src/libtls/tests/suites/test_socket.c

   1 /*
   2  * Copyright (C) 2014 Martin Willi
   3  * Copyright (C) 2014 revosec AG
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2 of the License, or (at your
   8  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  12  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  13  * for more details.
  14  */
  15
  16 #include <test_suite.h>
  17
  18 #include <unistd.h>
  19 #include <errno.h>
  20
  21 #include <processing/jobs/callback_job.h>
  22 #include <credentials/sets/mem_cred.h>
  23
  24 #include "tls_socket.h"
  25
  26 /**
  27  * Credentials for authentication
  28  */
  29 static mem_cred_t *creds;
  30
  31 /**
  32  * RSA private key, 2048 bit
  33  */
  34 static char rsa[] = {
  35         0x30,0x82,0x04,0xa4,0x02,0x01,0x00,0x02,0x82,0x01,0x01,0x00,0xee,0xa3,0x28,0xcc,
  36         0x48,0xca,0x37,0xfc,0xb6,0xfa,0xfc,0x18,0x0d,0xa2,0x28,0x44,0xb4,0x16,0x56,0xf7,
  37         0x97,0x5f,0x38,0x83,0xfc,0xd4,0x30,0xea,0xf7,0x5e,0xaa,0xd4,0x21,0x0e,0x71,0x49,
  38         0x13,0x39,0xaf,0x89,0xa1,0x1d,0x1b,0x9a,0x08,0x44,0xff,0x0b,0xeb,0x4b,0xad,0x8e,
  39         0xc4,0x6d,0x1e,0x0c,0x02,0xbb,0x17,0x59,0xc7,0x66,0xc7,0xff,0x4c,0x3c,0x11,0x40,
  40         0x1a,0xe3,0xca,0x34,0xf8,0x41,0xe0,0x39,0x3e,0xce,0x72,0x9f,0x56,0x9e,0x69,0xad,
  41         0x98,0x43,0x5f,0x35,0xc2,0xd0,0xd9,0xbc,0x8b,0xed,0xc6,0xc7,0x74,0x73,0x74,0x30,
  42         0x92,0x86,0x39,0x26,0x3d,0xf1,0xd5,0x16,0x45,0x7d,0xcc,0x90,0x54,0xff,0x44,0x74,
  43         0xf3,0xba,0x41,0x5c,0x58,0xa4,0x66,0xe6,0x9d,0x58,0xbe,0x7e,0x89,0xe1,0x7c,0xf7,
  44         0x28,0xb0,0xde,0xe2,0x01,0x0a,0x89,0xc7,0x63,0x3f,0xef,0x2b,0xcb,0xef,0x65,0x89,
  45         0x82,0x23,0x32,0xa7,0xa3,0x1c,0x0d,0xc6,0x8f,0x76,0x59,0x8b,0x55,0x65,0x9c,0x91,
  46         0xd4,0x93,0x89,0xad,0x37,0x47,0x23,0x25,0xb3,0x53,0xea,0xef,0x73,0xeb,0x97,0xd3,
  47         0xd7,0x74,0x38,0x73,0x8d,0x16,0x0d,0x6f,0xae,0x59,0x33,0x4e,0x24,0xe9,0x52,0xf6,
  48         0x6f,0x8c,0x5c,0x13,0xcf,0x1d,0x0a,0xcc,0xb7,0x6a,0x88,0xce,0x91,0xe2,0xe0,0xcb,
  49         0xc6,0xd2,0xfb,0x81,0xf6,0xd2,0x9f,0x0a,0x82,0x70,0x80,0xbf,0x93,0x70,0xc0,0x57,
  50         0x23,0x6e,0x97,0x1c,0x9d,0x7d,0xf0,0xa3,0x54,0x86,0xec,0x40,0xae,0x09,0x20,0xed,
  51         0x02,0x43,0xa3,0xf8,0x7e,0x0e,0x5b,0xd0,0x22,0x7b,0x74,0x39,0x02,0x03,0x01,0x00,
  52         0x01,0x02,0x82,0x01,0x01,0x00,0xd9,0x5b,0x99,0x74,0x80,0xb4,0x57,0xcc,0x82,0x2a,
  53         0x17,0x66,0x1d,0x3c,0xde,0xea,0xbd,0x11,0x40,0x03,0x62,0x47,0xe3,0xe5,0x2c,0x6b,
  54         0x65,0x67,0x0f,0x0b,0x96,0x13,0x83,0x4c,0x71,0x58,0xfa,0xfe,0xe6,0xe9,0x37,0xeb,
  55         0x98,0x51,0x73,0x48,0xcc,0xf9,0xe1,0x46,0x5b,0xfe,0x16,0xe1,0xc0,0xa5,0x75,0xf3,
  56         0x4d,0x30,0x84,0x14,0x15,0x04,0x6f,0x3e,0xa3,0x03,0xbd,0xba,0x4f,0x5a,0x71,0xe9,
  57         0x26,0xbf,0x5d,0x7a,0x93,0x22,0x98,0xb5,0xcf,0x51,0xc3,0xc7,0x51,0xb8,0x59,0x0a,
  58         0xfb,0xd7,0xe5,0xa8,0x1d,0x0f,0x5c,0xfd,0x30,0x0e,0x71,0xd7,0x79,0xc4,0x60,0x55,
  59         0x9e,0x1e,0x1c,0x0b,0x9a,0x40,0xb8,0x7a,0x8d,0xb2,0xec,0xb0,0x70,0x8a,0x19,0x5f,
  60         0x1d,0x2e,0xde,0x90,0x8f,0x68,0x56,0x08,0xce,0x0c,0x08,0xde,0xc7,0xf8,0x13,0xef,
  61         0xd2,0xbc,0x92,0xb6,0xfb,0xec,0xb6,0x04,0xf6,0x8f,0x7d,0x95,0xe9,0xeb,0xc7,0xfb,
