tttls1.3 0.1.4 → 0.2.0

data/spec/certificate_spec.rb

@@ -7,7 +7,9 @@ using Refinements
 RSpec.describe Certificate do
   context 'valid certificate' do
     let(:certificate) do
-      OpenSSL::X509::Certificate.new(File.read(__dir__ + '/../tmp/server.crt'))
+      OpenSSL::X509::Certificate.new(
+        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
+      )
     end
 
     let(:message) do
@@ -52,4 +54,29 @@ RSpec.describe Certificate do
       expect(message.serialize).to eq TESTBINARY_CERTIFICATE
     end
   end
+
+  context 'invalid certificate, including forbidden extension type,' do
+    let(:certificate) do
+      OpenSSL::X509::Certificate.new(
+        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
+      )
+    end
+
+    let(:server_name) do
+      ServerName.new('')
+    end
+
+    let(:message) do
+      Certificate.new(
+        certificate_list: [
+          CertificateEntry.new(certificate, Extensions.new([server_name]))
+        ]
+      )
+    end
+
+    it 'should be generated' do
+      expect(message.msg_type).to eq HandshakeType::CERTIFICATE
+      expect(message.only_appearable_extensions?).to be false
+    end
+  end
 end

data/spec/client_spec.rb

@@ -9,7 +9,8 @@ RSpec.describe Client do
     let(:record) do
       mock_socket = SimpleStream.new
       client = Client.new(mock_socket, 'localhost')
-      client.send(:send_client_hello)
+      exs, _priv_keys = client.send(:gen_ch_extensions)
+      client.send(:send_client_hello, exs)
       Record.deserialize(mock_socket.read, Cryptograph::Passer.new)
     end
 
@@ -19,7 +20,10 @@ RSpec.describe Client do
       message = record.messages.first
       expect(message.msg_type).to eq HandshakeType::CLIENT_HELLO
       expect(message.legacy_version).to eq ProtocolVersion::TLS_1_2
-      expect(message.cipher_suites).to eq DEFAULT_CH_CIPHER_SUITES
+      expect(message.cipher_suites)
+        .to eq [CipherSuite::TLS_AES_256_GCM_SHA384,
+                CipherSuite::TLS_CHACHA20_POLY1305_SHA256,
+                CipherSuite::TLS_AES_128_GCM_SHA256]
       expect(message.legacy_compression_methods).to eq ["\x00"]
     end
   end
@@ -165,11 +169,11 @@ RSpec.describe Client do
     end
 
     it 'should verify server CertificateVerify' do
-      expect(client.send(:verify_certificate_verify)).to be true
+      expect(client.send(:verified_certificate_verify?)).to be true
     end
 
     it 'should verify server Finished' do
-      expect(client.send(:verify_finished)).to be true
+      expect(client.send(:verified_finished?)).to be true
     end
 
     it 'should sign client Finished' do
@@ -219,7 +223,7 @@ RSpec.describe Client do
       client = Client.new(mock_socket, 'localhost')
       sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
       random = OpenSSL::Random.random_bytes(24) + \
-               Client::DOWNGRADE_PROTECTION_TLS_1_2
+               Client.const_get(:DOWNGRADE_PROTECTION_TLS_1_2)
       sh.instance_variable_set(:@random, random)
       transcript = {
         CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
@@ -242,7 +246,7 @@ RSpec.describe Client do
       client = Client.new(mock_socket, 'localhost')
       sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
       random = OpenSSL::Random.random_bytes(24) + \
-               Client::DOWNGRADE_PROTECTION_TLS_1_1
+               Client.const_get(:DOWNGRADE_PROTECTION_TLS_1_1)
       sh.instance_variable_set(:@random, random)
       transcript = {
         CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
@@ -283,7 +287,7 @@ RSpec.describe Client do
   context 'client, received Certificate signed by private CA,' do
     let(:certificate) do
       server_crt = OpenSSL::X509::Certificate.new(
-        File.read(__dir__ + '/../tmp/server.crt')
+        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
       )
       Certificate.new(certificate_list: [CertificateEntry.new(server_crt)])
     end
@@ -293,13 +297,13 @@ RSpec.describe Client do
     end
 
     it 'should not certify certificate' do
-      expect(client.send(:certified_certificate?, certificate.certificate_list))
+      expect(client.send(:trusted_certificate?, certificate.certificate_list))
         .to be false
     end
 
     it 'should certify certificate, received path to private ca.crt' do
-      expect(client.send(:certified_certificate?, certificate.certificate_list,
-                         __dir__ + '/../tmp/ca.crt')).to be true
+      expect(client.send(:trusted_certificate?, certificate.certificate_list,
+                         __dir__ + '/fixtures/rsa_ca.crt')).to be true
     end
   end
 

data/spec/connection_spec.rb

@@ -5,6 +5,16 @@ require_relative 'spec_helper'
 
