codtls 0.0.1.alpha

data/test/test_send_recv.rb

@@ -0,0 +1,178 @@
+require 'test_helper'
+require 'codtls'
+
+# Testclass
+class CoDTLSSendRecvTest < Minitest::Test
+  DB_FILE = 'sendrecvtest.sqlite'
+  KEY = 'ABCDEFGHIJKLMNOP'
+  IV = 'ABCD'
+
+  def setup
+    create_sqlite_db(DB_FILE)
+    SQLite3::Database.new(DB_FILE)
+    ActiveRecord::Base.establish_connection(
+      adapter: 'sqlite3',
+      database: DB_FILE)
+    ActiveRecord::Base.connection
+    ActiveRecord::Migration.verbose = false
+    ActiveRecord::Migrator.migrate('db/migrate')
+  end
+
+  def teardown
+    #CoDTLS::Session.clear_all
+    ActiveRecord::Base.remove_connection
+    FileUtils.rm(DB_FILE)
+  end
+
+  def test_send
+    # Setup - begin
+    session = CoDTLS::Session.new('127.0.0.1')
+
+    r = UDPSocket.new
+    r.bind('127.0.0.1', 5684)
+
+    s = CoDTLS::SecureSocket.new
+    s.connect('127.0.0.1', 5684)
+    # Setup - end
+
+    # assert_raises(CoDTLS::SecureSocketError) { s.send('Hallo Welt!', 0) }
+
+    session.enable_handshake
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 1', h, :handshake, 0, 1)
+    assert_equal('Hallo Welt!', d)
+
+    session.disable_handshake
+
+    # assert_raises(CoDTLS::SecureSocketError) { s.send('Hallo Welt!', 0) }
+
+    session.enable_handshake
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 2', h, :handshake, 0, 2)
+    assert_equal('Hallo Welt!', d)
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 3', h, :handshake, 0, 3)
+    assert_equal('Hallo Welt!', d)
+
+    session.key_block = KEY * 2 + IV * 2
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 4', h, :handshake, 0, 4)
+    assert_equal('Hallo Welt!', d)
+
+    ccm = OpenSSL::CCM.new('AES', KEY, 8)
+    session.increase_epoch
+
+    session.disable_handshake
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 5', h, :appdata, 1, 1)
+    c = ccm.encrypt('Hallo Welt!', IV + "\x00\x01\x00\x00\x00\x00\x00\x01")
+    assert_equal(c.unpack('H*')[0], d.unpack('H*')[0])
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 6', h, :appdata, 1, 2)
+    c = ccm.encrypt('Hallo Welt!', IV + "\x00\x01\x00\x00\x00\x00\x00\x02")
+    assert_equal(c.unpack('H*')[0], d.unpack('H*')[0])
+
+    session.enable_handshake
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 7', h, :handshake, 1, 3)
+    c = ccm.encrypt('Hallo Welt!', IV + "\x00\x01\x00\x00\x00\x00\x00\x03")
+    assert_equal(c.unpack('H*')[0], d.unpack('H*')[0])
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 8', h, :handshake, 1, 4)
+    c = ccm.encrypt('Hallo Welt!', IV + "\x00\x01\x00\x00\x00\x00\x00\x04")
+    assert_equal(c.unpack('H*')[0], d.unpack('H*')[0])
+
+    session.disable_handshake
+
+    s.send('Hallo Welt!', 0)
+    h, d = CoDTLS::Record.parse(r.recvfrom(50)[0])
+    check_header('Send 9', h, :appdata, 1, 5)
+    c = ccm.encrypt('Hallo Welt!', IV + "\x00\x01\x00\x00\x00\x00\x00\x05")
+    assert_equal(c.unpack('H*')[0], d.unpack('H*')[0])
+
+    s.close
+    r.close
+  end
+
+=begin
+  def test_receive
+    # Setup - begin
+    session = CoDTLS::Session.new('127.0.0.1')
+    session.enable_handshake
+
+    r = CoDTLS::SecureSocket.new
+    r.bind('127.0.0.1', 0)
+    r.connect('127.0.0.1', 5684)
+
+    s = UDPSocket.new
+    s.bind('127.0.0.1', 5684)
+
+    r.send('find Port', 0)
+    port = s.recvfrom(12)[1][1]
+#   s.connect('127.0.0.1', s.recvfrom(12)[1][1])
+
+    session.disable_handshake
+    # Setup - end
