X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=tests%2Ftests-normal.sh;h=5967c44ba1ff6485d8ccf2dff9f3e3cff2fa1ba7;hb=9f3f278ae8e7d4b2daa5ca8d331bca70bb550c76;hp=d3ce46ce985c2353e7fc35abd7bef31279712442;hpb=8fd61ea9f6e79de1d7c3943c9271511cf2827761;p=tlsproxy%2Ftlsproxy.git diff --git a/tests/tests-normal.sh b/tests/tests-normal.sh index d3ce46c..5967c44 100755 --- a/tests/tests-normal.sh +++ b/tests/tests-normal.sh @@ -2,7 +2,7 @@ # Normal tlsproxy tests. # -# Copyright (C) 2011 Simon Ruderich +# Copyright (C) 2011-2013 Simon Ruderich # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by @@ -18,105 +18,100 @@ # along with this program. If not, see . -# Handle empty $srcdir. -[ "x$srcdir" = x ] && srcdir=. - -. $srcdir/common.sh +test "x$srcdir" = x && srcdir=. +. "$srcdir/common.sh" # Create necessary files. cleanup -$srcdir/../src/tlsproxy-setup >/dev/null 2>/dev/null +"$srcdir/../src/tlsproxy-setup" >/dev/null 2>/dev/null # Normal tests. -../src/tlsproxy -d2 4711 >/dev/null & -server --x509certfile $srcdir/server.pem \ - --x509keyfile $srcdir/server-key.pem -sleep 1 +tlsproxy 4711 +server --x509certfile "$srcdir/server.pem" \ + --x509keyfile "$srcdir/server-key.pem" +wait_for_ports 4711 4712 echo invalid hostname -client unknown-host 80 - && abort +client unknown-host 80 - && abort 'client unknown-host 80 -' test_proxy_failure test_no_invalid_certificate echo missing proxy and server certificate -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' test_proxy_successful test_invalid_certificate # Create the proxy certificate. -$srcdir/../src/tlsproxy-add localhost $srcdir/server.pem \ +"$srcdir/../src/tlsproxy-add" localhost "$srcdir/server.pem" \ >/dev/null 2>/dev/null echo missing server certificate mv certificate-localhost-server.pem .pem -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' mv .pem certificate-localhost-server.pem test_proxy_successful test_invalid_certificate echo missing proxy certificate mv certificate-localhost-proxy.pem .pem -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' mv .pem certificate-localhost-proxy.pem test_proxy_successful test_invalid_certificate echo normal connection # 'localhost' is the CN of tlsproxy's certificate. -client localhost 4712 localhost || abort +client localhost 4712 localhost || abort 'client localhost 4712 localhost' test_proxy_successful test_no_invalid_certificate # Stop server and try a "MITM" with a bad certificate. echo -pkill -n gnutls-serv -server --x509certfile $srcdir/server-bad.pem \ - --x509keyfile $srcdir/server-key.pem -sleep 1 +kill $pid_server || echo 'failed to kill gnutls-serv' +server --x509certfile "$srcdir/server-bad.pem" \ + --x509keyfile "$srcdir/server-key.pem" +wait_for_ports 4712 rm -f certificate-localhost-proxy.pem certificate-localhost-server.pem echo mitm invalid hostname -client unknown-host 80 - && abort +client unknown-host 80 - && abort 'client unknown-host 80 -' test_proxy_failure test_no_invalid_certificate echo mitm missing proxy and server certificate -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' test_proxy_successful test_invalid_certificate # Create the proxy certificate. -$srcdir/../src/tlsproxy-add localhost $srcdir/server.pem \ +"$srcdir/../src/tlsproxy-add" localhost "$srcdir/server.pem" \ >/dev/null 2>/dev/null echo mitm missing server certificate mv certificate-localhost-server.pem .pem -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' mv .pem certificate-localhost-server.pem test_proxy_successful test_invalid_certificate echo mitm missing proxy certificate mv certificate-localhost-proxy.pem .pem -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' mv .pem certificate-localhost-proxy.pem test_proxy_successful test_invalid_certificate echo mitm normal connection -client localhost 4712 invalid || abort +client localhost 4712 invalid || abort 'client localhost 4712 invalid' test_proxy_successful test_invalid_certificate -pkill -n gnutls-serv -pkill -n tlsproxy - +stop_servers cleanup -rm -f tmp exit 0