  62         0xcc,0x4f,0xad,0x41,0xf1,0x4c,0x79,0x07,0xdd,0x4b,0x40,0xb4,0x74,0x44,0x9a,0x06,
  63         0x0a,0x0f,0xb2,0xda,0x12,0x46,0xe5,0xee,0x01,0x64,0xe5,0xf0,0x82,0x69,0xf9,0xf1,
  64         0xe9,0x41,0x13,0x5a,0xee,0xc0,0x37,0x9a,0xbe,0x9a,0x9a,0x06,0x4b,0x52,0xd6,0xf3,
  65         0x1b,0x30,0x64,0x93,0x3a,0x97,0xe1,0xdc,0x50,0x1f,0x46,0xc4,0x81,0x6a,0x17,0x52,
  66         0x49,0x85,0xc6,0x85,0xb7,0x60,0xd4,0xf0,0xd1,0x6a,0xeb,0x50,0x8c,0xb7,0xeb,0x1f,
  67         0x17,0x0e,0xf0,0xfd,0x67,0x03,0x7c,0x74,0x1a,0xac,0x66,0x81,0x00,0x45,0x5e,0xf3,
  68         0xd9,0x9d,0x22,0x99,0xc4,0x11,0x02,0x81,0x81,0x00,0xfa,0x44,0x32,0x14,0xb2,0x82,
  69         0x28,0x02,0x46,0x05,0xdd,0x8d,0xb1,0x9f,0x9e,0x6f,0x61,0xf2,0x01,0xa0,0x2b,0x76,
  70         0xee,0x46,0xaa,0x2d,0x2d,0x5b,0xd2,0x67,0x90,0x36,0xbb,0xa0,0x07,0xdf,0x9b,0xad,
  71         0x18,0x1e,0xa7,0xe6,0x36,0xc6,0x49,0xda,0xc5,0x0d,0x52,0x29,0x5a,0x40,0xcf,0xdf,
  72         0x8d,0xd0,0xa3,0xc2,0x34,0x17,0x9f,0xb5,0xf1,0x67,0xac,0x29,0x10,0xc2,0x5c,0x62,
  73         0xe3,0xe2,0x5c,0x9f,0x93,0xcc,0xb5,0xeb,0x16,0x64,0x44,0x9f,0x6b,0x5a,0xac,0x19,
  74         0x09,0xff,0x4b,0x78,0x7f,0xec,0x5a,0xbd,0xe9,0xcb,0x74,0xbb,0x30,0x13,0xc5,0x25,
  75         0x8b,0xac,0x8d,0xf9,0xa9,0x99,0x25,0xf5,0xce,0x07,0xb6,0x2b,0x1b,0x42,0xed,0x3a,
  76         0x30,0x4a,0xfc,0x5f,0xf0,0xe2,0x26,0xa6,0x60,0x5d,0x02,0x81,0x81,0x00,0xf4,0x1a,
  77         0xc2,0x7e,0xa0,0xa0,0xad,0x20,0x65,0x04,0xe8,0xf7,0xb0,0xb1,0x76,0x79,0x08,0x18,
  78         0x58,0x93,0x21,0xf1,0x56,0x58,0x58,0x18,0x4a,0x5c,0x59,0x08,0x27,0x64,0x09,0xcb,
  79         0x0b,0x0b,0x4e,0x26,0xc8,0x0b,0x87,0x67,0x40,0xc1,0xab,0x31,0x60,0xa6,0x78,0xdd,
  80         0x78,0xc8,0x86,0x38,0xbd,0x19,0xde,0x0b,0x70,0x72,0xec,0x36,0x88,0x39,0x69,0x70,
  81         0xda,0xa6,0x2e,0xf9,0x5c,0xd8,0x17,0xc5,0xfa,0xf8,0xa5,0xc9,0x9b,0xf0,0xfe,0x03,
  82         0x71,0x57,0xfa,0x58,0x0f,0x33,0xc3,0xab,0xce,0xb0,0x5d,0xd0,0x40,0x07,0x9a,0x0b,
  83         0xff,0xb9,0xaa,0x9d,0xc5,0x33,0x7f,0x5f,0x48,0x7e,0x54,0x82,0xd1,0xdf,0x75,0x69,
  84         0xee,0xe5,0xf5,0x80,0x44,0xce,0x52,0x72,0x14,0x2c,0xe6,0xa7,0xd5,0x8d,0x02,0x81,
  85         0x81,0x00,0xb8,0xf7,0x70,0x20,0x35,0xf2,0xd6,0x89,0x1f,0xa1,0xb4,0x26,0xc6,0x51,
  86         0xd7,0xb2,0x30,0xac,0xc1,0xa0,0xd4,0x9e,0xf8,0xea,0x87,0x5a,0x0e,0x7d,0x1f,0xdb,
  87         0xe5,0x0d,0x5e,0xcc,0x9f,0x25,0x18,0x14,0xed,0x8f,0xb2,0xbe,0x06,0x5b,0xb5,0x38,
  88         0x18,0x8d,0x88,0xdd,0x01,0x54,0x87,0x8e,0x8d,0x6c,0xd7,0xab,0x6f,0xfe,0xc9,0xce,
  89         0x9a,0x15,0xea,0x7b,0x0b,0x64,0xeb,0x0d,0x37,0xaa,0x14,0x94,0xe8,0x92,0xd3,0x1d,
  90         0x66,0x16,0x43,0x55,0xa3,0xed,0x86,0xe6,0x96,0xa9,0xf5,0xe8,0xa0,0x7b,0x5a,0x71,
  91         0xa4,0x7a,0xf7,0xd2,0x65,0x6d,0x27,0x37,0x61,0xac,0xed,0xdd,0xc9,0x08,0x64,0xb2,
  92         0xf0,0x4c,0x68,0xca,0x21,0x42,0xec,0xbc,0x25,0xf7,0x35,0xe1,0xde,0xd1,0xf6,0x88,
  93         0xdf,0x0d,0x02,0x81,0x80,0x44,0xb0,0xcb,0x0e,0x6b,0x11,0x0b,0xe6,0xd3,0xc6,0x7f,
  94         0xf0,0x43,0x6e,0x8c,0xd2,0x1e,0x2f,0x0b,0xad,0xcb,0x9d,0x68,0x18,0xd0,0x21,0x75,
  95         0xbb,0x6a,0xea,0x5a,0x7b,0x52,0x2e,0x2a,0xdb,0x71,0x90,0x84,0x36,0x8a,0x51,0xc9,
  96         0xed,0x35,0xc9,0x5d,0x53,0x3b,0x2b,0xc7,0x73,0x56,0x21,0xdd,0x44,0xcc,0x31,0x17,
  97         0xe1,0x9f,0x0a,0xf1,0x66,0x86,0x7f,0x55,0x67,0xf2,0x4c,0x05,0x8e,0x61,0x92,0x3a,