+
+    h = CoDTLS::Record.new(:appdata, 0, 1)
+    s.send(h.to_wire + 'Hallo Welt!', 0, '127.0.0.1', port)
+    # ---
+    d, = r.recvfrom(5)
+    assert_equal('', d)
+    # ---
+    h, d = CoDTLS::Record.parse(s.recvfrom(20)[0])
+    check_header('Receive 1', h, :alert, 0, 2)
+    assert_equal("\x02\x0a", d) # fatal (2), unexpected_message (10)
+
+    h = CoDTLS::Record.new(:handshake, 0, 1)
+    s.send(h.to_wire + 'Hallo Welt!', 0, '127.0.0.1', port)
+    d, = r.recvfrom(5)
+    assert_equal('Hallo', d)
+
+    h = CoDTLS::Record.new(:handshake, 0, 2)
+    s.send(h.to_wire + 'Hallo Welt!', 0, '127.0.0.1', port)
+    d, = r.recvfrom(20)
+    assert_equal('Hallo Welt!', d)
+
+    h = CoDTLS::Record.new(:handshake, 0, 104)
+    s.send(h.to_wire + 'Hallo Welt!', 0, '127.0.0.1', port)
+    # ---
+    d, = r.recvfrom(5)
+    assert_equal('', d)
+    # ---
+    h, d = CoDTLS::Record.parse(s.recvfrom(20)[0])
+    check_header('Receive 2', h, :alert, 0, 3)
+    assert_equal("\x02\x32", d) # fatal (2), decode_error (50)
+
+    h = CoDTLS::Record.new(:handshake, 0, 103)
+    s.send(h.to_wire + 'Hallo Welt!', 0, '127.0.0.1', port)
+    d, = r.recvfrom(11)
+    assert_equal('Hallo Welt!', d)
+
+    s.close
+    r.close
+  end
+=end
+
+  def check_header(fail_msg, header, type, epoch, seq_num = nil)
+    assert_equal(type, header.type, fail_msg)
+    assert_equal(epoch, header.epoch, fail_msg)
+    assert_equal(seq_num, header.seq_num, fail_msg) unless seq_num.nil?
+  end
+end

data/test/test_session.rb

@@ -0,0 +1,164 @@
+require 'test_helper'
+require 'codtls/abstract_session'
+require 'codtls/session'
+
+# Testclass
+class CoDTLSSessionTest < Minitest::Test
+  def setup
+    fail CoDTLS::SessionError 'testdatabase already exists' if File.exist?(
+                                                         'testdatabase.sqlite')
+    SQLite3::Database.new('testdatabase.sqlite')
+    ActiveRecord::Base.establish_connection(
+      adapter: 'sqlite3',
+      database: 'testdatabase.sqlite')
+    ActiveRecord::Base.connection
+    ActiveRecord::Migration.verbose = false # debug messages
+    ActiveRecord::Migrator.migrate 'db/migrate'
+    CoDTLS::Session.clear_all # only needed here, it is not normal that the
+                              # database gets changed while the program is
+                              # still running
+    @session = CoDTLS::Session.new('127.0.0.1')
+  end
+
+  def teardown
+    @session.clear
+    ActiveRecord::Base.remove_connection
+    FileUtils.rm('testdatabase.sqlite') if File.exist?('testdatabase.sqlite')
+  end
+
+  # check values, set everything, check values, clear, check values,
+  # create new session, check values
+  def test_clear
+    assert_equal(nil, @session.id)
+    assert_equal(0, @session.epoch)
+    assert_equal(true, @session.check_seq(1))
+    assert_equal(1, @session.seq)
+    assert_equal(nil, @session.key_block)
+    assert_equal(false, @session.handshake?)
+
+    @session.id = 'ABCDEFGH'
+    @session.key_block = 'ABCDEFGHIJKLMNOPABCDEFGHIJKLMNOPABCDABCD'
+    @session.increase_epoch
+    @session.seq = 5
+    @session.enable_handshake
+
+    assert_equal('ABCDEFGH', @session.id)
+    assert_equal(1, @session.epoch)
+    assert_equal(true, @session.check_seq(6))
+    assert_equal(1, @session.seq)
+    assert_equal('ABCDEFGHIJKLMNOPABCDEFGHIJKLMNOPABCDABCD',
+                 @session.key_block)
+    assert_equal(true, @session.handshake?)
