isahc 2.0.1

The practical HTTP client that is fun to use.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

//! These tests exercise various SSL/TLS options while making requests to [badssl.com](https://badssl.com).

use isahc::{
    Request,
    error::ErrorKind,
    prelude::*,
    tls::{ProtocolVersion, TlsConfig},
};

#[test]
#[cfg(feature = "tls-insecure")]
fn accept_expired_cert() {
    Request::get("https://expired.badssl.com")
        .tls_config(
            TlsConfig::builder()
                .danger_accept_invalid_certs(true)
                .build(),
        )
        .body(())
        .unwrap()
        .send()
        .expect("cert should have been accepted");
}

#[test]
#[cfg(all(feature = "tls-insecure", not(feature = "rustls-tls")))]
fn accepting_invalid_certs_alone_does_not_allow_invalid_hosts() {
    let error = Request::get("https://wrong.host.badssl.com")
        .tls_config(
            TlsConfig::builder()
                .danger_accept_invalid_certs(true)
                .build(),
        )
        .body(())
        .unwrap()
        .send()
        .expect_err("cert should have been rejected");

    assert_eq!(error, ErrorKind::BadServerCertificate);
}

#[test]
#[cfg(all(feature = "tls-insecure", not(feature = "rustls-tls")))]
fn accept_cert_with_wrong_host() {
    Request::get("https://wrong.host.badssl.com")
        .tls_config(
            TlsConfig::builder()
                .danger_accept_invalid_hosts(true)
                .build(),
        )
        .body(())
        .unwrap()
        .send()
        .expect("cert should have been accepted");
}

#[test]
#[cfg(all(feature = "tls-insecure", not(feature = "rustls-tls")))]
fn accepting_certs_with_wrong_host_alone_does_not_allow_invalid_certs() {
    Request::get("https://expired.badssl.com")
        .tls_config(
            TlsConfig::builder()
                .danger_accept_invalid_hosts(true)
                .build(),
        )
        .body(())
        .unwrap()
        .send()
        .expect_err("cert should have been rejected");
}

#[test]
fn tls_less_than_min_version_is_rejected() {
    let error = Request::get("https://tls-v1-0.badssl.com:1010")
        .tls_config(
            TlsConfig::builder()
                .min_version(ProtocolVersion::Tlsv12)
                .build(),
        )
        .body(())
        .unwrap()
        .send()
        .expect_err("cert should have been rejected");

    assert_eq!(error, ErrorKind::ConnectionFailed);
}

#[test]
#[cfg(feature = "trust-webpki-roots")]
fn trust_webpki_roots() {
    use isahc::tls::TrustStore;

    Request::get("https://example.org")
        .tls_config(
            TlsConfig::builder()
                .trust_store(TrustStore::webpki_roots())
                .build(),
        )
        .body(())
        .unwrap()
        .send()
        .unwrap();
}