tttls1.3 0.2.14 → 0.2.17

data/spec/client_spec.rb

@@ -11,7 +11,7 @@ RSpec.describe Client do
       client = Client.new(mock_socket, 'localhost')
       extensions, _priv_keys = client.send(:gen_ch_extensions)
       client.send(:send_client_hello, extensions)
-      Record.deserialize(mock_socket.read, Cryptograph::Passer.new)
+      Record.deserialize(mock_socket.read, Cryptograph::Passer.new).first
     end
 
     it 'should send default ClientHello' do
@@ -37,7 +37,7 @@ RSpec.describe Client do
                         + msg_len.to_uint16 \
                         + TESTBINARY_SERVER_HELLO)
       client = Client.new(mock_socket, 'localhost')
-      client.send(:recv_server_hello)
+      client.send(:recv_server_hello).first
     end
 
     it 'should receive ServerHello' do
@@ -65,20 +65,20 @@ RSpec.describe Client do
     end
 
     it 'should receive EncryptedExtensions' do
-      message = client.send(:recv_encrypted_extensions, cipher)
+      message, = client.send(:recv_encrypted_extensions, cipher)
       expect(message.msg_type).to eq HandshakeType::ENCRYPTED_EXTENSIONS
     end
 
     it 'should receive Certificate' do
       client.send(:recv_encrypted_extensions, cipher) # to skip
-      message = client.send(:recv_certificate, cipher)
+      message, = client.send(:recv_certificate, cipher)
       expect(message.msg_type).to eq HandshakeType::CERTIFICATE
     end
 
     it 'should receive CertificateVerify' do
       client.send(:recv_encrypted_extensions, cipher) # to skip
       client.send(:recv_certificate, cipher)          # to skip
-      message = client.send(:recv_certificate_verify, cipher)
+      message, = client.send(:recv_certificate_verify, cipher)
       expect(message.msg_type).to eq HandshakeType::CERTIFICATE_VERIFY
     end
 
@@ -86,7 +86,7 @@ RSpec.describe Client do
       client.send(:recv_encrypted_extensions, cipher) # to skip
       client.send(:recv_certificate, cipher)          # to skip
       client.send(:recv_certificate_verify, cipher)   # to skip
-      message = client.send(:recv_finished, cipher)
+      message, = client.send(:recv_finished, cipher)
       expect(message.msg_type).to eq HandshakeType::FINISHED
     end
   end
@@ -97,14 +97,20 @@ RSpec.describe Client do
     end
 
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
+      ct = Certificate.deserialize(TESTBINARY_CERTIFICATE)
+      cv = CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
+      sf = Finished.deserialize(TESTBINARY_SERVER_FINISHED)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => Certificate.deserialize(TESTBINARY_CERTIFICATE),
-        CV => CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY),
-        SF => Finished.deserialize(TESTBINARY_SERVER_FINISHED)
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE],
+        CV => [cv, TESTBINARY_CERTIFICATE_VERIFY],
+        SF => [sf, TESTBINARY_SERVER_FINISHED]
       )
       transcript
     end
@@ -140,7 +146,7 @@ RSpec.describe Client do
         write_iv: TESTBINARY_CLIENT_FINISHED_WRITE_IV,
         sequence_number: SequenceNumber.new
       )
-      Record.deserialize(mock_socket.read, hs_rcipher)
+      Record.deserialize(mock_socket.read, hs_rcipher).first
     end
 
     it 'should send Finished' do
@@ -170,14 +176,17 @@ RSpec.describe Client do
     end
 
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => ct,
-        CV => cv,
-        SF => sf
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE],
+        CV => [cv, TESTBINARY_CERTIFICATE_VERIFY],
+        SF => [sf, TESTBINARY_SERVER_FINISHED]
       )
     end
 

