mirror of
https://github.com/rest-client/rest-client.git
synced 2022-11-09 13:49:40 -05:00
902db106a6
Apple patches OpenSSL to always fall back on the system CA store, so the integration tests that expect SSL cert failures have never worked on OS X. Disable them since I can't think of a workaround :-(. TODO: add some integration tests on certificates that won't be in any system CA store.
66 lines
2.2 KiB
Ruby
66 lines
2.2 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe RestClient::Request do
|
|
before(:all) do
|
|
WebMock.disable!
|
|
end
|
|
|
|
after(:all) do
|
|
WebMock.enable!
|
|
end
|
|
|
|
describe "ssl verification" do
|
|
it "is successful with the correct ca_file" do
|
|
request = RestClient::Request.new(
|
|
:method => :get,
|
|
:url => 'https://www.mozilla.org',
|
|
:ssl_ca_file => File.join(File.dirname(__FILE__), "certs", "digicert.crt")
|
|
)
|
|
expect { request.execute }.to_not raise_error
|
|
end
|
|
|
|
it "is successful with the correct ca_path" do
|
|
request = RestClient::Request.new(
|
|
:method => :get,
|
|
:url => 'https://www.mozilla.org',
|
|
:ssl_ca_path => File.join(File.dirname(__FILE__), "capath_digicert")
|
|
)
|
|
expect { request.execute }.to_not raise_error
|
|
end
|
|
|
|
# TODO: deprecate and remove RestClient::SSLCertificateNotVerified and just
|
|
# pass through OpenSSL::SSL::SSLError directly. See note in
|
|
# lib/restclient/request.rb.
|
|
#
|
|
# On OS X, this test fails since Apple has patched OpenSSL to always fall
|
|
# back on the system CA store.
|
|
it "is unsuccessful with an incorrect ca_file", :unless => RestClient::Platform.mac? do
|
|
request = RestClient::Request.new(
|
|
:method => :get,
|
|
:url => 'https://www.mozilla.com',
|
|
:ssl_ca_file => File.join(File.dirname(__FILE__), "certs", "verisign.crt")
|
|
)
|
|
expect { request.execute }.to raise_error(RestClient::SSLCertificateNotVerified)
|
|
end
|
|
|
|
# On OS X, this test fails since Apple has patched OpenSSL to always fall
|
|
# back on the system CA store.
|
|
it "is unsuccessful with an incorrect ca_path", :unless => RestClient::Platform.mac? do
|
|
request = RestClient::Request.new(
|
|
:method => :get,
|
|
:url => 'https://www.mozilla.com',
|
|
:ssl_ca_path => File.join(File.dirname(__FILE__), "capath_verisign")
|
|
)
|
|
expect { request.execute }.to raise_error(RestClient::SSLCertificateNotVerified)
|
|
end
|
|
|
|
it "is successful using the default system cert store" do
|
|
request = RestClient::Request.new(
|
|
:method => :get,
|
|
:url => 'https://www.mozilla.org',
|
|
:verify_ssl => true,
|
|
)
|
|
expect {request.execute }.to_not raise_error
|
|
end
|
|
end
|
|
end
|