1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
var common = require('../common');
var assert = require('assert');
var net = require('net');
var fs = require('fs');
var tests_run = 0;
function tlsTest(port, host, caPem, keyPem, certPem) {
var N = 50;
var count = 0;
var sent_final_ping = false;
var server = net.createServer(function(socket) {
assert.equal(true, socket.remoteAddress !== null);
assert.equal(true, socket.remoteAddress !== undefined);
if (host === '127.0.0.1')
assert.equal(socket.remoteAddress, '127.0.0.1');
else if (host == null)
assert.equal(socket.remoteAddress, '127.0.0.1');
socket.setEncoding('utf8');
socket.setNoDelay();
socket.timeout = 0;
socket.addListener('data', function(data) {
var verified = socket.verifyPeer();
var peerDN = socket.getPeerCertificate('DNstring');
assert.equal(verified, 1);
assert.equal(peerDN,
'C=UK,ST=Acknack Ltd,L=Rhys Jones,O=node.js,' +
'OU=Test TLS Certificate,CN=localhost');
console.log('server got: ' + JSON.stringify(data));
assert.equal('open', socket.readyState);
assert.equal(true, count <= N);
if (/PING/.exec(data)) {
socket.write('PONG');
}
});
socket.addListener('end', function() {
assert.equal('writeOnly', socket.readyState);
socket.end();
});
socket.addListener('close', function(had_error) {
assert.equal(false, had_error);
assert.equal('closed', socket.readyState);
socket.server.close();
});
});
server.setSecure('X509_PEM', caPem, 0, keyPem, certPem);
server.listen(port, host);
var client = net.createConnection(port, host);
client.setEncoding('utf8');
client.setSecure('X509_PEM', caPem, 0, keyPem, caPem);
client.addListener('connect', function() {
assert.equal('open', client.readyState);
var verified = client.verifyPeer();
var peerDN = client.getPeerCertificate('DNstring');
assert.equal(verified, 1);
assert.equal(peerDN,
'C=UK,ST=Acknack Ltd,L=Rhys Jones,O=node.js,' +
'OU=Test TLS Certificate,CN=localhost');
client.write('PING');
});
client.addListener('data', function(data) {
assert.equal('PONG', data);
count += 1;
console.log('client got PONG');
if (sent_final_ping) {
assert.equal('readOnly', client.readyState);
return;
} else {
assert.equal('open', client.readyState);
}
if (count < N) {
client.write('PING');
} else {
sent_final_ping = true;
client.write('PING');
client.end();
}
});
client.addListener('close', function() {
assert.equal(N + 1, count);
assert.equal(true, sent_final_ping);
tests_run += 1;
});
}
var have_tls;
try {
var dummy_server = net.createServer();
dummy_server.setSecure();
have_tls = true;
} catch (e) {
have_tls = false;
}
if (have_tls) {
var caPem = fs.readFileSync(common.fixturesDir + '/test_ca.pem');
var certPem = fs.readFileSync(common.fixturesDir + '/test_cert.pem');
var keyPem = fs.readFileSync(common.fixturesDir + '/test_key.pem');
/* All are run at once, so run on different ports */
tlsTest(common.PORT, 'localhost', caPem, keyPem, certPem);
tlsTest(common.PORT + 1, null, caPem, keyPem, certPem);
process.addListener('exit', function() {
assert.equal(2, tests_run);
});
} else {
console.log('Not compiled with TLS support -- skipping test');
process.exit(0);
}
|
