tMore tests. Shameful how bad they are. - tordam - A library for peer discovery inside the Tor network
(HTM) git clone https://git.parazyd.org/tordam
(DIR) Log
(DIR) Files
(DIR) Refs
(DIR) README
(DIR) LICENSE
---
(DIR) commit 758bc307b2fc755904e4d91d3c5255c9891daaf3
(DIR) parent e39b6426503ba3ebaa838f2c96d87a96eba88b93
(HTM) Author: parazyd <parazyd@dyne.org>
Date: Mon, 11 Dec 2017 17:20:27 +0100
More tests. Shameful how bad they are.
Diffstat:
M cmd/dam-dir/main_test.go | 160 +++++++++++++++++++++++++++++++
1 file changed, 160 insertions(+), 0 deletions(-)
---
(DIR) diff --git a/cmd/dam-dir/main_test.go b/cmd/dam-dir/main_test.go
t@@ -8,6 +8,7 @@ import (
"net/http"
"os"
"os/exec"
+ "strings"
"syscall"
"testing"
"time"
t@@ -77,6 +78,63 @@ func TestValidFirstHandshake(t *testing.T) {
t.Log("Server replied:", m.Secret)
}
+func TestValidSecondHandshake(t *testing.T) {
+ // Valid 2/2 handshake request
+ req := map[string]string{
+ "nodetype": "node",
+ "address": "22mobp7vrb7a4gt2.onion",
+ "message": "I am a DAM node!",
+ "signature": "BuB/Dv8E44CLzUX88K2Ab0lUNS9A0GSkHPtrFNNWZMihPMWN0ORhwMZBRnMJ8woPO3wSONBvEvaCXA2hvsVrUJTa+hnevQNyQXCRhdTVVuVXEpjyFzkMamxb6InrGqbsGGkEUqGMSr9aaQ85N02MMrM6T6JuyqSSssFg2xuO+P4=",
+ "secret": "",
+ }
+ resp, err := postReq(req)
+ if err != nil {
+ t.Error(err)
+ }
+ m, err := getRespText(resp)
+ if err != nil {
+ t.Error(err)
+ }
+
+ decodedSecret, err := base64.StdEncoding.DecodeString(m.Secret)
+ if err != nil {
+ t.Error(err)
+ }
+
+ privkey, err := lib.LoadRsaKeyFromFile("dam-private.key")
+ if err != nil {
+ t.Error(err)
+ }
+
+ decrypted, err := lib.DecryptMsgRsa([]byte(decodedSecret), privkey)
+ if err != nil {
+ t.Error(err)
+ }
+
+ decryptedEncode := base64.StdEncoding.EncodeToString(decrypted)
+ sig, err := lib.SignMsgRsa([]byte(decryptedEncode), privkey)
+ if err != nil {
+ t.Error(err)
+ }
+ encodedSig := base64.StdEncoding.EncodeToString(sig)
+
+ req["message"] = decryptedEncode
+ req["secret"] = decryptedEncode
+ req["signature"] = encodedSig
+ resp, err = postReq(req)
+ if err != nil {
+ t.Error(err)
+ }
+ m, err = getRespText(resp)
+ if err != nil {
+ t.Error(err)
+ } else if m.Secret == "Welcome to the DAM network!" {
+ t.Log("Server replied:", m.Secret)
+ } else {
+ t.Error("Server replied:", m.Secret)
+ }
+}
+
func TestInvalidFirstHandshake(t *testing.T) {
// Invalid 1/2 handshake request
var req map[string]string
t@@ -165,6 +223,108 @@ func TestInvalidFirstHandshake(t *testing.T) {
}
}
+func TestInvalidSecondHandshake(t *testing.T) {
+ // Valid 2/2 handshake request
+ req := map[string]string{
+ "nodetype": "node",
+ "address": "22mobp7vrb7a4gt2.onion",
+ "message": "I am a DAM node!",
