| Index: net/http/http_network_transaction_ssl_unittest.cc
|
| diff --git a/net/http/http_network_transaction_ssl_unittest.cc b/net/http/http_network_transaction_ssl_unittest.cc
|
| deleted file mode 100644
|
| index ec52c3577a25fd51f0244e7cf9b7a6d979429389..0000000000000000000000000000000000000000
|
| --- a/net/http/http_network_transaction_ssl_unittest.cc
|
| +++ /dev/null
|
| @@ -1,154 +0,0 @@
|
| -// Copyright (c) 2012 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#include <string>
|
| -
|
| -#include "base/memory/ref_counted.h"
|
| -#include "base/memory/scoped_ptr.h"
|
| -#include "base/memory/scoped_vector.h"
|
| -#include "net/base/net_util.h"
|
| -#include "net/base/request_priority.h"
|
| -#include "net/dns/mock_host_resolver.h"
|
| -#include "net/http/http_auth_handler_mock.h"
|
| -#include "net/http/http_network_session.h"
|
| -#include "net/http/http_network_transaction.h"
|
| -#include "net/http/http_request_info.h"
|
| -#include "net/http/http_server_properties_impl.h"
|
| -#include "net/http/transport_security_state.h"
|
| -#include "net/proxy/proxy_service.h"
|
| -#include "net/socket/socket_test_util.h"
|
| -#include "testing/gtest/include/gtest/gtest.h"
|
| -
|
| -namespace net {
|
| -
|
| -namespace {
|
| -
|
| -class TLS10SSLConfigService : public SSLConfigService {
|
| - public:
|
| - TLS10SSLConfigService() {
|
| - ssl_config_.version_min = SSL_PROTOCOL_VERSION_SSL3;
|
| - ssl_config_.version_max = SSL_PROTOCOL_VERSION_TLS1;
|
| - }
|
| -
|
| - void GetSSLConfig(SSLConfig* config) override { *config = ssl_config_; }
|
| -
|
| - private:
|
| - ~TLS10SSLConfigService() override {}
|
| -
|
| - SSLConfig ssl_config_;
|
| -};
|
| -
|
| -class TLS11SSLConfigService : public SSLConfigService {
|
| - public:
|
| - TLS11SSLConfigService() {
|
| - ssl_config_.version_min = SSL_PROTOCOL_VERSION_SSL3;
|
| - ssl_config_.version_max = SSL_PROTOCOL_VERSION_TLS1_1;
|
| - }
|
| -
|
| - void GetSSLConfig(SSLConfig* config) override { *config = ssl_config_; }
|
| -
|
| - private:
|
| - ~TLS11SSLConfigService() override {}
|
| -
|
| - SSLConfig ssl_config_;
|
| -};
|
| -
|
| -} // namespace
|
| -
|
| -class HttpNetworkTransactionSSLTest : public testing::Test {
|
| - protected:
|
| - void SetUp() override {
|
| - ssl_config_service_ = new TLS10SSLConfigService;
|
| - session_params_.ssl_config_service = ssl_config_service_.get();
|
| -
|
| - auth_handler_factory_.reset(new HttpAuthHandlerMock::Factory());
|
| - session_params_.http_auth_handler_factory = auth_handler_factory_.get();
|
| -
|
| - proxy_service_.reset(ProxyService::CreateDirect());
|
| - session_params_.proxy_service = proxy_service_.get();
|
| -
|
| - session_params_.client_socket_factory = &mock_socket_factory_;
|
| - session_params_.host_resolver = &mock_resolver_;
|
| - session_params_.http_server_properties =
|
| - http_server_properties_.GetWeakPtr();
|
| - session_params_.transport_security_state = &transport_security_state_;
|
| - }
|
| -
|
| - HttpRequestInfo* GetRequestInfo(const std::string& url) {
|
| - HttpRequestInfo* request_info = new HttpRequestInfo;
|
| - request_info->url = GURL(url);
|
| - request_info->method = "GET";
|
| - request_info_vector_.push_back(request_info);
|
| - return request_info;
|
| - }
|
| -
|
| - SSLConfig& GetServerSSLConfig(HttpNetworkTransaction* trans) {
|
| - return trans->server_ssl_config_;
|
| - }
|
| -
|
| - scoped_refptr<SSLConfigService> ssl_config_service_;
|
| - scoped_ptr<HttpAuthHandlerMock::Factory> auth_handler_factory_;
|
| - scoped_ptr<ProxyService> proxy_service_;
|
| -
|
| - MockClientSocketFactory mock_socket_factory_;
|
| - MockHostResolver mock_resolver_;
|
| - HttpServerPropertiesImpl http_server_properties_;
|
| - TransportSecurityState transport_security_state_;
|
| - HttpNetworkSession::Params session_params_;
|
| - ScopedVector<HttpRequestInfo> request_info_vector_;
|
| -};
|
| -
|
| -// Tests that HttpNetworkTransaction attempts to fallback from
|
| -// TLS 1.1 to TLS 1.0, then from TLS 1.0 to SSL 3.0.
