144 lines
3.8 KiB
Bash
Executable File
144 lines
3.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#set -x # enable debug output
|
|
|
|
cleanup () {
|
|
echo
|
|
echo "Cleaning up..."
|
|
if [ ! -z "$UDP_PROXY_PID" ];then
|
|
echo "Killing udp_proxy $UDP_PROXY_PID"
|
|
kill $UDP_PROXY_PID
|
|
fi
|
|
if [ ! -z "$SERVER_PID" ];then
|
|
echo "Killing server $SERVER_PID"
|
|
kill $SERVER_PID
|
|
fi
|
|
if [ ! -z "$TCPDUMP_PID" ];then
|
|
echo "Killing tcpdump $TCPDUMP_PID"
|
|
sleep 1
|
|
kill $TCPDUMP_PID
|
|
fi
|
|
}
|
|
|
|
trap cleanup err exit
|
|
|
|
WOLFSSL_ROOT=${WOLFSSL_ROOT:-$(pwd)}
|
|
UDP_PROXY_BIN=${UDP_PROXY_BIN:-"udp_proxy"}
|
|
DTLS_VERSION=${DTLS_VERSION:-"-v4"}
|
|
PROXY_PORT=1234
|
|
SERVER_PORT=4321
|
|
KEY_UPDATE_SIZE=35
|
|
NUM_TESTS_FAILED=0
|
|
|
|
if [ "$DTLS_VERSION" = "-v4" ]; then
|
|
UDP_PROXY_EXTRA_ARGS="-u"
|
|
fi
|
|
|
|
# $WOLFSSL_ROOT/tests/unit.test tests/test-dtls13.conf
|
|
|
|
set -o pipefail
|
|
prepend() { # Usage: cmd 2>&1 | prepend "sometext "
|
|
while read line; do echo "${1}${line}"; done
|
|
}
|
|
|
|
run_test() { # usage: run_test "<udp-proxy args>" "<server args>" "<client args>"
|
|
stdbuf -oL -eL $WOLFSSL_ROOT/examples/server/server -u -p$SERVER_PORT $DTLS_VERSION $2 2>&1 | prepend "[server] " &
|
|
SERVER_PID=$!
|
|
stdbuf -oL -eL $UDP_PROXY_BIN -p $PROXY_PORT -s 127.0.0.1:$SERVER_PORT $UDP_PROXY_EXTRA_ARGS $1 2>&1 | prepend "[udp-proxy] " &
|
|
UDP_PROXY_PID=$(($! - 1))
|
|
sleep 0.2
|
|
timeout -s KILL 5m stdbuf -oL -eL $WOLFSSL_ROOT/examples/client/client -u -p$PROXY_PORT $DTLS_VERSION $3 2>&1 | prepend "[client] "
|
|
if [ $? != 0 ]; then
|
|
echo "Test failed"
|
|
((NUM_TESTS_FAILED++))
|
|
fi
|
|
wait $SERVER_PID
|
|
SERVER_PID=
|
|
kill $UDP_PROXY_PID
|
|
UDP_PROXY_PID=
|
|
}
|
|
|
|
|
|
test_dropping_packets () {
|
|
for i in $(seq 3 11);do
|
|
echo -e "\ndropping ${i}th packet\n"
|
|
run_test "-d $i" "-Ta" ""
|
|
done
|
|
|
|
# dropping last ack would be client error as wolfssl_read doesn't support WANT_WRITE as returned error
|
|
for i in $(seq 0 10);do
|
|
echo -e "\nTesting WANT_WRITE: dropping packet $i\n"
|
|
run_test "-f $i" "-Ta -6" "-6"
|
|
done
|
|
}
|
|
|
|
# this test is based on detecting newSessionTicket message by its size. This is rather fragile.
|
|
test_dropping_new_session_ticket() { # usage: test_dropping_new_session_ticket <size>
|
|
echo -e "\ndropping new session ticket packet of size $1\n"
|
|
run_test "-F $1" "-w" "-w --waitTicket"
|
|
}
|
|
|
|
test_permutations () {
|
|
SIDE=$1
|
|
PERMUTATIONS=$(python3 << EOF
|
|
import itertools
|
|
for p in itertools.permutations("$2"):
|
|
print(''.join(p))
|
|
EOF
|
|
)
|
|
for i in $PERMUTATIONS;do
|
|
echo -e "\nTesting $SIDE permutations order $i...\n"
|
|
UDP_LOGFILE=/tmp/udp-$SIDE-$i
|
|
rm -f $UDP_LOGFILE
|
|
run_test "-r $i -S $SIDE -l $UDP_LOGFILE" "-Ta -w" "-w"
|
|
echo "...produced $(grep -P 'client:|server:' $UDP_LOGFILE | wc -l) messages"
|
|
done
|
|
echo "All $SIDE msg permutations succeeded"
|
|
}
|
|
|
|
|
|
test_time_delays () {
|
|
DELAYS=$(python3 << EOF
|
|
import itertools
|
|
t = [0.1, 0.5, 1.1]
|
|
tt = []
|
|
for i in itertools.product(t, t, t):
|
|
tt.append(i * 15)
|
|
for i in tt:
|
|
print(','.join(map(lambda x: str(x) , i)))
|
|
EOF
|
|
)
|
|
for DELAY in $DELAYS;do
|
|
echo -e "\nTesting delay $DELAY...\n"
|
|
UDP_LOGFILE=/tmp/udp-delay-$DELAY
|
|
rm -f $UDP_LOGFILE
|
|
run_test "-l $UDP_LOGFILE -t $DELAY" "-Ta -w" "-w"
|
|
echo "...produced $(grep -P 'client:|server:' $UDP_LOGFILE | wc -l) messages"
|
|
done
|
|
}
|
|
|
|
echo "Starting capture"
|
|
tcpdump -i lo -n port ${SERVER_PORT} -w ./dtls${DTLS_VERSION}.pcap -U &
|
|
TCPDUMP_PID=$!
|
|
|
|
test_dropping_packets
|
|
test_permutations client 012
|
|
test_dropping_new_session_ticket 200
|
|
|
|
if [ ! -z $DTLS13_DO_SERVER_PERMUTATION_TEST ];then
|
|
test_permutations server 0123456
|
|
fi
|
|
|
|
# TODO: fix udp_proxy to not re-order close alert before app data
|
|
if [ ! -z $DTLS13_DO_DELAY_TEST ];then
|
|
test_time_delays
|
|
fi
|
|
|
|
if [ $NUM_TESTS_FAILED == 0 ]; then
|
|
echo -e "\nAll tests SUCCEEDED!!!\n"
|
|
else
|
|
echo -e "\nThere were $NUM_TESTS_FAILED failures\n"
|
|
fi
|
|
|
|
exit $NUM_TESTS_FAILED
|