diff options
Diffstat (limited to 'chromium/net/quic/quic_crypto_client_stream_test.cc')
| -rw-r--r-- | chromium/net/quic/quic_crypto_client_stream_test.cc | 194 |
1 files changed, 194 insertions, 0 deletions
diff --git a/chromium/net/quic/quic_crypto_client_stream_test.cc b/chromium/net/quic/quic_crypto_client_stream_test.cc new file mode 100644 index 00000000000..9f9e7f75c57 --- /dev/null +++ b/chromium/net/quic/quic_crypto_client_stream_test.cc @@ -0,0 +1,194 @@ +// Copyright (c) 2012 The Chromium Authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +#include "net/quic/quic_crypto_client_stream.h" + +#include "base/memory/scoped_ptr.h" +#include "net/quic/crypto/aes_128_gcm_12_encrypter.h" +#include "net/quic/crypto/quic_decrypter.h" +#include "net/quic/crypto/quic_encrypter.h" +#include "net/quic/quic_protocol.h" +#include "net/quic/test_tools/crypto_test_utils.h" +#include "net/quic/test_tools/quic_test_utils.h" +#include "net/quic/test_tools/simple_quic_framer.h" +#include "testing/gmock/include/gmock/gmock.h" +#include "testing/gtest/include/gtest/gtest.h" + +namespace net { +namespace test { +namespace { + +const char kServerHostname[] = "example.com"; + +class TestQuicVisitor : public NoOpFramerVisitor { + public: + TestQuicVisitor() + : frame_valid_(false) { + } + + // NoOpFramerVisitor + virtual bool OnStreamFrame(const QuicStreamFrame& frame) OVERRIDE { + frame_ = frame; + frame_valid_ = true; + return true; + } + + bool frame_valid() const { + return frame_valid_; + } + QuicStreamFrame* frame() { return &frame_; } + + private: + QuicStreamFrame frame_; + bool frame_valid_; + + DISALLOW_COPY_AND_ASSIGN(TestQuicVisitor); +}; + +class QuicCryptoClientStreamTest : public ::testing::Test { + public: + QuicCryptoClientStreamTest() + : addr_(), + connection_(new PacketSavingConnection(1, addr_, true)), + session_(new TestSession(connection_, DefaultQuicConfig(), true)), + stream_(new QuicCryptoClientStream(kServerHostname, session_.get(), + &crypto_config_)) { + session_->SetCryptoStream(stream_.get()); + crypto_config_.SetDefaults(); + } + + void CompleteCryptoHandshake() { + EXPECT_TRUE(stream_->CryptoConnect()); + CryptoTestUtils::HandshakeWithFakeServer(connection_, stream_.get()); + } + + void ConstructHandshakeMessage() { + CryptoFramer framer; + message_data_.reset(framer.ConstructHandshakeMessage(message_)); + } + + IPEndPoint addr_; + PacketSavingConnection* connection_; + scoped_ptr<TestSession> session_; + scoped_ptr<QuicCryptoClientStream> stream_; + CryptoHandshakeMessage message_; + scoped_ptr<QuicData> message_data_; + QuicCryptoClientConfig crypto_config_; +}; + +TEST_F(QuicCryptoClientStreamTest, NotInitiallyConected) { + if (!Aes128Gcm12Encrypter::IsSupported()) { + LOG(INFO) << "AES GCM not supported. Test skipped."; + return; + } + + EXPECT_FALSE(stream_->encryption_established()); + EXPECT_FALSE(stream_->handshake_confirmed()); +} + +TEST_F(QuicCryptoClientStreamTest, ConnectedAfterSHLO) { + if (!Aes128Gcm12Encrypter::IsSupported()) { + LOG(INFO) << "AES GCM not supported. Test skipped."; + return; + } + + CompleteCryptoHandshake(); + EXPECT_TRUE(stream_->encryption_established()); + EXPECT_TRUE(stream_->handshake_confirmed()); +} + +TEST_F(QuicCryptoClientStreamTest, MessageAfterHandshake) { + if (!Aes128Gcm12Encrypter::IsSupported()) { + LOG(INFO) << "AES GCM not supported. Test skipped."; + return; + } + + CompleteCryptoHandshake(); + + EXPECT_CALL(*connection_, SendConnectionClose( + QUIC_CRYPTO_MESSAGE_AFTER_HANDSHAKE_COMPLETE)); + message_.set_tag(kCHLO); + ConstructHandshakeMessage(); + stream_->ProcessData(message_data_->data(), message_data_->length()); +} + +TEST_F(QuicCryptoClientStreamTest, BadMessageType) { + if (!Aes128Gcm12Encrypter::IsSupported()) { + LOG(INFO) << "AES GCM not supported. Test skipped."; + return; + } + + EXPECT_TRUE(stream_->CryptoConnect()); + + message_.set_tag(kCHLO); + ConstructHandshakeMessage(); + + EXPECT_CALL(*connection_, SendConnectionCloseWithDetails( + QUIC_INVALID_CRYPTO_MESSAGE_TYPE, "Expected REJ")); + stream_->ProcessData(message_data_->data(), message_data_->length()); +} + +TEST_F(QuicCryptoClientStreamTest, NegotiatedParameters) { + if (!Aes128Gcm12Encrypter::IsSupported()) { + LOG(INFO) << "AES GCM not supported. Test skipped."; + return; + } + + CompleteCryptoHandshake(); + + const QuicConfig* config = session_->config(); + EXPECT_EQ(kQBIC, config->congestion_control()); + EXPECT_EQ(kDefaultTimeoutSecs, + config->idle_connection_state_lifetime().ToSeconds()); + EXPECT_EQ(kDefaultMaxStreamsPerConnection, + config->max_streams_per_connection()); + EXPECT_EQ(0, config->keepalive_timeout().ToSeconds()); + + const QuicCryptoNegotiatedParameters& crypto_params( + stream_->crypto_negotiated_params()); + EXPECT_EQ(kAESG, crypto_params.aead); + EXPECT_EQ(kC255, crypto_params.key_exchange); +} + +TEST_F(QuicCryptoClientStreamTest, InvalidHostname) { + if (!Aes128Gcm12Encrypter::IsSupported()) { + LOG(INFO) << "AES GCM not supported. Test skipped."; + return; + } + + stream_.reset(new QuicCryptoClientStream("invalid", session_.get(), + &crypto_config_)); + session_->SetCryptoStream(stream_.get()); + + CompleteCryptoHandshake(); + EXPECT_TRUE(stream_->encryption_established()); + EXPECT_TRUE(stream_->handshake_confirmed()); +} + +TEST_F(QuicCryptoClientStreamTest, ExpiredServerConfig) { + // Seed the config with a cached server config. + CompleteCryptoHandshake(); + + connection_ = new PacketSavingConnection(1, addr_, true); + session_.reset(new TestSession(connection_, QuicConfig(), true)); + stream_.reset(new QuicCryptoClientStream(kServerHostname, session_.get(), + &crypto_config_)); + + session_->SetCryptoStream(stream_.get()); + session_->config()->SetDefaults(); + + // Advance time 5 years to ensure that we pass the expiry time of the cached + // server config. + reinterpret_cast<MockClock*>(const_cast<QuicClock*>(connection_->clock())) + ->AdvanceTime(QuicTime::Delta::FromSeconds(60 * 60 * 24 * 365 * 5)); + + // Check that a client hello was sent and that CryptoConnect doesn't fail + // with an error. + EXPECT_TRUE(stream_->CryptoConnect()); + ASSERT_EQ(1u, connection_->packets_.size()); +} + +} // namespace +} // namespace test +} // namespace net |