This commit is contained in:
@@ -0,0 +1,84 @@
|
||||
require 'em_test_helper'
|
||||
|
||||
class TestSslDhParam < Test::Unit::TestCase
|
||||
def setup
|
||||
$dir = File.dirname(File.expand_path(__FILE__)) + '/'
|
||||
$dhparam_file = File.join($dir, 'dhparam.pem')
|
||||
end
|
||||
|
||||
module Client
|
||||
def post_init
|
||||
start_tls
|
||||
end
|
||||
|
||||
def ssl_handshake_completed
|
||||
$client_handshake_completed = true
|
||||
$client_cipher_name = get_cipher_name
|
||||
close_connection
|
||||
end
|
||||
|
||||
def unbind
|
||||
EM.stop_event_loop
|
||||
end
|
||||
end
|
||||
|
||||
module Server
|
||||
def post_init
|
||||
start_tls(:dhparam => $dhparam_file, :cipher_list => "DHE,EDH")
|
||||
end
|
||||
|
||||
def ssl_handshake_completed
|
||||
$server_handshake_completed = true
|
||||
$server_cipher_name = get_cipher_name
|
||||
end
|
||||
end
|
||||
|
||||
module NoDhServer
|
||||
def post_init
|
||||
start_tls(:cipher_list => "DHE,EDH")
|
||||
end
|
||||
|
||||
def ssl_handshake_completed
|
||||
$server_handshake_completed = true
|
||||
$server_cipher_name = get_cipher_name
|
||||
end
|
||||
end
|
||||
|
||||
def test_no_dhparam
|
||||
omit_unless(EM.ssl?)
|
||||
omit_if(EM.library_type == :pure_ruby) # DH will work with defaults
|
||||
omit_if(rbx?)
|
||||
|
||||
$client_handshake_completed, $server_handshake_completed = false, false
|
||||
$server_cipher_name, $client_cipher_name = nil, nil
|
||||
|
||||
EM.run {
|
||||
EM.start_server("127.0.0.1", 16784, NoDhServer)
|
||||
EM.connect("127.0.0.1", 16784, Client)
|
||||
}
|
||||
|
||||
assert(!$client_handshake_completed)
|
||||
assert(!$server_handshake_completed)
|
||||
end
|
||||
|
||||
def test_dhparam
|
||||
omit_unless(EM.ssl?)
|
||||
omit_if(rbx?)
|
||||
|
||||
$client_handshake_completed, $server_handshake_completed = false, false
|
||||
$server_cipher_name, $client_cipher_name = nil, nil
|
||||
|
||||
EM.run {
|
||||
EM.start_server("127.0.0.1", 16784, Server)
|
||||
EM.connect("127.0.0.1", 16784, Client)
|
||||
}
|
||||
|
||||
assert($client_handshake_completed)
|
||||
assert($server_handshake_completed)
|
||||
|
||||
assert($client_cipher_name.length > 0)
|
||||
assert_equal($client_cipher_name, $server_cipher_name)
|
||||
|
||||
assert_match(/^(DHE|EDH)/, $client_cipher_name)
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user