zdtm: Add --tls option

Signed-off-by: Radostin Stoyanov <rstoyanov1@gmail.com>

4 files changed, 246 insertions, 6 deletions

diff --git a/test/pki/cacert.pem b/test/pki/cacert.pem
new file mode 100644
index 000000000..2f8706616
--- /dev/null
+++ b/test/pki/cacert.pem
@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test/pki/cert.pem b/test/pki/cert.pem
new file mode 100644
index 000000000..a0946ee41
--- /dev/null
+++ b/test/pki/cert.pem
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test/pki/key.pem b/test/pki/key.pem
new file mode 100644
index 000000000..eda1aa761
--- /dev/null
+++ b/test/pki/key.pem
@@ -0,0 +1,182 @@
+Public Key Info:
+	Public Key Algorithm: RSA
+	Key Security Level: High (3072 bits)
+
+modulus:
+	00:d5:f5:9e:fe:09:53:cf:93:11:bd:9b:59:e8:f9:3b
+	69:ce:a3:0a:70:db:34:98:4c:30:10:d6:8c:80:bd:5d
+	cf:f7:d6:3a:19:90:ae:55:9d:6e:4f:fe:c3:59:ab:74
+	b9:1a:5c:76:63:62:1e:fa:30:9e:43:b8:56:60:d9:75
+	5a:a0:88:ad:5e:1f:36:39:60:12:7b:84:15:43:b3:7b
+	69:58:db:8d:ed:e2:4f:8e:7b:24:36:62:6a:29:0e:a5
+	f6:bc:58:97:f6:ae:ef:cd:53:fa:d7:6d:1e:9d:40:4e
+	d4:e8:32:05:49:c5:66:94:c7:99:6b:a4:42:5d:99:87
+	3c:63:a1:a9:00:0e:36:0f:ea:c8:de:8e:12:96:5d:e6
+	23:9a:cf:0a:4d:7a:41:8e:5d:4f:69:67:2f:61:ee:08
+	ac:cc:d9:b8:d6:6a:de:9b:de:53:29:7c:dc:f7:03:f6
+	e5:53:d1:3f:e3:ad:99:c6:bf:f2:28:af:f4:cb:2d:d2
+	05:98:58:ce:ba:d0:d7:f7:ab:8c:8a:66:e0:8d:2c:6a
+	41:c8:39:ec:4c:d4:04:25:88:58:a8:c0:5c:d5:be:bf
+	e9:6a:25:c0:a5:61:8e:72:e0:49:54:86:e6:3c:8f:db
+	10:6b:93:87:49:eb:de:99:a2:17:46:2b:90:30:91:85
+	aa:e0:12:56:1c:cf:ae:0a:43:d2:31:3c:50:8a:70:a8
+	e4:32:71:4f:8d:34:ad:67:ba:dc:33:2a:8a:bc:67:33
+	a8:56:8c:e5:ae:9c:f6:02:27:da:27:94:ad:56:77:f3
+	2b:ed:23:92:e8:fe:ec:59:e4:88:d7:a8:1d:45:76:0e
+	31:8b:6b:72:7f:d5:8c:1c:ac:b6:b7:27:41:af:d6:d3
+	8d:f4:11:5d:f3:53:fd:99:b7:c2:80:d7:39:8b:07:ce
+	3f:92:7f:a9:ed:2d:50:a4:3b:57:e7:73:3c:34:dd:f3
+	d1:57:4d:ff:b9:54:5a:e6:63:c6:cb:28:fd:c5:d3:c1
+	ab:
+
+public exponent:
+	01:00:01:
+
+private exponent:
+	1e:38:b0:79:7f:85:c8:17:24:f5:5c:41:29:e8:32:5d
+	32:a3:d2:f0:b7:f5:c8:e1:52:14:be:c9:5f:d1:df:b3
+	65:75:6c:05:7a:6b:35:8a:a4:2f:46:73:ff:71:79:6e
+	3f:eb:f9:88:f6:2e:1b:f6:cc:14:12:b0:98:c3:7e:91
+	0b:85:e2:bf:1d:b7:82:09:30:f3:23:68:01:85:13:94
+	80:c9:9a:55:94:96:da:30:48:a0:29:ec:86:da:1b:d5
