1 <testcase> 2 <info> 3 <keywords> 4 HTTPS 5 HTTP 6 HTTP GET 7 cookies 8 cookiejar 9 HTTP replaced headers 10 </keywords> 11 </info> 12 13 # Server-side 14 <reply> 15 <data1> 16 HTTP/1.1 200 OK 17 Date: Thu, 09 Nov 2010 14:49:00 GMT 18 Server: test-server/fake 19 Set-Cookie: super=secret; domain=example.com; path=/1561; secure; 20 Set-Cookie: supersuper=secret; domain=example.com; path=/1561/login/; secure; 21 Set-Cookie: __Secure-SID=12345; Domain=example.com 22 Set-Cookie: __Secure-SID=12346; Secure; Domain=example.com 23 Set-Cookie: supersupersuper=secret; __Secure-SID=12346; Secure; Domain=example.com 24 Set-Cookie: __Host-SID=22345 25 Set-Cookie: __Host-SID=22346; Secure 26 Set-Cookie: __Host-SID=22347; Domain=example.com 27 Set-Cookie: __Host-SID=22348; Domain=example.com; Path=/ 28 Set-Cookie: __Host-SID=22349; Secure; Domain=example.com; Path=/ 29 Set-Cookie: __Host-SID=12346; Secure; Path=/ 30 Content-Length: 7 31 32 nomnom 33 </data1> 34 <data2> 35 HTTP/1.1 200 OK 36 Date: Thu, 09 Nov 2010 14:49:00 GMT 37 Server: test-server/fake 38 Set-Cookie: super=secret; domain=example.com; path=/1561; httponly; 39 Set-Cookie: super=secret; domain=example.com; path=/1561/; httponly; 40 Set-Cookie: super=secret; domain=example.com; path=/15; httponly; 41 Set-Cookie: public=yes; domain=example.com; path=/foo; 42 Set-Cookie: supersuper=secret; domain=example.com; path=/1561/login/en; 43 Set-Cookie: supersuper=secret; domain=example.com; path=/1561/login; 44 Set-Cookie: secureoverhttp=yes; domain=example.com; path=/1561; secure; 45 Set-Cookie: __Secure-SID=22345; Domain=example.com 46 Set-Cookie: __Secure-SID=22346; Secure; Domain=example.com 47 Set-Cookie: __Host-SID=32345 48 Set-Cookie: __Host-SID=32346; Secure 49 Set-Cookie: __Host-SID=32347; Domain=example.com 50 Set-Cookie: __Host-SID=32348; Domain=example.com; Path=/ 51 Set-Cookie: __Host-SID=32349; Secure; Domain=example.com; Path=/ 52 Set-Cookie: __Host-SID=32350; Secure; Path=/ 53 Content-Length: 7 54 55 nomnom 56 </data2> 57 </reply> 58 59 # Client-side 60 <client> 61 <features> 62 SSL 63 </features> 64 <server> 65 http 66 https 67 </server> 68 <name> 69 Cookies set over HTTP can't override secure ones 70 </name> 71 <command> 72 -k https://%HOSTIP:%HTTPSPORT/15610001 -L -c log/jar1561.txt -H "Host: www.example.com" http://%HOSTIP:%HTTPPORT/15610002 -L -c log/jar1561.txt -H "Host: www.example.com" 73 </command> 74 </client> 75 <verify> 76 <strip> 77 ^User-Agent:.* 78 </strip> 79 <protocol> 80 GET /15610001 HTTP/1.1 81 Host: www.example.com 82 User-Agent: curl/7.62.0-DEV 83 Accept: */* 84 85 GET /15610002 HTTP/1.1 86 Host: www.example.com 87 User-Agent: curl/7.62.0-DEV 88 Accept: */* 89 90 </protocol> 91 <file name="log/jar1561.txt" mode="text"> 92 # Netscape HTTP Cookie File 93 # https://curl.haxx.se/docs/http-cookies.html 94 # This file was generated by libcurl! Edit at your own risk. 95 96 .example.com TRUE /foo FALSE 0 public yes 97 www.example.com FALSE / TRUE 0 __Host-SID 12346 98 .example.com TRUE / TRUE 0 supersupersuper secret 99 .example.com TRUE / TRUE 0 __Secure-SID 12346 100 .example.com TRUE /1561/login/ TRUE 0 supersuper secret 101 #HttpOnly_.example.com TRUE /15 FALSE 0 super secret 102 </file> 103 104 </verify> 105 106 </testcase> 107