 RSpec.describe Connection do
   context 'connection, Simple 1-RTT Handshake,' do
+    let(:private_key) do
+      rsa = OpenSSL::PKey::RSA.new
+      rsa.set_key(OpenSSL::BN.new(TESTBINARY_PKEY_MODULUS, 2),
+                  OpenSSL::BN.new(TESTBINARY_PKEY_PUBLIC_EXPONENT, 2),
+                  OpenSSL::BN.new(TESTBINARY_PKEY_PRIVATE_EXPONENT, 2))
+      rsa.set_factors(OpenSSL::BN.new(TESTBINARY_PKEY_PRIME1, 2),
+                      OpenSSL::BN.new(TESTBINARY_PKEY_PRIME2, 2))
+      rsa
+    end
+
     let(:ct) do
       Certificate.deserialize(TESTBINARY_CERTIFICATE)
     end
@@ -40,11 +50,11 @@ RSpec.describe Connection do
     end
 
     it 'should verify server CertificateVerify.signature' do
-      certificate_pem = ct.certificate_list.first.cert_data.to_pem
+      public_key = ct.certificate_list.first.cert_data.public_key
       signature_scheme = cv.signature_scheme
       signature = cv.signature
-      expect(connection.send(:do_verify_certificate_verify,
-                             certificate_pem: certificate_pem,
+      expect(connection.send(:do_verified_certificate_verify?,
+                             public_key: public_key,
                              signature_scheme: signature_scheme,
                              signature: signature,
                              context: 'TLS 1.3, server CertificateVerify',
@@ -52,8 +62,16 @@ RSpec.describe Connection do
         .to be true
     end
 
+    it 'should sign client Finished.verify_data' do
+      expect(connection.send(:do_sign_finished,
+                             digest: 'SHA256',
+                             finished_key: TESTBINARY_CLIENT_FINISHED_KEY,
+                             handshake_context_end: EOED))
+        .to eq cf.verify_data
+    end
+
     it 'should verify server Finished.verify_data' do
-      expect(connection.send(:do_verify_finished,
+      expect(connection.send(:do_verified_finished?,
                              digest: 'SHA256',
                              finished_key: TESTBINARY_SERVER_FINISHED_KEY,
                              handshake_context_end: CV,
@@ -61,12 +79,24 @@ RSpec.describe Connection do
         .to be true
     end
 
-    it 'should sign client Finished.verify_data' do
-      expect(connection.send(:do_sign_finished,
-                             digest: 'SHA256',
-                             finished_key: TESTBINARY_CLIENT_FINISHED_KEY,
-                             handshake_context_end: EOED))
-        .to eq cf.verify_data
+    it 'should sign server CertificateVerify.signature' do
+      public_key = ct.certificate_list.first.cert_data.public_key
+      signature_scheme = cv.signature_scheme
+
+      # used RSASSA-PSS signature_scheme, salt is a random sequence.
+      # CertificateVerify.signature is random.
+      signature = connection.send(:do_sign_certificate_verify,
+                                  private_key: private_key,
+                                  signature_scheme: signature_scheme,
+                                  context: 'TLS 1.3, server CertificateVerify',
+                                  handshake_context_end: CT)
+      expect(connection.send(:do_verified_certificate_verify?,
+                             public_key: public_key,
+                             signature_scheme: signature_scheme,
+                             signature: signature,
+                             context: 'TLS 1.3, server CertificateVerify',
+                             handshake_context_end: CT))
+        .to be true
     end
   end
 
