1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
require 'spec_helper'
require 'webrick'
class PuppetSpec::HTTPSServer
include PuppetSpec::Fixtures
attr_reader :ca_cert, :ca_crl, :server_cert, :server_key
def initialize(ca_cert: nil, ca_crl: nil, server_key: nil, server_cert: nil)
@ca_cert = ca_cert || cert_fixture('ca.pem')
@ca_crl = ca_crl || crl_fixture('crl.pem')
@server_key = server_key || key_fixture('127.0.0.1-key.pem')
@server_cert = server_cert || cert_fixture('127.0.0.1.pem')
@config = WEBrick::Config::HTTP.dup
end
def handle_request(ctx, ssl, response_proc)
req = WEBrick::HTTPRequest.new(@config)
req.parse(ssl)
# always drain request body
req.body
res = WEBrick::HTTPResponse.new(@config)
res.status = 200
res.body = 'OK'
# The server explicitly closes the connection after handling it,
# so explicitly tell the client we're not going to keep it open.
# Without this, ruby will add `Connection: Keep-Alive`, which
# confuses the client when it tries to reuse the half-closed
# connection.
res['Connection'] = 'close'
response_proc.call(req, res) if response_proc
res.send_response(ssl)
end
def start_server(ctx_proc: nil, response_proc: nil, &block)
errors = []
IO.pipe {|stop_pipe_r, stop_pipe_w|
store = OpenSSL::X509::Store.new
Array(@ca_cert).each { |c| store.add_cert(c) }
store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
ctx = OpenSSL::SSL::SSLContext.new
ctx.cert_store = store
ctx.cert = @server_cert
ctx.key = @server_key
ctx.verify_mode = OpenSSL::SSL::VERIFY_NONE
ctx_proc.call(ctx) if ctx_proc
Socket.do_not_reverse_lookup = true
tcps = TCPServer.new("127.0.0.1", 0)
begin
port = tcps.connect_address.ip_port
begin
server_thread = Thread.new do
begin
ssls = OpenSSL::SSL::SSLServer.new(tcps, ctx)
ssls.start_immediately = true
loop do
readable, = IO.select([ssls, stop_pipe_r])
break if readable.include?(stop_pipe_r)
ssl = ssls.accept
begin
handle_request(ctx, ssl, response_proc)
ensure
ssl.close
end
end
rescue => e
# uncomment this line if something goes wrong
# puts "SERVER #{e.message}"
errors << e
end
end
begin
yield port
ensure
stop_pipe_w.close
end
ensure
server_thread.join
end
ensure
tcps.close
end
}
errors
end
end
|
