From a44e2142d7d945ac2f3b226885c7f7bae6afcb52 Mon Sep 17 00:00:00 2001
From: Alex <aik099@users.noreply.github.com>
Date: Wed, 8 Jan 2025 20:23:51 +0200
Subject: [PATCH] Prepare SSL-aware testing environment

---
 .github/workflows/tests.yml | 27 ++++++++++++++++++++++++++-
 tests/nginx_vhost_config    | 20 ++++++++++++++++++++
 2 files changed, 46 insertions(+), 1 deletion(-)
 create mode 100644 tests/nginx_vhost_config

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 49a3b13..7d20f27 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -43,7 +43,7 @@ jobs:
             phpunit_config: 'phpunit10.xml.dist' # PHPUnit 10.5
       fail-fast: false
     env:
-      REPO_URL: http://localhost:8002/
+      REPO_URL: https://localhost/
 
     steps:
       - name: Checkout
@@ -70,10 +70,35 @@ jobs:
         with:
           dependency-versions: "highest"
 
+      - name: Create a temporary folder
+        run: |
+            mkdir build
+
+      - name: Install mkcert
+        run: |
+          sudo apt-get update
+          sudo apt-get install libnss3-tools
+          cd build
+          curl -JLO "https://dl.filippo.io/mkcert/latest?for=linux/amd64"
+          chmod +x mkcert-v*-linux-amd64
+          sudo cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert
+
+      - name: Generate an SSL certificate
+        run: |
+          cd build
+          mkcert -install
+          mkcert -key-file key.pem -cert-file cert.pem localhost 127.0.0.1 ::1
+
       - name: Setup test web server
         run: |
           php -S localhost:8002 -t $(pwd) > /dev/null 2> /tmp/webserver_output.txt &
 
+      - name: Setup Nginx
+        run: |
+          sudo chmod o+w /etc/nginx/sites-available/default 
+          sudo cat tests/nginx_vhost_config > /etc/nginx/sites-available/default
+          sudo systemctl restart nginx.service
+
       - name: Wait for browser & PHP to start
         run: |
           while ! nc -z localhost 8002 </dev/null; do echo Waiting for PHP server to start...; sleep 1; done
diff --git a/tests/nginx_vhost_config b/tests/nginx_vhost_config
new file mode 100644
index 0000000..db17a98
--- /dev/null
+++ b/tests/nginx_vhost_config
@@ -0,0 +1,20 @@
+server {
+	listen 80;
+    listen 443 default_server ssl;
+    server_name localhost;
+
+    ssl_certificate /home/runner/work/jira-api-restclient/jira-api-restclient/build/cert.pem;
+    ssl_certificate_key /home/runner/work/jira-api-restclient/jira-api-restclient/build/key.pem;
+
+    if ($server_protocol = "HTTP/1.0") {
+        return 426;
+    }
+
+    location / {
+        proxy_http_version 1.1;
+        proxy_pass http://localhost:8002;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+}