From 7b0017ad49a2290ec26cbcdffded8a527799e981 Mon Sep 17 00:00:00 2001

From: Isaac Boukris <iboukris@gmail.com>

Date: Sat, 18 Apr 2020 16:30:03 +0200

Subject: [PATCH] ITS#9189 add channel-bindings tests

---

 tests/scripts/test068-sasl-tls-external | 22 ++++++++++++++++++++++

 1 file changed, 22 insertions(+)

diff --git a/tests/scripts/test068-sasl-tls-external b/tests/scripts/test068-sasl-tls-external

index dcbc50fd4..ee112cf98 100755

--- a/tests/scripts/test068-sasl-tls-external

+++ b/tests/scripts/test068-sasl-tls-external

@@ -88,6 +88,28 @@ else

 	echo "success"

 fi

+# Exercise channel-bindings code in builds without SASL support

+for cb in "none" "tls-unique" "tls-endpoint" ; do

+

+	echo -n "Using ldapwhoami with SASL/EXTERNAL and SASL_CBINDING (${cb})...."

+

+	$LDAPSASLWHOAMI -o tls_cacert=$TESTDIR/tls/ca/certs/testsuiteCA.crt     \

+	-o tls_cert=$TESTDIR/tls/certs/bjensen@mailgw.example.com.crt           \

+	-o tls_key=$TESTDIR/tls/private/bjensen@mailgw.example.com.key          \

+	-o tls_reqcert=hard -o SASL_CBINDING=$cb -ZZ -Y EXTERNAL -H $URIP1      \

+	> $TESTOUT 2>&1

+

+	RC=$?

+	if test $RC != 0 ; then

+		echo "ldapwhoami failed ($RC)!"

+		test $KILLSERVERS != no && kill -HUP $PID

+		exit $RC

+	else

+		echo "success"

+	fi

+done

+

+

 test $KILLSERVERS != no && kill -HUP $KILLPIDS

 if test $RC != 0 ; then

-- 

2.29.2