test(qa): await initial TLS listener health (#153906)

This commit is contained in:
Dallin Romney 2026-09-20 23:59:15 -07:00 • committed by GitHub
parent f689192e93
commit fc1d80aeea
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -433,9 +433,10 @@ export async function runGatewayTlsPinningProof(): Promise<GatewayTlsPinningProo
});
}
};
if ((await probeHealth())?.statusCode !== 200) {
throw new Error("Initial local TLS health probe failed");
}
await waitForRenewalFact(
async () => ((await probeHealth())?.statusCode === 200 ? true : undefined),
"the initial accepted local TLS health listener",
);
const initialTarget = await missedRenewalProbe.resolveWebSocketTarget(port);
if (initialTarget?.tlsFingerprint !== preparedTls.fingerprintSha256) {
throw new Error("A WebSocket-first probe did not verify the initial listener pin");