mt-ruby-tls 2.4.0

data/spec/verify_spec.rb

@@ -0,0 +1,267 @@
+require 'mt-ruby-tls'
+
+
+describe MTRubyTls do
+
+    class Client2
+        def initialize(client_data, dir)
+            @client_data = client_data
+            @ssl = MTRubyTls::SSL::Box.new(false, self, private_key: dir + 'client.key', cert_chain: dir + 'client.crt', host_name: 'just.testing.com')
+        end
+
+        attr_reader :ssl
+        attr_accessor :stop
+        attr_accessor :server
+
+        def close_cb
+            @client_data << 'close'
+            @stop = true
+        end
+
+        def dispatch_cb(data)
+            @client_data << data
+        end
+
+        def transmit_cb(data)
+            if not @server.started
+                @server.started = true
+                @server.ssl.start
+            end
+            @server.ssl.decrypt(data) unless @stop
+        end
+
+        def handshake_cb(protocol)
+            @client_data << 'ready'
+        end
+    end
+
+    describe MTRubyTls::SSL::Box do
+        before :each do
+            @dir = File.dirname(File.expand_path(__FILE__)) + '/'
+            @cert_from_file = File.read(@dir + 'client.crt')
+        end
+
+        it "should verify the peer" do
+            @server_data = []
+            @client_data = []
+
+
+            class Server2
+                def initialize(client, server_data)
+                    @client = client
+                    @server_data = server_data
+                    @ssl = MTRubyTls::SSL::Box.new(true, self, verify_peer: true)
+                end
+
+                attr_reader :ssl
+                attr_accessor :started
+                attr_accessor :stop
+                attr_accessor :cert_from_server
+
+                def close_cb
+                    @server_data << 'close'
+                    @stop = true
+                end
+
+                def dispatch_cb(data)
+                    @server_data << data
+                end
+
+                def transmit_cb(data)
+                    @client.ssl.decrypt(data) unless @stop
+                end
+
+                def handshake_cb(protocol)
+                    @server_data << 'ready'
+                end
+
+                def verify_cb(cert)
+                    @server_data << 'verify'
+                    @cert_from_server = cert
+                    true
+                end
+            end
+
+
+            @client = Client2.new(@client_data, @dir)
+            @server = Server2.new(@client, @server_data)
+            @client.server = @server
+
+            @client.ssl.start
+            @client.ssl.cleanup
+            @server.ssl.cleanup
+            
+            expect(@client_data).to eq(['ready'])
+            expect(@server_data).to eq(['ready', 'verify', 'verify', 'verify'])
+            expect(@server.cert_from_server).to eq(@cert_from_file)
+        end
+
+
+        it "should verify the hostname" do
+            @server_data = []
+            @client_data = []
+
+            class Server3
+                def initialize(client, server_data)
+                    @client = client
+                    @server_data = server_data
+                    @ssl = MTRubyTls::SSL::Box.new(true, self, host_name: 'just.testing.com')
+                end
+
+                attr_reader :ssl
+                attr_accessor :started
+                attr_accessor :stop
+                attr_accessor :cert_from_server
+
+                def close_cb
+                    @server_data << 'close'
+                    @stop = true
+                end
+
+                def dispatch_cb(data)
+                    @server_data << data
+                end
+
+                def transmit_cb(data)
+                    @client.ssl.decrypt(data) unless @stop
+                end
+
+                def handshake_cb(protocol)
+                    @server_data << 'ready'
+                end
+            end
+
+
+            @client = Client2.new(@client_data, @dir)
+            @server = Server3.new(@client, @server_data)
+            @client.server = @server
+
+            @client.ssl.start
+            @client.ssl.cleanup
+            @server.ssl.cleanup
+            
+            expect(@client_data).to eq(['ready'])
+            expect(@server_data).to eq(['ready'])
+        end
+
+        it "should fail if host name not found" do
+            @server_data = []
+            @client_data = []
+
+            class Server4
+                def initialize(client, server_data)
+                    @client = client
+                    @server_data = server_data
+                    @ssl = MTRubyTls::SSL::Box.new(true, self, host_name: 'testing.com')
+                end
+
+                attr_reader :ssl
+                attr_accessor :started
+                attr_accessor :stop
+                attr_accessor :cert_from_server
+
+                def close_cb
+                    @server_data << 'close'
+                    @stop = true
+                end
+
+                def dispatch_cb(data)
+                    @server_data << data
+                end
+
+                def transmit_cb(data)
+                    @client.ssl.decrypt(data) unless @stop
+                end
+
+                def handshake_cb(protocol)
+                    @server_data << 'ready'
+                end
+            end
+
+
+            @client = Client2.new(@client_data, @dir)
+            @server = Server4.new(@client, @server_data)
+            @client.server = @server
+
+            @client.ssl.start
+            @client.ssl.cleanup
+            @server.ssl.cleanup
+            
+            expect(@client_data).to eq([])
+            expect(@server_data).to eq(['close'])
+        end
+
+        it "test actually adding a second context" do
+            @server_data = []
+            @client_data = []
+
+            @client = Client2.new(@client_data, @dir)
+            @server = Server4.new(@client, @server_data)
+            @client.server = @server
+            @server.ssl.add_host host_name: 'just.testing.com'
+
+            @client.ssl.start
+            @client.ssl.cleanup
+            @server.ssl.cleanup
+            
+            expect(@client_data).to eq(['ready'])
+            expect(@server_data).to eq(['ready'])
+        end
+
+
+        it "should deny the connection" do
+            @server_data = []
+            @client_data = []
+
+            class Server3
+                def initialize(client, server_data)
+                    @client = client
+                    @server_data = server_data
+                    @ssl = MTRubyTls::SSL::Box.new(true, self, verify_peer: true)
+                end
+
+                attr_reader :ssl
+                attr_accessor :started
+                attr_accessor :stop
+                attr_accessor :cert_from_server
+
+                def close_cb
+                    @server_data << 'close'
+                    @stop = true
+                end
+
+                def dispatch_cb(data)
+                    @server_data << data
+                end
+
+                def transmit_cb(data)
+                    @client.ssl.decrypt(data) unless @stop
+                end
+
+                def handshake_cb(protocol)
+                    @server_data << 'ready'
+                end
+
+                def verify_cb(cert)
+                    @server_data << 'verify'
+                    @cert_from_server = cert
+                    false
+                end
+            end
+
+            @client = Client2.new(@client_data, @dir)
+            @server = Server3.new(@client, @server_data)
+            @client.server = @server
+
+            @client.ssl.start
+            @client.ssl.cleanup
+            @server.ssl.cleanup
+            
+            expect(@client_data).to eq(['ready'])
+            expect(@server_data).to eq(['ready', 'verify', 'close'])
+
+            expect(@server.cert_from_server).to eq(@cert_from_file)
+        end
+    end
+end
+

