curl-curl/tests/data/test1638
Daniel Stenberg e1fdbdd16f
hsts: when a dupe host adds subdomains, use that
Otherwise a weaker earlier entry is allowed to override a later more
restrictive one.

Add test 1638 to verify.

Closes #21108
2026-03-26 23:27:24 +01:00

80 lines
1.4 KiB
XML

<?xml version="1.0" encoding="US-ASCII"?>
<testcase>
<info>
<keywords>
HTTP
HTTP proxy
HSTS
</keywords>
</info>
<reply>
# we use this as response to a CONNECT
<connect crlf="headers" nocheck="yes">
HTTP/1.1 200 not OK at all
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Connection: close
Funny-head: yesyes
</connect>
<data crlf="headers" nocheck="yes">
HTTP/1.1 200 not OK at all
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Content-Length: 6
Connection: close
Funny-head: yesyes
-foo-
</data>
</reply>
<client>
<server>
http
</server>
<features>
HSTS
proxy
https
large-time
</features>
<file name="%LOGDIR/hsts%TESTNUMBER">
# comment in input file
foo.example. "20391001 04:47:41"
.foo.example. "20291001 04:47:41"
</file>
<name>
HSTS duplicate domains where the update adds subdomains
</name>
<command>
-x http://%HOSTIP:%HTTPPORT http://this.hsts.example/%TESTNUMBER --hsts %LOGDIR/hsts%TESTNUMBER
</command>
<disable>
test-duphandle
</disable>
</client>
<verify>
<protocol crlf="headers">
GET http://this.hsts.example/%TESTNUMBER HTTP/1.1
Host: this.hsts.example
User-Agent: curl/%VERSION
Accept: */*
Proxy-Connection: Keep-Alive
</protocol>
<file name="%LOGDIR/hsts%TESTNUMBER" mode="text">
# Your HSTS cache. https://curl.se/docs/hsts.html
# This file was generated by libcurl! Edit at your own risk.
.foo.example "20391001 04:47:41"
</file>
</verify>
</testcase>