76c2ff557a
It would be nice not to have to support this since all the clients that we care about support TLSv1 by now. However, due to buggy implementations of SSLv3 on the Internet which can't do version negotiation correctly, browsers will sometimes switch to SSLv3. Since there's no good way for a browser tell a network problem from a buggy server, this downgrade can occur even if the server in question is actually working correctly. So we need to support SSLv3 for robustness :( Fixes #1703. R=bradfitz CC=golang-dev https://golang.org/cl/5018045
213 lines
8.0 KiB
Go
213 lines
8.0 KiB
Go
// Copyright 2010 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package tls
|
|
|
|
import (
|
|
"bytes"
|
|
"flag"
|
|
"io"
|
|
"net"
|
|
"testing"
|
|
)
|
|
|
|
func testClientScript(t *testing.T, name string, clientScript [][]byte, config *Config) {
|
|
c, s := net.Pipe()
|
|
cli := Client(c, config)
|
|
go func() {
|
|
cli.Write([]byte("hello\n"))
|
|
cli.Close()
|
|
c.Close()
|
|
}()
|
|
|
|
defer c.Close()
|
|
for i, b := range clientScript {
|
|
if i%2 == 1 {
|
|
s.Write(b)
|
|
continue
|
|
}
|
|
bb := make([]byte, len(b))
|
|
_, err := io.ReadFull(s, bb)
|
|
if err != nil {
|
|
t.Fatalf("%s #%d: %s", name, i, err)
|
|
}
|
|
if !bytes.Equal(b, bb) {
|
|
t.Fatalf("%s #%d: mismatch on read: got:%x want:%x", name, i, bb, b)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestHandshakeClientRC4(t *testing.T) {
|
|
testClientScript(t, "RC4", rc4ClientScript, testConfig)
|
|
}
|
|
|
|
var connect = flag.Bool("connect", false, "connect to a TLS server on :10443")
|
|
|
|
func TestRunClient(t *testing.T) {
|
|
if !*connect {
|
|
return
|
|
}
|
|
|
|
testConfig.CipherSuites = []uint16{TLS_ECDHE_RSA_WITH_RC4_128_SHA}
|
|
|
|
conn, err := Dial("tcp", "127.0.0.1:10443", testConfig)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
conn.Write([]byte("hello\n"))
|
|
conn.Close()
|
|
}
|
|
|
|
// Script of interaction with gnutls implementation.
|
|
// The values for this test are obtained by building and running in client mode:
|
|
// % gotest -test.run "TestRunClient" -connect
|
|
// and then:
|
|
// % gnutls-serv -p 10443 --debug 100 --x509keyfile key.pem --x509certfile cert.pem -a > /tmp/log 2>&1
|
|
// % python parse-gnutls-cli-debug-log.py < /tmp/log
