gost/tests/e2e/testdata/utls/server_auto.yaml at a20999046b19a6c5f707fd8da389f6c194d1dde2 - gost - Git - LHFD DAO

mirror/gost

mirror of https://github.com/go-gost/gost.git synced 2026-10-08 12:05:46 +00:00

Files

T

ginuerzh 64b71bd8a6 test(e2e): add utls dialer regression suite (#888 )

Adds an e2e suite (tests/e2e/utls_test.go + testdata/utls/*)
that exercises the utls dialer in a forward-proxy chain:

  curl -> client gost (http proxy :8080)
       -> chain node (http connector + utls dialer)
         -> server gost (http over TLS listener :8443)
           -> tcp-echo

Two cases:

- TestUTLSInsecure: regression for go-gost/gost#887. A utls
  dialer with `secure: false` must still complete the handshake
  (InsecureSkipVerify must be honoured). The old unsafe cast read
  garbage for InsecureSkipVerify and the handshake failed.
- TestUTLSSecureWithCA: exercises the converter's RootCAs /
  ServerName path with a CA-signed server cert.

Uses the deterministic `Chrome` fingerprint (not `randomized`, which
randomises the ClientHello and is flaky against a standard Go TLS
server).

Bumps github.com/go-gost/x to v0.13.11, which fixes the
second half of #887: the curve-preference enum divergence between
crypto/tls and utls (Go 1.24+ appends PQC hybrid curves that
utls does not define).

Related: go-gost/gost#887, go-gost/x#111, go-gost/x#112

2026-07-11 15:46:39 +08:00

8 lines

97 B

YAML

Raw Blame History

 services:
 - name: https-server
   addr: :8443
   handler:
     type: http
   listener:
     type: tls