Merge pull request #33 from macbre/https-tests

Add tests for HTTPS and h2 support

Author: macbre

.github/workflows/dockerimage.yml

@@ -28,22 +28,17 @@ jobs:
         # @see https://docs.docker.com/engine/reference/commandline/build/#specifying-external-cache-sources
         # no need to "docker pull $CACHE_IMAGE", BuildKit is clever enough to pull it when needed
         docker build . \
-          --tag ${{ github.repository }} \
+          --tag macbre/nginx \
            --build-arg BUILDKIT_INLINE_CACHE=1 \
           --cache-from $CACHE_IMAGE
         docker images
 
     - name: Run nginx -V
-      run: docker run -t ${{ github.repository }} nginx -V
+      run: docker run -t macbre/nginx nginx -V
 
     - name: Serve a static asset
       run: |
-        docker run --detach --rm \
-          -p 0.0.0.0:8888:80 \
-          -v "$PWD/tests":/static:ro \
-          -v "$PWD/tests/static.conf":/etc/nginx/conf.d/static.conf:ro \
-          --name test_nginx \
-          -t ${{ github.repository }}
+        ./run-docker.sh &
 
         sleep 2; docker ps
         curl -v --compressed 0.0.0.0:8888 2>&1 | tee /tmp/out
@@ -52,4 +47,12 @@ jobs:
         grep --fixed-strings '< Content-Encoding: br' /tmp/out
         grep --fixed-strings '<p>It works!</p>' /tmp/out
 
+
+        curl -v --compressed --insecure https://0.0.0.0:8889 2>&1 | tee /tmp/h2
+
+        grep --fixed-strings '< HTTP/2 200' /tmp/h2
+        grep --fixed-strings '< server: nginx' /tmp/h2
+        grep --fixed-strings '<p>It works!</p>' /tmp/h2
+
+
         docker logs test_nginx

run-docker.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+docker run --rm \
+  -p 0.0.0.0:8888:80 \
+  -p 0.0.0.0:8889:443 \
+  -v "$PWD/tests":/static:ro \
+  -v "$PWD/tests/static.conf":/etc/nginx/conf.d/static.conf:ro \
+  -v "$PWD/tests/https.conf":/etc/nginx/conf.d/https.conf:ro \
+  -v "$PWD/tests/localhost.crt":/etc/nginx/ssl/localhost.crt:ro \
+  -v "$PWD/tests/localhost.key":/etc/nginx/ssl/localhost.key:ro \
+ --name test_nginx \
+  -t macbre/nginx

tests/https.conf

@@ -0,0 +1,18 @@
+server {
+    listen 443 ssl http2;
+    server_name localhost;
+
+    # openssl-generated pair for local development
+    # https://letsencrypt.org/docs/certificates-for-localhost/
+    ssl_certificate     /etc/nginx/ssl/localhost.crt;
+    ssl_certificate_key /etc/nginx/ssl/localhost.key;
+
+    location / {
+        root   /static;
+
+        gzip_static on;
+        brotli_static on;
+
+        expires 1d;
+    }
+}

tests/localhost.crt

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/localhost.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----