1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
#!perl
# Before `make install' is performed this script should be runnable with
# `make test'. After `make install' it should work as `perl t/nonblock.t'
# Tests the use if SSL_cert instead of SSL_cert_file
# because Net::SSLeay does not implement the necessary functions
# to create an X509 from file/string (PEM_read_bio_X509) I just
# create a server with SSL_cert_file and get the X509 from it using
# Net::SSLeay::get_certificate.
# Test should also test if SSL_cert is an array of X509*
# and if SSL_key is an EVP_PKEY* but with the current function in
# Net::SSLeay I don't see a way to test it
use strict;
use warnings;
use Net::SSLeay;
use Socket;
use IO::Socket::SSL;
do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
use Test::More tests => 9;
Test::More->builder->use_numbers(0);
Test::More->builder->no_ending(1);
my $ID = 'server';
my %server_args = (
LocalAddr => '127.0.0.1',
LocalPort => 0,
Listen => 2,
SSL_server => 1,
SSL_verify_mode => 0x00,
SSL_ca_file => "t/certs/test-ca.pem",
SSL_key_file => "t/certs/client-key.pem",
);
my ($x509,@server);
foreach my $test ( 1,2,3 ) {
my %args = %server_args;
my $spec;
if ( $test == 1 ) {
# 1st test: create server with SSL_cert_file
$args{SSL_cert_file} = "t/certs/client-cert.pem";
$spec = 'Using SSL_cert_file';
} elsif ( $test == 2 ) {
# 2nd test: use x509 from previous server
# with SSL_cert instead of SSL_cert_file
$args{SSL_cert} = $x509;
$spec = 'Using SSL_cert';
} elsif ( $test == 3 ) {
# 3rd test: empty SSL_cert, so that default
# SSL_cert_file gets not used
# server creation should fail
$spec = 'Empty SSL_cert';
$args{SSL_cert} = undef;
}
# create server
my $server = IO::Socket::SSL->new( %args ) || do {
fail( "$spec: $!" );
next;
};
my $saddr = $server->sockhost.':'.$server->sockport;
pass("Server Initialization $spec");
push @server,$server;
# then connect to it from a child
defined( my $pid = fork() ) || die $!;
if ( $pid == 0 ) {
close($server);
$ID = 'client';
my $to_server = IO::Socket::SSL->new(
PeerAddr => $saddr,
Domain => AF_INET,
SSL_verify_mode => 0x00,
);
if ( $test == 3 ) {
ok( !$to_server, "$spec: connect succeeded" );
exit;
} elsif ( ! $to_server ) {
fail("connect failed: $!");
exit;
}
pass( "client connected $spec" );
<$to_server>; # wait for close from parent
exit;
}
my $to_client = $server->accept;
if ( $test == 3 ) {
ok( !$to_client, "$spec: accept succeeded" );
} elsif ( ! $to_client ) {
kill(9,$pid);
fail("$spec: accept failed: $!");
exit;
} else {
pass( "Server accepted $spec" );
# save the X509 certificate from the server
$x509 ||= Net::SSLeay::get_certificate($to_client->_get_ssl_object);
}
close($to_client) if $to_client;
wait;
}
|
