test: add check on unsupported ssl

Closes #202

Author: themilchenko

.github/workflows/test.yml

@@ -12,9 +12,14 @@ jobs:
       matrix:
         tarantool: ['1.10', '2.10', '2.11', '3.1', '3.2']
         coveralls: [false]
+        static-build: [false]
         include:
-          - tarantool: '2.11'
+          - tarantool: '3.5'
             coveralls: true
+            static-build: false
+          - tarantool: '3.5'
+            coveralls: false
+            static-build: true
     runs-on: [ubuntu-22.04]
     steps:
       - uses: actions/checkout@master
@@ -32,7 +37,8 @@ jobs:
         env:
           DEBIAN_FRONTEND: noninteractive
 
-      - name: Install Tarantool
+      - name: Install dynamic Tarantool
+        if: matrix.static-build == false
         run: tt install tarantool ${{ matrix.tarantool }} --dynamic
 
       - name: Cache rocks

test/helpers.lua

@@ -148,4 +148,17 @@ helpers.tcp_connection_exists = function(host, port)
     return ok
 end
 
+local ffi = require('ffi')
+local has_tls_method = pcall(function()
+    return ffi.C.TLS_server_method() ~= nil
+end)
+
+helpers.skip_if_ssl_not_enabled = function()
+    luatest.skip_if(not has_tls_method, 'tarantool does not support ssl')
+end
+
+helpers.skip_if_ssl_enabled = function()
+    luatest.skip_if(has_tls_method, 'tarantool supports ssl')
+end
+
 return helpers

test/integration/http_tls_enabled_test.lua

@@ -9,6 +9,10 @@ local g = t.group('ssl')
 
 local ssl_data_dir = fio.pathjoin(helpers.get_testdir_path(), "ssl_data")
 
+g.before_all(function()
+    helpers.skip_if_ssl_not_enabled()
+end)
+
 local server_test_cases = {
     test_key_password_missing = {
         ssl_opts = {

test/integration/http_tls_enabled_validate_test.lua

@@ -111,10 +111,22 @@ local test_cases = {
         },
         expected_err_msg = '"unknown" option not exists. Available options: "on", "off", "optional"'
     },
+    ssl_socket_not_supported = {
+        check_ssl = true,
+        opts = {
+            ssl_cert_file = fio.pathjoin(ssl_data_dir, 'server.crt'),
+            ssl_key_file = fio.pathjoin(ssl_data_dir, 'server.key'),
+        },
+        expected_err_msg = 'ssl socket is not supported',
+    }
 }
 
 for name, case in pairs(test_cases) do
     g['test_ssl_option_' .. name] = function()
+        helpers.skip_if_ssl_not_enabled()
+        if case.check_ssl == true then
+            helpers.skip_if_ssl_enabled()
+        end
         t.assert_error_msg_contains(case.expected_err_msg, function()
             http_server.new('host', 8080, case.opts)
         end)

test/integration/httpd_role_test.lua

@@ -88,6 +88,10 @@ tls_config.groups['group-001'].replicasets['replicaset-001'].roles_cfg['roles.ht
 tls_config.groups['group-001'].replicasets['replicaset-001'].roles_cfg['roles.httpd'].default
     .ssl_password_file = fio.pathjoin(ssl_data_dir, 'passwords')
 
+g.before_all(function()
+    helpers.skip_if_ssl_not_enabled()
+end)
+
 g.before_each(function(cg)
     helpers.skip_if_not_tarantool3()
 

test/unit/httpd_role_test.lua

@@ -254,6 +254,9 @@ for name, case in pairs(validation_cases) do
     )
 
     g[test_name] = function()
+        if name:find('ssl_') ~= nil and case.err == nil then
+            helpers.skip_if_ssl_not_enabled()
+        end
         local ok, res = pcall(httpd_role.validate, case.cfg)
 
         if case.err ~= nil then