  98         0xbf,0x81,0x97,0xac,0x24,0x32,0xb6,0xb1,0x4c,0x7a,0x8c,0x11,0x2b,0x15,0xe2,0xe0,
  99         0xf4,0xcc,0x51,0x6f,0xd3,0x33,0xcc,0x30,0x98,0x04,0xa5,0x04,0xfb,0x2a,0xda,0x9b,
 100         0x41,0xc1,0x72,0x56,0xb0,0xb5,0x0f,0xac,0x44,0x55,0xc3,0x54,0x99,0x62,0xa5,0xeb,
 101         0x7b,0x7f,0x24,0xb7,0x79,0x02,0x81,0x80,0x0a,0x3b,0x9b,0x91,0x1d,0x9b,0x04,0x4e,
 102         0xdf,0xd9,0xe6,0x47,0xf3,0x79,0xb7,0x17,0xcf,0x42,0xa5,0xde,0x94,0xf0,0xfe,0xed,
 103         0x46,0xf6,0xaf,0x3e,0x6c,0x91,0x01,0x89,0x79,0x81,0xea,0x2b,0x82,0x68,0x0e,0xd8,
 104         0x25,0xaf,0x79,0x8b,0x14,0xfd,0xf2,0x29,0x20,0x34,0x2d,0x0b,0x08,0x8c,0x3b,0x2b,
 105         0xfc,0x75,0xe9,0x4e,0x21,0xa6,0xb2,0x35,0x67,0x8d,0x4c,0x90,0x94,0x02,0xd5,0x32,
 106         0x23,0xc6,0xa0,0x92,0x2e,0xfa,0x97,0x48,0x5b,0x95,0xc3,0xf1,0xbc,0x6b,0xe8,0x4c,
 107         0x92,0x6f,0x5e,0x3d,0xf9,0xbd,0x2c,0xf0,0x83,0x1c,0xe6,0xb3,0x45,0x68,0x32,0x8d,
 108         0x85,0x20,0xcb,0x9d,0xd2,0x30,0x5a,0x57,0xa4,0x6e,0x27,0xb5,0x29,0x14,0xdb,0xf1,
 109         0x4b,0x9a,0xc3,0xc1,0xc5,0x37,0x6d,0x1b,
 110 };
 111
 112 /**
 113  * ECDSA private key
 114  */
 115 static char ecdsa[] = {
 116         0x30,0x81,0xa4,0x02,0x01,0x01,0x04,0x30,0xc0,0x1f,0xfd,0x65,0xc6,0xc4,0x4c,0xb8,
 117         0xff,0x56,0x08,0xb5,0xbd,0xb8,0xf5,0x93,0xf7,0x51,0x0e,0x92,0x1f,0x06,0xbf,0xa6,
 118         0xd9,0x1d,0xae,0xa3,0x16,0x0d,0x0f,0xc9,0xd5,0x97,0x90,0x46,0xf1,0x98,0xa8,0x18,
 119         0x07,0xba,0xcf,0x91,0x8e,0x07,0xed,0x88,0xa0,0x07,0x06,0x05,0x2b,0x81,0x04,0x00,
 120         0x22,0xa1,0x64,0x03,0x62,0x00,0x04,0xd6,0xba,0xe1,0xf0,0x09,0x22,0x21,0x12,0x69,
 121         0xed,0x0e,0xd5,0x02,0x8c,0xb8,0x52,0xbb,0x57,0x68,0x0e,0xf3,0xdb,0xb9,0xb1,0xee,
 122         0x9c,0x67,0xa0,0xb8,0xdc,0x13,0x1e,0x5b,0x44,0x71,0x04,0xef,0x4e,0xe3,0xdd,0xf4,
 123         0xa6,0xc3,0xba,0x77,0x53,0xb8,0x28,0x5f,0xd2,0x97,0x05,0xa3,0x5b,0xe6,0xde,0x0a,
 124         0xce,0x11,0xa8,0xaf,0x02,0xbd,0xfa,0x17,0xf9,0xa7,0x38,0x3e,0x5b,0x57,0xb0,0x01,
 125         0xb3,0xc6,0x09,0x29,0x65,0xae,0xfb,0x87,0x92,0xa3,0xd7,0x3d,0x9a,0x1c,0x52,0x09,
 126         0xb1,0x47,0xc8,0xf6,0x18,0xbb,0x97,
 127 };
 128
 129 /**
 130  * TLS certificate for RSA key
 131  * pki --self --in rsa.key --dn "C=CH, O=strongSwan, CN=tls-rsa" --san 127.0.0.1
 132  */
 133 static char rsa_crt[] = {
 134         0x30,0x82,0x02,0xfd,0x30,0x82,0x01,0xe5,0xa0,0x03,0x02,0x01,0x02,0x02,0x08,0x49,
 135         0xbd,0xfd,0x4a,0xe8,0xa9,0xb8,0x40,0x30,0x0d,0x06,0x09,0x2a,0x86,0x48,0x86,0xf7,
 136         0x0d,0x01,0x01,0x0b,0x05,0x00,0x30,0x34,0x31,0x0b,0x30,0x09,0x06,0x03,0x55,0x04,
 137         0x06,0x13,0x02,0x43,0x48,0x31,0x13,0x30,0x11,0x06,0x03,0x55,0x04,0x0a,0x13,0x0a,
 138         0x73,0x74,0x72,0x6f,0x6e,0x67,0x53,0x77,0x61,0x6e,0x31,0x10,0x30,0x0e,0x06,0x03,
 139         0x55,0x04,0x03,0x13,0x07,0x74,0x6c,0x73,0x2d,0x72,0x73,0x61,0x30,0x1e,0x17,0x0d,
 140         0x31,0x37,0x30,0x33,0x32,0x34,0x30,0x39,0x31,0x31,0x31,0x39,0x5a,0x17,0x0d,0x32,
 141         0x30,0x30,0x33,0x32,0x33,0x30,0x39,0x31,0x31,0x31,0x39,0x5a,0x30,0x34,0x31,0x0b,
 142         0x30,0x09,0x06,0x03,0x55,0x04,0x06,0x13,0x02,0x43,0x48,0x31,0x13,0x30,0x11,0x06,
 143         0x03,0x55,0x04,0x0a,0x13,0x0a,0x73,0x74,0x72,0x6f,0x6e,0x67,0x53,0x77,0x61,0x6e,
