First attempt at CI

.github/workflows/test-all.yml

@@ -0,0 +1,32 @@
+name: Test features
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  setup:
+    make -C tests certs
+  runner-job:
+    runs-on: ubuntu-latest
+    services:
+      nats:
+        image: nats
+        ports:
+          - "4222:4222"
+      nats-tls:
+        image: nats
+        volumes:
+          - /tmp/server.pem:/tmp/server.cert
+          - /tmp/server.key:/tmp/server.key
+          - /tmp/ca.pem:/tmp/ca.pem
+        command: "--tlscert /tmp/server.cert --tlskey /tmp/server.key --tlscacert /tmp/ca.pem"
+        ports:
+          - "4223:4222"
+    steps:
+      - name: Install Luarocks
+        run: apt-get update && apt-get -y --no-install-recommends install luarocks
+      - name: Install telescope
+        run: luarocks install telescope
+      - name: Test Features
+        run: make test

Makefile

@@ -1,5 +1,5 @@
 test:
-	tsc -f tests/*.lua
+	make -C tests certs test
 
 test-deps:
 	luarocks install telescope

docker-compose.yml

@@ -4,4 +4,14 @@ services:
   nats:
     image: nats
     ports:
-      - "4222:4222"
+      - "4222:4222"
+
+  nats-tls:
+    image: nats
+    volumes:
+      - /tmp/server.pem:/tmp/server.cert
+      - /tmp/server.key:/tmp/server.key
+      - /tmp/ca.pem:/tmp/ca.pem
+    command: "--tlscert /tmp/server.cert --tlskey /tmp/server.key --tlscacert /tmp/ca.pem"
+    ports:
+      - "4223:4222"

tests/Makefile

@@ -0,0 +1,10 @@
+test:
+	tsc -f *.lua
+
+certs:
+	# Generate a new CA
+	openssl req -new -x509 -days 1 -extensions v3_ca -keyout /tmp/ca.key -out /tmp/ca.pem -nodes -config configCA.conf
+	# Generate a new server certificate request
+	openssl req -new -newkey rsa:2048 -nodes -keyout /tmp/server.key -out /tmp/server.csr -config configServer.conf
+	# Sign the server cert
+	openssl x509 -req -days 1 -CA /tmp/ca.pem -CAkey /tmp/ca.key -CAcreateserial -in /tmp/server.csr -out /tmp/server.pem -extfile configServer.conf -extensions v3_req

tests/configCA.conf

@@ -0,0 +1,23 @@
+[req]
+default_bits = 2048
+encrypt_key = no
+x509_extensions = custom_extensions
+prompt = no
+distinguished_name = distinguished_name
+
+[v3_ca]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer:always
+basicConstraints = critical, CA:true
+
+[distinguished_name]
+CN = lua-nats TLS regression tests CA
+OU = PowerDNS.com BV
+countryName = NL
+
+[custom_extensions]
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
+
+[CA_default]
+copy_extensions = copy

tests/configServer.conf

@@ -0,0 +1,20 @@
+[req]
+default_bits = 2048
+encrypt_key = no
+prompt = no
+distinguished_name = server_distinguished_name
+req_extensions = v3_req
+
+[server_distinguished_name]
+CN = tls.tests.lua-nats.powerdns.com
+OU = PowerDNS.com BV
+countryName = NL
+
+[v3_req]
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.1 = tls.tests.lua-nats.powerdns.com
+IP.2 = 127.0.0.1