+	2b:2b:74:63:92:b8:2a:8f:87:29:f0:ae:d7:55:63:0d
+	2d:b3:0b:0e:2d:84:dc:d5:08:b5:ac:a0:f7:29:9d:71
+	89:3d:27:6a:eb:96:f5:4e:9b:8a:dc:14:82:0a:c7:5c
+	16:1c:d2:7e:b9:1b:13:69:d8:b2:b1:b1:7e:aa:a9:ad
+	06:ce:66:0e:5b:50:10:42:2a:0a:fd:29:14:f7:09:63
+	c1:20:18:5f:27:81:46:12:8c:b8:f4:89:a6:3d:55:a1
+	d4:64:fc:f2:db:d7:9c:f5:be:f7:9d:88:5c:6d:36:a4
+	4b:ea:c5:e3:ea:32:81:6b:f3:47:b5:35:d5:c4:1a:b2
+	ae:12:9d:19:a3:ec:a4:af:41:7e:5e:34:9d:f5:bc:b9
+	1f:a3:c2:32:b4:fc:95:a7:7a:54:04:e2:d6:4e:10:2f
+	66:68:8b:3b:20:ea:05:db:2e:72:01:11:e7:7c:f8:72
+	0f:60:be:f1:27:19:ad:3a:6f:e9:70:56:3a:86:6e:46
+	0d:e3:55:31:66:77:09:84:48:b9:25:4b:c3:26:70:12
+	ca:a4:5f:c6:3d:6a:e5:db:4d:63:04:b8:09:07:c9:30
+	85:08:9d:77:40:26:60:da:10:c2:53:d2:00:0d:9e:d9
+	d5:71:06:30:eb:fb:f7:3f:82:1f:b3:9a:f3:4d:24:86
+	2e:94:fd:06:9e:dc:26:68:fa:64:c3:f9:fa:08:c4:b2
+	ec:7a:f5:55:c5:10:b5:e2:2d:de:ba:04:30:10:5b:99
+
+
+prime1:
+	00:fb:d1:47:9d:9e:73:f8:1e:09:21:fd:89:16:05:56
+	af:a5:cf:52:d5:cd:f7:26:18:d1:84:3a:36:65:0b:a2
+	cd:f9:b8:99:c0:c7:ef:00:c9:2f:c9:92:1a:1d:3d:86
+	58:3b:b1:be:d4:8c:c6:1b:df:ba:ee:87:aa:d1:22:47
+	18:bd:de:01:0f:0d:cb:ac:d0:48:a4:f4:93:e2:a6:cb
+	b5:b7:f5:f5:72:dd:ec:ac:13:e8:3d:62:23:54:ac:52
+	ff:ee:9a:e1:7f:b0:ae:3b:41:38:d8:39:2b:40:ef:25
+	81:50:b0:98:db:f8:40:16:6e:1a:41:79:22:90:58:99
+	80:c2:0d:ba:b5:d3:54:ec:28:33:e4:b0:58:ea:de:61
+	a1:b7:30:0b:9d:dc:73:62:c2:07:d3:75:91:48:49:dd
+	be:cf:b2:90:95:8f:29:6c:6f:f6:68:cb:cf:d5:24:a3
+	d7:37:81:1b:34:3b:af:9a:48:52:af:53:7c:f7:32:a2
+	3f:
+
+prime2:
+	00:d9:83:5e:be:0a:ea:0b:d9:66:63:56:3b:9e:44:aa
+	46:6d:8d:6c:10:81:4b:de:19:5d:2c:16:7e:30:7c:ad
+	23:9a:89:53:cc:18:e8:e8:51:2b:79:35:d0:67:7d:9e
+	8f:be:ea:63:5e:14:c0:6b:ba:02:6c:4a:da:07:70:9d
+	14:fa:be:1e:40:47:50:6f:f2:5a:87:9e:b6:b1:b8:55
+	2c:b6:a2:e3:b0:24:ba:ea:9b:55:87:8b:4b:cf:40:4a
+	25:b4:89:cf:9e:76:ca:79:4a:f4:74:b7:ee:cf:6c:8f
+	cb:e3:3d:9e:86:3b:44:b7:70:ec:05:0c:68:ce:d6:c3
+	a2:ec:e6:11:d6:2f:f7:80:26:a9:5c:aa:b9:a6:33:84
+	a9:00:43:cf:72:07:8a:91:59:a2:b1:de:79:07:6b:81
+	67:a5:c2:4b:fd:29:8a:1a:96:66:57:66:d4:37:9a:98
+	69:d1:19:24:53:b1:a4:54:68:1e:8c:2b:b4:93:19:ed
+	95:
+
+coefficient:
+	00:90:9a:7f:6f:14:a8:bc:79:3f:25:e5:62:f9:5d:29
+	78:a4:78:8e:7a:e4:8a:62:8a:7f:9c:ae:75:95:fe:ee
+	1a:99:53:40:01:76:29:7d:48:85:28:a2:2a:9f:0f:10
