Merge pull request #1369 from nicolas-fort/T4480

T4480: webproxy: Add safe-ports and ssl-safe-ports for acl squid config

1 files changed, 8 insertions, 0 deletions

diff --git a/smoketest/scripts/cli/test_service_webproxy.py b/smoketest/scripts/cli/test_service_webproxy.py
index 772d6ab16..fb9b46a06 100755
--- a/smoketest/scripts/cli/test_service_webproxy.py
+++ b/smoketest/scripts/cli/test_service_webproxy.py
@@ -87,6 +87,8 @@ class TestServiceWebProxy(VyOSUnitTestSHIM.TestCase):
         max_obj_size = '8192'
         block_mine = ['application/pdf', 'application/x-sh']
         body_max_size = '4096'
+        safe_port = '88'
+        ssl_safe_port = '8443'
 
         self.cli_set(base_path + ['listen-address', listen_ip])
         self.cli_set(base_path + ['append-domain', domain])
@@ -104,6 +106,9 @@ class TestServiceWebProxy(VyOSUnitTestSHIM.TestCase):
 
         self.cli_set(base_path + ['reply-body-max-size', body_max_size])
 
+        self.cli_set(base_path + ['safe-ports', safe_port])
+        self.cli_set(base_path + ['ssl-safe-ports', ssl_safe_port])
+
         # commit changes
         self.cli_commit()
 
@@ -122,6 +127,9 @@ class TestServiceWebProxy(VyOSUnitTestSHIM.TestCase):
 
         self.assertIn(f'reply_body_max_size {body_max_size} KB', config)
 
+        self.assertIn(f'acl Safe_ports port {safe_port}', config)
+        self.assertIn(f'acl SSL_ports port {ssl_safe_port}', config)
+
         # Check for running process
         self.assertTrue(process_named_running(PROCESS_NAME))