112 lines
3.6 KiB
Rust
112 lines
3.6 KiB
Rust
#![feature(async_await)]
|
|
|
|
use std::{ io, thread };
|
|
use std::io::{ BufReader, Cursor };
|
|
use std::sync::Arc;
|
|
use std::sync::mpsc::channel;
|
|
use std::net::SocketAddr;
|
|
use lazy_static::lazy_static;
|
|
use futures::prelude::*;
|
|
use futures::executor;
|
|
use futures::task::SpawnExt;
|
|
use romio::tcp::{ TcpListener, TcpStream };
|
|
use rustls::{ ServerConfig, ClientConfig };
|
|
use rustls::internal::pemfile::{ certs, rsa_private_keys };
|
|
use tokio_rustls::{ TlsConnector, TlsAcceptor };
|
|
|
|
const CERT: &str = include_str!("end.cert");
|
|
const CHAIN: &str = include_str!("end.chain");
|
|
const RSA: &str = include_str!("end.rsa");
|
|
|
|
lazy_static!{
|
|
static ref TEST_SERVER: (SocketAddr, &'static str, &'static str) = {
|
|
let cert = certs(&mut BufReader::new(Cursor::new(CERT))).unwrap();
|
|
let mut keys = rsa_private_keys(&mut BufReader::new(Cursor::new(RSA))).unwrap();
|
|
|
|
let mut config = ServerConfig::new(rustls::NoClientAuth::new());
|
|
config.set_single_cert(cert, keys.pop().unwrap())
|
|
.expect("invalid key or certificate");
|
|
let acceptor = TlsAcceptor::from(Arc::new(config));
|
|
|
|
let (send, recv) = channel();
|
|
|
|
thread::spawn(move || {
|
|
let done = async {
|
|
let addr = SocketAddr::from(([127, 0, 0, 1], 0));
|
|
let mut pool = executor::ThreadPool::new()?;
|
|
let mut listener = TcpListener::bind(&addr)?;
|
|
|
|
send.send(listener.local_addr()?).unwrap();
|
|
|
|
let mut incoming = listener.incoming();
|
|
while let Some(stream) = incoming.next().await {
|
|
let acceptor = acceptor.clone();
|
|
pool.spawn(
|
|
async move {
|
|
let stream = acceptor.accept(stream?).await?;
|
|
let (mut reader, mut write) = stream.split();
|
|
reader.copy_into(&mut write).await?;
|
|
Ok(()) as io::Result<()>
|
|
}
|
|
.unwrap_or_else(|err| eprintln!("{:?}", err))
|
|
).unwrap();
|
|
}
|
|
|
|
Ok(()) as io::Result<()>
|
|
};
|
|
|
|
executor::block_on(done).unwrap();
|
|
});
|
|
|
|
let addr = recv.recv().unwrap();
|
|
(addr, "localhost", CHAIN)
|
|
};
|
|
}
|
|
|
|
fn start_server() -> &'static (SocketAddr, &'static str, &'static str) {
|
|
&*TEST_SERVER
|
|
}
|
|
|
|
async fn start_client(addr: SocketAddr, domain: &str, config: Arc<ClientConfig>) -> io::Result<()> {
|
|
const FILE: &'static [u8] = include_bytes!("../README.md");
|
|
|
|
let domain = webpki::DNSNameRef::try_from_ascii_str(domain).unwrap();
|
|
let config = TlsConnector::from(config);
|
|
let mut buf = vec![0; FILE.len()];
|
|
|
|
let stream = TcpStream::connect(&addr).await?;
|
|
let mut stream = config.connect(domain, stream).await?;
|
|
stream.write_all(FILE).await?;
|
|
stream.read_exact(&mut buf).await?;
|
|
|
|
assert_eq!(buf, FILE);
|
|
|
|
stream.close().await?;
|
|
Ok(())
|
|
}
|
|
|
|
#[test]
|
|
fn pass() {
|
|
let (addr, domain, chain) = start_server();
|
|
|
|
let mut config = ClientConfig::new();
|
|
let mut chain = BufReader::new(Cursor::new(chain));
|
|
config.root_store.add_pem_file(&mut chain).unwrap();
|
|
let config = Arc::new(config);
|
|
|
|
executor::block_on(start_client(addr.clone(), domain, config.clone())).unwrap();
|
|
}
|
|
|
|
#[test]
|
|
fn fail() {
|
|
let (addr, domain, chain) = start_server();
|
|
|
|
let mut config = ClientConfig::new();
|
|
let mut chain = BufReader::new(Cursor::new(chain));
|
|
config.root_store.add_pem_file(&mut chain).unwrap();
|
|
let config = Arc::new(config);
|
|
|
|
assert_ne!(domain, &"google.com");
|
|
assert!(executor::block_on(start_client(addr.clone(), "google.com", config)).is_err());
|
|
}
|