130 lines
4.2 KiB
C++
130 lines
4.2 KiB
C++
/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
|
|
/*
|
|
* Copyright (c) 2013-2023 Regents of the University of California.
|
|
*
|
|
* This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
|
|
*
|
|
* ndn-cxx library is free software: you can redistribute it and/or modify it under the
|
|
* terms of the GNU Lesser General Public License as published by the Free Software
|
|
* Foundation, either version 3 of the License, or (at your option) any later version.
|
|
*
|
|
* ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
* WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
|
* PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received copies of the GNU General Public License and GNU Lesser
|
|
* General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
|
|
* <http://www.gnu.org/licenses/>.
|
|
*
|
|
* See AUTHORS.md for complete list of ndn-cxx authors and contributors.
|
|
*/
|
|
|
|
#include "ndn-cxx/security/certificate-fetcher-from-network.hpp"
|
|
|
|
#include "ndn-cxx/lp/nack.hpp"
|
|
#include "ndn-cxx/security/validation-policy-simple-hierarchy.hpp"
|
|
|
|
#include "tests/boost-test.hpp"
|
|
#include "tests/unit/security/validator-fixture.hpp"
|
|
|
|
#include <boost/mp11/list.hpp>
|
|
|
|
namespace ndn::tests {
|
|
|
|
using namespace ndn::security;
|
|
|
|
BOOST_AUTO_TEST_SUITE(Security)
|
|
BOOST_AUTO_TEST_SUITE(TestCertificateFetcherFromNetwork)
|
|
|
|
struct Cert {};
|
|
struct Timeout {};
|
|
struct Nack {};
|
|
|
|
template<class Response>
|
|
class CertificateFetcherFromNetworkFixture : public HierarchicalValidatorFixture<ValidationPolicySimpleHierarchy,
|
|
CertificateFetcherFromNetwork>
|
|
{
|
|
public:
|
|
CertificateFetcherFromNetworkFixture()
|
|
: data("/Security/ValidatorFixture/Sub1/Sub3/Data")
|
|
, interest("/Security/ValidatorFixture/Sub1/Sub3/Interest")
|
|
{
|
|
Identity subSubIdentity = addSubCertificate("/Security/ValidatorFixture/Sub1/Sub3", subIdentity);
|
|
cache.insert(subSubIdentity.getDefaultKey().getDefaultCertificate());
|
|
|
|
m_keyChain.sign(data, signingByIdentity(subSubIdentity));
|
|
m_keyChain.sign(interest, signingByIdentity(subSubIdentity));
|
|
|
|
processInterest = [this] (const Interest& i) { makeResponse(i); };
|
|
}
|
|
|
|
void
|
|
makeResponse(const Interest& interest);
|
|
|
|
public:
|
|
Data data;
|
|
Interest interest;
|
|
};
|
|
|
|
template<>
|
|
void
|
|
CertificateFetcherFromNetworkFixture<Cert>::makeResponse(const Interest& interest)
|
|
{
|
|
auto cert = cache.find(interest);
|
|
if (cert == nullptr) {
|
|
return;
|
|
}
|
|
face.receive(*cert);
|
|
}
|
|
|
|
template<>
|
|
void
|
|
CertificateFetcherFromNetworkFixture<Timeout>::makeResponse(const Interest& interest)
|
|
{
|
|
// do nothing
|
|
}
|
|
|
|
template<>
|
|
void
|
|
CertificateFetcherFromNetworkFixture<Nack>::makeResponse(const Interest& interest)
|
|
{
|
|
lp::Nack nack(interest);
|
|
nack.setHeader(lp::NackHeader().setReason(lp::NackReason::NO_ROUTE));
|
|
face.receive(nack);
|
|
}
|
|
|
|
using Failures = boost::mp11::mp_list<Timeout, Nack>;
|
|
|
|
BOOST_FIXTURE_TEST_CASE(ValidateSuccess, CertificateFetcherFromNetworkFixture<Cert>)
|
|
{
|
|
VALIDATE_SUCCESS(this->data, "Should get accepted, as normal interests bring cert");
|
|
BOOST_CHECK_EQUAL(this->face.sentInterests.size(), 2);
|
|
this->face.sentInterests.clear();
|
|
|
|
this->advanceClocks(1_h, 2); // expire validator caches
|
|
|
|
VALIDATE_SUCCESS(this->interest, "Should get accepted, as interests bring certs");
|
|
BOOST_CHECK_EQUAL(this->face.sentInterests.size(), 2);
|
|
}
|
|
|
|
BOOST_FIXTURE_TEST_CASE_TEMPLATE(ValidateFailure, T, Failures, CertificateFetcherFromNetworkFixture<T>)
|
|
{
|
|
VALIDATE_FAILURE(this->data, "Should fail, as interests don't bring data");
|
|
BOOST_TEST(this->lastError.getCode() == ValidationError::CANNOT_RETRIEVE_CERT);
|
|
// first interest + 3 retries
|
|
BOOST_TEST(this->face.sentInterests.size() == 4);
|
|
|
|
this->face.sentInterests.clear();
|
|
|
|
this->advanceClocks(1_h, 2); // expire validator caches
|
|
|
|
VALIDATE_FAILURE(this->interest, "Should fail, as interests don't bring data");
|
|
BOOST_TEST(this->lastError.getCode() == ValidationError::CANNOT_RETRIEVE_CERT);
|
|
BOOST_TEST(this->face.sentInterests.size() == 4);
|
|
}
|
|
|
|
BOOST_AUTO_TEST_SUITE_END() // TestCertificateFetcherFromNetwork
|
|
BOOST_AUTO_TEST_SUITE_END() // Security
|
|
|
|
} // namespace ndn::tests
|