1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #include <string> 6 7 #include "base/memory/ref_counted.h" 8 #include "base/memory/scoped_ptr.h" 9 #include "base/memory/scoped_vector.h" 10 #include "net/base/net_util.h" 11 #include "net/base/request_priority.h" 12 #include "net/dns/mock_host_resolver.h" 13 #include "net/http/http_auth_handler_mock.h" 14 #include "net/http/http_network_session.h" 15 #include "net/http/http_network_transaction.h" 16 #include "net/http/http_request_info.h" 17 #include "net/http/http_server_properties_impl.h" 18 #include "net/http/transport_security_state.h" 19 #include "net/proxy/proxy_service.h" 20 #include "net/socket/socket_test_util.h" 21 #include "testing/gtest/include/gtest/gtest.h" 22 23 namespace net { 24 25 namespace { 26 27 class TLS10SSLConfigService : public SSLConfigService { 28 public: 29 TLS10SSLConfigService() { 30 ssl_config_.version_min = SSL_PROTOCOL_VERSION_SSL3; 31 ssl_config_.version_max = SSL_PROTOCOL_VERSION_TLS1; 32 } 33 34 virtual void GetSSLConfig(SSLConfig* config) OVERRIDE { 35 *config = ssl_config_; 36 } 37 38 private: 39 virtual ~TLS10SSLConfigService() {} 40 41 SSLConfig ssl_config_; 42 }; 43 44 class TLS11SSLConfigService : public SSLConfigService { 45 public: 46 TLS11SSLConfigService() { 47 ssl_config_.version_min = SSL_PROTOCOL_VERSION_SSL3; 48 ssl_config_.version_max = SSL_PROTOCOL_VERSION_TLS1_1; 49 } 50 51 virtual void GetSSLConfig(SSLConfig* config) OVERRIDE { 52 *config = ssl_config_; 53 } 54 55 private: 56 virtual ~TLS11SSLConfigService() {} 57 58 SSLConfig ssl_config_; 59 }; 60 61 } // namespace 62 63 class HttpNetworkTransactionSSLTest : public testing::Test { 64 protected: 65 virtual void SetUp() { 66 ssl_config_service_ = new TLS10SSLConfigService; 67 session_params_.ssl_config_service = ssl_config_service_.get(); 68 69 auth_handler_factory_.reset(new HttpAuthHandlerMock::Factory()); 70 session_params_.http_auth_handler_factory = auth_handler_factory_.get(); 71 72 proxy_service_.reset(ProxyService::CreateDirect()); 73 session_params_.proxy_service = proxy_service_.get(); 74 75 session_params_.client_socket_factory = &mock_socket_factory_; 76 session_params_.host_resolver = &mock_resolver_; 77 session_params_.http_server_properties = 78 http_server_properties_.GetWeakPtr(); 79 session_params_.transport_security_state = &transport_security_state_; 80 } 81 82 HttpRequestInfo* GetRequestInfo(const std::string& url) { 83 HttpRequestInfo* request_info = new HttpRequestInfo; 84 request_info->url = GURL(url); 85 request_info->method = "GET"; 86 request_info_vector_.push_back(request_info); 87 return request_info; 88 } 89 90 SSLConfig& GetServerSSLConfig(HttpNetworkTransaction* trans) { 91 return trans->server_ssl_config_; 92 } 93 94 scoped_refptr<SSLConfigService> ssl_config_service_; 95 scoped_ptr<HttpAuthHandlerMock::Factory> auth_handler_factory_; 96 scoped_ptr<ProxyService> proxy_service_; 97 98 MockClientSocketFactory mock_socket_factory_; 99 MockHostResolver mock_resolver_; 100 HttpServerPropertiesImpl http_server_properties_; 101 TransportSecurityState transport_security_state_; 102 HttpNetworkSession::Params session_params_; 103 ScopedVector<HttpRequestInfo> request_info_vector_; 104 }; 105 106 // Tests that HttpNetworkTransaction attempts to fallback from 107 // TLS 1.1 to TLS 1.0, then from TLS 1.0 to SSL 3.0. 108 TEST_F(HttpNetworkTransactionSSLTest, SSLFallback) { 109 ssl_config_service_ = new TLS11SSLConfigService; 110 session_params_.ssl_config_service = ssl_config_service_.get(); 111 // |ssl_data1| is for the first handshake (TLS 1.1), which will fail 112 // for protocol reasons (e.g., simulating a version rollback attack). 113 SSLSocketDataProvider ssl_data1(ASYNC, ERR_SSL_PROTOCOL_ERROR); 114 mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data1); 115 StaticSocketDataProvider data1(NULL, 0, NULL, 0); 116 mock_socket_factory_.AddSocketDataProvider(&data1); 117 118 // |ssl_data2| contains the handshake result for a TLS 1.0 119 // handshake which will be attempted after the TLS 1.1 120 // handshake fails. 121 SSLSocketDataProvider ssl_data2(ASYNC, ERR_SSL_PROTOCOL_ERROR); 122 mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data2); 123 StaticSocketDataProvider data2(NULL, 0, NULL, 0); 124 mock_socket_factory_.AddSocketDataProvider(&data2); 125 126 // |ssl_data3| contains the handshake result for a SSL 3.0 127 // handshake which will be attempted after the TLS 1.0 128 // handshake fails. 129 SSLSocketDataProvider ssl_data3(ASYNC, ERR_SSL_PROTOCOL_ERROR); 130 mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data3); 131 StaticSocketDataProvider data3(NULL, 0, NULL, 0); 132 mock_socket_factory_.AddSocketDataProvider(&data3); 133 134 scoped_refptr<HttpNetworkSession> session( 135 new HttpNetworkSession(session_params_)); 136 scoped_ptr<HttpNetworkTransaction> trans( 137 new HttpNetworkTransaction(DEFAULT_PRIORITY, session.get())); 138 139 TestCompletionCallback callback; 140 // This will consume |ssl_data1|, |ssl_data2| and |ssl_data3|. 141 int rv = callback.GetResult( 142 trans->Start(GetRequestInfo("https://www.paypal.com/"), 143 callback.callback(), BoundNetLog())); 144 EXPECT_EQ(ERR_SSL_PROTOCOL_ERROR, rv); 145 146 SocketDataProviderArray<SocketDataProvider>& mock_data = 147 mock_socket_factory_.mock_data(); 148 // Confirms that |ssl_data1|, |ssl_data2| and |ssl_data3| are consumed. 149 EXPECT_EQ(3u, mock_data.next_index()); 150 151 SSLConfig& ssl_config = GetServerSSLConfig(trans.get()); 152 // |version_max| fallbacks to SSL 3.0. 153 EXPECT_EQ(SSL_PROTOCOL_VERSION_SSL3, ssl_config.version_max); 154 EXPECT_TRUE(ssl_config.version_fallback); 155 } 156 157 } // namespace net 158 159