@@ -99,11 +129,11 @@ RSpec.describe Connection do
     end
 
     it 'should verify server CertificateVerify.signature' do
-      certificate_pem = ct.certificate_list.first.cert_data.to_pem
+      public_key = ct.certificate_list.first.cert_data.public_key
       signature_scheme = cv.signature_scheme
       signature = cv.signature
-      expect(connection.send(:do_verify_certificate_verify,
-                             certificate_pem: certificate_pem,
+      expect(connection.send(:do_verified_certificate_verify?,
+                             public_key: public_key,
                              signature_scheme: signature_scheme,
                              signature: signature,
                              context: 'TLS 1.3, server CertificateVerify',

data/spec/encrypted_extensions_spec.rb

@@ -31,7 +31,7 @@ RSpec.describe EncryptedExtensions do
     it 'should be generated' do
       expect(message.msg_type).to eq HandshakeType::ENCRYPTED_EXTENSIONS
       expect(message.extensions).to eq extensions
-      expect(message.any_forbidden_extensions?).to be false
+      expect(message.only_appearable_extensions?).to be true
     end
 
     it 'should be serialized' do
@@ -55,7 +55,7 @@ RSpec.describe EncryptedExtensions do
     it 'should be generated' do
       expect(message.msg_type).to eq HandshakeType::ENCRYPTED_EXTENSIONS
       expect(message.extensions).to eq extensions
-      expect(message.any_forbidden_extensions?).to be true
+      expect(message.only_appearable_extensions?).to be false
     end
   end
 
@@ -67,7 +67,7 @@ RSpec.describe EncryptedExtensions do
     it 'should be generated' do
       expect(message.msg_type).to eq HandshakeType::ENCRYPTED_EXTENSIONS
       expect(message.extensions).to eq Extensions.new
-      expect(message.any_forbidden_extensions?).to be false
+      expect(message.only_appearable_extensions?).to be true
     end
 
     it 'should be serialized' do
@@ -84,7 +84,7 @@ RSpec.describe EncryptedExtensions do
 
     it 'should generate valid object' do
       expect(message.msg_type).to eq HandshakeType::ENCRYPTED_EXTENSIONS
-      expect(message.any_forbidden_extensions?).to be false
+      expect(message.only_appearable_extensions?).to be true
     end
 
