Require support for X509 certificates in QUIC CHLO PDMDs. Protected by --quic_require_x509

net/tools/quic/stateless_rejector_test.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/tools/quic/stateless_rejector.h"
 
 #include <memory>
 #include <vector>
 
 #include "net/quic/crypto/crypto_handshake_message.h"
@@ skipping 117 matching lines @@
 };
 
 INSTANTIATE_TEST_CASE_P(Flags,
                         StatelessRejectorTest,
                         ::testing::ValuesIn(GetTestParams()));
 
 TEST_P(StatelessRejectorTest, InvalidChlo) {
   // clang-format off
   const CryptoHandshakeMessage client_hello = CryptoTestUtils::Message(
       "CHLO",
+      "PDMD", "X509",
       "COPT", "SREJ",
       nullptr);
   // clang-format on
   rejector_.OnChlo(GetParam().version, kConnectionId,
                    kServerDesignateConnectionId, client_hello);
 
   if (GetParam().flags != ENABLED || GetParam().version <= QUIC_VERSION_32) {
     EXPECT_EQ(StatelessRejector::UNSUPPORTED, rejector_.state());
     return;
   }
 
   EXPECT_EQ(StatelessRejector::FAILED, rejector_.state());
   EXPECT_EQ(QUIC_INVALID_CRYPTO_MESSAGE_PARAMETER, rejector_.error());
 }
 
 TEST_P(StatelessRejectorTest, ValidChloWithoutSrejSupport) {
   // clang-format off
   const CryptoHandshakeMessage client_hello = CryptoTestUtils::Message(
       "CHLO",
+      "PDMD", "X509",
       "AEAD", "AESG",
       "KEXS", "C255",
       "PUBS", pubs_hex_.c_str(),
       "NONC", nonc_hex_.c_str(),
       "VER\0", ver_hex_.c_str(),
       "$padding", static_cast<int>(kClientHelloMinimumSize),
       nullptr);
   // clang-format on
 
   rejector_.OnChlo(GetParam().version, kConnectionId,
                    kServerDesignateConnectionId, client_hello);
   EXPECT_EQ(StatelessRejector::UNSUPPORTED, rejector_.state());
 }
 
 TEST_P(StatelessRejectorTest, RejectChlo) {
   // clang-format off
   const CryptoHandshakeMessage client_hello = CryptoTestUtils::Message(
       "CHLO",
+      "PDMD", "X509",
       "AEAD", "AESG",
       "KEXS", "C255",
       "COPT", "SREJ",
       "SCID", scid_hex_.c_str(),
       "PUBS", pubs_hex_.c_str(),
       "NONC", nonc_hex_.c_str(),
       "#004b5453", stk_hex_.c_str(),
       "VER\0", ver_hex_.c_str(),
       "$padding", static_cast<int>(kClientHelloMinimumSize),
       nullptr);
@@ skipping 18 matching lines @@
 }
 
 TEST_P(StatelessRejectorTest, AcceptChlo) {
   const uint64_t xlct = CryptoTestUtils::LeafCertHashForTesting();
   const string xlct_hex =
       "#" +
       QuicUtils::HexEncode(reinterpret_cast<const char*>(&xlct), sizeof(xlct));
   // clang-format off
   const CryptoHandshakeMessage client_hello = CryptoTestUtils::Message(
       "CHLO",
+      "PDMD", "X509",
       "AEAD", "AESG",
       "KEXS", "C255",
       "COPT", "SREJ",
       "SCID", scid_hex_.c_str(),
       "PUBS", pubs_hex_.c_str(),
       "NONC", nonc_hex_.c_str(),
       "#004b5453", stk_hex_.c_str(),
       "VER\0", ver_hex_.c_str(),
       "XLCT", xlct_hex.c_str(),
       "$padding", static_cast<int>(kClientHelloMinimumSize),
       nullptr);
   // clang-format on
 
   rejector_.OnChlo(GetParam().version, kConnectionId,
                    kServerDesignateConnectionId, client_hello);
   if (GetParam().flags != ENABLED || GetParam().version <= QUIC_VERSION_32) {
     EXPECT_EQ(StatelessRejector::UNSUPPORTED, rejector_.state());
     return;
   }
   EXPECT_EQ(StatelessRejector::ACCEPTED, rejector_.state());
 }
 
 }  // namespace
 }  // namespace test
 }  // namespace net