3 # Normal tlsproxy tests.
5 # Copyright (C) 2011 Simon Ruderich
7 # This program is free software: you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation, either version 3 of the License, or
10 # (at your option) any later version.
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with this program. If not, see <http://www.gnu.org/licenses/>.
21 # Handle empty $srcdir.
22 [ "x$srcdir" = x ] && srcdir=.
27 # Create necessary files.
28 $srcdir/../src/tlsproxy-setup >/dev/null 2>/dev/null
31 ../src/tlsproxy -d2 4711 >/dev/null &
32 server --x509certfile $srcdir/server.pem \
33 --x509keyfile $srcdir/server-key.pem
38 client unknown-host 80 - && abort
40 test_no_invalid_certificate
42 echo missing proxy and server certificate
43 client localhost 4712 invalid || abort
45 test_invalid_certificate
47 # Create the proxy certificate.
48 $srcdir/../src/tlsproxy-add localhost $srcdir/server.pem \
49 >/dev/null 2>/dev/null
50 rm -f certificate-localhost-server.pem
52 echo missing server certificate
53 client localhost 4712 invalid || abort
55 test_invalid_certificate
57 # Create the proxy and server certificate.
58 $srcdir/../src/tlsproxy-add localhost $srcdir/server.pem \
59 >/dev/null 2>/dev/null
61 echo normal connection
62 client localhost 4712 localhost || abort
64 test_no_invalid_certificate
67 # Stop server and try a "MITM" with a bad certificate.
70 server --x509certfile $srcdir/server-bad.pem \
71 --x509keyfile $srcdir/server-key.pem
75 echo mitm invalid hostname
76 client unknown-host 80 - && abort
78 test_no_invalid_certificate
80 echo mitm missing proxy and server certificate
81 client localhost 4712 invalid || abort
83 test_invalid_certificate
85 # Create the proxy certificate.
86 $srcdir/../src/tlsproxy-add localhost $srcdir/server.pem \
87 >/dev/null 2>/dev/null
88 rm -f certificate-localhost-server.pem
90 echo mitm missing server certificate
91 client localhost 4712 invalid || abort
93 test_invalid_certificate
95 # Create the proxy and server certificate.
96 $srcdir/../src/tlsproxy-add localhost $srcdir/server.pem \
97 >/dev/null 2>/dev/null
99 echo mitm normal connection
100 client localhost 4712 invalid || abort
101 test_proxy_successful
102 test_invalid_certificate
109 certificate-localhost-proxy.pem certificate-localhost-server.pem \
110 proxy-ca-key.pem proxy-ca.pem proxy-invalid.pem proxy-key.pem