+	8c:19:6a:36:6b:e1:ac:a2:07:b9:72:5c:b9:a6:20:bb
+	8f:cb:f5:ea:dd:3f:0e:ab:9d:c1:57:7e:7b:96:f9:da
+	b0:52:3c:3f:62:94:e7:5c:04:9e:ac:60:cd:4d:ec:7e
+	68:d3:fb:2a:b4:02:f0:0e:be:37:bc:2a:f8:6e:8d:31
+	b5:38:67:00:9e:67:9f:71:d0:88:36:32:69:4b:20:73
+	eb:a1:d9:bc:72:c2:7e:39:1a:36:cc:c1:45:a2:14:37
+	e6:ca:db:4d:0b:5b:68:a4:ff:b7:7b:b1:db:2f:70:27
+	a1:6c:31:3f:c0:c3:23:04:b0:7a:e2:0d:21:ba:5a:80
+	52:c1:a1:2b:57:72:20:b6:ed:b1:e8:3b:95:88:81:90
+	5d:
+
+exp1:
+	00:ef:ce:66:20:01:44:b9:35:89:46:f8:56:33:45:54
+	3f:23:6d:23:9a:7e:71:6d:b3:56:db:50:40:7a:cb:b0
+	f7:ec:67:52:ec:96:b9:d1:8a:c6:5a:74:2b:30:4b:66
+	03:e2:9d:2b:78:e8:b2:c4:da:b3:fe:f1:ed:c7:09:98
+	a1:44:37:05:d5:1b:33:2a:58:93:c5:9b:30:b6:38:57
+	68:af:4e:a8:b7:02:06:9f:fc:b9:3e:b3:95:a7:ce:0f
+	a0:b0:ce:88:0e:7c:e7:ff:7f:e6:2d:6b:8b:f8:63:85
+	d8:f7:49:a5:d8:5d:3a:52:e1:f9:58:fe:8d:de:de:b1
+	18:40:34:a8:e8:fc:df:33:a2:39:81:00:3b:3d:38:17
+	cb:d4:53:09:cd:04:a2:51:9b:2b:ae:c1:98:60:3a:0f
+	d4:e5:a0:4c:36:51:46:86:80:bd:2d:21:62:c3:bd:07
+	d6:2d:82:62:b0:c4:62:3f:4f:be:86:3e:c0:93:fc:81
+	2b:
+
+exp2:
+	11:e4:73:93:b0:74:26:3b:60:e7:c4:fd:2c:7c:bb:81
+	05:9b:ff:8a:b0:08:1c:a1:fb:7f:17:ee:93:70:7e:11
+	92:b1:bf:39:e7:c6:a8:ed:9c:64:e1:1f:5e:93:ff:ca
+	15:4b:54:97:35:9f:ca:7c:c7:9c:3e:e0:06:82:a5:f9
+	46:d3:02:cc:08:d1:be:13:b2:8c:bb:6a:8d:dd:fa:eb
+	ad:ae:62:8a:67:cb:14:67:68:b6:b8:a7:a8:c9:c2:0f
+	ad:f5:34:25:f5:e1:9b:ee:a5:83:40:6a:1d:97:f1:90
+	35:06:29:97:23:22:f8:f0:0a:0a:34:46:1e:d5:9d:cc
+	36:2e:8a:c3:12:b9:0a:4a:a3:dd:e2:91:58:f1:9d:f5
+	04:f7:8f:05:f3:46:db:c4:02:d5:1c:d6:d9:dc:67:0d
+	ae:9d:f8:00:40:3d:83:08:62:2c:c8:61:a6:9d:49:f2
+	52:67:fe:0c:00:6d:e3:1f:99:7b:b0:50:af:55:0f:ad
+
+
+
+Public Key PIN:
+	pin-sha256:EiqPFBPoLKkCzVlK8KoKYGQT/LSo7/0iLg/I7nKt1/0=
+Public Key ID:
+	sha256:122a8f1413e82ca902cd594af0aa0a606413fcb4a8effd222e0fc8ee72add7fd
+	sha1:4b4510b7a19c88cbce887f5b9d531a6d81d34400
+
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/test/zdtm.py b/test/zdtm.py
index a01947557..000f590b0 100755
--- a/test/zdtm.py
+++ b/test/zdtm.py
@@ -960,6 +960,7 @@ class criu:
 		self.__lazy_pages_p = None
 		self.__page_server_p = None
 		self.__dump_process = None
+		self.__tls = self.__tls_options() if opts['tls'] else []
 		self.__criu_bin = opts['criu_bin']
 		self.__crit_bin = opts['crit_bin']
 
