kris
/
boringssl
1
0
Rozštěpit 0
Zdrojový kód Úkoly 0 Požadavky na natažení 0 Vydání 0 Wiki Aktivita
Nelze vybrat více než 25 témat Téma musí začínat písmenem nebo číslem, může obsahovat pomlčky („-“) a může být dlouhé až 35 znaků.
1913 Revize
12 Větve
38 MiB
Strom: 1269ddd377
Větve Značky
${ item.name }
Vytvořit větev ${ searchTerm }
z „1269ddd377“
${ noResults }
boringssl/ssl/test/packeted_bio.h

packeted_bio.h 1.6 KiB
Surový Normální zobrazení Historie

Add initial DTLS tests. Change-Id: I7407261bdb2d788c879f2e67e617a615d9ff8f8b Reviewed-on: https://boringssl-review.googlesource.com/1505 Reviewed-by: Adam Langley <agl@google.com>
před 10 roky
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
Remove OPENSSL_timeval. With DTLSv1_get_timeout de-ctrl-ified, the type checker complains about OPENSSL_timeval. Existing callers all use the real timeval. Now that OPENSSL_timeval is not included in any public structs, simply forward-declare timeval itself in ssl.h and pull in winsock2.h in internal headers. Change-Id: Ieaf110e141578488048c28cdadb14881301a2ce1 Reviewed-on: https://boringssl-review.googlesource.com/4682 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
Add initial DTLS tests. Change-Id: I7407261bdb2d788c879f2e67e617a615d9ff8f8b Reviewed-on: https://boringssl-review.googlesource.com/1505 Reviewed-by: Adam Langley <agl@google.com>
před 10 roky
​
Remove std::unique_ptr dependency on bssl_shim's scoped types. This is in preparation for using RAII in the unit tests. Those tests are built in Chromium as well, but Chromium does not have C++11 library support across all its toolchains. Compiler support is available, so add a partial reimplementation of std::unique_ptr and std::move under crypto/test/. The scopers for the crypto/ library are also moved there while the ones for ssl/ stay in ssl/test/. Change-Id: I38f769acbc16a870db34649928575c7314b6e9f6 Reviewed-on: https://boringssl-review.googlesource.com/4120 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
RAII bssl_shim. bssl_shim rather needs it. It doesn't even free the SSL* properly most of the time. Now that it does, this opens the door to running malloc tests under a leak checker (because it's just not slow enough right now). Change-Id: I37d2004de27180c41b42a6d9e5aea02caf9b8b32 Reviewed-on: https://boringssl-review.googlesource.com/3340 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
Remove OPENSSL_timeval. With DTLSv1_get_timeout de-ctrl-ified, the type checker complains about OPENSSL_timeval. Existing callers all use the real timeval. Now that OPENSSL_timeval is not included in any public structs, simply forward-declare timeval itself in ssl.h and pull in winsock2.h in internal headers. Change-Id: Ieaf110e141578488048c28cdadb14881301a2ce1 Reviewed-on: https://boringssl-review.googlesource.com/4682 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
​
​
​
​
​
​
​
Add initial DTLS tests. Change-Id: I7407261bdb2d788c879f2e67e617a615d9ff8f8b Reviewed-on: https://boringssl-review.googlesource.com/1505 Reviewed-by: Adam Langley <agl@google.com>
před 10 roky
Use just one style for the shim. It's currently a mix of GoogleCPlusPlusStyle and unix_hacker_style. Since it's now been thoroughly C++-ified, let's go with the former. This also matches the tool, our other bit of C++ code. Change-Id: Ie90a166006aae3b8f41628dbb35fcd64e99205df Reviewed-on: https://boringssl-review.googlesource.com/3348 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
Add DTLS timeout and retransmit tests. This extends the packet adaptor protocol to send three commands: type command = | Packet of []byte | Timeout of time.Duration | TimeoutAck When the shim processes a Timeout in BIO_read, it sends TimeoutAck, fails the BIO_read, returns out of the SSL stack, advances the clock, calls DTLSv1_handle_timeout, and continues. If the Go side sends Timeout right between sending handshake flight N and reading flight N+1, the shim won't read the Timeout until it has sent flight N+1 (it only processes packet commands in BIO_read), so the TimeoutAck comes after N+1. Go then drops all packets before the TimeoutAck, thus dropping one transmit of flight N+1 without having to actually process the packets to determine the end of the flight. The shim then sees the updated clock, calls DTLSv1_handle_timeout, and re-sends flight N+1 for Go to process for real. When dropping packets, Go checks the epoch and increments sequence numbers so that we can continue to be strict here. This requires tracking the initial sequence number of the next epoch. The final Finished message takes an additional special-case to test. DTLS triggers retransmits on either a timeout or seeing a stale flight. OpenSSL only implements the former which should be sufficient (and is necessary) EXCEPT for the final Finished message. If the peer's final Finished message is lost, it won't be waiting for a message from us, so it won't time out anything. That retransmit must be triggered on stale message, so we retransmit the Finished message in Go. Change-Id: I3ffbdb1de525beb2ee831b304670a3387877634c Reviewed-on: https://boringssl-review.googlesource.com/3212 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
​
​
​
Add initial DTLS tests. Change-Id: I7407261bdb2d788c879f2e67e617a615d9ff8f8b Reviewed-on: https://boringssl-review.googlesource.com/1505 Reviewed-by: Adam Langley <agl@google.com>
před 10 roky
Add DTLS timeout and retransmit tests. This extends the packet adaptor protocol to send three commands: type command = | Packet of []byte | Timeout of time.Duration | TimeoutAck When the shim processes a Timeout in BIO_read, it sends TimeoutAck, fails the BIO_read, returns out of the SSL stack, advances the clock, calls DTLSv1_handle_timeout, and continues. If the Go side sends Timeout right between sending handshake flight N and reading flight N+1, the shim won't read the Timeout until it has sent flight N+1 (it only processes packet commands in BIO_read), so the TimeoutAck comes after N+1. Go then drops all packets before the TimeoutAck, thus dropping one transmit of flight N+1 without having to actually process the packets to determine the end of the flight. The shim then sees the updated clock, calls DTLSv1_handle_timeout, and re-sends flight N+1 for Go to process for real. When dropping packets, Go checks the epoch and increments sequence numbers so that we can continue to be strict here. This requires tracking the initial sequence number of the next epoch. The final Finished message takes an additional special-case to test. DTLS triggers retransmits on either a timeout or seeing a stale flight. OpenSSL only implements the former which should be sufficient (and is necessary) EXCEPT for the final Finished message. If the peer's final Finished message is lost, it won't be waiting for a message from us, so it won't time out anything. That retransmit must be triggered on stale message, so we retransmit the Finished message in Go. Change-Id: I3ffbdb1de525beb2ee831b304670a3387877634c Reviewed-on: https://boringssl-review.googlesource.com/3212 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
​
​
Remove OPENSSL_timeval. With DTLSv1_get_timeout de-ctrl-ified, the type checker complains about OPENSSL_timeval. Existing callers all use the real timeval. Now that OPENSSL_timeval is not included in any public structs, simply forward-declare timeval itself in ssl.h and pull in winsock2.h in internal headers. Change-Id: Ieaf110e141578488048c28cdadb14881301a2ce1 Reviewed-on: https://boringssl-review.googlesource.com/4682 Reviewed-by: Adam Langley <agl@google.com>
před 9 roky
Add initial DTLS tests. Change-Id: I7407261bdb2d788c879f2e67e617a615d9ff8f8b Reviewed-on: https://boringssl-review.googlesource.com/1505 Reviewed-by: Adam Langley <agl@google.com>
před 10 roky
​
​
 1234567891011121314151617181920212223242526272829303132333435363738394041424344 
  1. /* Copyright (c) 2014, Google Inc.