|
|
//
|
|
// Where key.pem is:
|
|
// -----BEGIN RSA PRIVATE KEY-----
|
|
// MIIBPAIBAAJBAJ+zw4Qnlf8SMVIPFe9GEcStgOY2Ww/dgNdhjeD8ckUJNP5VZkVD
|
|
// TGiXav6ooKXfX3j/7tdkuD8Ey2//Kv7+ue0CAwEAAQJAN6W31vDEP2DjdqhzCDDu
|
|
// OA4NACqoiFqyblo7yc2tM4h4xMbC3Yx5UKMN9ZkCtX0gzrz6DyF47bdKcWBzNWCj
|
|
// gQIhANEoojVt7hq+SQ6MCN6FTAysGgQf56Q3TYoJMoWvdiXVAiEAw3e3rc+VJpOz
|
|
// rHuDo6bgpjUAAXM+v3fcpsfZSNO6V7kCIQCtbVjanpUwvZkMI9by02oUk9taki3b
|
|
// PzPfAfNPYAbCJQIhAJXNQDWyqwn/lGmR11cqY2y9nZ1+5w3yHGatLrcDnQHxAiEA
|
|
// vnlEGo8K85u+KwIOimM48ZG8oTk7iFdkqLJR1utT3aU=
|
|
// -----END RSA PRIVATE KEY-----
|
|
//
|
|
// and cert.pem is:
|
|
// -----BEGIN CERTIFICATE-----
|
|
// MIIBoDCCAUoCAQAwDQYJKoZIhvcNAQEEBQAwYzELMAkGA1UEBhMCQVUxEzARBgNV
|
|
// BAgTClF1ZWVuc2xhbmQxGjAYBgNVBAoTEUNyeXB0U29mdCBQdHkgTHRkMSMwIQYD
|
|
// VQQDExpTZXJ2ZXIgdGVzdCBjZXJ0ICg1MTIgYml0KTAeFw05NzA5MDkwMzQxMjZa
|
|
// Fw05NzEwMDkwMzQxMjZaMF4xCzAJBgNVBAYTAkFVMRMwEQYDVQQIEwpTb21lLVN0
|
|
// YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxFzAVBgNVBAMT
|
|
// DkVyaWMgdGhlIFlvdW5nMFEwCQYFKw4DAgwFAANEAAJBALVEqPODnpI4rShlY8S7
|
|
// tB713JNvabvn6Gned7zylwLLiXQAo/PAT6mfdWPTyCX9RlId/Aroh1ou893BA32Q
|
|
// sggwDQYJKoZIhvcNAQEEBQADQQCU5SSgapJSdRXJoX+CpCvFy+JVh9HpSjCpSNKO
|
|
// 19raHv98hKAUJuP9HyM+SUsffO6mAIgitUaqW8/wDMePhEC3
|
|
// -----END CERTIFICATE-----
|
|
var rc4ClientScript = [][]byte{
|
|
{
|
|
0x16, 0x03, 0x01, 0x00, 0x4a, 0x01, 0x00, 0x00,
|
|
0x46, 0x03, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x05,
|
|
0x01, 0x00, 0x00, 0x1b, 0x00, 0x05, 0x00, 0x05,
|
|
0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0a, 0x00,
|
|
0x08, 0x00, 0x06, 0x00, 0x17, 0x00, 0x18, 0x00,
|
|
0x19, 0x00, 0x0b, 0x00, 0x02, 0x01, 0x00,
|
|
},
|
|
|
|
{
|
|
0x16, 0x03, 0x01, 0x00, 0x4a, 0x02, 0x00, 0x00,
|
|
0x46, 0x03, 0x01, 0x4d, 0x0a, 0x56, 0x16, 0xb5,
|
|
0x91, 0xd1, 0xcb, 0x80, 0x4d, 0xc7, 0x46, 0xf3,
|
|
0x37, 0x0c, 0xef, 0xea, 0x64, 0x11, 0x14, 0x56,
|
|
0x97, 0x9b, 0xc5, 0x67, 0x08, 0xb7, 0x13, 0xea,
|
|
0xf8, 0xc9, 0xb3, 0x20, 0xe2, 0xfc, 0x41, 0xf6,
|
|
0x96, 0x90, 0x9d, 0x43, 0x9b, 0xe9, 0x6e, 0xf8,
|
|
0x41, 0x16, 0xcc, 0xf3, 0xc7, 0xde, 0xda, 0x5a,
|
|
0xa1, 0x33, 0x69, 0xe2, 0xde, 0x5b, 0xaf, 0x2a,
|
|
0x92, 0xe7, 0xd4, 0xa0, 0x00, 0x05, 0x00, 0x16,
|
|
