<?xml version="1.0" encoding="US-ASCII"?>
<testcase>
<info>
<keywords>
HTTP
HSTS
</keywords>
</info>

<reply>

<data crlf="headers" nocheck="yes">
HTTP/1.1 200 OK
Date: Tue, 09 Nov 2010 14:49:00 GMT
Content-Length: 6
Connection: close
Strict-Transport-Security: max-age=1152921504606846976

-foo-
</data>
</reply>

<client>
<server>
http
</server>
<features>
HSTS
Debug
</features>

# November 11, 2030
<setenv>
CURL_HSTS_HTTP=yes
CURL_TIME=1920582000
</setenv>

<name>
HSTS with extreme max-age
</name>
<command>
http://this.hsts.example:%HTTPPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER --resolve this.hsts.example:%HTTPPORT:%HOSTIP
</command>
<file name="%LOGDIR/input%TESTNUMBER">
# Your HSTS cache. https://curl.se/docs/hsts.html
# This file was generated by libcurl! Edit at your own risk.
somehere.example "20330525 03:33:20"
elsewhere.example.com "20330727 03:33:20"
</file>
<disable>
test-duphandle
</disable>
</client>

<verify>
# we let it CONNECT to the server to confirm HSTS but deny from there
<protocol crlf="headers">
GET /1862 HTTP/1.1
Host: this.hsts.example:%HTTPPORT
User-Agent: curl/%VERSION
Accept: */*

</protocol>
<file name="%LOGDIR/input%TESTNUMBER" mode="text">
# Your HSTS cache. https://curl.se/docs/hsts.html
# This file was generated by libcurl! Edit at your own risk.
somehere.example "20330525 03:33:20"
elsewhere.example.com "20330727 03:33:20"
this.hsts.example "20321109 23:00:00"
</file>

</verify>
</testcase>