  2.  *

  3.  * Permission to use, copy, modify, and/or distribute this software for any

  4.  * purpose with or without fee is hereby granted, provided that the above

  5.  * copyright notice and this permission notice appear in all copies.

  6.  *

  7.  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES

  8.  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF

  9.  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY

  10.  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES

  11.  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION

  12.  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN

  13.  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */

  14. 

  15. #ifndef HEADER_PACKETED_BIO

  16. #define HEADER_PACKETED_BIO

  17. 

  18. #include <openssl/base.h>

  19. #include <openssl/bio.h>

  20. 

  21. #include "../../crypto/test/scoped_types.h"

  22. 

  23. #if defined(OPENSSL_WINDOWS)

  24. #pragma warning(push, 3)

  25. #include <winsock2.h>

  26. #pragma warning(pop)

  27. #else

  28. #include <sys/types.h>

  29. #endif

  30. 

  31. 

  32. // PacketedBioCreate creates a filter BIO which implements a reliable in-order

  33. // blocking datagram socket. The resulting BIO, on |BIO_read|, may simulate a

  34. // timeout which sets |*out_timeout| to the timeout and fails the read.

  35. // |*out_timeout| must be zero on entry to |BIO_read|; it is an error to not

  36. // apply the timeout before the next |BIO_read|.

  37. //

  38. // Note: The read timeout simulation is intended to be used with the async BIO

  39. // wrapper. It doesn't simulate BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT, used in DTLS's

  40. // blocking mode.

  41. ScopedBIO PacketedBioCreate(timeval *out_timeout);

  42. 

  43. 

  44. #endif  // HEADER_PACKETED_BIO