data/spec/compress_certificate_spec.rb

@@ -0,0 +1,54 @@
+# encoding: ascii-8bit
+# frozen_string_literal: true
+
+require_relative 'spec_helper'
+using Refinements
+
+RSpec.describe Alpn do
+  context 'valid compress_certificate' do
+    let(:algorithms) do
+      [CertificateCompressionAlgorithm::ZLIB]
+    end
+
+    let(:extension) do
+      CompressCertificate.new(algorithms)
+    end
+
+    it 'should be generated' do
+      expect(extension.extension_type)
+        .to eq ExtensionType::COMPRESS_CERTIFICATE
+      expect(extension.algorithms).to eq algorithms
+    end
+
+    it 'should be serialized' do
+      expect(extension.serialize)
+        .to eq ExtensionType::COMPRESS_CERTIFICATE \
+               + 3.to_uint16 \
+               + 2.to_uint8 \
+               + "\x00\x01"
+    end
+  end
+
+  context 'invalid compress_certificate, empty,' do
+    let(:extension) do
+      CompressCertificate.new([])
+    end
+
+    it 'should not be generated' do
+      expect { extension }.to raise_error(ErrorAlerts)
+    end
+  end
+
+  context 'valid compress_certificate binary' do
+    let(:extension) do
+      CompressCertificate.deserialize(TESTBINARY_COMPRESS_CERTIFICATE)
+    end
+
+    it 'should generate valid object' do
+      expect(extension.extension_type)
+        .to eq ExtensionType::COMPRESS_CERTIFICATE
+      expect(extension.algorithms)
+        .to eq [CertificateCompressionAlgorithm::ZLIB]
+    end
+  end
+end

data/spec/connection_spec.rb

@@ -32,15 +32,18 @@ RSpec.describe Connection do
     end
 
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => ct,
-        CV => cv,
-        CF => cf,
-        SF => sf
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE],
+        CV => [cv, TESTBINARY_CERTIFICATE_VERIFY],
+        CF => [cf, TESTBINARY_CLIENT_FINISHED],
+        SF => [sf, TESTBINARY_SERVER_FINISHED]
       )
     end
 
@@ -115,16 +118,20 @@ RSpec.describe Connection do
     end
 
     let(:transcript) do
+      ch1 = ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO1)
+      hrr = ServerHello.deserialize(TESTBINARY_HRR_HELLO_RETRY_REQUEST)
+      ch = ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_HRR_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_HRR_ENCRYPTED_EXTENSIONS)
       transcript = Transcript.new
       transcript.merge!(
-        CH1 => ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO1),
-        HRR => ServerHello.deserialize(TESTBINARY_HRR_HELLO_RETRY_REQUEST),
-        CH => ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_HRR_SERVER_HELLO),
-        EE =>
-        EncryptedExtensions.deserialize(TESTBINARY_HRR_ENCRYPTED_EXTENSIONS),
-        CT => ct,
-        CV => cv
+        CH1 => [ch1, TESTBINARY_HRR_CLIENT_HELLO1],
+        HRR => [hrr, TESTBINARY_HRR_HELLO_RETRY_REQUEST],
+        CH => [ch, TESTBINARY_HRR_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_HRR_SERVER_HELLO],
+        EE => [ee, TESTBINARY_HRR_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_HRR_CERTIFICATE],
+        CV => [cv, TESTBINARY_HRR_CERTIFICATE_VERIFY]
       )
     end
 

data/spec/end_of_early_data_spec.rb

@@ -0,0 +1,28 @@
+# encoding: ascii-8bit
+# frozen_string_literal: true
+
+require_relative 'spec_helper'
+using Refinements
+
+RSpec.describe EndOfEarlyData do
+  context 'end_of_early_data' do
+    let(:message) do
+      EndOfEarlyData.new
+    end
+
+    it 'should be serialized' do
+      expect(message.serialize).to eq HandshakeType::END_OF_EARLY_DATA \
+                                      + ''.prefix_uint24_length
+    end
+  end
+
+  context 'valid end_of_early_data binary' do
+    let(:message) do
+      EndOfEarlyData.deserialize(TESTBINARY_0_RTT_END_OF_EARLY_DATA)
+    end
+
+    it 'should generate valid serializable object' do
+      expect(message.serialize).to eq TESTBINARY_0_RTT_END_OF_EARLY_DATA
+    end
+  end
+end

