···

       
388
       
 
       
  cryptpad = runTest ./cryptpad.nix;

     

       
389
       
 
       
  cups-pdf = runTest ./cups-pdf.nix;

     

       
390
       
 
       
  curl-impersonate = runTest ./curl-impersonate.nix;

     

       
391
       
-
       
  custom-ca = handleTest ./custom-ca.nix { };

     

       
392
       
 
       
  croc = runTest ./croc.nix;

     

       
393
       
 
       
  cross-seed = runTest ./cross-seed.nix;

     

       
394
       
 
       
  cyrus-imap = runTest ./cyrus-imap.nix;

     

···

       
388
       
 
       
  cryptpad = runTest ./cryptpad.nix;

     

       
389
       
 
       
  cups-pdf = runTest ./cups-pdf.nix;

     

       
390
       
 
       
  curl-impersonate = runTest ./curl-impersonate.nix;

     

       
391
       
+
       
  custom-ca = import ./custom-ca.nix { inherit pkgs runTest; };

     

       
392
       
 
       
  croc = runTest ./croc.nix;

     

       
393
       
 
       
  cross-seed = runTest ./cross-seed.nix;

     

       
394
       
 
       
  cyrus-imap = runTest ./cyrus-imap.nix;

     

···

       
3
       
 
       
# The test checks that certificates issued by a custom

     

       
4
       
 
       
# trusted CA are accepted but those from an unknown CA are rejected.

     

       
5
       
 
       


     

       
6
       
-
       
{

     

       
7
       
-
       
  system ? builtins.currentSystem,

     

       
8
       
-
       
  config ? { },

     

       
9
       
-
       
  pkgs ? import ../.. { inherit system config; },

     

       
10
       
-
       
}:

     

       
11
       
-
       


     

       
12
       
-
       
with import ../lib/testing-python.nix { inherit system pkgs; };

     

       
13
       
 
       


     

       
14
       
 
       
let

     

       
15
       
 
       
  inherit (pkgs) lib;

     
···

       
104
       
 
       
    };

     

       
105
       
 
       
  };

     

       
106
       
 
       


     

       
107
       
-
       
  curlTest = makeTest {

     

       
108
       
 
       
    name = "custom-ca-curl";

     

       
109
       
 
       
    meta.maintainers = with lib.maintainers; [ rnhmjoj ];

     

       
110
       
 
       
    nodes.machine = { ... }: webserverConfig;

     
···

       
121
       
 
       


     

       
122
       
 
       
  mkBrowserTest =

     

       
123
       
 
       
    browser: testParams:

     

       
124
       
-
       
    makeTest {

     

       
125
       
 
       
      name = "custom-ca-${browser}";

     

       
126
       
 
       
      meta.maintainers = with lib.maintainers; [ rnhmjoj ];

     

       
127
       
 
       


     
···

       
199
       
 
       
{

     

       
200
       
 
       
  curl = curlTest;

     

       
201
       
 
       
}

     

       
202
       
-
       
// pkgs.lib.mapAttrs mkBrowserTest {

     

       
203
       
 
       
  firefox = {

     

       
204
       
 
       
    error = "Security Risk";

     

       
205
       
 
       
  };

     

···

       
3
       
 
       
# The test checks that certificates issued by a custom

     

       
4
       
 
       
# trusted CA are accepted but those from an unknown CA are rejected.

     

       
5
       
 
       


     

       
6
       
+
       
{ runTest, pkgs }:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
7
       
 
       


     

       
8
       
 
       
let

     

       
9
       
 
       
  inherit (pkgs) lib;

     
···

       
98
       
 
       
    };

     

       
99
       
 
       
  };

     

       
100
       
 
       


     

       
101
       
+
       
  curlTest = runTest {

     

       
102
       
 
       
    name = "custom-ca-curl";

     

       
103
       
 
       
    meta.maintainers = with lib.maintainers; [ rnhmjoj ];

     

       
104
       
 
       
    nodes.machine = { ... }: webserverConfig;

     
···

       
115
       
 
       


     

       
116
       
 
       
  mkBrowserTest =

     

       
117
       
 
       
    browser: testParams:

     

       
118
       
+
       
    runTest {

     

       
119
       
 
       
      name = "custom-ca-${browser}";

     

       
120
       
 
       
      meta.maintainers = with lib.maintainers; [ rnhmjoj ];

     

       
121
       
 
       


     
···

       
193
       
 
       
{

     

       
194
       
 
       
  curl = curlTest;

     

       
195
       
 
       
}

     

       
196
       
+
       
// lib.mapAttrs mkBrowserTest {

     

       
197
       
 
       
  firefox = {

     

       
198
       
 
       
    error = "Security Risk";

     

       
199
       
 
       
  };