metadata

@@ -0,0 +1,121 @@
+--- !ruby/object:Gem::Specification
+name: mt-ruby-tls
+version: !ruby/object:Gem::Version
+  version: 2.4.0
+platform: ruby
+authors:
+- Giallombardo Nathan
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2022-03-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ffi-compiler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: concurrent-ruby
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
+- !ruby/object:Gem::Dependency
+  name: yard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+description: "        Allows transport layers outside Ruby TCP to be secured.\n"
+email:
+- nathan.giallombardo@mapotempo.com
+executables: []
+extensions: []
+extra_rdoc_files:
+- README.md
+files:
+- README.md
+- lib/mt-ruby-tls.rb
+- lib/mt-ruby-tls/ssl.rb
+- lib/mt-ruby-tls/version.rb
+- mt-ruby-tls.gemspec
+- spec/alpn_spec.rb
+- spec/client.crt
+- spec/client.key
+- spec/comms_spec.rb
+- spec/verify_spec.rb
+homepage: https://github.com/Mapotempo/mt-ruby-tls
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.6
+signing_key: 
+specification_version: 4
+summary: Abstract TLS for Ruby
+test_files:
+- spec/alpn_spec.rb
+- spec/client.crt
+- spec/client.key
+- spec/comms_spec.rb
+- spec/verify_spec.rb