data/spec/key_schedule_spec.rb

@@ -6,15 +6,22 @@ require_relative 'spec_helper'
 RSpec.describe KeySchedule do
   context 'key_schedule, Simple 1-RTT Handshake,' do
     let(:key_schedule) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
+      ct = Certificate.deserialize(TESTBINARY_CERTIFICATE)
+      cv = CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
+      sf = Finished.deserialize(TESTBINARY_SERVER_FINISHED)
+      cf = Finished.deserialize(TESTBINARY_CLIENT_FINISHED)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => Certificate.deserialize(TESTBINARY_CERTIFICATE),
-        CV => CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY),
-        SF => Finished.deserialize(TESTBINARY_SERVER_FINISHED),
-        CF => Finished.deserialize(TESTBINARY_CLIENT_FINISHED)
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE],
+        CV => [cv, TESTBINARY_CERTIFICATE_VERIFY],
+        SF => [sf, TESTBINARY_SERVER_FINISHED],
+        CF => [cf, TESTBINARY_CLIENT_FINISHED]
       )
       KeySchedule.new(shared_secret: TESTBINARY_SHARED_SECRET,
                       cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,
@@ -77,15 +84,22 @@ RSpec.describe KeySchedule do
 
   context 'key_schedule, Resumed 0-RTT Handshake,' do
     let(:key_schedule) do
+      ch = ClientHello.deserialize(TESTBINARY_0_RTT_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_0_RTT_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(
+        TESTBINARY_0_RTT_ENCRYPTED_EXTENSIONS
+      )
+      sf = Finished.deserialize(TESTBINARY_0_RTT_SERVER_FINISHED)
+      eoed = EndOfEarlyData.deserialize(TESTBINARY_0_RTT_END_OF_EARLY_DATA)
+      cf = Finished.deserialize(TESTBINARY_0_RTT_CLIENT_FINISHED)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_0_RTT_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_0_RTT_SERVER_HELLO),
-        EE =>
-        EncryptedExtensions.deserialize(TESTBINARY_0_RTT_ENCRYPTED_EXTENSIONS),
-        SF => Finished.deserialize(TESTBINARY_0_RTT_SERVER_FINISHED),
-        EOED => EndOfEarlyData.deserialize(TESTBINARY_0_RTT_END_OF_EARLY_DATA),
-        CF => Finished.deserialize(TESTBINARY_0_RTT_CLIENT_FINISHED)
+        CH => [ch, TESTBINARY_0_RTT_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_0_RTT_SERVER_HELLO],
+        EE => [ee, TESTBINARY_0_RTT_ENCRYPTED_EXTENSIONS],
+        SF => [sf, TESTBINARY_0_RTT_SERVER_FINISHED],
+        EOED => [eoed, TESTBINARY_0_RTT_END_OF_EARLY_DATA],
+        CF => [cf, TESTBINARY_0_RTT_CLIENT_FINISHED]
       )
       KeySchedule.new(psk: TESTBINARY_0_RTT_PSK,
                       shared_secret: TESTBINARY_0_RTT_SHARED_SECRET,
@@ -111,8 +125,9 @@ RSpec.describe KeySchedule do
   context 'key_schedule, Resumed 0-RTT Handshake, ' \
           'not negotiated shared_secret yet,' do
     let(:key_schedule) do
+      ch = ClientHello.deserialize(TESTBINARY_0_RTT_CLIENT_HELLO)
       transcript = Transcript.new
-      transcript[CH] = ClientHello.deserialize(TESTBINARY_0_RTT_CLIENT_HELLO)
+      transcript[CH] = [ch, TESTBINARY_0_RTT_CLIENT_HELLO]
       KeySchedule.new(psk: TESTBINARY_0_RTT_PSK,
                       shared_secret: nil,
                       cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,
@@ -139,18 +154,26 @@ RSpec.describe KeySchedule do
 