|
| -TEST_F(HttpNetworkTransactionSSLTest, SSLFallback) {
|
| - ssl_config_service_ = new TLS11SSLConfigService;
|
| - session_params_.ssl_config_service = ssl_config_service_.get();
|
| - // |ssl_data1| is for the first handshake (TLS 1.1), which will fail
|
| - // for protocol reasons (e.g., simulating a version rollback attack).
|
| - SSLSocketDataProvider ssl_data1(ASYNC, ERR_SSL_PROTOCOL_ERROR);
|
| - mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data1);
|
| - StaticSocketDataProvider data1(NULL, 0, NULL, 0);
|
| - mock_socket_factory_.AddSocketDataProvider(&data1);
|
| -
|
| - // |ssl_data2| contains the handshake result for a TLS 1.0
|
| - // handshake which will be attempted after the TLS 1.1
|
| - // handshake fails.
|
| - SSLSocketDataProvider ssl_data2(ASYNC, ERR_SSL_PROTOCOL_ERROR);
|
| - mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data2);
|
| - StaticSocketDataProvider data2(NULL, 0, NULL, 0);
|
| - mock_socket_factory_.AddSocketDataProvider(&data2);
|
| -
|
| - // |ssl_data3| contains the handshake result for a SSL 3.0
|
| - // handshake which will be attempted after the TLS 1.0
|
| - // handshake fails.
|
| - SSLSocketDataProvider ssl_data3(ASYNC, ERR_SSL_PROTOCOL_ERROR);
|
| - mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data3);
|
| - StaticSocketDataProvider data3(NULL, 0, NULL, 0);
|
| - mock_socket_factory_.AddSocketDataProvider(&data3);
|
| -
|
| - scoped_refptr<HttpNetworkSession> session(
|
| - new HttpNetworkSession(session_params_));
|
| - scoped_ptr<HttpNetworkTransaction> trans(
|
| - new HttpNetworkTransaction(DEFAULT_PRIORITY, session.get()));
|
| -
|
| - TestCompletionCallback callback;
|
| - // This will consume |ssl_data1|, |ssl_data2| and |ssl_data3|.
|
| - int rv = callback.GetResult(
|
| - trans->Start(GetRequestInfo("https://www.paypal.com/"),
|
| - callback.callback(), BoundNetLog()));
|
| - EXPECT_EQ(ERR_SSL_PROTOCOL_ERROR, rv);
|
| -
|
| - SocketDataProviderArray<SocketDataProvider>& mock_data =
|
| - mock_socket_factory_.mock_data();
|
| - // Confirms that |ssl_data1|, |ssl_data2| and |ssl_data3| are consumed.
|
| - EXPECT_EQ(3u, mock_data.next_index());
|
| -
|
| - SSLConfig& ssl_config = GetServerSSLConfig(trans.get());
|
| - // |version_max| fallbacks to SSL 3.0.
|
| - EXPECT_EQ(SSL_PROTOCOL_VERSION_SSL3, ssl_config.version_max);
|
| - EXPECT_TRUE(ssl_config.version_fallback);
|
| -}
|
| -
|
| -} // namespace net
|
| -
|
|
|