3 # Normal tlsproxy tests.
5 # Copyright (C) 2011-2013 Simon Ruderich
7 # This program is free software: you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation, either version 3 of the License, or
10 # (at your option) any later version.
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with this program. If not, see <http://www.gnu.org/licenses/>.
21 # Handle empty $srcdir.
22 [ "x$srcdir" = x ] && srcdir=.
27 # Create necessary files.
29 "$srcdir/../src/tlsproxy-setup" >/dev/null 2>/dev/null
32 ../src/tlsproxy -d2 4711 >/dev/null &
33 server --x509certfile "$srcdir/server.pem" \
34 --x509keyfile "$srcdir/server-key.pem"
39 client unknown-host 80 - && abort
41 test_no_invalid_certificate
43 echo missing proxy and server certificate
44 client localhost 4712 invalid || abort
46 test_invalid_certificate
48 # Create the proxy certificate.
49 "$srcdir/../src/tlsproxy-add" localhost "$srcdir/server.pem" \
50 >/dev/null 2>/dev/null
52 echo missing server certificate
53 mv certificate-localhost-server.pem .pem
54 client localhost 4712 invalid || abort
55 mv .pem certificate-localhost-server.pem
57 test_invalid_certificate
59 echo missing proxy certificate
60 mv certificate-localhost-proxy.pem .pem
61 client localhost 4712 invalid || abort
62 mv .pem certificate-localhost-proxy.pem
64 test_invalid_certificate
66 echo normal connection
67 # 'localhost' is the CN of tlsproxy's certificate.
68 client localhost 4712 localhost || abort
70 test_no_invalid_certificate
73 # Stop server and try a "MITM" with a bad certificate.
76 server --x509certfile "$srcdir/server-bad.pem" \
77 --x509keyfile "$srcdir/server-key.pem"
79 rm -f certificate-localhost-proxy.pem certificate-localhost-server.pem
82 echo mitm invalid hostname
83 client unknown-host 80 - && abort
85 test_no_invalid_certificate
87 echo mitm missing proxy and server certificate
88 client localhost 4712 invalid || abort
90 test_invalid_certificate
92 # Create the proxy certificate.
93 "$srcdir/../src/tlsproxy-add" localhost "$srcdir/server.pem" \
94 >/dev/null 2>/dev/null
96 echo mitm missing server certificate
97 mv certificate-localhost-server.pem .pem
98 client localhost 4712 invalid || abort
99 mv .pem certificate-localhost-server.pem
100 test_proxy_successful
101 test_invalid_certificate
103 echo mitm missing proxy certificate
104 mv certificate-localhost-proxy.pem .pem
105 client localhost 4712 invalid || abort
106 mv .pem certificate-localhost-proxy.pem
107 test_proxy_successful
108 test_invalid_certificate
110 echo mitm normal connection
111 client localhost 4712 invalid || abort
112 test_proxy_successful
113 test_invalid_certificate