     it 'should generate valid serializable object' do

data/spec/fixtures/rsa_ca.crt

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/rsa_ca.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIJKgIBAAKCAgEAuEOvolW2k+IV9HL/VYJ/AQQfLXMoNeSuNJRggJ1c/ZaFocF8
+vSTayTira5HEQmX6y3tKQY+XfTusWytUuxaVG6ZUHtG5DVrK9F1ZOI5oSpFa2xbp
+/YjEqu/z1OuHz2B7Ol6dtn1HIjEqvYIwEQcuPEjc43THuiTXxz/x4hUnMiNKjty4
+KJVpJOUxLoeP5ca0DOMuApGiN5GZ565HNdq2pno0aqPIHS74WDYSuKObifkghDJm
+sjK4iQxhqTildlD/0ow6wCgscVw4EpqSQsWlG9phZODXOKUbPt90msUeX0HlIpiy
+1dieOPJcTD3WVgrFI7UyBmOrInwbgZfwuPS9KkJXXTNEw8O+64hRbcb+XJjp1lhZ
+E65QZ9EPSK2EvrJWeOQUp0n1iQylz983WWUMSNy/ENjTJ89VFUgm1DhfLS3FkbYb
+w2R72sPWbv7AB6B2uCJI/02VuRH8AtvDYatRZW1HzoeSvMAMO9WyDm9JtJF/al+A
+lOvfu2XblAnkR8eT2LYfa/TBxDzoM3uBi13jmMP03iup9GAbip9DjAgaRJJEFl8T
+0IFFjCsvp+tSBrpBmBiRrExx1AY9W20XlZDBxHhuWypnqfXh0KMmQ1Ynnqqyr5vN
+/hYQ0H1IBmkoe/it6R9FTDtlUEFJ5yiKyD+tsiRYWWelLDIFZSF0YncLqYcCAwEA
+AQKCAgAkAWXibKk+gGEV4RqvlM5IXovRD719um+n6o5o01cGXlFCaFJ9iyQNSbuF
+S3h0GQVGmZLK+Mn7OJvXPMJTxHfibT/mvchRKbqawVrbyEfsujZstS+H0R/M3xJg
+Op3REeNCZpaewCAUOFNHsJa/3Q1Vzk8LSxhz8RsQ3hffu45rJ6Y8ADkkBP4ErZxM
+oUSm+4rXMdUdv2NZRGQ0d0OG7HPgV+TCKbrCqRjx86740U9lSH7oFgknLO4OKZMz
+w9PhKLa0Z55bSf5VMFXsnLOTxJccuDFrytuDQA/w2y0nyPjEWFXzyq63Rpq0Ofd7
+FmI5ceVPsupRgUxBcsrVKeFp4rjLobx4sEtd568XOf+6QkeEnPSsbgZR3JDlG5g8
+2/aEVAQtk9KZ5DBw3AVj+Hlj6xADCn9hXifafKOFoaSC1RiZRc8MWrfh3PU9px4y
+GJqZgHWsrrzqTmyYuvvSOrHVF/XB05xKmquuRnkqhf7P5qFvaRThtebUXhDHrrED
+JkY16Y3GI1uQwpQxt+IzjzGKLPLXmP16bP0hFwAg4GeTcmPC9rwypDx0MnFrlLIW
+jXyVCESD/dsz8mtI+c3fJFpKzFf2t98jPc0zXmEl9wd+fayNXvr8EwIK0OZqpzpw
+Niq3+hv3oq2sTabStxnd4A1HFdcay+ZjW+RTQ/Gzipmke+yHkQKCAQEA8wQcl6vU
+CbXRKPIeUQj7kE+xLBh+fy+UscYvXz/pDq22tVRIce3JQOs8WXO+t/3jwigTRote
+4b/JFPSuPRLouvixtrzHJawjq1tBB2c24FeRPnUxvamZ9MklHtJH89ggKkogeiBY
+RCGRryPHTSzrOv6WXzyc85BmhuW3anIxMIOKMAIz6NJ8MSYJPr0LxzlJbxaakJUr
+fCWml/n3cqR6Ytlw6HWr7HiqIf2ucv4F6ywgLaKGuSx5B7cPIrsAeWIKjI+W0eu+
+BC6Ng+1s4q5ahbNWOw0Vdt6Wj0H82sK3XtCkeJl0IKcNjecGuw4X+2UlmAVyld8c
+J2oD2Or1qjxI4wKCAQEAwhv9Yk2blcrp+TN8XA4cDnQio9x40dY553wbGdNxHaHF
+GerqkARzJHtyLkxAltP68YVIENYvbh9tcOySTHijors9cDvADogtMW64mu+z3OJ6
+Phzyo1XPFHjE5j2/rtxZL1uXcaJZ4syy4h8DGKZw7dOS0OB9aNWNvB9yDAwsGs7n
+T0QJ001Z9LsZdRRGC7XGCgqx5509O7wpBoTLrb6bzAo5WGj1i5y+uuskidE2zn5B
+DlVsOs7IeytSXPbY2Mm8Plq6Av7MAewb0RwFU2NLq5t0cgXre07xF01qQkEup552
+dG27z60Fc3HPZbUoybJyVyAFMxgpOWfavYnNmnQSDQKCAQEAzuvyWKcDjh0VcrLu
+Y3utkEx7BJv6odtm1hR1Y7osfMYna7DPWsro8XEbWuN2Qn5Zf4nWF9w2NyyxUDmj
+XveJ2SJHV9zYCVjQqmiyL1aQYGfPkYoCh4cxQ0A+bkcI4zVk9f1WOAbwgVrADIv/
+eNRFm18JtSAMWEvdMQHKskV3YuKuOIC3qIgJHWRQvO4FaGZ8A64QgAm0FCqO9pru
+OtyYJTEWtaj0cg6wdu7lqp5ndb6Fy7W211dp2srhhWYLWk/DwbnF5wq/Khplfy8b
+5swk4fE4/GEApM2VD3hVkAP6VS58zP+E5QS5QtmzXnT6sKGIaDBDSB/IfjsD+aDe
++0wHlwKCAQEAvwCbzGdheXw5zyWCcXLQ2Mgebe88U/7g64+Le1Y8MFRGhsJKHXzD
+cFqoeDZAOCpO++mSiD66XTo/jqa7LtRm8HIeepnQ2nvVPJcewBaufeO9NfF2MJL3
+OcW8unJ4c7APcjJGS2Ld3/Zc73Rkr5TX+q3+AdtkjAvXdA3dQ02W+KovoifpIysy
+IUcaPcK9SjiLrsXnWWm4H1d/ZxK0+TpeQ+CrnPtq4v5SD8viIFrl+zrw+RHFdfiT
+/d8bJK8hofCgcxsDfn8Kb7nNhW51LyC+DRbi9nAszyFWyv86WAebyQR8uwRfknNG
+sdqDoikpAY++Q00W0LgtmHdBHtDCqAEe4QKCAQEApjCoVd/WiN15LjORmRunJky4
+F8tZuyNw1U4Ig89TAQp467IZPFuLiMao+cGf7AropYH3hAG+MnBfbwfgznA5kvTi
+anj/dknQcN6z0LIvJxMv+eXWfX50T1h6WXb4SJtfo+NyVuvudF/4mJhhOAMhJQkv
+1THR6qopbeW/Ovf5Sf12xizOhTOJWhsfwXfp5HFo4VBLZkZqFdBgJXCBTiw0YBij
+1BgC1RL8lyC1fuNT00y6ion+O7YYBK4N5JEZ7wMIiC1ToeB9gfDxGTaS7pIoDN4o
+KmC/X1MbYqjR4xkyvaz5BAnlqUoyRb9QAgPZlEIT4xVzL89xm9uMyh90sTP61g==
+-----END RSA PRIVATE KEY-----

