<?xml version="1.0" encoding="US-ASCII"?>
<testcase>
<info>
<keywords>
HTTP
HTTP proxy
HSTS
url_effective
</keywords>
</info>

<reply>

# we use this as response to a CONNECT
<connect crlf="headers" nocheck="yes">
HTTP/1.1 403 not OK at all
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Content-Length: 6
Connection: close
Funny-head: yesyes

-foo-
</connect>
</reply>

<client>
<server>
http
</server>
<features>
HSTS
proxy
https
</features>

<file name="%LOGDIR/input%TESTNUMBER">
.hsts.example "99991001 04:47:41"
</file>

<name>
HSTS and %{url_effective} after upgrade
</name>
<command>
-x http://%HOSTIP:%HTTPPORT http://this.hsts.example/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER -w '%{url_effective}\n'
</command>
<disable>
test-duphandle
</disable>
</client>

<verify>
# we let it CONNECT to the server to confirm HSTS but deny from there
<protocol crlf="headers">
CONNECT this.hsts.example:443 HTTP/1.1
Host: this.hsts.example:443
User-Agent: curl/%VERSION
Proxy-Connection: Keep-Alive

</protocol>
<stdout crlf="headers">
HTTP/1.1 403 not OK at all
Date: Tue, 09 Nov 2010 14:49:00 GMT
Server: test-server/fake
Content-Length: 6
Connection: close
Funny-head: yesyes

https://this.hsts.example/%TESTNUMBER
</stdout>
# Proxy CONNECT aborted
<errorcode>
7
</errorcode>
</verify>
</testcase>
