From Fedora Project Wiki
Description
This test case ensures that the apr-util-openssl
module properly provides OpenSSL support within the APR.
Setup
- Install the
apr-util-openssl
module using the package manager:sudo dnf install apr-util-openssl
. - Optionally, install the Apache HTTP server with SSL support:
sudo dnf install httpd mod_ssl
for additional verification. - Ensure you have SSL certificates ready for testing or use tools like
openssl
to generate self-signed certificates.
How to test
- Open a terminal.
- If using self-signed certificates, generate them using
openssl
(you can find many guides online on how to do this). - Modify the Apache configuration to use the generated SSL certificates.
- Restart the Apache HTTP server to apply changes:
sudo systemctl restart httpd
. - Check the status to ensure it's running without errors:
sudo systemctl status httpd
. - Access the Apache server over HTTPS (you may use a web browser or command line tools like
curl
orwget
with the-k
flag if using self-signed certificates). - Check the server logs for any errors related to SSL or the
apr-util-openssl
module.
Expected Results
- The Apache HTTP server should restart without errors related to SSL or the
apr-util-openssl
module. - Accessing the server over HTTPS should be successful, with encryption being handled properly.
- Server logs (
/var/log/httpd/error_log
or system journal) should not contain errors related to SSL or theapr-util-openssl
module.
Optional
For further testing depth:
- Perform stress tests on the server using tools like Apache's
ab
tool but targeting HTTPS endpoints to ensure stability under load. - Test different SSL configurations and ciphers to validate broader compatibility and support.
- Monitor system logs during high traffic scenarios for any warnings or errors related to SSL handling.