Add client certificates to HttpsServer and HttpClient.

tests/standalone/io/https_client_certificate_test.dart

Index: tests/standalone/io/https_client_certificate_test.dart
diff --git a/tests/standalone/io/https_client_certificate_test.dart b/tests/standalone/io/https_client_certificate_test.dart
new file mode 100644
index 0000000000000000000000000000000000000000..45aa91f5ca41e69cd12d1914b522de6d27effd49
--- /dev/null
+++ b/tests/standalone/io/https_client_certificate_test.dart
@@ -0,0 +1,94 @@
+// Copyright (c) 2012, the Dart project authors.  Please see the AUTHORS file
+// for details. All rights reserved. Use of this source code is governed by a
+// BSD-style license that can be found in the LICENSE file.
+
+import "dart:io";
+import "dart:uri";
+import "dart:isolate";
+
+const SERVER_ADDRESS = "127.0.0.1";
+const HOST_NAME = "localhost";
+
+int numClientCertificatesReceived = 0;
+// Run first test with no certificate name, second test with "localhost_cert".
+String testCertificateName = null;
+
+Future test([var unused]) {
+  var completer = new Completer();
+  HttpsServer server = new HttpsServer();
+  Expect.throws(() => server.port);
+
+  server.defaultRequestHandler =
+      (HttpRequest request, HttpResponse response) {
+    if (request.path == '/true') {
+      // Client certificate sent
+      numClientCertificatesReceived++;
+      Expect.isNotNull(request.certificate);
+      Expect.equals('CN=localhost', request.certificate.subject);
+    } else {
+      Expect.equals('/false', request.path);
+      Expect.isNull(request.certificate);
+    }
+
+    request.inputStream.onClosed = () {
+      response.outputStream.close();
+    };
+  };
+
+  server.listen(SERVER_ADDRESS,
+                0,
+                backlog: 5,
+                certificate_name: 'CN=$HOST_NAME',
+                requestClientCertificate: true);
+
+  HttpClient client = new HttpClient();
+  Future testConnect(bool sendCertificate) {
+    client.sendClientCertificate = sendCertificate;
+    client.clientCertificate = testCertificateName;
+    var completer = new Completer();
+    HttpClientConnection conn =
+          client.getUrl(new Uri.fromString(
+              "https://$HOST_NAME:${server.port}/$sendCertificate"));
+    conn.onRequest = (HttpClientRequest request) {
+      request.outputStream.close();
+    };
+    conn.onResponse = (HttpClientResponse response) {
+      Expect.isNotNull(response.certificate);
+      Expect.equals('CN=myauthority', response.certificate.issuer);
+      response.inputStream.onClosed = () {
+        completer.complete(false);  // Chained call will not send cert.
+      };
+    };
+    conn.onError = (Exception e) {
+      Expect.fail("Unexpected error in Https Client: $e");
+    };
+    return completer.future;
+  }
+
+  testConnect(true).chain(testConnect).then((_) {
+      client.shutdown();
+      server.close();
+      Expect.throws(() => server.port);
+      // Run second test with a certificate name.

[Søren Gjesse, 2012/12/12 15:27:07]

How about moving this setting of the certificate name into the code in main? It
seems a bit subtle to have that here.

+      testCertificateName = 'localhost_cert';
+      completer.complete(null);
+    });
+    return completer.future;
+}
+
+void InitializeSSL() {
+  var testPkcertDatabase =
+      new Path.fromNative(new Options().script).directoryPath.append('pkcert/');
+  SecureSocket.initialize(database: testPkcertDatabase.toNativePath(),
+                          password: 'dartdart');
+}
+
+void main() {
+  var keepAlive = new ReceivePort();
+  InitializeSSL();
+  // Test two connections in sequence.
+  test().chain(test).then((_) {

[Bill Hesse, 2012/12/12 14:00:58]

Indentation is fixed.

+      Expect.equals(2, numClientCertificatesReceived);
+    keepAlive.close();
+  });
+}