Skip to content
This repository has been archived by the owner on Apr 22, 2023. It is now read-only.

Commit

Permalink
Browse files Browse the repository at this point in the history
gyp: build openssl-cli tool and use it in tests
fix #6663
  • Loading branch information
indutny committed Dec 10, 2013
1 parent ba706ba commit 0236f90
Show file tree
Hide file tree
Showing 13 changed files with 110 additions and 87 deletions.
74 changes: 74 additions & 0 deletions deps/openssl/openssl.gyp
Expand Up @@ -981,6 +981,80 @@
'include_dirs': ['openssl/include'],
},
},
{
'target_name': 'openssl-cli',
'type': 'executable',
'dependencies': [
'openssl',
],
'defines': [
'MONOLITH',
],
'sources': [
'openssl/apps/app_rand.c',
'openssl/apps/apps.c',
'openssl/apps/asn1pars.c',
'openssl/apps/ca.c',
'openssl/apps/ciphers.c',
'openssl/apps/cms.c',
'openssl/apps/crl.c',
'openssl/apps/crl2p7.c',
'openssl/apps/dgst.c',
'openssl/apps/dh.c',
'openssl/apps/dhparam.c',
'openssl/apps/dsa.c',
'openssl/apps/dsaparam.c',
'openssl/apps/ec.c',
'openssl/apps/ecparam.c',
'openssl/apps/enc.c',
'openssl/apps/engine.c',
'openssl/apps/errstr.c',
'openssl/apps/gendh.c',
'openssl/apps/gendsa.c',
'openssl/apps/genpkey.c',
'openssl/apps/genrsa.c',
'openssl/apps/nseq.c',
'openssl/apps/ocsp.c',
'openssl/apps/openssl.c',
'openssl/apps/passwd.c',
'openssl/apps/pkcs12.c',
'openssl/apps/pkcs7.c',
'openssl/apps/pkcs8.c',
'openssl/apps/pkey.c',
'openssl/apps/pkeyparam.c',
'openssl/apps/pkeyutl.c',
'openssl/apps/prime.c',
'openssl/apps/rand.c',
'openssl/apps/req.c',
'openssl/apps/rsa.c',
'openssl/apps/rsautl.c',
'openssl/apps/s_cb.c',
'openssl/apps/s_client.c',
'openssl/apps/s_server.c',
'openssl/apps/s_socket.c',
'openssl/apps/s_time.c',
'openssl/apps/sess_id.c',
'openssl/apps/smime.c',
'openssl/apps/speed.c',
'openssl/apps/spkac.c',
'openssl/apps/srp.c',
'openssl/apps/ts.c',
'openssl/apps/verify.c',
'openssl/apps/version.c',
'openssl/apps/x509.c',
],
'include_dirs': [
'.',
'openssl',
'openssl/crypto',
'openssl/crypto/asn1',
'openssl/crypto/evp',
'openssl/crypto/md2',
'openssl/crypto/modes',
'openssl/crypto/store',
'openssl/include',
],
}
],
}

Expand Down
7 changes: 6 additions & 1 deletion node.gyp
Expand Up @@ -177,7 +177,12 @@
],
'conditions': [
[ 'node_shared_openssl=="false"', {
'dependencies': [ './deps/openssl/openssl.gyp:openssl' ],
'dependencies': [
'./deps/openssl/openssl.gyp:openssl',

# For tests
'./deps/openssl/openssl.gyp:openssl-cli'
],
}]]
}, {
'defines': [ 'HAVE_OPENSSL=0' ]
Expand Down
2 changes: 2 additions & 0 deletions test/common.js
Expand Up @@ -30,8 +30,10 @@ exports.PORT = +process.env.NODE_COMMON_PORT || 12346;

if (process.platform === 'win32') {
exports.PIPE = '\\\\.\\pipe\\libuv-test';
exports.opensslCli = path.join(process.execPath, '..', 'openssl-cli.exe');
} else {
exports.PIPE = exports.tmpDir + '/test.sock';
exports.opensslCli = path.join(process.execPath, '..', 'openssl-cli');
}

var util = require('util');
Expand Down
7 changes: 1 addition & 6 deletions test/pummel/test-https-ci-reneg-attack.js
Expand Up @@ -29,11 +29,6 @@ var fs = require('fs');
// renegotiation limits to test
var LIMITS = [0, 1, 2, 3, 5, 10, 16];

if (process.platform === 'win32') {
console.log('Skipping test, you probably don\'t have openssl installed.');
process.exit();
}