 144         0x31,0x10,0x30,0x0e,0x06,0x03,0x55,0x04,0x03,0x13,0x07,0x74,0x6c,0x73,0x2d,0x72,
 145         0x73,0x61,0x30,0x82,0x01,0x22,0x30,0x0d,0x06,0x09,0x2a,0x86,0x48,0x86,0xf7,0x0d,
 146         0x01,0x01,0x01,0x05,0x00,0x03,0x82,0x01,0x0f,0x00,0x30,0x82,0x01,0x0a,0x02,0x82,
 147         0x01,0x01,0x00,0xee,0xa3,0x28,0xcc,0x48,0xca,0x37,0xfc,0xb6,0xfa,0xfc,0x18,0x0d,
 148         0xa2,0x28,0x44,0xb4,0x16,0x56,0xf7,0x97,0x5f,0x38,0x83,0xfc,0xd4,0x30,0xea,0xf7,
 149         0x5e,0xaa,0xd4,0x21,0x0e,0x71,0x49,0x13,0x39,0xaf,0x89,0xa1,0x1d,0x1b,0x9a,0x08,
 150         0x44,0xff,0x0b,0xeb,0x4b,0xad,0x8e,0xc4,0x6d,0x1e,0x0c,0x02,0xbb,0x17,0x59,0xc7,
 151         0x66,0xc7,0xff,0x4c,0x3c,0x11,0x40,0x1a,0xe3,0xca,0x34,0xf8,0x41,0xe0,0x39,0x3e,
 152         0xce,0x72,0x9f,0x56,0x9e,0x69,0xad,0x98,0x43,0x5f,0x35,0xc2,0xd0,0xd9,0xbc,0x8b,
 153         0xed,0xc6,0xc7,0x74,0x73,0x74,0x30,0x92,0x86,0x39,0x26,0x3d,0xf1,0xd5,0x16,0x45,
 154         0x7d,0xcc,0x90,0x54,0xff,0x44,0x74,0xf3,0xba,0x41,0x5c,0x58,0xa4,0x66,0xe6,0x9d,
 155         0x58,0xbe,0x7e,0x89,0xe1,0x7c,0xf7,0x28,0xb0,0xde,0xe2,0x01,0x0a,0x89,0xc7,0x63,
 156         0x3f,0xef,0x2b,0xcb,0xef,0x65,0x89,0x82,0x23,0x32,0xa7,0xa3,0x1c,0x0d,0xc6,0x8f,
 157         0x76,0x59,0x8b,0x55,0x65,0x9c,0x91,0xd4,0x93,0x89,0xad,0x37,0x47,0x23,0x25,0xb3,
 158         0x53,0xea,0xef,0x73,0xeb,0x97,0xd3,0xd7,0x74,0x38,0x73,0x8d,0x16,0x0d,0x6f,0xae,
 159         0x59,0x33,0x4e,0x24,0xe9,0x52,0xf6,0x6f,0x8c,0x5c,0x13,0xcf,0x1d,0x0a,0xcc,0xb7,
 160         0x6a,0x88,0xce,0x91,0xe2,0xe0,0xcb,0xc6,0xd2,0xfb,0x81,0xf6,0xd2,0x9f,0x0a,0x82,
 161         0x70,0x80,0xbf,0x93,0x70,0xc0,0x57,0x23,0x6e,0x97,0x1c,0x9d,0x7d,0xf0,0xa3,0x54,
 162         0x86,0xec,0x40,0xae,0x09,0x20,0xed,0x02,0x43,0xa3,0xf8,0x7e,0x0e,0x5b,0xd0,0x22,
 163         0x7b,0x74,0x39,0x02,0x03,0x01,0x00,0x01,0xa3,0x13,0x30,0x11,0x30,0x0f,0x06,0x03,
 164         0x55,0x1d,0x11,0x04,0x08,0x30,0x06,0x87,0x04,0x7f,0x00,0x00,0x01,0x30,0x0d,0x06,
 165         0x09,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x01,0x01,0x0b,0x05,0x00,0x03,0x82,0x01,0x01,
 166         0x00,0x34,0xe5,0x9d,0x90,0xe4,0xc1,0x0b,0x82,0xea,0x48,0x29,0xfd,0x50,0x8c,0x6b,
 167         0xf3,0xc8,0x4d,0x7a,0xb1,0xdb,0x5b,0x1f,0x67,0x22,0x55,0xaa,0xf4,0x11,0xf9,0x1b,
 168         0x1c,0x9f,0x30,0xfa,0x71,0x6b,0xc5,0x9e,0x1d,0x4d,0xd2,0x8c,0x48,0x5a,0xe8,0x76,
 169         0xa4,0x1a,0xe8,0x6a,0xf5,0x1c,0x3d,0x55,0x7f,0x23,0x0b,0x67,0xe6,0x0b,0xef,0xad,
 170         0x75,0x17,0x3f,0xa7,0x18,0x18,0x25,0xdc,0x73,0x99,0xc1,0x2b,0x76,0x54,0xcf,0x9a,
 171         0x4c,0x33,0xbe,0xab,0xda,0xe7,0xa3,0xf8,0xc3,0x66,0x29,0x20,0x1f,0x04,0x88,0xfd,
 172         0xfe,0x62,0x67,0xc0,0x62,0xd8,0x46,0xfb,0x47,0x17,0x35,0x38,0x5c,0x58,0xd9,0x51,
 173         0x10,0x5b,0x44,0xc6,0x16,0x96,0x84,0x31,0x37,0xd9,0xef,0xd4,0xc8,0x15,0x2e,0x8b,
 174         0x90,0xf8,0x18,0x0d,0x63,0xbe,0xa4,0x0f,0xd6,0x4a,0xfd,0xea,0x87,0xe2,0xb2,0xd1,
 175         0x05,0x07,0x01,0x44,0x84,0xdf,0x29,0xf9,0x2c,0x6b,0x9a,0x82,0xe4,0x50,0xdf,0x6c,
 176         0xac,0xf8,0x54,0x5f,0x78,0x03,0xc2,0x1c,0x77,0x8f,0x7f,0x52,0xce,0x83,0x97,0x94,
 177         0x42,0xe3,0x87,0x42,0xd4,0x16,0xf5,0xed,0x54,0xc9,0xa8,0x3a,0x0f,0x81,0xe1,0x4b,
 178         0x62,0xcd,0x99,0xcc,0xab,0x55,0x89,0x69,0x90,0x31,0x63,0x7b,0x18,0x34,0xd6,0x9a,
