diff options
Diffstat (limited to 'test/simple/test-tls-ocsp-callback.js')
-rw-r--r-- | test/simple/test-tls-ocsp-callback.js | 109 |
1 files changed, 109 insertions, 0 deletions
diff --git a/test/simple/test-tls-ocsp-callback.js b/test/simple/test-tls-ocsp-callback.js new file mode 100644 index 00000000000..fd45586b5ea --- /dev/null +++ b/test/simple/test-tls-ocsp-callback.js @@ -0,0 +1,109 @@ +// Copyright Joyent, Inc. and other Node contributors. +// +// Permission is hereby granted, free of charge, to any person obtaining a +// copy of this software and associated documentation files (the +// "Software"), to deal in the Software without restriction, including +// without limitation the rights to use, copy, modify, merge, publish, +// distribute, sublicense, and/or sell copies of the Software, and to permit +// persons to whom the Software is furnished to do so, subject to the +// following conditions: +// +// The above copyright notice and this permission notice shall be included +// in all copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS +// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN +// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, +// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR +// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE +// USE OR OTHER DEALINGS IN THE SOFTWARE. + +var common = require('../common'); + +if (!process.features.tls_ocsp) { + console.error('Skipping because node compiled without OpenSSL or ' + + 'with old OpenSSL version.'); + process.exit(0); +} +if (!common.opensslCli) { + console.error('Skipping because node compiled without OpenSSL CLI.'); + process.exit(0); +} + +test({ response: false }, function() { + test({ response: 'hello world' }); +}); + +function test(testOptions, cb) { + var assert = require('assert'); + var tls = require('tls'); + var fs = require('fs'); + var join = require('path').join; + var spawn = require('child_process').spawn; + + var keyFile = join(common.fixturesDir, 'keys', 'agent1-key.pem'); + var certFile = join(common.fixturesDir, 'keys', 'agent1-cert.pem'); + var caFile = join(common.fixturesDir, 'keys', 'ca1-cert.pem'); + var key = fs.readFileSync(keyFile); + var cert = fs.readFileSync(certFile); + var ca = fs.readFileSync(caFile); + var options = { + key: key, + cert: cert, + ca: [ca] + }; + var requestCount = 0; + var ocspCount = 0; + var ocspResponse; + var session; + + var server = tls.createServer(options, function(cleartext) { + cleartext.on('error', function(er) { + // We're ok with getting ECONNRESET in this test, but it's + // timing-dependent, and thus unreliable. Any other errors + // are just failures, though. + if (er.code !== 'ECONNRESET') + throw er; + }); + ++requestCount; + cleartext.end(); + }); + server.on('OCSPRequest', function(cert, issuer, callback) { + ++ocspCount; + assert.ok(Buffer.isBuffer(cert)); + assert.ok(Buffer.isBuffer(issuer)); + + // Just to check that async really works there + setTimeout(function() { + callback(null, + testOptions.response ? new Buffer(testOptions.response) : null); + }, 100); + }); + server.listen(common.PORT, function() { + var client = tls.connect({ + port: common.PORT, + requestOCSP: true, + rejectUnauthorized: false + }, function() { + }); + client.on('OCSPResponse', function(resp) { + ocspResponse = resp; + if (resp) + client.destroy(); + }); + client.on('close', function() { + server.close(cb); + }); + }); + + process.on('exit', function() { + if (testOptions.response) { + assert.equal(ocspResponse.toString(), testOptions.response); + } else { + assert.ok(ocspResponse === null); + } + assert.equal(requestCount, testOptions.response ? 0 : 1); + assert.equal(ocspCount, 1); + }); +} |