(function() {
var n = 0;
function next() {
Expand Down Expand Up @@ -65,7 +60,7 @@ function test(next) {

server.listen(common.PORT, function() {
var args = ('s_client -connect 127.0.0.1:' + common.PORT).split(' ');
var child = spawn('openssl', args);
var child = spawn(common.opensslCli, args);

child.stdout.pipe(process.stdout);
child.stderr.pipe(process.stderr);
Expand Down
7 changes: 1 addition & 6 deletions test/pummel/test-tls-ci-reneg-attack.js
Expand Up @@ -28,11 +28,6 @@ var fs = require('fs');
// renegotiation limits to test
var LIMITS = [0, 1, 2, 3, 5, 10, 16];

if (process.platform === 'win32') {
console.log('Skipping test, you probably don\'t have openssl installed.');
process.exit();
}

(function() {
var n = 0;
function next() {
Expand Down Expand Up @@ -63,7 +58,7 @@ function test(next) {

server.listen(common.PORT, function() {
var args = ('s_client -connect 127.0.0.1:' + common.PORT).split(' ');
var child = spawn('openssl', args);
var child = spawn(common.opensslCli, args);

child.stdout.pipe(process.stdout);
child.stderr.pipe(process.stderr);
Expand Down
24 changes: 5 additions & 19 deletions test/pummel/test-tls-securepair-client.js
Expand Up @@ -34,21 +34,7 @@ var tls = require('tls');
var exec = require('child_process').exec;
var spawn = require('child_process').spawn;

maybe(test1);

// There is a bug with 'openssl s_server' which makes it not flush certain
// important events to stdout when done over a pipe. Therefore we skip this
// test for all openssl versions less than 1.0.0.
function maybe(cb) {
exec('openssl version', function(err, data) {
if (err) throw err;
if (/OpenSSL 0\./.test(data)) {
console.error('Skipping due to old OpenSSL version.');
return;
}
cb();
});
}
test1();

// simple/test-tls-securepair-client
function test1() {
Expand Down Expand Up @@ -81,10 +67,10 @@ function test(keyfn, certfn, check, next) {
certfn = join(common.fixturesDir, certfn);
var cert = fs.readFileSync(certfn).toString();

var server = spawn('openssl', ['s_server',
'-accept', PORT,
'-cert', certfn,
'-key', keyfn]);
var server = spawn(common.opensslCli, ['s_server',
'-accept', PORT,
'-cert', certfn,
'-key', keyfn]);
server.stdout.pipe(process.stdout);
server.stderr.pipe(process.stdout);

Expand Down
10 changes: 2 additions & 8 deletions test/pummel/test-tls-session-timeout.js
Expand Up @@ -23,13 +23,7 @@ if (!process.versions.openssl) {
console.error('Skipping because node compiled without OpenSSL.');
process.exit(0);
}
require('child_process').exec('openssl version', function(err) {
if (err !== null) {
console.error('Skipping because openssl command is not available.');
process.exit(0);
}
doTest();
});
doTest();

// This test consists of three TLS requests --
// * The first one should result in a new connection because we don't have
Expand Down Expand Up @@ -83,7 +77,7 @@ function doTest() {
'-sess_in', sessionFileName,
'-sess_out', sessionFileName
];
var client = spawn('openssl', flags, {
var client = spawn(common.opensslCli, flags, {
stdio: ['ignore', 'pipe', 'ignore']
});

Expand Down
7 changes: 1 addition & 6 deletions test/simple/test-tls-ecdh-disable.js
Expand Up @@ -25,11 +25,6 @@ var exec = require('child_process').exec;
var tls = require('tls');
var fs = require('fs');

if (process.platform === 'win32') {
console.log("Skipping test, you probably don't have openssl installed.");
process.exit();
}

var options = {
key: fs.readFileSync(common.fixturesDir + '/keys/agent2-key.pem'),
cert: fs.readFileSync(common.fixturesDir + '/keys/agent2-cert.pem'),
Expand All @@ -49,7 +44,7 @@ var server = tls.createServer(options, function(conn) {
});

server.listen(common.PORT, '127.0.0.1', function() {
var cmd = 'openssl s_client -cipher ' + options.ciphers +
var cmd = common.opensslCli + ' s_client -cipher ' + options.ciphers +
' -connect 127.0.0.1:' + common.PORT;

exec(cmd, function(err, stdout, stderr) {
Expand Down
7 changes: 1 addition & 6 deletions test/simple/test-tls-ecdh.js
Expand Up @@ -25,11 +25,6 @@ var exec = require('child_process').exec;
var tls = require('tls');
var fs = require('fs');

if (process.platform === 'win32') {
console.log("Skipping test, you probably don't have openssl installed.");
process.exit();
}

