Testsuite: operational notes for TFO

diff --git a/test/confs/4060 b/test/confs/4060
index b6e071202bc619e8365b3d22fa20a73d7a417b38..fa643ae4c5f825da07043ef531cc2355c27fa530 100644 (file)
--- a/test/confs/4060
+++ b/test/confs/4060
@@ -6,6 +6,7 @@ OPT=
 CONNECTCOND=
 
 keep_environment = PATH
+add_environment = SSLKEYLOGFILE=DIR/spool/sslkeys
 exim_path = EXIM_PATH
 host_lookup_order = bydns
 spool_directory = DIR/spool

diff --git a/test/scripts/4027-TFO-socks/4027 b/test/scripts/4027-TFO-socks/4027
index 74045356f6757a5cb2e336cd14e05833bca36293..a7412aecdab68d429c455180eeb4e1d3b4d2a427 100644 (file)
--- a/test/scripts/4027-TFO-socks/4027
+++ b/test/scripts/4027-TFO-socks/4027
@@ -1,5 +1,8 @@
 # socks5 proxy on smtp transport, TCP Fast Open
 #
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+# 
 munge loopback
 #
 #

diff --git a/test/scripts/4058-pipe-conn-tfo/4058 b/test/scripts/4058-pipe-conn-tfo/4058
index 2a06390957b5fad7ec5d003a92eb6cea2f8832c3..999cfad4a65c01e4801cdf776cf9498cc349c095 100644 (file)
--- a/test/scripts/4058-pipe-conn-tfo/4058
+++ b/test/scripts/4058-pipe-conn-tfo/4058
@@ -1,5 +1,8 @@
 # Early-pipelining, with TFO
 #
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+# 
 #
 # Packet delays so we can see TFO operational in packet captures
 # Wipe any stored TFO cookie, to start from known state.

diff --git a/test/scripts/4068-pipe-conn-gnutls-tfo/4068 b/test/scripts/4068-pipe-conn-gnutls-tfo/4068
index 9a454391a5033451de4f3b3c509c8e9cdb408470..4e9dfa500b2b452fa2eb432baf73e6b908d345fa 100644 (file)
--- a/test/scripts/4068-pipe-conn-gnutls-tfo/4068
+++ b/test/scripts/4068-pipe-conn-gnutls-tfo/4068
@@ -1,5 +1,8 @@
 # early-pipe, starttls, tfo
 #
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+# 
 # Not attempted without a cache entry
 exim -bd -DSERVER=server -oX PORT_D
 ****

diff --git a/test/scripts/4069-pipe-conn-openssl-tfo/4069 b/test/scripts/4069-pipe-conn-openssl-tfo/4069
index 2339b0c128fdda41138c9e1a5334cc7f789b3e92..41ec3a5aef8d51c9342d1bb6703473e8930c8597 100644 (file)
--- a/test/scripts/4069-pipe-conn-openssl-tfo/4069
+++ b/test/scripts/4069-pipe-conn-openssl-tfo/4069
@@ -1,9 +1,13 @@
 # early-pipe, starttls, tfo
 #
+# NOTE: ensure that TFO is fully enabled in the kernel.
+# For linux: sysctl net.ipv4.tcp_fastopen=3
+# 
 # Network delay so we can see tfo efects
 # Clear any previously-obtained tfo cookie:
 sudo perl
 system ("tc qdisc add dev lo root netem delay 50ms");
+system ("[ -e /proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec ] && echo 0 > /proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec");
 system ("ip tcp_metrics delete 127.0.0.1");
 ****
 #