mirror of
https://github.com/ruby/ruby.git
synced 2026-10-28 16:36:20 +08:00
Kazuki Yamaguchi
3082e00b61
Do not raise FrozenError in SSLServer.new when SSLContext#session_id_context cannot be updated. session_id_context is only necessary for session resumption, so its absence is not critical. Fixes https://github.com/ruby/openssl/pull/742 https://github.com/ruby/openssl/commit/51de9c303e
68 lines
1.7 KiB
Ruby
68 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
require_relative "utils"
|
|
|
|
return unless defined?(OpenSSL::SSL)
|
|
|
|
class OpenSSL::TestSSLServer < OpenSSL::SSLTestCase
|
|
def test_tcpserver
|
|
tcps = TCPServer.new("127.0.0.1", 0)
|
|
sctx = OpenSSL::SSL::SSLContext.new
|
|
sctx.add_certificate(@svr_cert, @svr_key)
|
|
server = OpenSSL::SSL::SSLServer.new(tcps, sctx)
|
|
assert_same(tcps, server.to_io)
|
|
assert_kind_of(String, sctx.session_id_context)
|
|
th = Thread.start do
|
|
sssl = server.accept
|
|
sssl.puts(sssl.gets)
|
|
ensure
|
|
sssl&.close
|
|
end
|
|
server_connect(tcps.local_address.ip_port) do |ssl|
|
|
assert_equal(@svr_cert.to_der, ssl.peer_cert.to_der)
|
|
ssl.puts("abc")
|
|
assert_equal("abc\n", ssl.gets)
|
|
end
|
|
th.join
|
|
server.close
|
|
assert_predicate(tcps, :closed?)
|
|
end
|
|
|
|
def test_ctx_frozen
|
|
tcps = TCPServer.new("127.0.0.1", 0)
|
|
sctx = OpenSSL::SSL::SSLContext.new
|
|
sctx.add_certificate(@svr_cert, @svr_key)
|
|
sctx.setup
|
|
server = OpenSSL::SSL::SSLServer.new(tcps, sctx)
|
|
assert_nil(sctx.session_id_context)
|
|
th = Thread.start do
|
|
sssl = server.accept
|
|
sssl.puts(sssl.gets)
|
|
ensure
|
|
sssl&.close
|
|
end
|
|
server_connect(tcps.local_address.ip_port) do |ssl|
|
|
assert_equal(@svr_cert.to_der, ssl.peer_cert.to_der)
|
|
ssl.puts("abc")
|
|
assert_equal("abc\n", ssl.gets)
|
|
end
|
|
th.join
|
|
server.close
|
|
end
|
|
|
|
private
|
|
|
|
def server_connect(port, ctx = nil)
|
|
sock = TCPSocket.new("127.0.0.1", port)
|
|
ssl = ctx ? OpenSSL::SSL::SSLSocket.new(sock, ctx) : OpenSSL::SSL::SSLSocket.new(sock)
|
|
ssl.sync_close = true
|
|
ssl.connect
|
|
yield ssl if block_given?
|
|
ensure
|
|
if ssl
|
|
ssl.close
|
|
elsif sock
|
|
sock.close
|
|
end
|
|
end
|
|
end
|