X-Git-Url: https://git.distorted.org.uk/~mdw/tripe/blobdiff_plain/6d5eac374ece97a8c7a22e6f655d2277d7aaf815..c60b5015074146ea1fe5c438f5727e5f5cc08782:/server/tests.at?ds=sidebyside diff --git a/server/tests.at b/server/tests.at index d217054a..5f8377a0 100644 --- a/server/tests.at +++ b/server/tests.at @@ -39,6 +39,12 @@ m4_define([TRIPE], m4_define([TRIPECTL], [$abs_top_builddir/client/tripectl -d. -aadmin]) m4_define([USLIP], [$abs_top_builddir/uslip/tripe-uslip]) m4_define([MITM], [$abs_top_builddir/proxy/tripe-mitm]) +m4_define([BULKTEST], + [$abs_top_builddir/server/tripe-test \ + ${TRIPE_TEST_TRACEOPTS+-T$TRIPE_TEST_TRACEOPTS}]) + +## Pause for a bit. +m4_define([SLEEP], [sleep 0.2]) ## WITH_STRACE(tag, cmd) ## @@ -404,13 +410,19 @@ for p in alice bob carol; do (mkdir $p; cd $p; SETUPDIR([alpha])); done ## WITH_MITM(adir, aport, bdir, bport, body) m4_define([WITH_MITM], [ - echo >&2 "mitm: $1 <--> :$2 <-mitm-> :$4 <--> $3" + aspec="$2" bspec="$4" + case $aspec in =*) aport="?$1/$3.mitm" ;; *) aport=$aspec ;; esac + case $bspec in =*) bport="?$3/$1.mitm" ;; *) bport=$bspec ;; esac MITM -k$1/keyring.pub \ - peer:$1:$2:127.0.0.1:$(cat $1/port) \ - peer:$3:$4:127.0.0.1:$(cat $3/port) \ + peer:$1:$aport:127.0.0.1:$(cat $1/port) \ + peer:$3:$bport:127.0.0.1:$(cat $3/port) \ filt:send& mitmpid_$1_$3=$! + SLEEP + case $aspec in =*) aport=$(cat ${aport#\?}); eval ${aspec#=}=\$aport ;; esac + case $bspec in =*) bport=$(cat ${bport#\?}); eval ${bspec#=}=\$bport ;; esac + echo >&2 "mitm: $1 <--> :$aport <-mitm-> :$bport <--> $3" trap 'kill $mitmpid_$1_$3; exit 127' EXIT INT QUIT TERM HUP - sleep 1 + SLEEP $5 kill $mitmpid_$1_$3; trap - EXIT INT QUIT TERM HUP ]) @@ -425,30 +437,33 @@ WITH_3TRIPES([alice], [bob], [carol], [-nslip], ## alice <--> :5311 <-mitm-> :5312 <--> bob ## alice <--> :5321 <-mitm-> :5322 <--> carol - WITH_MITM([alice], [5311], [bob], [5312], [ - ESTABLISH([alice], [alice], [], [bob], [bob], [-mobile], [5312], [5311]) + WITH_MITM([alice], [=bob_from_alice], [bob], [=alice_from_bob], [ + ESTABLISH([alice], [alice], [], + [bob], [bob], [-mobile], + [$alice_from_bob], [$bob_from_alice]) ]) - WITH_MITM([alice], [5319], [bob], [5312], [ + WITH_MITM([alice], [=new_bob_from_alice], [bob], [$alice_from_bob], [ COMMS_EPING([bob], [bob], [alice], [alice]) COMMS_SLIP([bob], [bob], [alice], [alice]) ]) - WITH_MITM([alice], [5321], [carol], [5322], [ - ESTABLISH([alice], [alice], [], [carol], [carol], [-mobile], - [5322], [5321]) + WITH_MITM([alice], [=carol_from_alice], [carol], [=alice_from_carol], [ + ESTABLISH([alice], [alice], [], + [carol], [carol], [-mobile], + [$alice_from_carol], [$carol_from_alice]) ]) - WITH_MITM([alice], [5311], [bob], [5312], [ - WITH_MITM([alice], [5321], [carol], [5322], [ + WITH_MITM([alice], [$bob_from_alice], [bob], [$alice_from_bob], [ + WITH_MITM([alice], [$carol_from_alice], [carol], [$alice_from_carol], [ COMMS_EPING([bob], [bob], [alice], [alice]) COMMS_EPING([carol], [carol], [alice], [alice]) COMMS_SLIP([bob], [bob], [alice], [alice]) COMMS_SLIP([carol], [carol], [alice], [alice]) ])]) - WITH_MITM([alice], [5321], [bob], [5312], [ - WITH_MITM([alice], [5311], [carol], [5322], [ + WITH_MITM([alice], [$carol_from_alice], [bob], [$alice_from_bob], [ + WITH_MITM([alice], [$bob_from_alice], [carol], [$alice_from_carol], [ COMMS_EPING([bob], [bob], [alice], [alice]) COMMS_EPING([carol], [carol], [alice], [alice]) COMMS_SLIP([bob], [bob], [alice], [alice]) @@ -471,15 +486,16 @@ for i in alice bob; do (mkdir $i; cd $i; SETUPDIR([beta])); done WITH_2TRIPES([alice], [bob], [-nslip], [-talice], [-tbob], [ ## Set up the evil proxy. - alicemitm=24516 bobmitm=14016 mknod pipe-mitmpid p WITH_STRACE([mitm], [sh -c 'echo $$ >pipe-mitmpid; exec "$@"' - \ MITM -kalice/keyring.pub >mitm.out 2>mitm.err \ - peer:alice:$alicemitm:127.0.0.1:$(cat alice/port) \ - peer:bob:$bobmitm:127.0.0.1:$(cat bob/port) \ + peer:alice:\?alice.mitm:127.0.0.1:$(cat alice/port) \ + peer:bob:\?bob.mitm:127.0.0.1:$(cat bob/port) \ filt:drop:5 filt:send])& read mitmpid &- @@ -751,4 +767,87 @@ WITH_TRIPE(, [ AT_CLEANUP +###-------------------------------------------------------------------------- +### Knock and bye. + +AT_SETUP([server knock]) +AT_KEYWORDS([knock]) +export TRIPE_SLIPIF=USLIP + +for i in alice bob; do (mkdir $i; cd $i; SETUPDIR([gamma])); done + +WITH_2TRIPES([alice], [bob], [-nslip], [-talice], [-tbob], [ + WITH_MITM([alice], [=bob_from_alice], [bob], [=alice_from_bob], [ + + COPROCESSES([wait-knock], [ + echo WATCH +n + while read line; do + set x $line; shift + echo >&2 ">>> $line" + case "$1:$2:$3" in + OK::) ;; + NOTE:KNOCK:bob) shift 3; echo "$*" >knock-addr; break ;; + NOTE:* | TRACE:* | WARN:*) ;; + *) exit 63 ;; + esac + done + ], [ + TRIPECTL -dalice + ])& waiter=$! + + AT_CHECK([TRIPECTL -dbob ADD -knock bob -ephemeral alice INET 127.0.0.1 $alice_from_bob]) + + wait $waiter; waitrc=$? + AT_CHECK([echo $waitrc],, [0[]nl]) + AT_CHECK_UNQUOTED([cat knock-addr],, [INET 127.0.0.1 $bob_from_alice[]nl]) + + AWAIT_KXDONE([alice], [alice], [bob], [bob], [ + AT_CHECK([TRIPECTL -dalice ADD -ephemeral bob INET 127.0.0.1 $bob_from_alice]) + ]) + + COMMS_EPING([alice], [alice], [bob], [bob]) + COMMS_SLIP([alice], [alice], [bob], [bob]) + ]) + + WITH_MITM([alice], [=new_bob_from_alice], [bob], [$alice_from_bob], [ + AWAIT_KXDONE([alice], [alice], [bob], [bob], [ + AT_CHECK([TRIPECTL -dalice FORCEKX bob]) + AT_CHECK([TRIPECTL -dbob FORCEKX alice]) + ]) + + AT_CHECK([TRIPECTL -dbob KILL alice]) + AT_CHECK([TRIPECTL -dalice LIST],, []) + ]) +]) + +AT_CLEANUP + +###-------------------------------------------------------------------------- +### Key-exchange ad bulk crypto round trip. + +AT_SETUP([server roundtrip]) +AT_KEYWORDS([roundtrip]) + +while read label genalg paramalg spec; do + paramopts=${spec%--*} attrs=${spec#*--} + key -kkeyring.$label add -a$paramalg -eforever $paramopts -tparam tripe-param $attrs + key -kkeyring.$label add -a$genalg -pparam -eforever -talice tripe + key -kkeyring.$label extract -f-secret keyring.$label-pub + { sh -c "echo $$"; date; } >msg + AT_CHECK([BULKTEST -kkeyring.$label -talice \ + ies-encrypt 99 "$(cat msg)nl"], [0], [stdout], [stderr]) + cp msg expout; mv stdout ct + AT_CHECK([BULKTEST -kkeyring.$label -talice \ + ies-decrypt 99 "$(cat ct)"], [0], [expout], [stderr]) +done <