Breaking Change: merge BoringSSL branch into master

tests/standalone/io/raw_secure_server_socket_test.dart

 // Copyright (c) 2013, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 //
 // VMOptions=
 // VMOptions=--short_socket_read
 // VMOptions=--short_socket_write
 // VMOptions=--short_socket_read --short_socket_write
 
 import "dart:async";
 import "dart:io";
 
 import "package:async_helper/async_helper.dart";
 import "package:expect/expect.dart";
 
 InternetAddress HOST;
-const CERTIFICATE = "localhost_cert";
+String localFile(path) => Platform.script.resolve(path).toFilePath();
+
+SecurityContext serverContext = new SecurityContext()
+  ..useCertificateChain(localFile('certificates/server_chain.pem'))
+  ..usePrivateKey(localFile('certificates/server_key.pem'),
+                  password: 'dartdart');
+
+SecurityContext clientContext = new SecurityContext()
+  ..setTrustedCertificates(file: localFile('certificates/trusted_certs.pem'));
 
 void testSimpleBind() {
   asyncStart();
-  RawSecureServerSocket.bind(HOST, 0, CERTIFICATE).then((s) {
+  RawSecureServerSocket.bind(HOST, 0, serverContext).then((s) {
     Expect.isTrue(s.port > 0);
     s.close();
     asyncEnd();
   });
 }
 
 void testInvalidBind() {
   int count = 0;
 
   // Bind to a unknown DNS name.
   asyncStart();
-  RawSecureServerSocket.bind("ko.faar.__hest__", 0, CERTIFICATE).then((_) {
+  RawSecureServerSocket.bind("ko.faar.__hest__", 0, serverContext).then((_) {
     Expect.fail("Failure expected");
   }).catchError((error) {
     Expect.isTrue(error is SocketException);
     asyncEnd();
   });
 
   // Bind to an unavaliable IP-address.
   asyncStart();
-  RawSecureServerSocket.bind("8.8.8.8", 0, CERTIFICATE).then((_) {
+  RawSecureServerSocket.bind("8.8.8.8", 0, serverContext).then((_) {
     Expect.fail("Failure expected");
   }).catchError((error) {
     Expect.isTrue(error is SocketException);
     asyncEnd();
   });
 
   // Bind to a port already in use.
   asyncStart();
-  RawSecureServerSocket.bind(HOST, 0, CERTIFICATE).then((s) {
+  RawSecureServerSocket.bind(HOST, 0, serverContext).then((s) {
     RawSecureServerSocket.bind(HOST,
                                s.port,
-                               CERTIFICATE).then((t) {
+                               serverContext).then((t) {
       s.close();
       t.close();
       Expect.fail("Multiple listens on same port");
     })
     .catchError((error) {
       Expect.isTrue(error is SocketException);
       s.close();
       asyncEnd();
     });
   });
 }
 
-void testSimpleConnect(String certificate) {
+void testSimpleConnect() {
   asyncStart();
-  RawSecureServerSocket.bind(HOST, 0, certificate).then((server) {
-    var clientEndFuture = RawSecureSocket.connect(HOST, server.port);
+  RawSecureServerSocket.bind(HOST, 0, serverContext).then((server) {
+    var clientEndFuture =
+    RawSecureSocket.connect(HOST, server.port, context: clientContext);
     server.listen((serverEnd) {
       clientEndFuture.then((clientEnd) {
+        // TODO(whesse): Shutdown(SEND) not supported on secure sockets.
         clientEnd.shutdown(SocketDirection.SEND);
         serverEnd.shutdown(SocketDirection.SEND);
         server.close();
         asyncEnd();
       });
     });
   });
 }
 
-void testSimpleConnectFail(String certificate, bool cancelOnError) {
+void testSimpleConnectFail(SecurityContext context, bool cancelOnError) {
   asyncStart();
-  RawSecureServerSocket.bind(HOST, 0, certificate).then((server) {
-    var clientEndFuture = RawSecureSocket.connect(HOST, server.port)
+  RawSecureServerSocket.bind(HOST, 0, context).then((server) {
+    var clientEndFuture =
+        RawSecureSocket.connect(HOST, server.port, context: clientContext)
       .then((clientEnd) {
         Expect.fail("No client connection expected.");
       })
       .catchError((error) {
         Expect.isTrue(error is SocketException ||
                       error is HandshakeException);
       });
     server.listen((serverEnd) {
       Expect.fail("No server connection expected.");
     },
     onError: (error) {
-      Expect.isTrue(error is CertificateException);
+      Expect.isTrue(error is HandshakeException);
       clientEndFuture.then((_) {
         if (!cancelOnError) server.close();
         asyncEnd();
       });
     },
     cancelOnError: cancelOnError);
   });
 }
 
 void testServerListenAfterConnect() {
   asyncStart();
-  RawSecureServerSocket.bind(HOST, 0, CERTIFICATE).then((server) {
+  RawSecureServerSocket.bind(HOST, 0, serverContext).then((server) {
     Expect.isTrue(server.port > 0);
-    var clientEndFuture = RawSecureSocket.connect(HOST, server.port);
+    var clientEndFuture =
+        RawSecureSocket.connect(HOST, server.port, context: clientContext);
     new Timer(const Duration(milliseconds: 500), () {
       server.listen((serverEnd) {
         clientEndFuture.then((clientEnd) {
           clientEnd.shutdown(SocketDirection.SEND);
           serverEnd.shutdown(SocketDirection.SEND);
           server.close();
           asyncEnd();
         });
       });
     });
@@ skipping 293 matching lines @@
           Expect.fail("Unexpected close");
           break;
         default: throw "Unexpected event $event";
       }
     });
     return completer.future;
   }
 