data/spec/fixtures/rsa_rsa.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIID0TCCAbmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAd0ZXN0
+LWNhMB4XDTE5MDUyMTE0MTAyM1oXDTI5MDUxODE0MTAyM1owFDESMBAGA1UEAwwJ
+bG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy21id1l6
+qLzJ+f6GdBhFeJWZ2w2AQaWCVzUHnBbfd1myPpGRMoHZfpESaI6TIrj6uIWAFDOj
+EWTvmbfbxGZyElXvqRO6dipb5KBQGMHB+lgR53YxQp6D3DI7e58/YqKKnc2iwEaK
+f7ax75lJZIyWJXimw1Gi/kUr60POdsRH6DmTzcW1cui6FMnBRHXkeOwudzTKJAOl
+Zs4y9LuqkQbBN/mrgkraBu7XxmOhgWb+ejflzh98tLiCuNct/LIOPSwrVWDD1yE6
+uOnEYo0zXaAN5TgJZLEvlfr3nZ/zDg2ifv9IJJoEdF9xwwFGFt2vAsCcP8NPDYFJ
+QOUkEFPhHIfLgQIDAQABozAwLjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIFoDAUBgNV
+HREEDTALgglsb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggIBAH8eKO0uRCh3GjDT
+SsVBC6KIkqGibW1vdSzSIm/mMfRzhc0L5FD8vv4+gqeUD0hQr461oE8syTy/MnMY
+cnj6W6G45pitF3PQUPxIUsAU0u/OcVkZpEy8B+uozm4Zem7KpRD7N18YUwJLT4Dd
+FHeOCHu41aKxIcu/nFmklYRFp4v9WPOZiIktgMtub7RAYkb0+SXY3pNyPsUK0NL8
+70yI0WaA5b2cxw0R3KUdwwyjuDctq+VYuLgAzeoWNmbhDBA2pIwsgndnUD9n0VWf
+JMYHNInyOiwkMTSVc0OI5nsYNs3sTX++rIIgsd0kA4T4hcfnx0fqiZCjUYRomXIR
+jDKOpDs8JVMFEiUS+uKAwHfEjBRM6IvrvhB+s1wNDyw1OafKATUmINRheKFMRg9s
+02Ihr2eYAIfYtwADV3NvjEReBBJOg0VHyG1lUQyhji0EQIsZB2qaeExxAmPHxLvn
+Au8qhHz8tKGQAsCzq41EAIJHOEXoP2+WzH/tOio7G7Pv3vrCpi/ALpkBbL7FL4l2
+FfDzYGTibmOsKkeDf+h58uVOYSEDJLsWcr+dkAtZNxE2X8PCYs0G3S07QBEldcjO
+a0S65vIALLJFGnLJw6bJd2xLNH1xRkMQK4n0UvzPP7Q8b1c7w+XsYs9WG1s2R8Lo
+GcVsYp2SnqonWcM6V2pXcKCIFY3K
+-----END CERTIFICATE-----

data/spec/fixtures/rsa_rsa.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/fixtures/rsa_secp256r1.crt

