1 files changed, 83 insertions, 0 deletions
diff --git a/misc/localca/localca_test.go b/misc/localca/localca_test.go
new file mode 100644
index 0000000..0c85fba
--- /dev/null
+++ b/misc/localca/localca_test.go
@@ -0,0 +1,83 @@
+package localca
+
+import (
+	"context"
+	"crypto/tls"
+	"io"
+	"io/ioutil"
+	"os"
+	"path"
+	"testing"
+	"time"
+
+	"golang.org/x/crypto/acme/autocert"
+)
+
+func TestLocalCA(t *testing.T) {
+	dir, err := ioutil.TempDir("", "localca-test")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer os.RemoveAll(dir)
+	cache := autocert.DirCache(dir)
+
+	keyFile := path.Join(dir, "key.pem")
+	certFile := path.Join(dir, "cert.pem")
+	const suffix = "club"
+
+	m, err := New(keyFile, certFile, suffix, cache)
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	t.Run("local", func(t *testing.T) {
+		_, err = m.GetCertificate(&tls.ClientHelloInfo{
+			ServerName: "foo.local.cetacean.club",
+		})
+		if err != nil {
+			t.Fatal(err)
+		}
+	})
+
+	t.Run("network", func(t *testing.T) {
+		t.Skip("no")
+		ctx, cancel := context.WithCancel(context.Background())
+		defer cancel()
+		tc := &tls.Config{
+			GetCertificate: m.GetCertificate,
+		}
+
+		go func() {
+			lis, err := tls.Listen("tcp", ":9293", tc)
+			if err != nil {
+				t.Fatal(err)
+			}
+			defer lis.Close()
+
+			for {
+				select {
+				case <-ctx.Done():
+					return
+				default:
+				}
+
+				cli, err := lis.Accept()
+				if err != nil {
+					t.Fatal(err)
+				}
+				defer cli.Close()
+
+				go io.Copy(cli, cli)
+			}
+		}()
+
+		time.Sleep(130 * time.Millisecond)
+		cli, err := tls.Dial("tcp", "localhost:9293", &tls.Config{InsecureSkipVerify: true})
+		if err != nil {
+			t.Fatal(err)
+		}
+		defer cli.Close()
+
+		cli.Write([]byte("butts"))
+	})
+}