ci: cdrouter: enable testing of TR-069 over TLS v1.3

We now have proper TLS support, configuration and certificates in the
system and tr069-manager, so lets switch all CDRouter tests to TR-609
over TLS v1.3.

References: PCF-2021
Signed-off-by: Sergio Panseri <sergio.panseri@consult.red>
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org> [tls1.3, certs, all configs]
This commit is contained in:
Sergio Panseri 2025-09-18 06:27:36 +00:00 committed by Matthias Franck
parent b40f0d37e1
commit 6091dfe159
12 changed files with 60 additions and 60 deletions

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto

View File

@ -2297,9 +2297,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "Basic ACS Configuration" {
# testvar acsIp 6.0.0.1
# testvar acsPort 80
testvar acsPort 443
testvar acsDomain acs-download.qacafe.com
# testvar acsTransport http
testvar acsTransport https
# testvar acsAuth digest
# testvar acsDigestQopAuth yes
# testvar acsInterface wan
@ -2352,9 +2352,9 @@ SECTION "CDRouter TR-069 Add-On" {
SECTION "SSL Configuration" {
# testvar acsSslVersion tls
# testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem
# testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
testvar acsSslVersion tlsv1_3
testvar acsCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/server.pem
testvar acsCaCertPath /usr/cdrouter-data/prplos-ci/softhsm-ssl-certs/ca.crt
# testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
# testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
# testvar acsCipherSuite auto