1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
|
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/quic/quic_session_key.h"
#include "net/base/network_anonymization_key.h"
#include "net/base/privacy_mode.h"
#include "net/base/proxy_chain.h"
#include "net/base/proxy_server.h"
#include "net/base/schemeful_site.h"
#include "net/base/session_usage.h"
#include "net/dns/public/secure_dns_policy.h"
#include "net/socket/socket_tag.h"
#include "net/third_party/quiche/src/quiche/quic/core/quic_server_id.h"
#include "testing/gtest/include/gtest/gtest.h"
#include "url/gurl.h"
namespace net {
namespace {
// Check for equality of session keys, and inequality when various pieces of the
// key differ. The SocketTag is only used on Android, and the NAK is only used
// when network partitioning is enabled.
TEST(QuicSessionKeyTest, Equality) {
QuicSessionKey key(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false);
EXPECT_EQ(key,
QuicSessionKey("www.example.org", 80, PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
EXPECT_EQ(key,
QuicSessionKey(quic::QuicServerId("www.example.org", 80),
PRIVACY_MODE_DISABLED, ProxyChain::Direct(),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
EXPECT_NE(
key, QuicSessionKey(HostPortPair("otherproxy", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
EXPECT_NE(key,
QuicSessionKey(HostPortPair("www.example.org", 80),
PRIVACY_MODE_ENABLED, ProxyChain::Direct(),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
EXPECT_NE(key, QuicSessionKey(
HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::FromSchemeHostAndPort(
ProxyServer::Scheme::SCHEME_HTTPS, "otherproxy", 443),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
EXPECT_NE(key, QuicSessionKey(
HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kProxy, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
#if BUILDFLAG(IS_ANDROID)
EXPECT_NE(key,
QuicSessionKey(HostPortPair("www.example.org", 80),
PRIVACY_MODE_DISABLED, ProxyChain::Direct(),
SessionUsage::kDestination, SocketTag(999, 999),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
#endif // BUILDFLAG(IS_ANDROID)
if (NetworkAnonymizationKey::IsPartitioningEnabled()) {
EXPECT_NE(key, QuicSessionKey(HostPortPair("www.example.org", 80),
PRIVACY_MODE_DISABLED, ProxyChain::Direct(),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey::CreateSameSite(
SchemefulSite(GURL("http://a.test/"))),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false));
}
EXPECT_NE(key,
QuicSessionKey(HostPortPair("www.example.org", 80),
PRIVACY_MODE_DISABLED, ProxyChain::Direct(),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kDisable,
/*require_dns_https_alpn=*/false));
EXPECT_NE(key,
QuicSessionKey("www.example.org", 80, PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/true));
}
// The operator< implementation is suitable for storing distinct keys in a set.
TEST(QuicSessionKeyTest, Set) {
std::vector<QuicSessionKey> session_keys = {
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("otherproxy", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_ENABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("www.example.org", 80),
PRIVACY_MODE_ENABLED_WITHOUT_CLIENT_CERTS,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::FromSchemeHostAndPort(
ProxyServer::Scheme::SCHEME_HTTPS, "otherproxy", 443),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain({
ProxyServer::FromSchemeHostAndPort(
ProxyServer::Scheme::SCHEME_HTTPS, "proxy1", 443),
ProxyServer::FromSchemeHostAndPort(
ProxyServer::Scheme::SCHEME_HTTPS, "proxy2", 443),
}),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kProxy, SocketTag(),
NetworkAnonymizationKey(), SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
#if BUILDFLAG(IS_ANDROID)
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(999, 999), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false),
#endif // BUILDFLAG(IS_ANDROID)
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kDisable,
/*require_dns_https_alpn=*/false),
QuicSessionKey(HostPortPair("www.example.org", 80), PRIVACY_MODE_DISABLED,
ProxyChain::Direct(), SessionUsage::kDestination,
SocketTag(), NetworkAnonymizationKey(),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/true),
};
if (NetworkAnonymizationKey::IsPartitioningEnabled()) {
session_keys.emplace_back(HostPortPair("www.example.org", 80),
PRIVACY_MODE_DISABLED, ProxyChain::Direct(),
SessionUsage::kDestination, SocketTag(),
NetworkAnonymizationKey::CreateSameSite(
SchemefulSite(GURL("http://a.test/"))),
SecureDnsPolicy::kAllow,
/*require_dns_https_alpn=*/false);
}
std::set<QuicSessionKey> key_set(session_keys.begin(), session_keys.end());
ASSERT_EQ(session_keys.size(), key_set.size());
}
} // namespace
} // namespace net
|