 179         0x20,0x12,0x91,0x2a,0x49,0x56,0x4c,0x69,0xa4,0x77,0x8f,0xf5,0x7d,0x60,0xb9,0x1c,
 180         0x87,0xfd,0xcc,0x36,0xdd,0x18,0x44,0x2e,0x06,0x35,0x8e,0x70,0xf2,0x07,0x79,0x94,
 181         0x72,0xc9,0x47,0x57,0x9a,0xe0,0xef,0x38,0x27,0x79,0x20,0xda,0x03,0xe2,0x9c,0xd9,
 182         0x06,
 183 };
 184
 185 /**
 186  * TLS certificate for ECDSA key
 187  * pki --self --in ecdsa.key --dn "C=CH, O=strongSwan, CN=tls-ecdsa" --san 127.0.0.1
 188  */
 189 static char ecdsa_crt[] = {
 190         0x30,0x82,0x01,0xb2,0x30,0x82,0x01,0x38,0xa0,0x03,0x02,0x01,0x02,0x02,0x08,0x6f,
 191         0xaa,0xe0,0x88,0x46,0x8c,0x57,0x0d,0x30,0x0a,0x06,0x08,0x2a,0x86,0x48,0xce,0x3d,
 192         0x04,0x03,0x03,0x30,0x36,0x31,0x0b,0x30,0x09,0x06,0x03,0x55,0x04,0x06,0x13,0x02,
 193         0x43,0x48,0x31,0x13,0x30,0x11,0x06,0x03,0x55,0x04,0x0a,0x13,0x0a,0x73,0x74,0x72,
 194         0x6f,0x6e,0x67,0x53,0x77,0x61,0x6e,0x31,0x12,0x30,0x10,0x06,0x03,0x55,0x04,0x03,
 195         0x13,0x09,0x74,0x6c,0x73,0x2d,0x65,0x63,0x64,0x73,0x61,0x30,0x1e,0x17,0x0d,0x31,
 196         0x37,0x30,0x33,0x32,0x34,0x30,0x39,0x31,0x31,0x32,0x31,0x5a,0x17,0x0d,0x32,0x30,
 197         0x30,0x33,0x32,0x33,0x30,0x39,0x31,0x31,0x32,0x31,0x5a,0x30,0x36,0x31,0x0b,0x30,
 198         0x09,0x06,0x03,0x55,0x04,0x06,0x13,0x02,0x43,0x48,0x31,0x13,0x30,0x11,0x06,0x03,
 199         0x55,0x04,0x0a,0x13,0x0a,0x73,0x74,0x72,0x6f,0x6e,0x67,0x53,0x77,0x61,0x6e,0x31,
 200         0x12,0x30,0x10,0x06,0x03,0x55,0x04,0x03,0x13,0x09,0x74,0x6c,0x73,0x2d,0x65,0x63,
 201         0x64,0x73,0x61,0x30,0x76,0x30,0x10,0x06,0x07,0x2a,0x86,0x48,0xce,0x3d,0x02,0x01,
 202         0x06,0x05,0x2b,0x81,0x04,0x00,0x22,0x03,0x62,0x00,0x04,0xd6,0xba,0xe1,0xf0,0x09,
 203         0x22,0x21,0x12,0x69,0xed,0x0e,0xd5,0x02,0x8c,0xb8,0x52,0xbb,0x57,0x68,0x0e,0xf3,
 204         0xdb,0xb9,0xb1,0xee,0x9c,0x67,0xa0,0xb8,0xdc,0x13,0x1e,0x5b,0x44,0x71,0x04,0xef,
 205         0x4e,0xe3,0xdd,0xf4,0xa6,0xc3,0xba,0x77,0x53,0xb8,0x28,0x5f,0xd2,0x97,0x05,0xa3,
 206         0x5b,0xe6,0xde,0x0a,0xce,0x11,0xa8,0xaf,0x02,0xbd,0xfa,0x17,0xf9,0xa7,0x38,0x3e,
 207         0x5b,0x57,0xb0,0x01,0xb3,0xc6,0x09,0x29,0x65,0xae,0xfb,0x87,0x92,0xa3,0xd7,0x3d,
 208         0x9a,0x1c,0x52,0x09,0xb1,0x47,0xc8,0xf6,0x18,0xbb,0x97,0xa3,0x13,0x30,0x11,0x30,
 209         0x0f,0x06,0x03,0x55,0x1d,0x11,0x04,0x08,0x30,0x06,0x87,0x04,0x7f,0x00,0x00,0x01,
 210         0x30,0x0a,0x06,0x08,0x2a,0x86,0x48,0xce,0x3d,0x04,0x03,0x03,0x03,0x68,0x00,0x30,
 211         0x65,0x02,0x31,0x00,0xdf,0x9e,0x92,0xcf,0x95,0xe1,0x6b,0xe4,0x89,0xf7,0x16,0xc7,
 212         0xf8,0x6b,0xcb,0x5d,0x15,0xb4,0xb3,0x71,0xcd,0x34,0x4b,0x08,0x79,0xa2,0x7a,0x9d,
 213         0xbe,0xc1,0xb0,0xc5,0x8d,0xcd,0x87,0x72,0xcf,0xa2,0x69,0xc9,0x50,0x60,0x02,0x23,
 214         0xd4,0xc0,0xd7,0x80,0x02,0x30,0x7d,0xa1,0xf3,0x1c,0x1f,0x51,0xd4,0x07,0xc0,0xce,
 215         0xa5,0x1a,0x28,0x5c,0x26,0x67,0x2f,0xfb,0x2e,0x35,0x23,0xa8,0xbb,0x6d,0x9f,0xd8,
 216         0x13,0xd7,0xb0,0x30,0x1e,0x4b,0x11,0x6b,0xe8,0x5a,0x17,0x23,0x51,0xe6,0x63,0xcf,
 217         0x3d,0xbb,0x21,0xff,0xe0,0x8b,
 218 };
 219
 220 START_SETUP(setup_creds)
 221 {
 222         private_key_t *key;
 223         certificate_t *cert;
 224
 225         creds = mem_cred_create();
 226
 227         key = lib->creds->create(lib->creds, CRED_PRIVATE_KEY, KEY_RSA,