0x03, 0x01, 0x01, 0xf7, 0x0b, 0x00, 0x01, 0xf3,
|
|
0x00, 0x01, 0xf0, 0x00, 0x01, 0xed, 0x30, 0x82,
|
|
0x01, 0xe9, 0x30, 0x82, 0x01, 0x52, 0x02, 0x01,
|
|
0x06, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48,
|
|
0x86, 0xf7, 0x0d, 0x01, 0x01, 0x04, 0x05, 0x00,
|
|
0x30, 0x5b, 0x31, 0x0b, 0x30, 0x09, 0x06, 0x03,
|
|
0x55, 0x04, 0x06, 0x13, 0x02, 0x41, 0x55, 0x31,
|
|
0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x08,
|
|
0x13, 0x0a, 0x51, 0x75, 0x65, 0x65, 0x6e, 0x73,
|
|
0x6c, 0x61, 0x6e, 0x64, 0x31, 0x1a, 0x30, 0x18,
|
|
0x06, 0x03, 0x55, 0x04, 0x0a, 0x13, 0x11, 0x43,
|
|
0x72, 0x79, 0x70, 0x74, 0x53, 0x6f, 0x66, 0x74,
|
|
0x20, 0x50, 0x74, 0x79, 0x20, 0x4c, 0x74, 0x64,
|
|
0x31, 0x1b, 0x30, 0x19, 0x06, 0x03, 0x55, 0x04,
|
|
0x03, 0x13, 0x12, 0x54, 0x65, 0x73, 0x74, 0x20,
|
|
0x43, 0x41, 0x20, 0x28, 0x31, 0x30, 0x32, 0x34,
|
|
0x20, 0x62, 0x69, 0x74, 0x29, 0x30, 0x1e, 0x17,
|
|
0x0d, 0x30, 0x30, 0x31, 0x30, 0x31, 0x36, 0x32,
|
|
0x32, 0x33, 0x31, 0x30, 0x33, 0x5a, 0x17, 0x0d,
|
|
0x30, 0x33, 0x30, 0x31, 0x31, 0x34, 0x32, 0x32,
|
|
0x33, 0x31, 0x30, 0x33, 0x5a, 0x30, 0x63, 0x31,
|
|
0x0b, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06,
|
|
0x13, 0x02, 0x41, 0x55, 0x31, 0x13, 0x30, 0x11,
|
|
0x06, 0x03, 0x55, 0x04, 0x08, 0x13, 0x0a, 0x51,
|
|
0x75, 0x65, 0x65, 0x6e, 0x73, 0x6c, 0x61, 0x6e,
|
|
0x64, 0x31, 0x1a, 0x30, 0x18, 0x06, 0x03, 0x55,
|
|
0x04, 0x0a, 0x13, 0x11, 0x43, 0x72, 0x79, 0x70,
|
|
0x74, 0x53, 0x6f, 0x66, 0x74, 0x20, 0x50, 0x74,
|
|
0x79, 0x20, 0x4c, 0x74, 0x64, 0x31, 0x23, 0x30,
|
|
0x21, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x1a,
|
|
0x53, 0x65, 0x72, 0x76, 0x65, 0x72, 0x20, 0x74,
|
|
0x65, 0x73, 0x74, 0x20, 0x63, 0x65, 0x72, 0x74,
|
|
0x20, 0x28, 0x35, 0x31, 0x32, 0x20, 0x62, 0x69,
|
|
0x74, 0x29, 0x30, 0x5c, 0x30, 0x0d, 0x06, 0x09,
|
|
0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01,
|
|
0x01, 0x05, 0x00, 0x03, 0x4b, 0x00, 0x30, 0x48,
|
|
0x02, 0x41, 0x00, 0x9f, 0xb3, 0xc3, 0x84, 0x27,
|
|
0x95, 0xff, 0x12, 0x31, 0x52, 0x0f, 0x15, 0xef,
|
|
0x46, 0x11, 0xc4, 0xad, 0x80, 0xe6, 0x36, 0x5b,
|
|
0x0f, 0xdd, 0x80, 0xd7, 0x61, 0x8d, 0xe0, 0xfc,
|
|
0x72, 0x45, 0x09, 0x34, 0xfe, 0x55, 0x66, 0x45,
|
|
0x43, 0x4c, 0x68, 0x97, 0x6a, 0xfe, 0xa8, 0xa0,
|
|
0xa5, 0xdf, 0x5f, 0x78, 0xff, 0xee, 0xd7, 0x64,
|