@@ -1008,6 +1009,13 @@ class criu:
 			print("Removing %s" % self.__dump_path)
 			shutil.rmtree(self.__dump_path)
 
+	def __tls_options(self):
+		pki_dir = os.path.dirname(os.path.abspath(__file__)) + "/pki"
+		return ["--tls", "--tls-no-cn-verify",
+			"--tls-key", pki_dir + "/key.pem",
+			"--tls-cert", pki_dir + "/cert.pem",
+			"--tls-cacert", pki_dir + "/cacert.pem"]
+
 	def __ddir(self):
 		return os.path.join(self.__dump_path, "%d" % self.__iter)
 
@@ -1141,12 +1149,12 @@ class criu:
 		if self.__page_server:
 			print("Adding page server")
 
-			ps_opts = ["--port", "12345"]
+			ps_opts = ["--port", "12345"] + self.__tls
 			if self.__dedup:
 				ps_opts += ["--auto-dedup"]
 
 			self.__page_server_p = self.__criu_act("page-server", opts = ps_opts, nowait = True)
-			a_opts += ["--page-server", "--address", "127.0.0.1", "--port", "12345"]
+			a_opts += ["--page-server", "--address", "127.0.0.1", "--port", "12345"] + self.__tls
 
 		a_opts += self.__test.getdopts()
 
@@ -1167,7 +1175,7 @@ class criu:
 
 		nowait = False
 		if self.__lazy_migrate and action == "dump":
-			a_opts += ["--lazy-pages", "--port", "12345"]
+			a_opts += ["--lazy-pages", "--port", "12345"] + self.__tls
 			nowait = True
 		self.__dump_process = self.__criu_act(action, opts = a_opts + opts, nowait = nowait)
 		if self.__mdedup and self.__iter > 1:
@@ -1215,10 +1223,12 @@ class criu:
 		if self.__lazy_pages or self.__lazy_migrate:
 			lp_opts = []
 			if self.__remote_lazy_pages or self.__lazy_migrate:
-				lp_opts += ['--page-server', "--port", "12345", "--address", "127.0.0.1"]
+				lp_opts += ["--page-server", "--port", "12345",
+					    "--address", "127.0.0.1"] + self.__tls
+
 			if self.__remote_lazy_pages:
 				ps_opts = ["--pidfile", "ps.pid",
-					   "--port", "12345", "--lazy-pages"]
+					   "--port", "12345", "--lazy-pages"] + self.__tls
 				self.__page_server_p = self.__criu_act("page-server", opts = ps_opts, nowait = True)
 			self.__lazy_pages_p = self.__criu_act("lazy-pages", opts = lp_opts, nowait = True)
 			r_opts += ["--lazy-pages"]
@@ -1719,7 +1729,7 @@ class Launcher:
 		nd = ('nocr', 'norst', 'pre', 'iters', 'page_server', 'sibling', 'stop', 'empty_ns',
 				'fault', 'keep_img', 'report', 'snaps', 'sat', 'script', 'rpc', 'lazy_pages',
 				'join_ns', 'dedup', 'sbs', 'freezecg', 'user', 'dry_run', 'noauto_dedup',
-				'remote_lazy_pages', 'show_stats', 'lazy_migrate',
+				'remote_lazy_pages', 'show_stats', 'lazy_migrate', 'tls',
 				'criu_bin', 'crit_bin')
 		arg = repr((name, desc, flavor, {d: self.__opts[d] for d in nd}))
 
@@ -2283,6 +2293,7 @@ rp.add_argument("--ignore-taint", help = "Don't care about a non-zero kernel tai
 rp.add_argument("--lazy-pages", help = "restore pages on demand", action = 'store_true')
 rp.add_argument("--lazy-migrate", help = "restore pages on demand", action = 'store_true')
 rp.add_argument("--remote-lazy-pages", help = "simulate lazy migration", action = 'store_true')
+rp.add_argument("--tls", help = "use TLS for migration", action = 'store_true')
 rp.add_argument("--title", help = "A test suite title", default = "criu")
 rp.add_argument("--show-stats", help = "Show criu statistics", action = 'store_true')
 rp.add_argument("--criu-bin", help = "Path to criu binary", default = '../criu/criu')