2
0

70-test_sslcertstatus.t 2.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566
  1. #! /usr/bin/env perl
  2. # Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  3. #
  4. # Licensed under the Apache License 2.0 (the "License"). You may not use
  5. # this file except in compliance with the License. You can obtain a copy
  6. # in the file LICENSE in the source distribution or at
  7. # https://www.openssl.org/source/license.html
  8. use strict;
  9. use OpenSSL::Test qw/:DEFAULT cmdstr srctop_file bldtop_dir/;
  10. use OpenSSL::Test::Utils;
  11. use TLSProxy::Proxy;
  12. my $test_name = "test_sslcertstatus";
  13. setup($test_name);
  14. plan skip_all => "TLSProxy isn't usable on $^O"
  15. if $^O =~ /^(VMS)$/;
  16. plan skip_all => "$test_name needs the dynamic engine feature enabled"
  17. if disabled("engine") || disabled("dynamic-engine");
  18. plan skip_all => "$test_name needs the sock feature enabled"
  19. if disabled("sock");
  20. plan skip_all => "$test_name needs the ocsp feature enabled"
  21. if disabled("ocsp");
  22. plan skip_all => "$test_name needs TLS enabled"
  23. if alldisabled(available_protocols("tls"))
  24. || (!disabled("tls1_3") && disabled("tls1_2"));
  25. my $proxy = TLSProxy::Proxy->new(
  26. \&certstatus_filter,
  27. cmdstr(app(["openssl"]), display => 1),
  28. srctop_file("apps", "server.pem"),
  29. (!$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE})
  30. );
  31. #Test 1: Sending a status_request extension in both ClientHello and
  32. #ServerHello but then omitting the CertificateStatus message is valid
  33. $proxy->clientflags("-status -no_tls1_3");
  34. $proxy->start() or plan skip_all => "Unable to start up Proxy for tests";
  35. plan tests => 1;
  36. ok(TLSProxy::Message->success, "Missing CertificateStatus message");
  37. sub certstatus_filter
  38. {
  39. my $proxy = shift;
  40. # We're only interested in the initial ServerHello
  41. if ($proxy->flight != 1) {
  42. return;
  43. }
  44. foreach my $message (@{$proxy->message_list}) {
  45. if ($message->mt == TLSProxy::Message::MT_SERVER_HELLO) {
  46. #Add the status_request to the ServerHello even though we are not
  47. #going to send a CertificateStatus message
  48. $message->set_extension(TLSProxy::Message::EXT_STATUS_REQUEST,
  49. "");
  50. $message->repack();
  51. }
  52. }
  53. }