aboutsummaryrefslogtreecommitdiff
path: root/test/tls_test.go
blob: f302d51059c37bee43af879cfea553a7a210ad84 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
package test

import (
	"crypto/tls"
	"testing"

	"github.com/miekg/dns"
)

func TestDNSoverTLS(t *testing.T) {
	corefile := `tls://.:1053 {
        tls ../plugin/tls/test_cert.pem ../plugin/tls/test_key.pem
        whoami
    }`
	qname := "example.com."
	qtype := dns.TypeA
	answerLength := 0

	ex, _, tcp, err := CoreDNSServerAndPorts(corefile)
	if err != nil {
		t.Fatalf("Could not get CoreDNS serving instance: %s", err)
	}
	defer ex.Stop()

	m := new(dns.Msg)
	m.SetQuestion(qname, qtype)
	client := dns.Client{
		Net:       "tcp-tls",
		TLSConfig: &tls.Config{InsecureSkipVerify: true},
	}
	r, _, err := client.Exchange(m, tcp)

	if err != nil {
		t.Fatalf("Could not exchange msg: %s", err)
	}

	if n := len(r.Answer); n != answerLength {
		t.Fatalf("Expected %v answers, got %v", answerLength, n)
	}
	if n := len(r.Extra); n != 2 {
		t.Errorf("Expected 2 RRs in additional section, but got %d", n)
	}
	if r.Rcode != dns.RcodeSuccess {
		t.Errorf("Expected success but got %d", r.Rcode)
	}
}