 228                                                          BUILD_BLOB, chunk_from_thing(rsa), BUILD_END);
 229         if (key)
 230         {
 231                 creds->add_key(creds, key);
 232         }
 233         key = lib->creds->create(lib->creds, CRED_PRIVATE_KEY, KEY_ECDSA,
 234                                                          BUILD_BLOB, chunk_from_thing(ecdsa), BUILD_END);
 235         if (key)
 236         {
 237                 creds->add_key(creds, key);
 238         }
 239         cert = lib->creds->create(lib->creds, CRED_CERTIFICATE, CERT_X509,
 240                                                           BUILD_BLOB, chunk_from_thing(rsa_crt), BUILD_END);
 241         if (cert)
 242         {
 243                 creds->add_cert(creds, TRUE, cert);
 244         }
 245         cert = lib->creds->create(lib->creds, CRED_CERTIFICATE, CERT_X509,
 246                                                           BUILD_BLOB, chunk_from_thing(ecdsa_crt), BUILD_END);
 247         if (cert)
 248         {
 249                 creds->add_cert(creds, TRUE, cert);
 250         }
 251
 252         lib->credmgr->add_set(lib->credmgr, &creds->set);
 253 }
 254 END_SETUP
 255
 256 START_TEARDOWN(teardown_creds)
 257 {
 258         lib->credmgr->remove_set(lib->credmgr, &creds->set);
 259         creds->destroy(creds);
 260 }
 261 END_TEARDOWN
 262
 263 /**
 264  * Configuration for an echo server
 265  */
 266 typedef struct {
 267         tls_version_t version;
 268         uint16_t port;
 269         char *addr;
 270         chunk_t data;
 271         int fd;
 272         bool cauth;
 273 } echo_server_config_t;
 274
 275 /**
 276  * Run an echo server
 277  */
 278 static job_requeue_t serve_echo(echo_server_config_t *config)
 279 {
 280         tls_socket_t *tls;
 281         int sfd, cfd;
 282         identification_t *server, *client = NULL;
 283         ssize_t len, total, done;
 284         char buf[128];
 285
 286         server = identification_create_from_string(config->addr);
 287         if (config->cauth)
 288         {
 289                 client = server;
 290         }
 291         sfd = config->fd;
 292         while (TRUE)
 293         {
 294                 cfd = accept(sfd, NULL, NULL);
 295                 if (cfd < 0)
 296                 {
 297                         break;
 298                 }
 299
 300                 tls = tls_socket_create(TRUE, server, client, cfd, NULL,
 301                                                                 config->version, TRUE);
 302                 ck_assert(tls != NULL);
 303
 304                 while (TRUE)
 305                 {
 306                         len = tls->read(tls, buf, sizeof(buf), TRUE);
 307                         if (len <= 0)
 308                         {
 309                                 break;
 310                         }
 311                         total = 0;
 312                         while (total < len)
 313                         {
 314                                 done = tls->write(tls, buf + total, len - total);
 315                                 ck_assert_msg(done > 0, "%s", strerror(errno));
 316                                 total += done;
 317                         }
 318                 }
 319
 320                 tls->destroy(tls);