+
+    @session.clear
+    entry = nil
+    ActiveRecord::Base.connection_pool.with_connection do
+      entry = CODTLSConnection.find_by_ip('127.0.0.1')
+    end
+    assert_equal(nil, entry)
+    assert_equal([], CoDTLS::Session.ip_list)
+
+    assert_equal(nil, @session.id)
+    assert_equal(0, @session.epoch)
+    assert_equal(true, @session.check_seq(1))
+    assert_equal(1, @session.seq)
+    assert_equal(nil, @session.key_block)
+    assert_equal(false, @session.handshake?)
+  end
+
+  # get_epoch and increase_epoch test
+  def test_epoch
+    assert_equal(nil, @session.id)
+    assert_equal(0, @session.epoch)
+    assert_equal(true, @session.check_seq(1))
+    assert_equal(1, @session.seq)
+    assert_equal(nil, @session.key_block)
+    assert_equal(false, @session.handshake?)
+
+    @session.seq
+    @session.seq
+    @session.seq = 50
+    assert_raises(CoDTLS::SessionError) { @session.increase_epoch }
+
+    @session.key_block = 'ABCDEFGHIJKLMNOPABCDEFGHIJKLMNOPABCDABCD'
+    assert_equal(nil, @session.key_block)
+
+    @session.increase_epoch
+    assert_equal(1, @session.epoch)
+    assert_equal(true, @session.check_seq(1))
+    assert_equal(1, @session.seq)
+    assert_equal('ABCDEFGHIJKLMNOPABCDEFGHIJKLMNOPABCDABCD',
+                 @session.key_block)
+  end
+
+  # get_key_block and add_key_block tests, testing the overwriting off
+  # new keyblocks and switching keyblocks when the epoch is increased
+  def test_key_block
+    assert_equal(nil, @session.key_block)
+    exception = assert_raises(CoDTLS::SessionError) do
+      @session.key_block = 'this_key_block_is_too_small'
+    end
+    assert_equal('key blocks have to be 40 byte long', exception.message)
+    @session.key_block = 'key_block_with_fourty_bytes_number_00001'
+    assert_equal(nil, @session.key_block)
+    @session.increase_epoch
+    assert_equal('key_block_with_fourt' \
+                 'y_bytes_number_00001', @session.key_block)
+    @session.key_block = 'key_block_with_fourty_bytes_number_00002'
+    @session.key_block = 'key_block_with_fourty_bytes_number_00003'
+    assert_equal('key_block_with_fourt' \
+                 'y_bytes_number_00001', @session.key_block)
+    @session.increase_epoch
+    assert_equal('key_block_with_fourt' \
+                 'y_bytes_number_00003', @session.key_block)
+  end
+
+  # enable_handshake and dissable_handshake tests.
+  def test_handshake
+    assert_equal(false, @session.handshake?)
+    @session.enable_handshake
+    assert_equal(true, @session.handshake?)
+    @session.enable_handshake
+    assert_equal(true, @session.handshake?)
+    @session.disable_handshake
+    assert_equal(false, @session.handshake?)
+  end
+
+  # get_seq and check_seq tests, testing the check_seq ranges and the
+  # incrementing of get_seq.
+  def test_seq
+    assert_equal(1, @session.seq)
+    assert_equal(2, @session.seq)
+    assert_equal(3, @session.seq)
+
+    # 1 is expected, so -9 ... 101 are valid values
+    assert_equal(false, @session.check_seq(-10))
+    assert_equal(false, @session.check_seq(102))
+    assert_equal(true, @session.check_seq(-9))
+    assert_equal(true, @session.check_seq(-1))
+    assert_equal(true, @session.check_seq(0))
+    assert_equal(true, @session.check_seq(1))
+    assert_equal(true, @session.check_seq(101))
+
+    @session.seq = 1
+    (2..100).each do |n|
+      assert_equal(true, @session.check_seq(n))
+      @session.seq = n
+    end
+    # 101 is expected, so max allowed value is 201
+    assert_equal(true, @session.check_seq(201))
+    assert_equal(false, @session.check_seq(202))
+  end
+
+  def test_multiple_sessions
+    new_session = CoDTLS::Session.new('127.0.0.1')
+    assert_equal(1, CoDTLS::Session.ip_list.size)
+    assert_equal(false, new_session.handshake?)