   Future<RawSecureSocket> connectClient(int port) {
     if (connectSecure) {
-      return RawSecureSocket.connect(HOST, port);
+      return RawSecureSocket.connect(HOST, port, context: clientContext);
     } else if (!handshakeBeforeSecure) {
       return RawSocket.connect(HOST, port).then((socket) {
-        return RawSecureSocket.secure(socket);
+        return RawSecureSocket.secure(socket, context: clientContext);
       });
     } else {
       return RawSocket.connect(HOST, port).then((socket) {
         return runClientHandshake(socket).then((subscription) {
-            return RawSecureSocket.secure(socket, subscription: subscription);
+            return RawSecureSocket.secure(socket,
+                                          context: clientContext,
+                                          subscription: subscription);
         });
       });
     }
   }
 
   serverReady(server) {
     server.listen((client) {
       if (listenSecure) {
         runServer(client).then((_) => server.close());
       } else if (!handshakeBeforeSecure) {
-        RawSecureSocket.secureServer(client, CERTIFICATE).then((client) {
+        RawSecureSocket.secureServer(client, serverContext).then((client) {
           runServer(client).then((_) => server.close());
         });
       } else {
         runServerHandshake(client).then((secure) {
             RawSecureSocket.secureServer(
                 client,
-                CERTIFICATE,
+                serverContext,
                 subscription: secure[0],
                 bufferedData: secure[1]).then((client) {
             runServer(client).then((_) => server.close());
           });
         });
       }
     });
 
     connectClient(server.port).then(runClient).then((socket) {
       socket.close();
       asyncEnd();
     });
   }
 
   if (listenSecure) {
     RawSecureServerSocket.bind(
-        HOST, 0, CERTIFICATE).then(serverReady);
+        HOST, 0, serverContext).then(serverReady);
   } else {
     RawServerSocket.bind(HOST, 0).then(serverReady);
   }
 }
 
 testPausedSecuringSubscription(bool pausedServer, bool pausedClient) {
   asyncStart();
   var clientComplete = new Completer();
   RawServerSocket.bind(HOST, 0).then((server) {
     server.listen((client) {
       var subscription;
       subscription = client.listen((_) {
         if (pausedServer) {
           subscription.pause();
         }
         void done() {
           server.close();
           clientComplete.future.then((_) {
             client.close();
             asyncEnd();
           });
         }
         try {
           RawSecureSocket.secureServer(
-              client, CERTIFICATE, subscription: subscription)
+              client, serverContext, subscription: subscription)
             .catchError((_) {})
             .whenComplete(() {
               if (pausedServer) {
                 Expect.fail("secureServer succeeded with paused subscription");
               }
               done();
             });
         } catch (e) {
           if (!pausedServer) {
             Expect.fail("secureServer failed with non-paused subscriptions");
@@ skipping 32 matching lines @@
           }
           clientComplete.complete(null);
         }
       });
     });
   });
 }
 
 main() {
   asyncStart();
-  var certificateDatabase = Platform.script.resolve('pkcert').toFilePath();
-  SecureSocket.initialize(database: certificateDatabase,
-                          password: 'dartdart',
-                          useBuiltinRoots: false);
   InternetAddress.lookup("localhost").then((hosts) {
     HOST = hosts.first;
     runTests();
     asyncEnd();
   });
 }
 
 runTests() {
   testSimpleBind();
   testInvalidBind();
-  testSimpleConnect(CERTIFICATE);
-  testSimpleConnect("CN=localhost");
-  testSimpleConnectFail("not_a_nickname", false);
-  testSimpleConnectFail("CN=notARealDistinguishedName", false);
-  testSimpleConnectFail("not_a_nickname", true);
-  testSimpleConnectFail("CN=notARealDistinguishedName", true);
+  testSimpleConnect();
+  SecurityContext context = new SecurityContext();
+  testSimpleConnectFail(context, false);
+  testSimpleConnectFail(context, true);
+  var chain =
+      Platform.script.resolve('certificates/untrusted_server_chain.pem')
+      .toFilePath();
+  context.useCertificateChain(chain);
+  testSimpleConnectFail(context, false);
+  testSimpleConnectFail(context, true);
+  var key =
+      Platform.script.resolve('certificates/untrusted_server_key.pem')
+       .toFilePath();
+  context.usePrivateKey(key, password: 'dartdart');
+  testSimpleConnectFail(context, false);
+  testSimpleConnectFail(context, true);
   testServerListenAfterConnect();
 
   testSimpleReadWrite(listenSecure: true,
                       connectSecure: true,
                       handshakeBeforeSecure: false,
                       postponeSecure: false,
                       dropReads: false);
   testSimpleReadWrite(listenSecure: true,
                       connectSecure: false,
                       handshakeBeforeSecure: false,
                       postponeSecure: false,
                       dropReads: false);
+
   testSimpleReadWrite(listenSecure: false,
                       connectSecure: true,
                       handshakeBeforeSecure: false,
                       postponeSecure: false,
                       dropReads: false);
+
   testSimpleReadWrite(listenSecure: false,
                       connectSecure: false,
                       handshakeBeforeSecure: false,
                       postponeSecure: false,
                       dropReads: false);
   testSimpleReadWrite(listenSecure: false,
                       connectSecure: false,
                       handshakeBeforeSecure: true,
                       postponeSecure: true,
                       dropReads: false);
@@ skipping 10 matching lines @@
   testSimpleReadWrite(listenSecure: false,
                       connectSecure: false,
                       handshakeBeforeSecure: true,
                       postponeSecure: true,
                       dropReads: true);
   testPausedSecuringSubscription(false, false);
   testPausedSecuringSubscription(true, false);
   testPausedSecuringSubscription(false, true);
   testPausedSecuringSubscription(true, true);
 }