 321                 close(cfd);
 322         }
 323         server->destroy(server);
 324
 325         return JOB_REQUEUE_NONE;
 326 }
 327
 328 /**
 329  * Start a echo server using config
 330  */
 331 static void start_echo_server(echo_server_config_t *config)
 332 {
 333         host_t *host;
 334         int on = 1;
 335
 336         host = host_create_from_string(config->addr, config->port);
 337
 338         config->fd = socket(AF_INET, SOCK_STREAM, 0);
 339         ck_assert(config->fd != -1);
 340         ck_assert(setsockopt(config->fd, SOL_SOCKET, SO_REUSEADDR,
 341                                                  (void*)&on, sizeof(on)) != -1);
 342         ck_assert_msg(bind(config->fd, host->get_sockaddr(host),
 343                                   *host->get_sockaddr_len(host)) != -1, "%s", strerror(errno));
 344         host->destroy(host);
 345         ck_assert(listen(config->fd, 1) != -1);
 346
 347         lib->processor->set_threads(lib->processor, 8);
 348
 349         lib->processor->queue_job(lib->processor, (job_t*)
 350                                 callback_job_create((void*)serve_echo, config, NULL, NULL));
 351 }
 352
 353 /**
 354  * Run client to perform echo test
 355  */
 356 static void run_echo_client(echo_server_config_t *config)
 357 {
 358         tls_socket_t *tls;
 359         ssize_t len, rd, wr;
 360         int fd;
 361         host_t *host;
 362         identification_t *server, *client = NULL;
 363         char buf[128];
 364
 365         host = host_create_from_string(config->addr, config->port);
 366         server = identification_create_from_string(config->addr);
 367         if (config->cauth)
 368         {
 369                 client = server;
 370         }
 371
 372         fd = socket(AF_INET, SOCK_STREAM, 0);
 373         ck_assert(fd != -1);
 374         ck_assert(connect(fd, host->get_sockaddr(host),
 375                                           *host->get_sockaddr_len(host)) != -1);
 376         tls = tls_socket_create(FALSE, server, client, fd, NULL,
 377                                                         config->version, TRUE);
 378         ck_assert(tls != NULL);
 379
 380         wr = rd = 0;
 381         while (rd < config->data.len)
 382         {
 383                 len = tls->write(tls, config->data.ptr + wr, config->data.len - wr);
 384                 ck_assert(len >= 0);
 385                 wr += len;
 386
 387                 len = tls->read(tls, buf, sizeof(buf), FALSE);
 388                 if (len == -1 && errno == EWOULDBLOCK)
 389                 {
 390                         continue;
 391                 }
 392                 if (len == 0)
 393                 {
 394                         ck_assert_int_eq(rd, config->data.len);
 395                         break;
 396                 }
 397                 ck_assert(len > 0);
 398                 ck_assert(rd + len <= config->data.len);
 399                 ck_assert(memeq(buf, config->data.ptr + rd, len));
 400                 rd += len;
 401         }
 402
 403         tls->destroy(tls);
 404         close(fd);
 405         host->destroy(host);
 406         server->destroy(server);
 407 }
 408
 409 /**
 410  * Common test wrapper function for different test variants
 411  */
 412 static void test_tls(tls_version_t version, uint16_t port, bool cauth, u_int i)
