提交 c27a4049 编写于 作者: R Richard Levitte

Remake test/sslsessionticktest.pl into a recipe

Reviewed-by: NRich Salz <rsalz@openssl.org>
上级 25be5f44
...@@ -53,9 +53,24 @@ ...@@ -53,9 +53,24 @@
# Hudson (tjh@cryptsoft.com). # Hudson (tjh@cryptsoft.com).
use strict; use strict;
use OpenSSL::Test qw/:DEFAULT cmdstr top_file top_dir/;
use TLSProxy::Proxy; use TLSProxy::Proxy;
use File::Temp qw(tempfile); use File::Temp qw(tempfile);
my $test_name = "test_sslsessiontick";
setup($test_name);
plan skip_all => "$test_name can only be performed with OpenSSL configured shared"
unless (map { chomp; s/^SHARED_LIBS=\s*//; $_ }
grep { /^SHARED_LIBS=/ }
do { local @ARGV = ( top_file("Makefile") ); <> })[0] ne "";
$ENV{OPENSSL_ENGINES} = top_dir("engines");
$ENV{OPENSSL_ia32cap} = '~0x200000200000000';
sub checkmessages($$$$$$);
sub clearall();
my $chellotickext = 0; my $chellotickext = 0;
my $shellotickext = 0; my $shellotickext = 0;
my $fullhand = 0; my $fullhand = 0;
...@@ -63,9 +78,12 @@ my $ticketseen = 0; ...@@ -63,9 +78,12 @@ my $ticketseen = 0;
my $proxy = TLSProxy::Proxy->new( my $proxy = TLSProxy::Proxy->new(
undef, undef,
@ARGV cmdstr(app(["openssl"])),
top_file("apps", "server.pem")
); );
plan tests => 5;
#Test 1: By default with no existing session we should get a session ticket #Test 1: By default with no existing session we should get a session ticket
#Expected result: ClientHello extension seen; ServerHello extension seen #Expected result: ClientHello extension seen; ServerHello extension seen
# NewSessionTicket message seen; Full handshake # NewSessionTicket message seen; Full handshake
...@@ -107,7 +125,7 @@ checkmessages(4, "Session resumption session ticket test", 1, 0, 0, 0); ...@@ -107,7 +125,7 @@ checkmessages(4, "Session resumption session ticket test", 1, 0, 0, 0);
#Expected result: ClientHello extension seen; ServerHello extension seen #Expected result: ClientHello extension seen; ServerHello extension seen
# NewSessionTicket message seen; Abbreviated handshake # NewSessionTicket message seen; Abbreviated handshake
clearall(); clearall();
(my $fh, my $session) = tempfile(); ($fh, $session) = tempfile();
$proxy->serverconnects(2); $proxy->serverconnects(2);
$proxy->clientflags("-sess_out ".$session." -no_ticket"); $proxy->clientflags("-sess_out ".$session." -no_ticket");
$proxy->start(); $proxy->start();
...@@ -117,50 +135,45 @@ $proxy->clientstart(); ...@@ -117,50 +135,45 @@ $proxy->clientstart();
checkmessages(5, "Session resumption with ticket capable client without a " checkmessages(5, "Session resumption with ticket capable client without a "
."ticket", 1, 1, 1, 0); ."ticket", 1, 1, 1, 0);
sub checkmessages() sub checkmessages($$$$$$)
{ {
my ($testno, $testname, $testch, $testsh, $testtickseen, $testhand) = @_; my ($testno, $testname, $testch, $testsh, $testtickseen, $testhand) = @_;
foreach my $message (@{$proxy->message_list}) { subtest $testname => sub {
if ($message->mt == TLSProxy::Message::MT_CLIENT_HELLO
foreach my $message (@{$proxy->message_list}) {
if ($message->mt == TLSProxy::Message::MT_CLIENT_HELLO
|| $message->mt == TLSProxy::Message::MT_SERVER_HELLO) { || $message->mt == TLSProxy::Message::MT_SERVER_HELLO) {
#Get the extensions data #Get the extensions data
my %extensions = %{$message->extension_data}; my %extensions = %{$message->extension_data};
if (defined if (defined
$extensions{TLSProxy::ClientHello::EXT_SESSION_TICKET}) { $extensions{TLSProxy::ClientHello::EXT_SESSION_TICKET}) {
if ($message->mt == TLSProxy::Message::MT_CLIENT_HELLO) { if ($message->mt == TLSProxy::Message::MT_CLIENT_HELLO) {
$chellotickext = 1; $chellotickext = 1;
} else { } else {
$shellotickext = 1; $shellotickext = 1;
} }
} }
} elsif ($message->mt == TLSProxy::Message::MT_CLIENT_KEY_EXCHANGE) { } elsif ($message->mt == TLSProxy::Message::MT_CLIENT_KEY_EXCHANGE) {
#Must be doing a full handshake #Must be doing a full handshake
$fullhand = 1; $fullhand = 1;
} elsif ($message->mt == TLSProxy::Message::MT_NEW_SESSION_TICKET) { } elsif ($message->mt == TLSProxy::Message::MT_NEW_SESSION_TICKET) {
$ticketseen = 1; $ticketseen = 1;
} }
} }
TLSProxy::Message->success or die "FAILED: $testname: Hanshake failed " plan tests => 5;
."(Test $testno)\n";
if (($testch && !$chellotickext) || (!$testch && $chellotickext)) { ok(TLSProxy::Message->success, "Hanshake");
die "FAILED: $testname: ClientHello extension Session Ticket check " ok(($testch && $chellotickext) || (!$testch && !$chellotickext),
."failed (Test $testno)\n"; "ClientHello extension Session Ticket check");
} ok(($testsh && $shellotickext) || (!$testsh && !$shellotickext),
if (($testsh && !$shellotickext) || (!$testsh && $shellotickext)) { "ServerHello extension Session Ticket check");
die "FAILED: $testname: ServerHello extension Session Ticket check " ok(($testtickseen && $ticketseen) || (!$testtickseen && !$ticketseen),
."failed (Test $testno)\n"; "Session Ticket message presence check");
} ok(($testhand && $fullhand) || (!$testhand && !$fullhand),
if (($testtickseen && !$ticketseen) || (!$testtickseen && $ticketseen)) { "Session Ticket full handshake check");
die "FAILED: $testname: Session Ticket message presence check failed "
."(Test $testno)\n";
}
if (($testhand && !$fullhand) || (!$testhand && $fullhand)) {
die "FAILED: $testname: Session Ticket full handshake check failed "
."(Test $testno)\n";
} }
print "SUCCESS: $testname (Test#$testno)\n";
} }
sub clearall() sub clearall()
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册