1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#ifndef TLSServer_h
#define TLSServer_h
// This is a standalone server for testing SSL features of Gecko.
// The client is expected to connect and initiate an SSL handshake (with SNI
// to indicate which "server" to connect to). If all is good, the client then
// sends one encrypted byte and receives that same byte back.
// This server also has the ability to "call back" another process waiting on
// it. That is, when the server is all set up and ready to receive connections,
// it will connect to a specified port and issue a simple HTTP request.
#include <stdint.h>
#include "ScopedNSSTypes.h"
#include "mozilla/Casting.h"
#include "prio.h"
#include "secerr.h"
#include "ssl.h"
namespace mozilla {
MOZ_TYPE_SPECIFIC_UNIQUE_PTR_TEMPLATE(UniquePRDir, PRDir, PR_CloseDir);
} // namespace mozilla
namespace mozilla { namespace test {
enum DebugLevel
{
DEBUG_ERRORS = 1,
DEBUG_WARNINGS = 2,
DEBUG_VERBOSE = 3
};
extern DebugLevel gDebugLevel;
void PrintPRError(const char *aPrefix);
// The default certificate is trusted for localhost and *.example.com
extern const char DEFAULT_CERT_NICKNAME[];
// Pass DEFAULT_CERT_NICKNAME as certName unless you need a specific
// certificate.
SECStatus
ConfigSecureServerWithNamedCert(PRFileDesc* fd, const char* certName,
/*optional*/ UniqueCERTCertificate* cert,
/*optional*/ SSLKEAType* kea);
SECStatus
InitializeNSS(const char* nssCertDBDir);
int
StartServer(const char *nssCertDBDir, SSLSNISocketConfig sniSocketConfig,
void *sniSocketConfigArg);
template <typename Host>
inline const Host *
GetHostForSNI(const SECItem *aSrvNameArr, uint32_t aSrvNameArrSize,
const Host *hosts)
{
for (uint32_t i = 0; i < aSrvNameArrSize; i++) {
for (const Host *host = hosts; host->mHostName; ++host) {
SECItem hostName;
hostName.data = BitwiseCast<unsigned char*, const char*>(host->mHostName);
hostName.len = strlen(host->mHostName);
if (SECITEM_ItemsAreEqual(&hostName, &aSrvNameArr[i])) {
if (gDebugLevel >= DEBUG_VERBOSE) {
fprintf(stderr, "found pre-defined host '%s'\n", host->mHostName);
}
return host;
}
}
}
if (gDebugLevel >= DEBUG_VERBOSE) {
fprintf(stderr, "could not find host info from SNI\n");
}
PR_SetError(SEC_ERROR_INVALID_ARGS, 0);
return nullptr;
}
} } // namespace mozilla::test
#endif // TLSServer_h
|
