Home | History | Annotate | Download | only in tls 
      1 // Copyright 2010 The Go Authors. All rights reserved.
      2 // Use of this source code is governed by a BSD-style
      3 // license that can be found in the LICENSE file.
      4 
      5 package tls
      6 
      7 import (
      8 	"testing"
      9 )
     10 
     11 func TestRoundUp(t *testing.T) {
     12 	if roundUp(0, 16) != 0 ||
     13 		roundUp(1, 16) != 16 ||
     14 		roundUp(15, 16) != 16 ||
     15 		roundUp(16, 16) != 16 ||
     16 		roundUp(17, 16) != 32 {
     17 		t.Error("roundUp broken")
     18 	}
     19 }
     20 
     21 var paddingTests = []struct {
     22 	in          []byte
     23 	good        bool
     24 	expectedLen int
     25 }{
     26 	{[]byte{1, 2, 3, 4, 0}, true, 4},
     27 	{[]byte{1, 2, 3, 4, 0, 1}, false, 0},
     28 	{[]byte{1, 2, 3, 4, 99, 99}, false, 0},
     29 	{[]byte{1, 2, 3, 4, 1, 1}, true, 4},
     30 	{[]byte{1, 2, 3, 2, 2, 2}, true, 3},
     31 	{[]byte{1, 2, 3, 3, 3, 3}, true, 2},
     32 	{[]byte{1, 2, 3, 4, 3, 3}, false, 0},
     33 	{[]byte{1, 4, 4, 4, 4, 4}, true, 1},
     34 	{[]byte{5, 5, 5, 5, 5, 5}, true, 0},
     35 	{[]byte{6, 6, 6, 6, 6, 6}, false, 0},
     36 }
     37 
     38 func TestRemovePadding(t *testing.T) {
     39 	for i, test := range paddingTests {
     40 		payload, good := removePadding(test.in)
     41 		expectedGood := byte(255)
     42 		if !test.good {
     43 			expectedGood = 0
     44 		}
     45 		if good != expectedGood {
     46 			t.Errorf("#%d: wrong validity, want:%d got:%d", i, expectedGood, good)
     47 		}
     48 		if good == 255 && len(payload) != test.expectedLen {
     49 			t.Errorf("#%d: got %d, want %d", i, len(payload), test.expectedLen)
     50 		}
     51 	}
     52 }
     53 
     54 var certExampleCom = `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`
     55 
     56 var certWildcardExampleCom = `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`
     57 
     58 var certFooExampleCom = `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`
     59 
     60 var certDoubleWildcardExampleCom = `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`
     61 
     62 func TestCertificateSelection(t *testing.T) {
     63 	config := Config{
     64 		Certificates: []Certificate{
     65 			{
     66 				Certificate: [][]byte{fromHex(certExampleCom)},
     67 			},
     68 			{
     69 				Certificate: [][]byte{fromHex(certWildcardExampleCom)},
     70 			},
     71 			{
     72 				Certificate: [][]byte{fromHex(certFooExampleCom)},
     73 			},
     74 			{
     75 				Certificate: [][]byte{fromHex(certDoubleWildcardExampleCom)},
     76 			},
     77 		},
     78 	}
     79 
     80 	config.BuildNameToCertificate()
     81 
     82 	pointerToIndex := func(c *Certificate) int {
     83 		for i := range config.Certificates {
     84 			if c == &config.Certificates[i] {
     85 				return i
     86 			}
     87 		}
     88 		return -1
     89 	}
     90 
     91 	certificateForName := func(name string) *Certificate {
     92 		clientHello := &ClientHelloInfo{
     93 			ServerName: name,
     94 		}
     95 		if cert, err := config.getCertificate(clientHello); err != nil {
     96 			t.Errorf("unable to get certificate for name '%s': %s", name, err)
     97 			return nil
     98 		} else {
     99 			return cert
    100 		}
    101 	}
    102 
    103 	if n := pointerToIndex(certificateForName("example.com")); n != 0 {
    104 		t.Errorf("example.com returned certificate %d, not 0", n)
    105 	}
    106 	if n := pointerToIndex(certificateForName("bar.example.com")); n != 1 {
    107 		t.Errorf("bar.example.com returned certificate %d, not 1", n)
    108 	}
    109 	if n := pointerToIndex(certificateForName("foo.example.com")); n != 2 {
    110 		t.Errorf("foo.example.com returned certificate %d, not 2", n)
    111 	}
    112 	if n := pointerToIndex(certificateForName("foo.bar.example.com")); n != 3 {
    113 		t.Errorf("foo.bar.example.com returned certificate %d, not 3", n)
    114 	}
    115 	if n := pointerToIndex(certificateForName("foo.bar.baz.example.com")); n != 0 {
    116 		t.Errorf("foo.bar.baz.example.com returned certificate %d, not 0", n)
    117 	}
    118 }
    119