83f5cc74fcPR-URL: https://github.com/nodejs/node/pull/60678 Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
78 lines
2.2 KiB
JavaScript
78 lines
2.2 KiB
JavaScript
// Flags: --no-use-system-ca
|
|
|
|
// Verify that a worker can enable the system CA store while the parent disables it.
|
|
|
|
import * as common from '../common/index.mjs';
|
|
import assert from 'node:assert/strict';
|
|
import https from 'node:https';
|
|
import fixtures from '../common/fixtures.js';
|
|
import { it, beforeEach, afterEach, describe } from 'node:test';
|
|
import { once } from 'events';
|
|
import { Worker } from 'node:worker_threads';
|
|
|
|
if (!common.hasCrypto) {
|
|
common.skip('requires crypto');
|
|
}
|
|
|
|
// To run this test, the system needs to be configured to trust
|
|
// the CA certificate first (which needs an interactive GUI approval, e.g. TouchID):
|
|
// see the README.md in this folder for instructions on how to do this.
|
|
const handleRequest = (req, res) => {
|
|
const path = req.url;
|
|
switch (path) {
|
|
case '/hello-world':
|
|
res.writeHead(200);
|
|
res.end('hello world\n');
|
|
break;
|
|
default:
|
|
common.mustNotCall(`Unexpected path: ${path}`)();
|
|
}
|
|
};
|
|
|
|
describe('use-system-ca', function() {
|
|
async function setupServer(key, cert) {
|
|
const theServer = https.createServer(
|
|
{
|
|
key: fixtures.readKey(key),
|
|
cert: fixtures.readKey(cert),
|
|
},
|
|
handleRequest,
|
|
);
|
|
theServer.listen(0);
|
|
await once(theServer, 'listening');
|
|
|
|
return theServer;
|
|
}
|
|
|
|
let server;
|
|
|
|
beforeEach(async function() {
|
|
server = await setupServer('agent8-key.pem', 'agent8-cert.pem');
|
|
});
|
|
|
|
it('trusts a valid root certificate', async function() {
|
|
const url = `https://localhost:${server.address().port}/hello-world`;
|
|
const worker = new Worker(fixtures.path('system-ca', 'fetch-worker.mjs'), {
|
|
execArgv: ['--use-system-ca'],
|
|
workerData: { url },
|
|
});
|
|
await assert.rejects(fetch(url), (err) => {
|
|
assert.strictEqual(err.cause.code, 'UNABLE_TO_VERIFY_LEAF_SIGNATURE');
|
|
return true;
|
|
});
|
|
|
|
const [message] = await once(worker, 'message');
|
|
assert.strictEqual(message.ok, true);
|
|
assert.strictEqual(
|
|
message.status,
|
|
200,
|
|
`Expected status 200, got ${message.status}`,
|
|
);
|
|
const [exitCode] = await once(worker, 'exit');
|
|
assert.strictEqual(exitCode, 0);
|
|
});
|
|
|
|
afterEach(async function() {
|
|
server?.close();
|
|
});
|
|
});
|