificate");
let certificate_der = certified.cert.der().clone(); let certificate_der = certified.cert.der().clone();