mirror of
https://github.com/ruby/ruby.git
synced 2026-01-27 04:24:23 +00:00
700487ce21
This contains various improvements in tests for openssl integration:
- Remove DHE parameters from test servers. OpenSSL is almost always
compiled with ECC support nowadays and will prefer ECDHE over DHE.
- Remove an outdated omission for a bug in OpenSSL 1.1.0h released in
2018. None of our CI systems use this specific OpenSSL version.
- Use top-level return to skip tests if openssl is unavailable.
- Refactor tests for Net::HTTP#verify_callback.
https://github.com/ruby/net-http/commit/35c1745a26
85 lines
2.4 KiB
Ruby
85 lines
2.4 KiB
Ruby
# frozen_string_literal: false
|
|
begin
|
|
require 'net/https'
|
|
rescue LoadError
|
|
end
|
|
require 'test/unit'
|
|
|
|
return unless defined?(OpenSSL::SSL)
|
|
|
|
class HTTPSProxyTest < Test::Unit::TestCase
|
|
def test_https_proxy_authentication
|
|
TCPServer.open("127.0.0.1", 0) {|serv|
|
|
_, port, _, _ = serv.addr
|
|
client_thread = Thread.new {
|
|
proxy = Net::HTTP.Proxy("127.0.0.1", port, 'user', 'password')
|
|
http = proxy.new("foo.example.org", 8000)
|
|
http.use_ssl = true
|
|
http.verify_mode = OpenSSL::SSL::VERIFY_NONE
|
|
begin
|
|
http.start
|
|
rescue EOFError
|
|
end
|
|
}
|
|
server_thread = Thread.new {
|
|
sock = serv.accept
|
|
begin
|
|
proxy_request = sock.gets("\r\n\r\n")
|
|
assert_equal(
|
|
"CONNECT foo.example.org:8000 HTTP/1.1\r\n" +
|
|
"Host: foo.example.org:8000\r\n" +
|
|
"Proxy-Authorization: Basic dXNlcjpwYXNzd29yZA==\r\n" +
|
|
"\r\n",
|
|
proxy_request,
|
|
"[ruby-dev:25673]")
|
|
ensure
|
|
sock.close
|
|
end
|
|
}
|
|
assert_join_threads([client_thread, server_thread])
|
|
}
|
|
end
|
|
|
|
|
|
def read_fixture(key)
|
|
File.read(File.expand_path("../fixtures/#{key}", __dir__))
|
|
end
|
|
|
|
def test_https_proxy_ssl_connection
|
|
TCPServer.open("127.0.0.1", 0) {|tcpserver|
|
|
ctx = OpenSSL::SSL::SSLContext.new
|
|
ctx.key = OpenSSL::PKey.read(read_fixture("server.key"))
|
|
ctx.cert = OpenSSL::X509::Certificate.new(read_fixture("server.crt"))
|
|
serv = OpenSSL::SSL::SSLServer.new(tcpserver, ctx)
|
|
|
|
_, port, _, _ = serv.addr
|
|
client_thread = Thread.new {
|
|
proxy = Net::HTTP.Proxy("127.0.0.1", port, 'user', 'password', true)
|
|
http = proxy.new("foo.example.org", 8000)
|
|
http.use_ssl = true
|
|
http.verify_mode = OpenSSL::SSL::VERIFY_NONE
|
|
begin
|
|
http.start
|
|
rescue EOFError
|
|
end
|
|
}
|
|
server_thread = Thread.new {
|
|
sock = serv.accept
|
|
begin
|
|
proxy_request = sock.gets("\r\n\r\n")
|
|
assert_equal(
|
|
"CONNECT foo.example.org:8000 HTTP/1.1\r\n" +
|
|
"Host: foo.example.org:8000\r\n" +
|
|
"Proxy-Authorization: Basic dXNlcjpwYXNzd29yZA==\r\n" +
|
|
"\r\n",
|
|
proxy_request,
|
|
"[ruby-core:96672]")
|
|
ensure
|
|
sock.close
|
|
end
|
|
}
|
|
assert_join_threads([client_thread, server_thread])
|
|
}
|
|
end
|
|
end
|