   context 'key_schedule, HelloRetryRequest,' do
     let(:key_schedule) do
+      ch1 = ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO1)
+      hrr = ServerHello.deserialize(TESTBINARY_HRR_HELLO_RETRY_REQUEST)
+      ch = ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_HRR_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_HRR_ENCRYPTED_EXTENSIONS)
+      ct = Certificate.deserialize(TESTBINARY_HRR_CERTIFICATE)
+      cv = CertificateVerify.deserialize(TESTBINARY_HRR_CERTIFICATE_VERIFY)
+      sf = Finished.deserialize(TESTBINARY_HRR_SERVER_FINISHED)
+      cf = Finished.deserialize(TESTBINARY_HRR_CLIENT_FINISHED)
       transcript = Transcript.new
       transcript.merge!(
-        CH1 => ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO1),
-        HRR => ServerHello.deserialize(TESTBINARY_HRR_HELLO_RETRY_REQUEST),
-        CH => ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_HRR_SERVER_HELLO),
-        EE =>
-        EncryptedExtensions.deserialize(TESTBINARY_HRR_ENCRYPTED_EXTENSIONS),
-        CT => Certificate.deserialize(TESTBINARY_HRR_CERTIFICATE),
-        CV => CertificateVerify.deserialize(TESTBINARY_HRR_CERTIFICATE_VERIFY),
-        SF => Finished.deserialize(TESTBINARY_HRR_SERVER_FINISHED),
-        CF => Finished.deserialize(TESTBINARY_HRR_CLIENT_FINISHED)
+        CH1 => [ch1, TESTBINARY_HRR_CLIENT_HELLO1],
+        HRR => [hrr, TESTBINARY_HRR_HELLO_RETRY_REQUEST],
+        CH => [ch, TESTBINARY_HRR_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_HRR_SERVER_HELLO],
+        EE => [ee, TESTBINARY_HRR_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_HRR_CERTIFICATE],
+        CV => [cv, TESTBINARY_HRR_CERTIFICATE_VERIFY],
+        SF => [sf, TESTBINARY_HRR_SERVER_FINISHED],
+        CF => [cf, TESTBINARY_HRR_CLIENT_FINISHED]
       )
       KeySchedule.new(shared_secret: TESTBINARY_HRR_SHARED_SECRET,
                       cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,

data/spec/record_spec.rb

@@ -30,7 +30,7 @@ RSpec.describe Record do
 
   context 'valid record binary' do
     let(:record) do
-      Record.deserialize(TESTBINARY_RECORD_CCS, Passer.new)
+      Record.deserialize(TESTBINARY_RECORD_CCS, Passer.new).first
     end
 
     it 'should generate valid record header and ChangeCipherSpec' do
@@ -75,7 +75,7 @@ RSpec.describe Record do
         write_iv: TESTBINARY_SERVER_PARAMETERS_WRITE_IV,
         sequence_number: SequenceNumber.new
       )
-      Record.deserialize(TESTBINARY_SERVER_PARAMETERS_RECORD, cipher)
+      Record.deserialize(TESTBINARY_SERVER_PARAMETERS_RECORD, cipher).first
     end
 
     it 'should generate valid record header' do

data/spec/server_spec.rb

@@ -14,7 +14,7 @@ RSpec.describe Server do
                         + msg_len.to_uint16 \
                         + TESTBINARY_CLIENT_HELLO)
       server = Server.new(mock_socket)
-      server.send(:recv_client_hello, true)
+      server.send(:recv_client_hello, true).first
     end
 
     it 'should receive ClientHello' do
@@ -90,12 +90,16 @@ RSpec.describe Server do
       )
     end
 
+    let(:ch) do
+      ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+    end
+
     let(:server) do
       Server.new(nil)
     end
 
     it 'should generate Certificate' do
-      ct = server.send(:gen_certificate, crt)
+      ct = server.send(:gen_certificate, crt, ch)
       expect(ct).to be_a_kind_of(Certificate)
 
       certificate_entry = ct.certificate_list.first
@@ -119,12 +123,15 @@ RSpec.describe Server do
     end
 
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => ct
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE]
       )
     end
 
@@ -168,13 +175,18 @@ RSpec.describe Server do
     end
 
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
+      ct = Certificate.deserialize(TESTBINARY_CERTIFICATE)
+      cv = CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
       transcript = Transcript.new
       transcript.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => Certificate.deserialize(TESTBINARY_CERTIFICATE),
-        CV => CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE],
+        CV => [cv, TESTBINARY_CERTIFICATE_VERIFY]
       )
       transcript
     end

data/spec/signature_algorithms_cert_spec.rb

@@ -24,6 +24,8 @@ RSpec.describe SignatureAlgorithmsCert do
     end
 
     it 'should be generated' do
+      expect(extension).to be_a(SignatureAlgorithmsCert)
+
       expect(extension.extension_type)
         .to eq ExtensionType::SIGNATURE_ALGORITHMS_CERT
       expect(extension.supported_signature_algorithms)
@@ -58,6 +60,8 @@ RSpec.describe SignatureAlgorithmsCert do
     end
 
     it 'should generate valid object' do
+      expect(extension).to be_a(SignatureAlgorithmsCert)
+
       expect(extension.extension_type)
         .to eq ExtensionType::SIGNATURE_ALGORITHMS_CERT
       expect(extension.supported_signature_algorithms)

