relayd: add regress coverage for client certs

From Sören Tempel

Replace deprecated IO::Socket::INET6 with IO::Socket::IP.

Set TCP option NODELAY in relayd and in client and server. This
speeds up transferring data and avoids to run into timeout. The
test was broken since switching to TLS 1.3 if running relayd on a
rem

Set TCP option NODELAY in relayd and in client and server. This
speeds up transferring data and avoids to run into timeout. The
test was broken since switching to TLS 1.3 if running relayd on a
remote machine. With no delay in tcp, https-multi using TLS 1.3
is slightly faster than TLS 1.2 on i386.

show more ...

Call setsockopt(2) before listen(2) in relayd tests and adjust some
error messages.

add relayd regression test args-http-slow-consumer.pl
ok reyk@, bluhm@

Add tests for relayd TLS inspection with plain SSL and HTTPS.

Create CA and certificates for TLS tests consistently. Better
logging of SSL errors. Do not import unneeded Socket constants.

Add a time.log file that accumulates timing information about the
executed tests. This allows to micro benchmark relayd.
based on a diff from andre@; OK reyk@

Implement non-persistent connections in a cleaner way. Every test
that offers multiple requets per HTTP connection is run twice.
First all requests are run over a single TCP connection. Then for
ea

Implement non-persistent connections in a cleaner way. Every test
that offers multiple requets per HTTP connection is run twice.
First all requests are run over a single TCP connection. Then for
each requests a separate TCP connection is established. If a
requests during a persistent connection fails, a reconnect is done
as relayd cancels the whole connection. This allows stricter tests
for filters.
OK reyk@

show more ...

Update and extend the regress tests to use the new grammar of the
filtering rules. Some of the filenames are based on the old grammar,
we keep them for now and just update the contents to have a
bef

Update and extend the regress tests to use the new grammar of the
filtering rules. Some of the filenames are based on the old grammar,
we keep them for now and just update the contents to have a
before/after comparison of the features.

Most of the work was done by Andre de Oliveira (andre@)

OK bluhm@ benno@

show more ...

Set SSL_VERIFY_NONE as the regression test uses self-signed untrusted
certificates. Newer IO::Socket::SSL versions verify by default.

Sync relayd tests with socket splicing tests.

Allow the relayd regression tests to run the relayd on a different
host from client and server. Real TCP connections not running on
localhost provide a different timing uncovering more bugs.

Add tests for relayd session timeout.

Add regression tests for relaying connections through relayd. This
is useful to ensure that socket splicing is working correctly.
Server, relayd, client with different config are started for each
su

Add regression tests for relaying connections through relayd. This
is useful to ensure that socket splicing is working correctly.
Server, relayd, client with different config are started for each
subtest. Data must pass unmodified.

show more ...