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/rsa_secp256r1.key

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIJed2ge/IS5cymZrs2yT94388aTvdzYj0A49VVCl3E2YoAoGCCqGSM49
+AwEHoUQDQgAEgp43C20TiOdUg+Qqr5O7yuTan7kGOYyRF/Wb4cNFwUH56cZFJGrh
+RRe2IVnCpAnjA+4jmr4O0nWyPGbHx4XNVA==
+-----END EC PRIVATE KEY-----

data/spec/fixtures/rsa_secp384r1.crt

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/rsa_secp384r1.key

@@ -0,0 +1,6 @@
+-----BEGIN EC PRIVATE KEY-----
+MIGkAgEBBDAqi/qJgcuxcTF8cNJvK+kNRvm4xnB0WFYETI3ZVFQbX1g46S40honE
+Vj+KoGtuN32gBwYFK4EEACKhZANiAATd9vMVhgA90QiLzA21h+VyOXkLl7BOf1/E
+/g7g3OfjsenRhFgLwTnP9sLgUfIoABU71rE1J4Ru1EAeQgy/O95aVYHcSblTFObE
+0FwrC3W5jQeoh5AQ7x8iN5jGtOyWt8w=
+-----END EC PRIVATE KEY-----

data/spec/fixtures/rsa_secp521r1.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/rsa_secp521r1.key

@@ -0,0 +1,7 @@
+-----BEGIN EC PRIVATE KEY-----
+MIHcAgEBBEIBBJjLo07KrpdNcQAg2fEyPciF6nTVIhM3vbHH9t/ym+B9Q2nD0g+u
+NZIL0S6x0xLdxhT94MMa961PbtD2OSuPpVegBwYFK4EEACOhgYkDgYYABACNVP6d
+QjHdQHZ5H16yMLf6iWhokBFWVyMlzZ/8nO86yK0lsrb8R1XK8vG3dXjzmnsuOHwz
+L+Vw3ZlT3+zpU5N93QFbGZew/s99KKDawTUQslwJ20AmW/y+s/g5bwFAicRF8nc1
+/lZkitqFhUs+0Cq9+QKe9Ve6596oW7cnVjL1P/B6jg==
+-----END EC PRIVATE KEY-----