data/spec/signature_algorithms_spec.rb

@@ -24,6 +24,8 @@ RSpec.describe SignatureAlgorithms do
     end
 
     it 'should be generated' do
+      expect(extension).to be_a(SignatureAlgorithms)
+
       expect(extension.extension_type).to eq ExtensionType::SIGNATURE_ALGORITHMS
       expect(extension.supported_signature_algorithms)
         .to eq supported_signature_algorithms
@@ -76,6 +78,8 @@ RSpec.describe SignatureAlgorithms do
     end
 
     it 'should generate valid object' do
+      expect(extension).to be_a(SignatureAlgorithms)
+
       expect(extension.extension_type).to eq ExtensionType::SIGNATURE_ALGORITHMS
       expect(extension.supported_signature_algorithms)
         .to eq supported_signature_algorithms

data/spec/spec_helper.rb

@@ -163,6 +163,10 @@ BIN
 
 TESTBINARY_EARLY_DATA_INDICATION_CH = ''
 
+TESTBINARY_COMPRESS_CERTIFICATE = <<BIN.split.map(&:hex).map(&:chr).join
+  02 00 01
+BIN
+
 # https://tools.ietf.org/html/rfc8448#section-3
 # 2.  Private Keys
 TESTBINARY_PKEY_MODULUS = <<BIN.split.map(&:hex).map(&:chr).join

data/spec/transcript_spec.rb

@@ -6,15 +6,22 @@ require_relative 'spec_helper'
 RSpec.describe Transcript do
   context 'transcript, not including HRR,' do
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS)
+      ct = Certificate.deserialize(TESTBINARY_CERTIFICATE)
+      cv = CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
+      sf = Finished.deserialize(TESTBINARY_SERVER_FINISHED)
+      cf = Finished.deserialize(TESTBINARY_CLIENT_FINISHED)
       t = Transcript.new
       t.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_SERVER_HELLO),
-        EE => EncryptedExtensions.deserialize(TESTBINARY_ENCRYPTED_EXTENSIONS),
-        CT => Certificate.deserialize(TESTBINARY_CERTIFICATE),
-        CV => CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY),
-        SF => Finished.deserialize(TESTBINARY_SERVER_FINISHED),
-        CF => Finished.deserialize(TESTBINARY_CLIENT_FINISHED)
+        CH => [ch, TESTBINARY_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_SERVER_HELLO],
+        EE => [ee, TESTBINARY_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_CERTIFICATE],
+        CV => [cv, TESTBINARY_CERTIFICATE_VERIFY],
+        SF => [sf, TESTBINARY_SERVER_FINISHED],
+        CF => [cf, TESTBINARY_CLIENT_FINISHED]
       )
     end
 
@@ -26,18 +33,26 @@ RSpec.describe Transcript do
 
   context 'transcript, including HRR,' do
     let(:transcript) do
+      ch1 = ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO1)
+      hrr = ServerHello.deserialize(TESTBINARY_HRR_HELLO_RETRY_REQUEST)
+      ch = ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO)
+      sh = ServerHello.deserialize(TESTBINARY_HRR_SERVER_HELLO)
+      ee = EncryptedExtensions.deserialize(TESTBINARY_HRR_ENCRYPTED_EXTENSIONS)
+      ct = Certificate.deserialize(TESTBINARY_HRR_CERTIFICATE)
+      cv = CertificateVerify.deserialize(TESTBINARY_HRR_CERTIFICATE_VERIFY)
+      sf = Finished.deserialize(TESTBINARY_HRR_SERVER_FINISHED)
+      cf = Finished.deserialize(TESTBINARY_HRR_CLIENT_FINISHED)
       t = Transcript.new
       t.merge!(
-        CH1 => ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO1),
-        HRR => ServerHello.deserialize(TESTBINARY_HRR_HELLO_RETRY_REQUEST),
-        CH => ClientHello.deserialize(TESTBINARY_HRR_CLIENT_HELLO),
-        SH => ServerHello.deserialize(TESTBINARY_HRR_SERVER_HELLO),
-        EE =>
-        EncryptedExtensions.deserialize(TESTBINARY_HRR_ENCRYPTED_EXTENSIONS),
-        CT => Certificate.deserialize(TESTBINARY_HRR_CERTIFICATE),
-        CV => CertificateVerify.deserialize(TESTBINARY_HRR_CERTIFICATE_VERIFY),
-        SF => Finished.deserialize(TESTBINARY_HRR_SERVER_FINISHED),
-        CF => Finished.deserialize(TESTBINARY_HRR_CLIENT_FINISHED)
+        CH1 => [ch1, TESTBINARY_HRR_CLIENT_HELLO1],
+        HRR => [hrr, TESTBINARY_HRR_HELLO_RETRY_REQUEST],
+        CH => [ch, TESTBINARY_HRR_CLIENT_HELLO],
+        SH => [sh, TESTBINARY_HRR_SERVER_HELLO],
+        EE => [ee, TESTBINARY_HRR_ENCRYPTED_EXTENSIONS],
+        CT => [ct, TESTBINARY_HRR_CERTIFICATE],
+        CV => [cv, TESTBINARY_HRR_CERTIFICATE_VERIFY],
+        SF => [sf, TESTBINARY_HRR_SERVER_FINISHED],
+        CF => [cf, TESTBINARY_HRR_CLIENT_FINISHED]
       )
     end
 
