[asterisk-dev] [Code Review] 4377: Testsuite: For httpd server, need option to define server name for security purposes

Ashley Sanders reviewboard at asterisk.org
Mon Jan 26 14:02:46 CST 2015


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviewboard.asterisk.org/r/4377/
-----------------------------------------------------------

Review request for Asterisk Developers.


Bugs: ASTERISK-24316
    https://issues.asterisk.org/jira/browse/ASTERISK-24316


Repository: testsuite


Description
-------

Currently, all responses from the Asterisk HTTP server contain a [Server] header that identifies Asterisk and its version (e.g. "Server:Asterisk/<version>", where <version> is the currently running version of Asterisk). The preferred behavior is to allow the user to configure an alternate name to use for the value returned in the [Server] header for HTTP responses (e.g. "Server:SomeSuperAwesomeServerName").

This patch to the Asterisk source provides a new configuration property, [servername], in http.conf, that gives users the ability to modify the value that Asterisk uses when identifying itself. 

This test verifies that the HTTP server correctly reports the expected name through the [Server] header in all HTTP responses. It uses three instances of Asterisk to test the three possible logic paths:
- No configuration was provided
- A non-empty/non-null value was provided through the new configuration property [servername]
- An empty/null value was provided through the new configuration property [servername]

***Note*** This is the test. It is only the test. You can find the review for the Asterisk source at: https://reviewboard.asterisk.org/r/4374/


Diffs
-----

  ./asterisk/trunk/tests/tests.yaml 6339 
  ./asterisk/trunk/tests/http_server/tests.yaml PRE-CREATION 
  ./asterisk/trunk/tests/http_server/servername/test-config.yaml PRE-CREATION 
  ./asterisk/trunk/tests/http_server/servername/run-test PRE-CREATION 
  ./asterisk/trunk/tests/http_server/servername/configs/ast3/http.conf PRE-CREATION 
  ./asterisk/trunk/tests/http_server/servername/configs/ast2/http.conf PRE-CREATION 
  ./asterisk/trunk/tests/http_server/servername/configs/ast1/http.conf PRE-CREATION 

Diff: https://reviewboard.asterisk.org/r/4377/diff/


Testing
-------


Thanks,

Ashley Sanders

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20150126/63deffea/attachment-0001.html>


More information about the asterisk-dev mailing list