net: add a test to ensure that our TLS handshake doesn't get too large.

net/tools/testserver/testserver.py

 #!/usr/bin/env python
 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 """This is a simple HTTP/FTP/TCP/UDP/BASIC_AUTH_PROXY/WEBSOCKET server used for
 testing Chrome.
 
 It supports several test URLs, as specified by the handlers in TestPageHandler.
 By default, it listens on an ephemeral port and sends the port number back to
@@ skipping 256 matching lines @@
       self.AuthBasicHandler,
       self.AuthDigestHandler,
       self.SlowServerHandler,
       self.ChunkedServerHandler,
       self.ContentTypeHandler,
       self.NoContentHandler,
       self.ServerRedirectHandler,
       self.ClientRedirectHandler,
       self.MultipartHandler,
       self.GetSSLSessionCacheHandler,
+      self.GetSSLClientHelloSizeHandler,
       self.SSLManySmallRecords,
       self.GetChannelID,
       self.CloseSocketHandler,
       self.RangeResetHandler,
       self.DefaultResponseHandler]
     post_handlers = [
       self.EchoTitleHandler,
       self.EchoHandler,
       self.PostOnlyFileHandler] + get_handlers
     put_handlers = [
@@ skipping 1095 matching lines @@
     self.send_header('Content-Type', 'text/plain')
     self.end_headers()
     try:
       for (action, sessionID) in self.server.session_cache.log:
         self.wfile.write('%s\t%s\n' % (action, sessionID.encode('hex')))
     except AttributeError:
       self.wfile.write('Pass --https-record-resume in order to use' +
                        ' this request')
     return True
 
+  def GetSSLClientHelloSizeHandler(self):
+    """Send a reply containing the length of the ClientHello record."""
+
+    if not self._ShouldHandleRequest('/client-hello-length'):
+      return False
+
+    self.send_response(200)
+    self.send_header('Content-Type', 'text/plain')
+    self.end_headers()
+
+    self.wfile.write('%d' % self.server.tlsConnection.client_hello_length)
+
+    return True
+
   def SSLManySmallRecords(self):
     """Sends a reply consisting of a variety of small writes. These will be
     translated into a series of small SSL records when used over an HTTPS
     server."""
 
     if not self._ShouldHandleRequest('/ssl-many-small-records'):
       return False
 
     self.send_response(200)
     self.send_header('Content-Type', 'text/plain')
@@ skipping 659 matching lines @@
                                   '"aes128", "3des", "rc4". If omitted, all '
                                   'algorithms will be used. This option may '
                                   'appear multiple times, indicating '
                                   'multiple algorithms should be enabled.');
     self.option_parser.add_option('--file-root-url', default='/files/',
                                   help='Specify a root URL for files served.')
 
 
 if __name__ == '__main__':
   sys.exit(ServerRunner().main())