29c120356e
* Adds stateful handling of DH shared secret computation in `SetupKeys`. * Improved the decrypt handling to use internal functions and avoid generating alerts on failures. * Fix for sniffer resume due to missing `sessionIDSz` broken in #4807. * Fix sniffer test cases to split resume (session_ticket) tests. * Add `snifftest` list of build features so test script can gate running resume test.
121 lines
3.5 KiB
Bash
Executable File
121 lines
3.5 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#sniffer-testsuite.test
|
|
|
|
# if we can, isolate the network namespace to eliminate port collisions.
|
|
if [ "${AM_BWRAPPED-}" != "yes" ]; then
|
|
bwrap_path="$(command -v bwrap)"
|
|
if [ -n "$bwrap_path" ]; then
|
|
export AM_BWRAPPED=yes
|
|
exec "$bwrap_path" --unshare-net --dev-bind / / "$0" "$@"
|
|
fi
|
|
unset AM_BWRAPPED
|
|
fi
|
|
|
|
# ./configure --enable-sniffer [--enable-session-ticket]
|
|
# Resumption tests require "--enable-session-ticket"
|
|
session_ticket=no
|
|
./sslSniffer/sslSnifferTest/snifftest -? 2>&1 | grep -- 'session_ticket '
|
|
if [ $? -eq 0 ]; then
|
|
session_ticket=yes
|
|
fi
|
|
has_rsa=no
|
|
./sslSniffer/sslSnifferTest/snifftest -? 2>&1 | grep -- 'rsa '
|
|
if [ $? -eq 0 ]; then
|
|
has_rsa=yes
|
|
fi
|
|
RESULT=0
|
|
|
|
if test $session_ticket == yes
|
|
then
|
|
# TLS v1.2 Static RSA Test
|
|
echo -e "\nStaring snifftest on testsuite.pcap...\n"
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/testsuite.pcap ./certs/server-key.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest failed\n" && exit 1
|
|
fi
|
|
|
|
# TLS v1.3 sniffer test ECC
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-ecc.pcap ./certs/statickeys/ecc-secp256r1.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 ECC failed\n" && exit 1
|
|
fi
|
|
|
|
# TLS v1.3 sniffer test DH
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-dh.pcap ./certs/statickeys/dh-ffdhe2048.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 DH failed\n" && exit 1
|
|
fi
|
|
|
|
# TLS v1.3 sniffer test X25519
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-x25519.pcap ./certs/statickeys/x25519.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 X25519 failed\n" && exit 1
|
|
fi
|
|
|
|
# TLS v1.3 Resumption Tests
|
|
if test $session_ticket == yes
|
|
then
|
|
# TLS v1.3 sniffer test ECC resumption
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-ecc-resume.pcap ./certs/statickeys/ecc-secp256r1.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 ECC failed\n" && exit 1
|
|
fi
|
|
|
|
# TLS v1.3 sniffer test DH
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-dh-resume.pcap ./certs/statickeys/dh-ffdhe2048.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 DH failed\n" && exit 1
|
|
fi
|
|
|
|
# TLS v1.3 sniffer test X25519
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-x25519-resume.pcap ./certs/statickeys/x25519.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 X25519 failed\n" && exit 1
|
|
fi
|
|
fi
|
|
|
|
|
|
# TLS v1.3 sniffer test hello_retry_request (HRR) with ECDHE
|
|
if test $RESULT -eq 0
|
|
then
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-tls13-hrr.pcap ./certs/statickeys/ecc-secp256r1.pem 127.0.0.1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest TLS v1.3 HRR failed\n" && exit 1
|
|
fi
|
|
|
|
|
|
# IPv6
|
|
if test $RESULT -eq 0 && test "x$1" = "x-6";
|
|
then
|
|
echo -e "\nStaring snifftest on sniffer-ipv6.pcap...\n"
|
|
./sslSniffer/sslSnifferTest/snifftest ./scripts/sniffer-ipv6.pcap ./certs/server-key.pem ::1 11111
|
|
|
|
RESULT=$?
|
|
[ $RESULT -ne 0 ] && echo -e "\nsnifftest (ipv6) failed\n" && exit 1
|
|
fi
|
|
|
|
echo -e "\nSuccess!\n"
|
|
|
|
exit 0
|