+    assert_equal(false, @session.handshake?)
+    new_session.enable_handshake
+    assert_equal(true, new_session.handshake?)
+    assert_equal(true, @session.handshake?)
+    new_session.clear
+    assert_equal(false, @session.handshake?)
+  end
+end

metadata

@@ -0,0 +1,303 @@
+--- !ruby/object:Gem::Specification
+name: codtls
+version: !ruby/object:Gem::Version
+  version: 0.0.1.alpha
+platform: ruby
+authors:
+- Lars Schmertmann
+- Jens Trillmann
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-05-13 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: coap
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: openssl-ccm
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.1
+- !ruby/object:Gem::Dependency
+  name: openssl-cmac
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.0.0
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.3.9
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.3.9
+- !ruby/object:Gem::Dependency
+  name: activerecord
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.0.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 10.2.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 10.2.2
+- !ruby/object:Gem::Dependency
+  name: rdoc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.1.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.1.1
+- !ruby/object:Gem::Dependency
+  name: yard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.8'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.8.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.8'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.8.7.3
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.18'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.18.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.18'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.18.1
+- !ruby/object:Gem::Dependency
+  name: coveralls
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.7.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.7'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.7.0
+description: DTLS with stateless header compression and CoAP based handshake.
+email:
+- SmallLars@t-online.de
+- jtrillma@informatik.uni-bremen.de
+executables: []
+extensions: []
+extra_rdoc_files:
+- README.md
+- LICENSE
+files:
+- ".rubocop.yml"
+- ".yardopts"
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- lib/codtls.rb
+- lib/codtls/abstract_session.rb
+- lib/codtls/alert.rb
+- lib/codtls/decrypt.rb
+- lib/codtls/ecc.rb
+- lib/codtls/encrypt.rb
+- lib/codtls/h_changecipherspec.rb
+- lib/codtls/h_chello.rb
+- lib/codtls/h_content.rb
+- lib/codtls/h_finished.rb
+- lib/codtls/h_keyexchange.rb
+- lib/codtls/h_shello.rb
+- lib/codtls/h_shellodone.rb
+- lib/codtls/h_type.rb
+- lib/codtls/h_verify.rb
+- lib/codtls/handshake.rb
+- lib/codtls/models/codtls_connection.rb
+- lib/codtls/models/codtls_device.rb
+- lib/codtls/prf.rb
+- lib/codtls/pskdb.rb
+- lib/codtls/ram_session.rb
+- lib/codtls/rampskdb.rb
+- lib/codtls/record.rb
+- lib/codtls/session.rb
+- lib/codtls/version.rb
+- lib/generators/codtls/codtls_generator.rb
+- lib/generators/codtls/templates/create_codtls_connections.rb
+- lib/generators/codtls/templates/create_codtls_devices.rb
+- test/test_codtls.rb
+- test/test_ecc.rb
+- test/test_h_chello.rb
+- test/test_h_content.rb
+- test/test_h_keyexchange.rb
+- test/test_helper.rb
+- test/test_pskdb.rb
+- test/test_ram_session.rb
+- test/test_rampskdb.rb
+- test/test_record.rb
+- test/test_send_recv.rb
+- test/test_session.rb
+homepage: https://github.com/SmallLars/codtls
+licenses:
+- MIT
+metadata: {}
+post_install_message: Thanks for installing!
+rdoc_options:
+- "-x"
+- test/data_*
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.1.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">"
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: DTLS with CoAP based handshake.
+test_files:
+- test/test_codtls.rb
+- test/test_ecc.rb
+- test/test_h_content.rb
+- test/test_h_keyexchange.rb
+- test/test_send_recv.rb
+- test/test_pskdb.rb
+- test/test_ram_session.rb
+- test/test_session.rb
+- test/test_helper.rb
+- test/test_h_chello.rb
+- test/test_rampskdb.rb
+- test/test_record.rb
+has_rdoc: