Tls client test (#760)

docker/include/bin/start_faux

@@ -227,8 +227,9 @@ elif [ -n "${options[expiredtls]}" ]; then
     echo Starting expired tls server on port 443 https.
     mv /root/nginx/nginxfail.conf /etc/nginx/nginx.conf
     service nginx start
-    python tlsfaux/client.py 1.2 google.com &
-    python tlsfaux/client.py 1.3 google.com &
+    DEFAULT_ROUTE=$(ip route show default | awk '/default/ {print $3}')
+    python tlsfaux/client.py 1.2 $DEFAULT_ROUTE &
+    python tlsfaux/client.py 1.3 $DEFAULT_ROUTE &
 fi
 
 if [ -n "${options[pubber]}" ]; then

docker/include/network/scripts/start_networking

@@ -68,5 +68,10 @@ if [ -f $GCP_CRED_FILE ]; then
     ) &
 fi
 
+# Setup a bad SSL Server for TLS client tests
+echo Starting expired tls server on port 443 https.
+mv /root/nginx/nginxfail.conf /etc/nginx/nginx.conf
+service nginx start
+
 echo Blocking for all eternity.
 ./autorestart_dnsmasq

docker/modules/Dockerfile.networking

@@ -5,7 +5,10 @@
 
 FROM daqf/aardvark:latest
 
-RUN $AG update && $AG install apt-transport-https ca-certificates curl gnupg2
+RUN $AG update && $AG install apt-transport-https ca-certificates curl gnupg2 
+
+RUN $AG update && $AG install -y nginx
+
 RUN echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" \
     | tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
 RUN curl https://packages.cloud.google.com/apt/doc/apt-key.gpg \
@@ -25,4 +28,9 @@ COPY udmi/ udmi/
 # Weird workaround for problem running tcdump in a privlidged container.
 RUN mv /usr/sbin/tcpdump /usr/bin/tcpdump
 
+#HTTPS Bad Server depdnency
+COPY docker/include/security/nginxfail.conf /root/nginx/
+COPY docker/include/security/nginx-site /var/www/nginx-site
+COPY docker/include/security/tlsfaux tlsfaux/
+
 ENTRYPOINT ["./start_networking"]