diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2017-05-08 07:02:16 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2017-05-10 10:35:49 +0200 |
| commit | d82a574d145a41dc9c9bc28e7f6ed24c402349f8 (patch) | |
| tree | 7e18cdf9f611320839848231cd21aa39aea0b32b /tests | |
| parent | 163507fd61084c7f56359e422a971f484a7c194f (diff) | |
| download | gnutls-d82a574d145a41dc9c9bc28e7f6ed24c402349f8.tar.gz | |
tests: added check for gnutls-cli's sni-hostname option
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/Makefile.am | 2 | ||||
| -rwxr-xr-x | tests/sni-hostname.sh | 66 |
2 files changed, 67 insertions, 1 deletions
diff --git a/tests/Makefile.am b/tests/Makefile.am index a7f894a087..3239b278c7 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -299,7 +299,7 @@ dist_check_SCRIPTS = rfc2253-escape-test rsa-md5-collision/rsa-md5-collision.sh if !WINDOWS dist_check_SCRIPTS += fastopen.sh pkgconfig.sh starttls.sh starttls-ftp.sh starttls-smtp.sh \ - starttls-lmtp.sh starttls-pop3.sh starttls-nntp.sh starttls-sieve.sh + starttls-lmtp.sh starttls-pop3.sh starttls-nntp.sh starttls-sieve.sh sni-hostname.sh if ENABLE_DANE dist_check_SCRIPTS += danetool.sh endif diff --git a/tests/sni-hostname.sh b/tests/sni-hostname.sh new file mode 100755 index 0000000000..ec01e0fda1 --- /dev/null +++ b/tests/sni-hostname.sh @@ -0,0 +1,66 @@ +#!/bin/sh + +# Copyright (C) 2017 Nikos Mavrogiannopoulos +# +# Author: Nikos Mavrogiannopoulos +# +# This file is part of GnuTLS. +# +# GnuTLS is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License as published by the +# Free Software Foundation; either version 3 of the License, or (at +# your option) any later version. +# +# GnuTLS is distributed in the hope that it will be useful, but +# WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU +# General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GnuTLS; if not, write to the Free Software Foundation, +# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. + +srcdir="${srcdir:-.}" +SERV="${SERV:-../src/gnutls-serv${EXEEXT}}" +CLI="${CLI:-../src/gnutls-cli${EXEEXT}}" +unset RETCODE + +if ! test -x "${SERV}"; then + exit 77 +fi + +if ! test -x "${CLI}"; then + exit 77 +fi + +if test "${WINDIR}" != ""; then + exit 77 +fi + +if ! test -z "${VALGRIND}"; then + VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=15" +fi + + +SERV="${SERV} -q" + +. "${srcdir}/scripts/common.sh" + +echo "Checking SNI hostname in gnutls-cli" + +eval "${GETPORT}" +launch_server $$ --echo --priority "NORMAL:+ANON-ECDH" --sni-hostname-fatal --sni-hostname example.com +PID=$! +wait_server ${PID} + +${VALGRIND} "${CLI}" -p "${PORT}" 127.0.0.1 --sni-hostname example.com --priority "NORMAL:+ANON-ECDH:+ANON-DH" </dev/null >/dev/null || \ + fail ${PID} "1. rehandshake should have succeeded!" + +${VALGRIND} "${CLI}" -p "${PORT}" 127.0.0.1 --sni-hostname noexample.com --priority "NORMAL:+ANON-ECDH:+ANON-DH" </dev/null >/dev/null && \ + fail ${PID} "2. rehandshake should have failed!" + + +kill ${PID} +wait + +exit 0 |