data/spec/server_spec.rb

@@ -0,0 +1,186 @@
+# encoding: ascii-8bit
+# frozen_string_literal: true
+
+require_relative 'spec_helper'
+using Refinements
+
+RSpec.describe Server do
+  context 'server' do
+    let(:message) do
+      msg_len = TESTBINARY_CLIENT_HELLO.length
+      mock_socket = SimpleStream.new
+      mock_socket.write(ContentType::HANDSHAKE \
+                        + ProtocolVersion::TLS_1_2 \
+                        + msg_len.to_uint16 \
+                        + TESTBINARY_CLIENT_HELLO)
+      server = Server.new(mock_socket)
+      server.send(:recv_client_hello)
+    end
+
+    it 'should receive ClientHello' do
+      expect(message.msg_type).to eq HandshakeType::CLIENT_HELLO
+      expect(message.legacy_version).to eq ProtocolVersion::TLS_1_2
+      expect(message.legacy_compression_methods).to eq ["\x00"]
+    end
+  end
+
+  context 'server' do
+    let(:crt) do
+      OpenSSL::X509::Certificate.new(
+        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
+      )
+    end
+
+    let(:record) do
+      mock_socket = SimpleStream.new
+      server = Server.new(mock_socket)
+      server.instance_variable_set(:@crt, crt)
+      transcript = Transcript.new
+      transcript[CH] = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      server.instance_variable_set(:@transcript, transcript)
+      cipher_suite = server.send(:select_cipher_suite)
+      server.instance_variable_set(:@cipher_suite, cipher_suite)
+      named_group = server.send(:select_named_group)
+      server.instance_variable_set(:@named_group, named_group)
+      signature_scheme = server.send(:select_signature_scheme)
+      server.instance_variable_set(:@signature_scheme, signature_scheme)
+      exs, _priv_key = server.send(:gen_sh_extensions)
+      server.send(:send_server_hello, exs)
+      Record.deserialize(mock_socket.read, Cryptograph::Passer.new)
+    end
+
+    it 'should send ServerHello' do
+      expect(record.type).to eq ContentType::HANDSHAKE
+
+      message = record.messages.first
+      expect(message.msg_type).to eq HandshakeType::SERVER_HELLO
+      expect(message.legacy_version).to eq ProtocolVersion::TLS_1_2
+      expect(message.legacy_compression_method).to eq "\x00"
+    end
+  end
+
+  context 'server' do
+    let(:server) do
+      server = Server.new(nil)
+      transcript = Transcript.new
+      transcript[CH] = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      server.instance_variable_set(:@transcript, transcript)
+      server
+    end
+
+    it 'should generate EncryptedExtensions' do
+      ee = server.send(:gen_encrypted_extensions)
+      expect(ee).to be_a_kind_of(EncryptedExtensions)
+      expect(ee.extensions).to include(ExtensionType::SERVER_NAME)
+      expect(ee.extensions[ExtensionType::SERVER_NAME].server_name).to eq ''
+      expect(ee.extensions).to include(ExtensionType::SUPPORTED_GROUPS)
+      expect(ee.extensions[ExtensionType::SUPPORTED_GROUPS].named_group_list)
+        .to eq [NamedGroup::SECP256R1,
+                NamedGroup::SECP384R1,
+                NamedGroup::SECP521R1]
+    end
+  end
+
+  context 'server' do
+    let(:server) do
+      server = Server.new(nil)
+      crt = OpenSSL::X509::Certificate.new(
+        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
+      )
+      server.instance_variable_set(:@crt, crt)
+      server
+    end
+
+    it 'should generate Certificate' do
+      ct = server.send(:gen_certificate)
+      expect(ct).to be_a_kind_of(Certificate)
+
+      certificate_entry = ct.certificate_list.first
+      expect(certificate_entry.cert_data.subject.to_s).to eq '/CN=localhost'
+    end
+  end
+
+  context 'server' do
+    let(:key) do
+      rsa = OpenSSL::PKey::RSA.new
+      rsa.set_key(OpenSSL::BN.new(TESTBINARY_PKEY_MODULUS, 2),
+                  OpenSSL::BN.new(TESTBINARY_PKEY_PUBLIC_EXPONENT, 2),
+                  OpenSSL::BN.new(TESTBINARY_PKEY_PRIVATE_EXPONENT, 2))
+      rsa.set_factors(OpenSSL::BN.new(TESTBINARY_PKEY_PRIME1, 2),
+                      OpenSSL::BN.new(TESTBINARY_PKEY_PRIME2, 2))
+      rsa
+    end
+
+    let(:ct) do
+      Certificate.deserialize(TESTBINARY_CERTIFICATE)
+    end
+
+    let(:server) do
+      server = Server.new(nil)
+      server.instance_variable_set(:@key, key)
+      transcript = Transcript.new
+      transcript.merge!(
+        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
+        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
+        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
+        CT => ct
+      )
+      server.instance_variable_set(:@transcript, transcript)
+      server.instance_variable_set(:@cipher_suite,
+                                   CipherSuite::TLS_AES_128_GCM_SHA256)
+      server.instance_variable_set(:@signature_scheme,
+                                   SignatureScheme::RSA_PSS_RSAE_SHA256)
+      server
+    end
+
+    it 'should generate CertificateVerify' do
+      cv = server.send(:gen_certificate_verify)
+      expect(cv).to be_a_kind_of(CertificateVerify)
+
+      # used RSASSA-PSS signature_scheme, salt is a random sequence.
+      # CertificateVerify.signature is random.
+      public_key = ct.certificate_list.first.cert_data.public_key
+      signature_scheme = cv.signature_scheme
+      signature = cv.signature
+      expect(server.send(:do_verified_certificate_verify?,
+                         public_key: public_key,
+                         signature_scheme: signature_scheme,
+                         signature: signature,
+                         context: 'TLS 1.3, server CertificateVerify',
+                         handshake_context_end: CT))
+        .to be true
+    end
+  end
+
+  context 'server' do
+    let(:server) do
+      server = Server.new(nil)
+      transcript = Transcript.new
+      transcript.merge!(
+        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
+        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
+        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
+        CT => Certificate.deserialize(TESTBINARY_CERTIFICATE),
+        CV => CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
+      )
+      server.instance_variable_set(:@transcript, transcript)
+      ks = KeySchedule.new(shared_secret: TESTBINARY_SHARED_SECRET,
+                           cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,
+                           transcript: transcript)
+      server.instance_variable_set(:@key_schedule, ks)
+      server.instance_variable_set(:@cipher_suite,
+                                   CipherSuite::TLS_AES_128_GCM_SHA256)
+      server
+    end
+
+    let(:verify_data) do
+      Finished.deserialize(TESTBINARY_SERVER_FINISHED).verify_data
+    end
+
+    it 'should generate Finished' do
+      sf = server.send(:gen_finished)
+      expect(sf).to be_a_kind_of(Finished)
+      expect(sf.verify_data).to eq verify_data
+    end
+  end
+end