netnod / robust-tjanst Goto Github PK

How and where should the results from the tests be defined?

1. Where should it pretty print? Inside the test-container or in the js?
2. What's the output format?

Design goals:

1. Easy to understand the output without any other framework, as raw output from the test itself (i.e. docker run ..)
2. Easy for someone to read the test to browse through the different test results to understand what the test does.
3. Easy to convert to human-understandable language including localisations.

Right now we are skipping TLS verification when communicating with the Kubernetes cluster. This should be changed so we use the (self issued) ca.crt which is available in the /run/secrets/kubernetes folder. I’ve tried many different approaches but haven’t got it working correctly.

This is the error we get from the test runner if we remove the ENV TLS_SKIP_TLS_ in Dockerfile.tests

https://stackoverflow.com/questions/31673587/error-unable-to-verify-the-first-certificate-in-nodejs

Tests should identify themselves with a custom user-agent where possible so that sites being tested know where the requests are coming from

This requires @ahnberg to upload docker-hub and GKE secretes to Github.

Submitting an empty URL to /test returns unformated TypeError.

Just wanted to recommend looking at https://github.com/Webperf-se/webperf_core
It has a lot of tests, some are dependent on external services.
Everything is open source.

On test of https://dn.se ( https://robust.netnod.se/test/15cff8fb-47eb-4139-ba65-148fa9e5697f ):

Sidan går ej att nås med IPv6

https://dn.se/ gick inte att nå med protokollet IPv6. Detta innebär att en användare som försöker nå undefined som bara har IPv6 inte kan nå den. De som har både IPv4 och IPv6 måste använda IPv4 och kan inte använda den av IPv4 och IPv6 som fungerar bäst.

There is an written parameter 'undefined'.

When I test frobbit.se from an iPhone I get the following crash:

TypeError

          TypeError: Cannot read property 'map' of undefined
    at module.exports (/app/packages/tests/tests/zonemaster/messages.js:5:8)
    at buildGroups (/app/packages/web/src/tests.js:25:30)
    at /app/packages/web/src/tests.js:102:20
    at runMicrotasks ()
    at processTicksAndRejections (node:internal/process/task_queues:96:5)
    at async Object.createConnection (/app/node_modules/slonik/dist/src/factories/createConnection.js:97:18)
    at async showTest (/app/packages/web/src/tests.js:90:3)
    at async /app/packages/web/src/index.js:150:3
    at async /app/packages/web/src/index.js:41:5
    at async session (/app/node_modules/koa-session/index.js:41:7)
    at async logger (/app/node_modules/koa-logger/index.js:67:7)

A site with the HSTS header

Strict-Transport-Security: max-age=31536000

will pass, but a site with an HSTS header that looks like this

Strict-Transport-Security: max-age=31536000; includeSubDomains

will cause the HSTS test to fail, even though it shouldn't.