@@ -51,10 +66,9 @@ RSpec.describe Transcript do
 
   context 'transcript, Resumed 0-RTT Handshake,' do
     let(:transcript) do
+      ch = ClientHello.deserialize(TESTBINARY_0_RTT_CLIENT_HELLO)
       t = Transcript.new
-      t.merge!(
-        CH => ClientHello.deserialize(TESTBINARY_0_RTT_CLIENT_HELLO)
-      )
+      t.merge!(CH => [ch, TESTBINARY_0_RTT_CLIENT_HELLO])
     end
 
     let(:hash_len) do

data/tttls1.3.gemspec

@@ -13,10 +13,9 @@ Gem::Specification.new do |spec|
   spec.description   = spec.summary
   spec.homepage      = 'https://github.com/thekuwayama/tttls1.3'
   spec.license       = 'MIT'
-  spec.required_ruby_version = '>=2.6.1'
+  spec.required_ruby_version = '>=2.7'
 
   spec.files         = `git ls-files`.split($INPUT_RECORD_SEPARATOR)
-  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ['lib']
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tttls1.3
 version: !ruby/object:Gem::Version
-  version: 0.2.14
+  version: 0.2.17
 platform: ruby
 authors:
 - thekuwayama
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-07-16 00:00:00.000000000 Z
+date: 2022-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -96,9 +96,11 @@ files:
 - lib/tttls1.3/message/certificate_verify.rb
 - lib/tttls1.3/message/change_cipher_spec.rb
 - lib/tttls1.3/message/client_hello.rb
+- lib/tttls1.3/message/compressed_certificate.rb
 - lib/tttls1.3/message/encrypted_extensions.rb
 - lib/tttls1.3/message/end_of_early_data.rb
 - lib/tttls1.3/message/extension/alpn.rb
+- lib/tttls1.3/message/extension/compress_certificate.rb
 - lib/tttls1.3/message/extension/cookie.rb
 - lib/tttls1.3/message/extension/early_data_indication.rb
 - lib/tttls1.3/message/extension/key_share.rb
@@ -134,10 +136,12 @@ files:
 - spec/cipher_suites_spec.rb
 - spec/client_hello_spec.rb
 - spec/client_spec.rb
+- spec/compress_certificate_spec.rb
 - spec/connection_spec.rb
 - spec/cookie_spec.rb
 - spec/early_data_indication_spec.rb
 - spec/encrypted_extensions_spec.rb
+- spec/end_of_early_data_spec.rb
 - spec/error_spec.rb
 - spec/extensions_spec.rb
 - spec/finished_spec.rb
@@ -187,14 +191,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.6.1
+      version: '2.7'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.2.22
 signing_key:
 specification_version: 4
 summary: TLS 1.3 implementation in Ruby (Tiny Trial TLS1.3 aka tttls1.3)
@@ -209,10 +213,12 @@ test_files:
 - spec/cipher_suites_spec.rb
 - spec/client_hello_spec.rb
 - spec/client_spec.rb
+- spec/compress_certificate_spec.rb
 - spec/connection_spec.rb
 - spec/cookie_spec.rb
 - spec/early_data_indication_spec.rb
 - spec/encrypted_extensions_spec.rb
+- spec/end_of_early_data_spec.rb
 - spec/error_spec.rb
 - spec/extensions_spec.rb
 - spec/finished_spec.rb