From 3c1def243020a3897121d4c5badf07ed45d2397d Mon Sep 17 00:00:00 2001
From: Matthew Holt <mholt@users.noreply.github.com>
Date: Fri, 20 Mar 2020 15:51:37 -0600
Subject: caddytls: Support wildcard matching in ServerName conn policy matcher

---
 modules/caddytls/matchers_test.go | 86 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 86 insertions(+)
 create mode 100644 modules/caddytls/matchers_test.go

(limited to 'modules/caddytls/matchers_test.go')

diff --git a/modules/caddytls/matchers_test.go b/modules/caddytls/matchers_test.go
new file mode 100644
index 0000000..24a015a
--- /dev/null
+++ b/modules/caddytls/matchers_test.go
@@ -0,0 +1,86 @@
+// Copyright 2015 Matthew Holt and The Caddy Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package caddytls
+
+import (
+	"crypto/tls"
+	"testing"
+)
+
+func TestServerNameMatcher(t *testing.T) {
+	for i, tc := range []struct {
+		names  []string
+		input  string
+		expect bool
+	}{
+		{
+			names:  []string{"example.com"},
+			input:  "example.com",
+			expect: true,
+		},
+		{
+			names:  []string{"example.com"},
+			input:  "foo.com",
+			expect: false,
+		},
+		{
+			names:  []string{"example.com"},
+			input:  "",
+			expect: false,
+		},
+		{
+			names:  []string{},
+			input:  "",
+			expect: false,
+		},
+		{
+			names:  []string{"foo", "example.com"},
+			input:  "example.com",
+			expect: true,
+		},
+		{
+			names:  []string{"foo", "example.com"},
+			input:  "sub.example.com",
+			expect: false,
+		},
+		{
+			names:  []string{"foo", "example.com"},
+			input:  "foo.com",
+			expect: false,
+		},
+		{
+			names:  []string{"*.example.com"},
+			input:  "example.com",
+			expect: false,
+		},
+		{
+			names:  []string{"*.example.com"},
+			input:  "sub.example.com",
+			expect: true,
+		},
+		{
+			names:  []string{"*.example.com", "*.sub.example.com"},
+			input:  "sub2.sub.example.com",
+			expect: true,
+		},
+	} {
+		chi := &tls.ClientHelloInfo{ServerName: tc.input}
+		actual := MatchServerName(tc.names).Match(chi)
+		if actual != tc.expect {
+			t.Errorf("Test %d: Expected %t but got %t (input=%s match=%v)",
+				i, tc.expect, actual, tc.input, tc.names)
+		}
+	}
+}
-- 
cgit v1.2.3