mte/unikernel/duniverse/ocaml-caqti/caqti-tls/testlib/testlib_tls.enabled.ml
2025-11-11 02:07:51 +01:00

53 lines
2 KiB
OCaml

(* Copyright (C) 2024 Petter A. Urkedal <paurkedal@gmail.com>
*
* This library is free software; you can redistribute it and/or modify it
* under the terms of the GNU Lesser General Public License as published by
* the Free Software Foundation, either version 3 of the License, or (at your
* option) any later version, with the LGPL-3.0 Linking Exception.
*
* This library is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
* License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* and the LGPL-3.0 Linking Exception along with this library. If not, see
* <http://www.gnu.org/licenses/> and <https://spdx.org>, respectively.
*)
open Testlib
let () =
let open Cmdliner in
let x509_authenticator_conv =
let parse spec =
X509.Authenticator.of_string spec
|> Result.map (fun f -> f (fun () -> Some (Ptime_clock.now ())))
in
let pp ppf _ = Format.pp_print_string ppf "<authenticator>" in
Arg.conv (parse, pp)
in
let x509_authenticator =
let doc =
"X509 authenticator for validating TLS connections when using the tls \
library. The input is parsed by X509.Authenticator.of_string"
in
let env = Cmd.Env.info "CAQTI_TEST_X509_AUTHENTICATOR" in
Arg.(value @@ opt (some x509_authenticator_conv) None @@
info ~doc ~env ["x509-authenticator"])
in
let process x509_authenticator common_args =
(match x509_authenticator with
| None -> common_args
| Some authenticator ->
let tls_client_config =
Result.get_ok (Tls.Config.client ~authenticator ())
in
let connect_config =
common_args.connect_config
|> Caqti_connect_config.set Caqti_tls.Config.client
(Some tls_client_config)
in
{common_args with connect_config})
in
Testlib.register_common_arg Term.(const process $ x509_authenticator)