|
0xb8, 0x3f, 0x04, 0xcb, 0x6f, 0xff, 0x2a, 0xfe,
|
|
0xfe, 0xb9, 0xed, 0x02, 0x03, 0x01, 0x00, 0x01,
|
|
0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86,
|
|
0xf7, 0x0d, 0x01, 0x01, 0x04, 0x05, 0x00, 0x03,
|
|
0x81, 0x81, 0x00, 0x93, 0xd2, 0x0a, 0xc5, 0x41,
|
|
0xe6, 0x5a, 0xa9, 0x86, 0xf9, 0x11, 0x87, 0xe4,
|
|
0xdb, 0x45, 0xe2, 0xc5, 0x95, 0x78, 0x1a, 0x6c,
|
|
0x80, 0x6d, 0x73, 0x1f, 0xb4, 0x6d, 0x44, 0xa3,
|
|
0xba, 0x86, 0x88, 0xc8, 0x58, 0xcd, 0x1c, 0x06,
|
|
0x35, 0x6c, 0x44, 0x62, 0x88, 0xdf, 0xe4, 0xf6,
|
|
0x64, 0x61, 0x95, 0xef, 0x4a, 0xa6, 0x7f, 0x65,
|
|
0x71, 0xd7, 0x6b, 0x88, 0x39, 0xf6, 0x32, 0xbf,
|
|
0xac, 0x93, 0x67, 0x69, 0x51, 0x8c, 0x93, 0xec,
|
|
0x48, 0x5f, 0xc9, 0xb1, 0x42, 0xf9, 0x55, 0xd2,
|
|
0x7e, 0x4e, 0xf4, 0xf2, 0x21, 0x6b, 0x90, 0x57,
|
|
0xe6, 0xd7, 0x99, 0x9e, 0x41, 0xca, 0x80, 0xbf,
|
|
0x1a, 0x28, 0xa2, 0xca, 0x5b, 0x50, 0x4a, 0xed,
|
|
0x84, 0xe7, 0x82, 0xc7, 0xd2, 0xcf, 0x36, 0x9e,
|
|
0x6a, 0x67, 0xb9, 0x88, 0xa7, 0xf3, 0x8a, 0xd0,
|
|
0x04, 0xf8, 0xe8, 0xc6, 0x17, 0xe3, 0xc5, 0x29,
|
|
0xbc, 0x17, 0xf1, 0x16, 0x03, 0x01, 0x00, 0x04,
|
|
0x0e, 0x00, 0x00, 0x00,
|
|
},
|
|
|
|
{
|
|
0x16, 0x03, 0x01, 0x00, 0x46, 0x10, 0x00, 0x00,
|
|
0x42, 0x00, 0x40, 0x87, 0xa1, 0x1f, 0x14, 0xe1,
|
|
0xfb, 0x91, 0xac, 0x58, 0x2e, 0xf3, 0x71, 0xce,
|
|
0x01, 0x85, 0x2c, 0xc7, 0xfe, 0x84, 0x87, 0x82,
|
|
0xb7, 0x57, 0xdb, 0x37, 0x4d, 0x46, 0x83, 0x67,
|
|
0x52, 0x82, 0x51, 0x01, 0x95, 0x23, 0x68, 0x69,
|
|
0x6b, 0xd0, 0xa7, 0xa7, 0xe5, 0x88, 0xd0, 0x47,
|
|
0x71, 0xb8, 0xd2, 0x03, 0x05, 0x25, 0x56, 0x5c,
|
|
0x10, 0x08, 0xc6, 0x9b, 0xd4, 0x67, 0xcd, 0x28,
|
|
0xbe, 0x9c, 0x48, 0x14, 0x03, 0x01, 0x00, 0x01,
|
|
0x01, 0x16, 0x03, 0x01, 0x00, 0x24, 0xc1, 0xb8,
|
|
0xd3, 0x7f, 0xc5, 0xc2, 0x5a, 0x1d, 0x6d, 0x5b,
|
|
0x2d, 0x5c, 0x82, 0x87, 0xc2, 0x6f, 0x0d, 0x63,
|
|
0x7b, 0x72, 0x2b, 0xda, 0x69, 0xc4, 0xfe, 0x3c,
|
|
0x84, 0xa1, 0x5a, 0x62, 0x38, 0x37, 0xc6, 0x54,
|
|
0x25, 0x2a,
|
|
},
|
|
|
|
{
|
|
0x14, 0x03, 0x01, 0x00, 0x01, 0x01, 0x16, 0x03,
|
|
0x01, 0x00, 0x24, 0xea, 0x88, 0x9c, 0x00, 0xf6,
|
|
0x35, 0xb8, 0x42, 0x7f, 0x15, 0x17, 0x76, 0x5e,
|
|
0x4b, 0x24, 0xcb, 0x7e, 0xa0, 0x7b, 0xc3, 0x70,
|
|
0x52, 0x0a, 0x88, 0x2a, 0x7a, 0x45, 0x59, 0x90,
|
|
0x59, 0xac, 0xc6, 0xb5, 0x56, 0x55, 0x96,
|
|
},
|
|
}
|