#![recursion_limit = "256"]
#![cfg(feature = "openssl")]
use std::sync::{Arc, atomic::AtomicUsize, atomic::Ordering};
use tls_openssl::ssl::{
AlpnError, SslAcceptor, SslConnector, SslFiletype, SslMethod, SslVerifyMode,
};
use ntex::client::Client;
use ntex::http::{self, HttpService, Version, test::server as test_server};
use ntex::web::{self, App, HttpResponse};
use ntex::{SharedCfg, svc, time::Seconds};
fn ssl_acceptor() -> SslAcceptor {
let mut builder = SslAcceptor::mozilla_intermediate(SslMethod::tls()).unwrap();
builder
.set_private_key_file("./tests/key.pem", SslFiletype::PEM)
.unwrap();
builder
.set_certificate_chain_file("./tests/cert.pem")
.unwrap();
builder.set_alpn_select_callback(|_, protos| {
const H2: &[u8] = b"\x02h2";
if protos.windows(3).any(|window| window == H2) {
Ok(b"h2")
} else {
Err(AlpnError::NOACK)
}
});
builder.set_alpn_protos(b"\x02h2").unwrap();
builder.build()
}
#[ntex::test]
async fn test_connection_reuse_h2() {
let num = Arc::new(AtomicUsize::new(0));
let num2 = num.clone();
let srv = test_server(async move |_| {
let num2 = num2.clone();
svc(async move |io| {
num2.fetch_add(1, Ordering::Relaxed);
Ok(io)
})
.and_then(http::openssl(
ssl_acceptor(),
HttpService::h2(
App::new().service(web::resource("/").route(web::to(async || HttpResponse::Ok()))),
),
))
});
let mut builder = SslConnector::builder(SslMethod::tls()).unwrap();
builder.set_verify(SslVerifyMode::NONE);
let _ = builder
.set_alpn_protos(b"\x02h2\x08http/1.1")
.map_err(|e| log::error!("Cannot set alpn protocol: {e:?}"));
let client = Client::builder()
.openssl(builder.build())
.build(SharedCfg::default());
let request = client.get(srv.surl("/")).timeout(Seconds(30)).send();
let response = request.await.unwrap();
assert!(response.status().is_success());
let req = client.post(srv.surl("/"));
let response = req.send().await.unwrap();
assert!(response.status().is_success());
assert_eq!(response.version(), Version::HTTP_2);
assert_eq!(num.load(Ordering::Relaxed), 1);
}