mirror of https://github.com/lukechilds/node.git
Fedor Indutny
14 years ago
committed by
Ryan Dahl
Ryan Dahl
8 changed files with 315 additions and 22 deletions
@ -0,0 +1,112 @@ |
|||
// Copyright Joyent, Inc. and other Node contributors.
|
|||
//
|
|||
// Permission is hereby granted, free of charge, to any person obtaining a
|
|||
// copy of this software and associated documentation files (the
|
|||
// "Software"), to deal in the Software without restriction, including
|
|||
// without limitation the rights to use, copy, modify, merge, publish,
|
|||
// distribute, sublicense, and/or sell copies of the Software, and to permit
|
|||
// persons to whom the Software is furnished to do so, subject to the
|
|||
// following conditions:
|
|||
//
|
|||
// The above copyright notice and this permission notice shall be included
|
|||
// in all copies or substantial portions of the Software.
|
|||
//
|
|||
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
|
|||
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|||
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
|
|||
// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
|
|||
// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
|
|||
// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
|
|||
// USE OR OTHER DEALINGS IN THE SOFTWARE.
|
|||
|
|||
if (!process.features.tls_sni) { |
|||
console.error("Skipping because node compiled without OpenSSL or " + |
|||
"with old OpenSSL version."); |
|||
process.exit(0); |
|||
} |
|||
|
|||
var common = require('../common'), |
|||
assert = require('assert'), |
|||
fs = require('fs'), |
|||
tls = require('tls'); |
|||
|
|||
function filenamePEM(n) { |
|||
return require('path').join(common.fixturesDir, 'keys', n + ".pem"); |
|||
} |
|||
|
|||
function loadPEM(n) { |
|||
return fs.readFileSync(filenamePEM(n)); |
|||
} |
|||
|
|||
var serverOptions = { |
|||
key: loadPEM('agent2-key'), |
|||
cert: loadPEM('agent2-cert') |
|||
}; |
|||
|
|||
var SNIContexts = { |
|||
'a.example.com': { |
|||
key: loadPEM('agent1-key'), |
|||
cert: loadPEM('agent1-cert') |
|||
}, |
|||
'asterisk.test.com': { |
|||
key: loadPEM('agent3-key'), |
|||
cert: loadPEM('agent3-cert') |
|||
} |
|||
}; |
|||
|
|||
|
|||
var clientsOptions = [{ |
|||
key: loadPEM('agent1-key'), |
|||
cert: loadPEM('agent1-cert'), |
|||
ca: [loadPEM('ca1-cert')], |
|||
servername: 'a.example.com' |
|||
},{ |
|||
key: loadPEM('agent2-key'), |
|||
cert: loadPEM('agent2-cert'), |
|||
ca: [loadPEM('ca2-cert')], |
|||
servername: 'b.test.com' |
|||
},{ |
|||
key: loadPEM('agent3-key'), |
|||
cert: loadPEM('agent3-cert'), |
|||
ca: [loadPEM('ca1-cert')], |
|||
servername: 'c.wrong.com' |
|||
}]; |
|||
|
|||
var serverPort = common.PORT; |
|||
|
|||
var serverResults = [], |
|||
clientResults = []; |
|||
|
|||
var server = tls.createServer(serverOptions, function(c) { |
|||
serverResults.push(c.servername); |
|||
}); |
|||
|
|||
server.addContext('a.example.com', SNIContexts['a.example.com']); |
|||
server.addContext('*.test.com', SNIContexts['asterisk.test.com']); |
|||
|
|||
server.listen(serverPort, startTest); |
|||
|
|||
function startTest() { |
|||
function connectClient(options, callback) { |
|||
var client = tls.connect(serverPort, 'localhost', options, function() { |
|||
clientResults.push(client.authorized); |
|||
client.destroy(); |
|||
|
|||
callback(); |
|||
}); |
|||
}; |
|||
|
|||
connectClient(clientsOptions[0], function() { |
|||
connectClient(clientsOptions[1], function() { |
|||
connectClient(clientsOptions[2], function() { |
|||
server.close(); |
|||
}); |
|||
}); |
|||
}); |
|||
}; |
|||
|
|||
process.on('exit', function() { |
|||
assert.deepEqual(serverResults, ['a.example.com', 'b.test.com', |
|||
'c.wrong.com']); |
|||
assert.deepEqual(clientResults, [true, true, false]); |
|||
}); |
|||
Loading…
Reference in new issue