+ "signature": "BuB/Dv8E44CLzUX88K2Ab0lUNS9A0GSkHPtrFNNWZMihPMWN0ORhwMZBRnMJ8woPO3wSONBvEvaCXA2hvsVrUJTa+hnevQNyQXCRhdTVVuVXEpjyFzkMamxb6InrGqbsGGkEUqGMSr9aaQ85N02MMrM6T6JuyqSSssFg2xuO+P4=",
+ "secret": "",
+ }
+ resp, err := postReq(req)
+ if err != nil {
+ t.Error(err)
+ }
+ m, err := getRespText(resp)
+ if err != nil {
+ t.Error(err)
+ }
+
+ decodedSecret, err := base64.StdEncoding.DecodeString(m.Secret)
+ if err != nil {
+ t.Error(err)
+ }
+
+ privkey, err := lib.LoadRsaKeyFromFile("dam-private.key")
+ if err != nil {
+ t.Error(err)
+ }
+
+ decrypted, err := lib.DecryptMsgRsa([]byte(decodedSecret), privkey)
+ if err != nil {
+ t.Error(err)
+ }
+
+ decryptedEncode := base64.StdEncoding.EncodeToString(decrypted)
+ sig, err := lib.SignMsgRsa([]byte(decryptedEncode), privkey)
+ if err != nil {
+ t.Error(err)
+ }
+ encodedSig := base64.StdEncoding.EncodeToString(sig)
+
+ // The initial valid request.
+ oldreq := req
+
+ // Message and secret are different
+ req["message"] = decryptedEncode
+ req["secret"] = strings.ToLower(decryptedEncode)
+ req["signature"] = encodedSig
+ resp, err = postReq(req)
+ if err != nil {
+ t.Error(err)
+ }
+ m, err = getRespText(resp)
+ if err != nil {
+ t.Error(err)
+ } else if m.Secret == "Verification failed. Bye." {
+ t.Log("Server replied:", m.Secret)
+ } else {
+ t.Error("Server replied:", m.Secret)
+ }
+
+ // Signature is an invalid format
+ req["message"] = oldreq["message"]
+ req["secret"] = oldreq["secret"]
+ req["signature"] = "Thisisnotbase64"
+ resp, err = postReq(req)
+ if err != nil {
+ t.Error(err)
+ }
+ m, err = getRespText(resp)
+ if err != nil {
+ t.Error(err)
+ } else if strings.HasPrefix(m.Secret, "illegal base64 data at input byte") {
+ t.Log("Server replied:", m.Secret)
+ } else {
+ t.Error("Server replied:", m.Secret)
+ }
+
+ /*
+ // Secret is not the one we should be sending.
+ req["message"] = "a2V1Mzg3NTY0N0BAMTM0NTZ5Z2huZmJndXNpPz8/Ly8vcztwZlsndF1bb2U4NTg3Xnloc25tZ2V5ZGtsZTExCg=="
+ req["secret"] = "a2V1Mzg3NTY0N0BAMTM0NTZ5Z2huZmJndXNpPz8/Ly8vcztwZlsndF1bb2U4NTg3Xnloc25tZ2V5ZGtsZTExCg=="
+ sig, err = lib.SignMsgRsa([]byte(req["secret"]), privkey)
+ if err != nil {
+ t.Error(err)
+ }
+ encodedSig = base64.StdEncoding.EncodeToString(sig)
+ req["signature"] = encodedSig
+ resp, err = postReq(req)
+ if err != nil {
+ t.Error(err)
+ }
+ m, err = getRespText(resp)
+ if err != nil {
+ t.Error(err)
+ } else if strings.HasPrefix(m.Secret, "illegal base64 data at input byte") {
+ t.Log("Server replied:", m.Secret)
+ } else {
+ t.Error("Server replied:", m.Secret)
+ }
+ */
+}
+
func TestMain(m *testing.M) {
cmd := exec.Command("./dam-dir")
cmd.SysProcAttr = &syscall.SysProcAttr{Setpgid: true}