TapTap
58a83193ff
CI / lint (pull_request) Failing after 2s
CI / build-and-test (pull_request) Has been skipped
CI / sanitizers (address) (pull_request) Has been skipped
CI / sanitizers (undefined) (pull_request) Has been skipped
CI / fuzz-build (pull_request) Has been skipped
CI / coverage (pull_request) Has been skipped
CI / valgrind (pull_request) Has been skipped
82 lines
2.4 KiB
C
82 lines
2.4 KiB
C
#include "test_transport_tls.h"
|
|
#include "transport_tls.h"
|
|
#include "transport_tcp.h"
|
|
#include "test_utils.h"
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
|
|
/* Test tls_global_init succeeds */
|
|
static void test_tls_global_init() {
|
|
bool ok = tls_global_init();
|
|
EXPECT_TRUE(ok);
|
|
}
|
|
|
|
/* Test tls_global_init can be called multiple times */
|
|
static void test_tls_global_init_twice() {
|
|
bool ok1 = tls_global_init();
|
|
bool ok2 = tls_global_init();
|
|
EXPECT_TRUE(ok1);
|
|
EXPECT_TRUE(ok2);
|
|
}
|
|
|
|
/* Test client_connect_tls with bad certificate path.
|
|
* The function will create a socket, try to connect to localhost,
|
|
* fail to connect (since nothing is listening), and return false.
|
|
* We don't need a server to verify the error path. */
|
|
static void test_tls_connect_bad_cert() {
|
|
/* First, init TLS globally */
|
|
tls_global_init();
|
|
|
|
Client* client = client_create();
|
|
EXPECT_NOT_NULL(client);
|
|
|
|
/* Attempt to connect to a non-existent server with bad cert paths.
|
|
* client_connect_tls will try to connect first, fail, and return false.
|
|
* Note: we use an invalid host to ensure connection failure,
|
|
* which exercises the error path before cert loading. */
|
|
bool ok = client_connect_tls(client, "127.0.0.1", 1, "/nonexistent/cert.pem",
|
|
"/nonexistent/key.pem", "/nonexistent/ca.pem");
|
|
EXPECT_FALSE(ok);
|
|
|
|
client_delete(client);
|
|
}
|
|
|
|
/* Test client_connect_tls with NULL cert paths (should still attempt connection).
|
|
* Cert/key/ca being NULL is valid — the function will attempt to create an
|
|
* SSL context without client certificates. */
|
|
static void test_tls_connect_null_paths() {
|
|
tls_global_init();
|
|
|
|
Client* client = client_create();
|
|
EXPECT_NOT_NULL(client);
|
|
|
|
/* Connect to invalid address — will fail at connect() step */
|
|
bool ok = client_connect_tls(client, "127.0.0.1", 1, NULL, NULL, NULL);
|
|
EXPECT_FALSE(ok);
|
|
|
|
client_delete(client);
|
|
}
|
|
|
|
/* Test server_create_tls with bad cert paths.
|
|
* The function should fail gracefully. */
|
|
static void test_tls_server_bad_cert() {
|
|
tls_global_init();
|
|
|
|
Server* server = server_create(0);
|
|
EXPECT_NOT_NULL(server);
|
|
|
|
/* Load bad cert paths — should fail and return false */
|
|
bool ok = server_create_tls(server, "/nonexistent/cert.pem", "/nonexistent/key.pem", NULL);
|
|
EXPECT_FALSE(ok);
|
|
|
|
server_delete(&server);
|
|
}
|
|
|
|
void test_transport_tls() {
|
|
test_tls_global_init();
|
|
test_tls_global_init_twice();
|
|
test_tls_connect_bad_cert();
|
|
test_tls_connect_null_paths();
|
|
test_tls_server_bad_cert();
|
|
}
|