[exim-cvs] Testsuite: operational notes for TFO

Gitweb: https://git.exim.org/exim.git/commitdiff/a92592c77ed477aff76b59881f68cbc4b2a13112

Commit:     a92592c77ed477aff76b59881f68cbc4b2a13112
Parent:     f0ff270537676f8473bad957e81746731fc3fd03
Author:     Jeremy Harris <jgh146exb@???>
AuthorDate: Wed Jan 11 21:55:15 2023 +0000
Committer:  Jeremy Harris <jgh146exb@???>
CommitDate: Wed Jan 11 21:55:15 2023 +0000

    Testsuite: operational notes for TFO
---
 test/confs/4060                              | 1 +
 test/scripts/4027-TFO-socks/4027             | 3 +++
 test/scripts/4058-pipe-conn-tfo/4058         | 3 +++
 test/scripts/4068-pipe-conn-gnutls-tfo/4068  | 3 +++
 test/scripts/4069-pipe-conn-openssl-tfo/4069 | 4 ++++
 5 files changed, 14 insertions(+)

diff --git a/test/confs/4060 b/test/confs/4060
index b6e071202..fa643ae4c 100644
--- a/test/confs/4060
+++ b/test/confs/4060
@@ -6,6 +6,7 @@ OPT=
CONNECTCOND=

keep_environment = PATH
+add_environment = SSLKEYLOGFILE=DIR/spool/sslkeys
exim_path = EXIM_PATH
host_lookup_order = bydns
spool_directory = DIR/spool
diff --git a/test/scripts/4027-TFO-socks/4027 b/test/scripts/4027-TFO-socks/4027
index 74045356f..a7412aecd 100644
--- a/test/scripts/4027-TFO-socks/4027
+++ b/test/scripts/4027-TFO-socks/4027
@@ -1,5 +1,8 @@
# socks5 proxy on smtp transport, TCP Fast Open
#
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+#
munge loopback
#
#
diff --git a/test/scripts/4058-pipe-conn-tfo/4058 b/test/scripts/4058-pipe-conn-tfo/4058
index 2a0639095..999cfad4a 100644
--- a/test/scripts/4058-pipe-conn-tfo/4058
+++ b/test/scripts/4058-pipe-conn-tfo/4058
@@ -1,5 +1,8 @@
# Early-pipelining, with TFO
#
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+#
#
# Packet delays so we can see TFO operational in packet captures
# Wipe any stored TFO cookie, to start from known state.
diff --git a/test/scripts/4068-pipe-conn-gnutls-tfo/4068 b/test/scripts/4068-pipe-conn-gnutls-tfo/4068
index 9a454391a..4e9dfa500 100644
--- a/test/scripts/4068-pipe-conn-gnutls-tfo/4068
+++ b/test/scripts/4068-pipe-conn-gnutls-tfo/4068
@@ -1,5 +1,8 @@
# early-pipe, starttls, tfo
#
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+#
# Not attempted without a cache entry
exim -bd -DSERVER=server -oX PORT_D
****
diff --git a/test/scripts/4069-pipe-conn-openssl-tfo/4069 b/test/scripts/4069-pipe-conn-openssl-tfo/4069
index 2339b0c12..41ec3a5ae 100644
--- a/test/scripts/4069-pipe-conn-openssl-tfo/4069
+++ b/test/scripts/4069-pipe-conn-openssl-tfo/4069
@@ -1,9 +1,13 @@
# early-pipe, starttls, tfo
#
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+#
# Network delay so we can see tfo efects
# Clear any previously-obtained tfo cookie:
sudo perl
system ("tc qdisc add dev lo root netem delay 50ms");
+system ("[ -e /proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec ] && echo 0 > /proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec");
system ("ip tcp_metrics delete 127.0.0.1");
****
#