 413 {
 414         echo_server_config_t *config;
 415         tls_cipher_suite_t *suites;
 416         char suite[128];
 417         int count;
 418
 419         INIT(config,
 420                 .version = version,
 421                 .addr = "127.0.0.1",
 422                 .port = port,
 423                 .cauth = cauth,
 424                 .data = chunk_from_chars(0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08),
 425         );
 426
 427         start_echo_server(config);
 428
 429         count = tls_crypto_get_supported_suites(TRUE, &suites);
 430
 431         ck_assert(i < count);
 432         snprintf(suite, sizeof(suite), "%N", tls_cipher_suite_names, suites[i]);
 433         lib->settings->set_str(lib->settings, "%s.tls.suites", suite, lib->ns);
 434
 435         run_echo_client(config);
 436
 437         free(suites);
 438
 439         shutdown(config->fd, SHUT_RDWR);
 440         close(config->fd);
 441
 442         free(config);
 443 }
 444
 445 START_TEST(test_tls12)
 446 {
 447         test_tls(TLS_1_2, 5671, FALSE, _i);
 448 }
 449 END_TEST
 450
 451 START_TEST(test_tls12_mutual)
 452 {
 453         test_tls(TLS_1_2, 5672, TRUE, _i);
 454 }
 455 END_TEST
 456
 457 START_TEST(test_tls11)
 458 {
 459         test_tls(TLS_1_1, 5673, FALSE, _i);
 460 }
 461 END_TEST
 462
 463 START_TEST(test_tls11_mutual)
 464 {
 465         test_tls(TLS_1_1, 5674, TRUE, _i);
 466 }
 467 END_TEST
 468
 469 START_TEST(test_tls10)
 470 {
 471         test_tls(TLS_1_0, 5675, FALSE, _i);
 472 }
 473 END_TEST
 474
 475 START_TEST(test_tls10_mutual)
 476 {
 477         test_tls(TLS_1_0, 5676, TRUE, _i);
 478 }
 479 END_TEST
 480
 481 Suite *socket_suite_create()
 482 {
 483         Suite *s;
 484         TCase *tc;
 485         int count;
 486
 487         count = tls_crypto_get_supported_suites(TRUE, NULL);
 488
 489         s = suite_create("socket");
 490
 491         tc = tcase_create("TLS 1.2/anon");
 492         tcase_add_checked_fixture(tc, setup_creds, teardown_creds);
 493         tcase_add_loop_test(tc, test_tls12, 0, count);
 494         suite_add_tcase(s, tc);
 495
 496         tc = tcase_create("TLS 1.2/mutl");
 497         tcase_add_checked_fixture(tc, setup_creds, teardown_creds);
 498         tcase_add_loop_test(tc, test_tls12_mutual, 0, count);
 499         suite_add_tcase(s, tc);
 500
 501         tc = tcase_create("TLS 1.1/anon");
 502         tcase_add_checked_fixture(tc, setup_creds, teardown_creds);
 503         tcase_add_loop_test(tc, test_tls11, 0, count);
 504         suite_add_tcase(s, tc);
 505
 506         tc = tcase_create("TLS 1.1/mutl");
 507         tcase_add_checked_fixture(tc, setup_creds, teardown_creds);
 508         tcase_add_loop_test(tc, test_tls11_mutual, 0, count);
 509         suite_add_tcase(s, tc);
 510
 511         tc = tcase_create("TLS 1.0/anon");
 512         tcase_add_checked_fixture(tc, setup_creds, teardown_creds);
 513         tcase_add_loop_test(tc, test_tls10, 0, count);
 514         suite_add_tcase(s, tc);
 515
 516         tc = tcase_create("TLS 1.0/mutl");
 517         tcase_add_checked_fixture(tc, setup_creds, teardown_creds);
 518         tcase_add_loop_test(tc, test_tls10_mutual, 0, count);
 519         suite_add_tcase(s, tc);
 520
 521         return s;
 522 }