var options = {
key: fs.readFileSync(common.fixturesDir + '/keys/agent2-key.pem'),
cert: fs.readFileSync(common.fixturesDir + '/keys/agent2-cert.pem'),
Expand All @@ -52,7 +47,7 @@ var server = tls.createServer(options, function(conn) {
});

server.listen(common.PORT, '127.0.0.1', function() {
var cmd = 'openssl s_client -cipher ' + options.ciphers +
var cmd = common.opensslCli + ' s_client -cipher ' + options.ciphers +
' -connect 127.0.0.1:' + common.PORT;

exec(cmd, function(err, stdout, stderr) {
Expand Down
2 changes: 1 addition & 1 deletion test/simple/test-tls-securepair-server.js
Expand Up @@ -115,7 +115,7 @@ var opensslExitCode = -1;

server.listen(common.PORT, function() {
// To test use: openssl s_client -connect localhost:8000
var client = spawn('openssl', ['s_client', '-connect', '127.0.0.1:' +
var client = spawn(common.opensslCli, ['s_client', '-connect', '127.0.0.1:' +
common.PORT]);


Expand Down
2 changes: 1 addition & 1 deletion test/simple/test-tls-server-verify.js
Expand Up @@ -198,7 +198,7 @@ function runClient(options, cb) {
}

// To test use: openssl s_client -connect localhost:8000
var client = spawn('openssl', args);
var client = spawn(common.opensslCli, args);

var out = '';

Expand Down
41 changes: 14 additions & 27 deletions test/simple/test-tls-session-cache.js
Expand Up @@ -23,15 +23,10 @@ if (!process.versions.openssl) {
console.error('Skipping because node compiled without OpenSSL.');
process.exit(0);
}
require('child_process').exec('openssl version', function(err) {
if (err !== null) {
console.error('Skipping because openssl command is not available.');
process.exit(0);
}
doTest({ tickets: false } , function() {
doTest({ tickets: true } , function() {
console.error('all done');
});

doTest({ tickets: false } , function() {
doTest({ tickets: true } , function() {
console.error('all done');
});
});

Expand All @@ -56,7 +51,6 @@ function doTest(testOptions, callback) {
var requestCount = 0;
var resumeCount = 0;
var session;
var badOpenSSL = false;

var server = tls.createServer(options, function(cleartext) {
cleartext.on('error', function(er) {
Expand Down Expand Up @@ -87,7 +81,7 @@ function doTest(testOptions, callback) {
}, 100);
});
server.listen(common.PORT, function() {
var client = spawn('openssl', [
var client = spawn(common.opensslCli, [
's_client',
'-tls1',
'-connect', 'localhost:' + common.PORT,
Expand All @@ -104,29 +98,22 @@ function doTest(testOptions, callback) {
});
client.on('exit', function(code) {
console.error('done');
if (/^unknown option/.test(err)) {
// using an incompatible version of openssl
assert(code);
badOpenSSL = true;
} else
assert.equal(code, 0);
assert.equal(code, 0);
server.close(function() {
setTimeout(callback, 100);
});
});
});

process.on('exit', function() {
if (!badOpenSSL) {
if (testOptions.tickets) {
assert.equal(requestCount, 6);
assert.equal(resumeCount, 0);
} else {
// initial request + reconnect requests (5 times)
assert.ok(session);
assert.equal(requestCount, 6);
assert.equal(resumeCount, 5);
}
if (testOptions.tickets) {
assert.equal(requestCount, 6);
assert.equal(resumeCount, 0);
} else {
// initial request + reconnect requests (5 times)
assert.ok(session);
assert.equal(requestCount, 6);
assert.equal(resumeCount, 5);
}
});
}
7 changes: 1 addition & 6 deletions test/simple/test-tls-set-ciphers.js
Expand Up @@ -25,11 +25,6 @@ var exec = require('child_process').exec;
var tls = require('tls');
var fs = require('fs');

if (process.platform === 'win32') {
console.log("Skipping test, you probably don't have openssl installed.");
process.exit();
}

var options = {
key: fs.readFileSync(common.fixturesDir + '/keys/agent2-key.pem'),
cert: fs.readFileSync(common.fixturesDir + '/keys/agent2-cert.pem'),
Expand All @@ -51,7 +46,7 @@ var server = tls.createServer(options, function(conn) {
});

server.listen(common.PORT, '127.0.0.1', function() {
var cmd = 'openssl s_client -cipher ' + options.ciphers +
var cmd = common.opensslCli + ' s_client -cipher ' + options.ciphers +
' -connect 127.0.0.1:' + common.PORT;

exec(cmd, function(err, stdout, stderr) {
Expand Down

0 comments on commit 0236f90

Please sign in to comment.