net/http/http_network_transaction_ssl_unittest.cc

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include <string>
   6
   7 #include "base/memory/ref_counted.h"
   8 #include "base/memory/scoped_ptr.h"
   9 #include "base/memory/scoped_vector.h"
  10 #include "net/base/net_util.h"
  11 #include "net/base/request_priority.h"
  12 #include "net/dns/mock_host_resolver.h"
  13 #include "net/http/http_auth_handler_mock.h"
  14 #include "net/http/http_network_session.h"
  15 #include "net/http/http_network_transaction.h"
  16 #include "net/http/http_request_info.h"
  17 #include "net/http/http_server_properties_impl.h"
  18 #include "net/http/transport_security_state.h"
  19 #include "net/proxy/proxy_service.h"
  20 #include "net/socket/socket_test_util.h"
  21 #include "testing/gtest/include/gtest/gtest.h"
  22
  23 namespace net {
  24
  25 namespace {
  26
  27 class TLS10SSLConfigService : public SSLConfigService {
  28  public:
  29   TLS10SSLConfigService() {
  30     ssl_config_.version_min = SSL_PROTOCOL_VERSION_SSL3;
  31     ssl_config_.version_max = SSL_PROTOCOL_VERSION_TLS1;
  32   }
  33
  34   virtual void GetSSLConfig(SSLConfig* config) OVERRIDE {
  35     *config = ssl_config_;
  36   }
  37
  38  private:
  39   virtual ~TLS10SSLConfigService() {}
  40
  41   SSLConfig ssl_config_;
  42 };
  43
  44 class TLS11SSLConfigService : public SSLConfigService {
  45  public:
  46   TLS11SSLConfigService() {
  47     ssl_config_.version_min = SSL_PROTOCOL_VERSION_SSL3;
  48     ssl_config_.version_max = SSL_PROTOCOL_VERSION_TLS1_1;
  49   }
  50
  51   virtual void GetSSLConfig(SSLConfig* config) OVERRIDE {
  52     *config = ssl_config_;
  53   }
  54
  55  private:
  56   virtual ~TLS11SSLConfigService() {}
  57
  58   SSLConfig ssl_config_;
  59 };
  60
  61 }  // namespace
  62
  63 class HttpNetworkTransactionSSLTest : public testing::Test {
  64  protected:
  65   virtual void SetUp() {
  66     ssl_config_service_ = new TLS10SSLConfigService;
  67     session_params_.ssl_config_service = ssl_config_service_.get();
  68
  69     auth_handler_factory_.reset(new HttpAuthHandlerMock::Factory());
  70     session_params_.http_auth_handler_factory = auth_handler_factory_.get();
  71
  72     proxy_service_.reset(ProxyService::CreateDirect());
  73     session_params_.proxy_service = proxy_service_.get();
  74
  75     session_params_.client_socket_factory = &mock_socket_factory_;
  76     session_params_.host_resolver = &mock_resolver_;
  77     session_params_.http_server_properties =
  78         http_server_properties_.GetWeakPtr();
  79     session_params_.transport_security_state = &transport_security_state_;
  80   }
  81
  82   HttpRequestInfo* GetRequestInfo(const std::string& url) {
  83     HttpRequestInfo* request_info = new HttpRequestInfo;
  84     request_info->url = GURL(url);
  85     request_info->method = "GET";
  86     request_info_vector_.push_back(request_info);
  87     return request_info;
  88   }
  89
  90   SSLConfig& GetServerSSLConfig(HttpNetworkTransaction* trans) {
  91     return trans->server_ssl_config_;
  92   }
  93
  94   scoped_refptr<SSLConfigService> ssl_config_service_;
  95   scoped_ptr<HttpAuthHandlerMock::Factory> auth_handler_factory_;
  96   scoped_ptr<ProxyService> proxy_service_;
  97
  98   MockClientSocketFactory mock_socket_factory_;
  99   MockHostResolver mock_resolver_;
 100   HttpServerPropertiesImpl http_server_properties_;
 101   TransportSecurityState transport_security_state_;
 102   HttpNetworkSession::Params session_params_;
 103   ScopedVector<HttpRequestInfo> request_info_vector_;
 104 };
 105
 106 // Tests that HttpNetworkTransaction attempts to fallback from
 107 // TLS 1.1 to TLS 1.0, then from TLS 1.0 to SSL 3.0.
 108 TEST_F(HttpNetworkTransactionSSLTest, SSLFallback) {
 109   ssl_config_service_ = new TLS11SSLConfigService;
 110   session_params_.ssl_config_service = ssl_config_service_.get();
 111   // |ssl_data1| is for the first handshake (TLS 1.1), which will fail
 112   // for protocol reasons (e.g., simulating a version rollback attack).
 113   SSLSocketDataProvider ssl_data1(ASYNC, ERR_SSL_PROTOCOL_ERROR);
 114   mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data1);
 115   StaticSocketDataProvider data1(NULL, 0, NULL, 0);
 116   mock_socket_factory_.AddSocketDataProvider(&data1);
 117
 118   // |ssl_data2| contains the handshake result for a TLS 1.0
 119   // handshake which will be attempted after the TLS 1.1
 120   // handshake fails.
 121   SSLSocketDataProvider ssl_data2(ASYNC, ERR_SSL_PROTOCOL_ERROR);
 122   mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data2);
 123   StaticSocketDataProvider data2(NULL, 0, NULL, 0);
 124   mock_socket_factory_.AddSocketDataProvider(&data2);
 125
 126   // |ssl_data3| contains the handshake result for a SSL 3.0
 127   // handshake which will be attempted after the TLS 1.0
 128   // handshake fails.
 129   SSLSocketDataProvider ssl_data3(ASYNC, ERR_SSL_PROTOCOL_ERROR);
 130   mock_socket_factory_.AddSSLSocketDataProvider(&ssl_data3);
 131   StaticSocketDataProvider data3(NULL, 0, NULL, 0);
 132   mock_socket_factory_.AddSocketDataProvider(&data3);
 133
 134   scoped_refptr<HttpNetworkSession> session(
 135       new HttpNetworkSession(session_params_));
 136   scoped_ptr<HttpNetworkTransaction> trans(
 137       new HttpNetworkTransaction(DEFAULT_PRIORITY, session.get()));
 138
 139   TestCompletionCallback callback;
 140   // This will consume |ssl_data1|, |ssl_data2| and |ssl_data3|.
 141   int rv = callback.GetResult(
 142       trans->Start(GetRequestInfo("https://www.paypal.com/"),
 143                    callback.callback(), BoundNetLog()));
 144   EXPECT_EQ(ERR_SSL_PROTOCOL_ERROR, rv);
 145
 146   SocketDataProviderArray<SocketDataProvider>& mock_data =
 147       mock_socket_factory_.mock_data();
 148   // Confirms that |ssl_data1|, |ssl_data2| and |ssl_data3| are consumed.
 149   EXPECT_EQ(3u, mock_data.next_index());
 150
 151   SSLConfig& ssl_config = GetServerSSLConfig(trans.get());
 152   // |version_max| fallbacks to SSL 3.0.
 153   EXPECT_EQ(SSL_PROTOCOL_VERSION_SSL3, ssl_config.version_max);
 154   EXPECT_TRUE(ssl_config.version_fallback);
 155 }
 156
 157 }  // namespace net
 158