From 11d971bc07ceb4359565e6611ae03a0c0134d153 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Fri, 19 Feb 2021 23:22:15 +0100
Subject: Add test suite against Let's Encrypt's staging environment.

https://letsencrypt.org/docs/staging-environment/
---
 tests/apache2-proxy | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 tests/apache2-proxy

(limited to 'tests/apache2-proxy')

diff --git a/tests/apache2-proxy b/tests/apache2-proxy
new file mode 100644
index 0000000..5ae17ee
--- /dev/null
+++ b/tests/apache2-proxy
@@ -0,0 +1,34 @@
+# Use Apache2 as reverse proxy for lacme's internal webserver using the
+# provided snippet
+
+# bind the webserver to the default listening address
+sed -i 's|^listen\s*=|#&|' /etc/lacme/lacme.conf
+
+DEBIAN_FRONTEND="noninteractive" apt install -y --no-install-recommends apache2 curl
+
+ln -fs /etc/lacme/apache2.conf /etc/apache2/conf-available/lacme.conf
+a2enmod proxy_http
+a2enconf lacme
+
+mkdir /run/apache2
+( set +eux && . /etc/apache2/envvars && apache2 )
+
+# ensure that requests to the root URI and challenge URIs yield 502 Bad Gateway before starting the webserver
+rv="$(curl -w"%{http_code}" -so/dev/null http://127.0.0.1/.well-known/acme-challenge/)";    [ $rv -eq 503 ]
+rv="$(curl -w"%{http_code}" -so/dev/null http://127.0.0.1/.well-known/acme-challenge/foo)"; [ $rv -eq 503 ]
+
+lacme --debug newOrder 2>"$STDERR" || fail
+test /etc/lacme/simpletest.rsa.crt -nt /etc/lacme/simpletest.rsa.key
+
+grepstderr -Fq "Forking ACME webserver bound to /run/lacme-www.socket, child PID "
+grepstderr -Fq "Forking lacme-accountd, child PID "
+grepstderr -Fq "Forking /usr/libexec/lacme/client, child PID "
+grepstderr -Fq "Shutting down lacme-accountd"
+grepstderr -Fq "Shutting down ACME webserver bound to /run/lacme-www.socket"
+grepstderr -Eq "Incoming connection: GET /\.well-known/acme-challenge/\S+ HTTP/[0-9.]+$"
+
+# ensure apache2 was indeed used to serve challenge responses (Let's Encrypt caches validation results)
+grep -E "\"GET /\.well-known/acme-challenge/\S+ HTTP/[0-9.]+\" 200 .* \(([^)]+; )*Let's Encrypt validation server(; [^)]+)*\)\"$" \
+    /var/log/apache2/access.log
+
+# vim: set filetype=sh :
-- 
cgit v1.2.3


From 8d7b50989d1c446b81c73e8ababfce6f0351ee59 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Thu, 18 Feb 2021 16:11:24 +0100
Subject: =?UTF-8?q?Symlink=20$(sysconfdir)/apache2/conf-available/lacme.co?=
 =?UTF-8?q?nf=20=E2=86=92=20../../lacme/apache2.conf.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This is useful for enabling the snippet with `a2enconf lacme`, cf.
https://bugs.debian.org/955859 .
---
 tests/apache2-proxy | 1 -
 1 file changed, 1 deletion(-)

(limited to 'tests/apache2-proxy')

diff --git a/tests/apache2-proxy b/tests/apache2-proxy
index 5ae17ee..016b426 100644
--- a/tests/apache2-proxy
+++ b/tests/apache2-proxy
@@ -6,7 +6,6 @@ sed -i 's|^listen\s*=|#&|' /etc/lacme/lacme.conf
 
 DEBIAN_FRONTEND="noninteractive" apt install -y --no-install-recommends apache2 curl
 
-ln -fs /etc/lacme/apache2.conf /etc/apache2/conf-available/lacme.conf
 a2enmod proxy_http
 a2enconf lacme
 
-- 
cgit v1.2.3