aboutsummaryrefslogtreecommitdiffstats
path: root/test/net/smtp/test_sslcontext.rb
blob: 4f1dcfe6695d4be2922431d833c11d0e9f05db34 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
require 'net/smtp'
require 'test/unit'

module Net
  class TestSSLContext < Test::Unit::TestCase
    class MySMTP < SMTP
      attr_reader :__ssl_context, :__tls_hostname

      def initialize(socket)
        @fake_socket = socket
        super("smtp.example.com")
      end

      def tcp_socket(*)
        @fake_socket
      end

      def ssl_socket_connect(*)
      end

      def tlsconnect(*)
        super
        @fake_socket
      end

      def ssl_socket(socket, context)
        @__ssl_context = context
        s = super
        hostname = @__tls_hostname = ''
        s.define_singleton_method(:post_connection_check){ |name| hostname.replace(name) }
        s
      end
    end

    def teardown
      @server_thread&.exit&.join
      @server_socket&.close
      @client_socket&.close
    end

    def start_smtpd(starttls)
      @server_socket, @client_socket = Object.const_defined?(:UNIXSocket) ?
        UNIXSocket.pair : Socket.pair(:INET, :STREAM, 0)
      @starttls_executed = false
      @server_thread = Thread.new(@server_socket) do |s|
        s.puts "220 fakeserver\r\n"
        while cmd = s.gets&.chomp
          case cmd
          when /\AEHLO /
            s.puts "250-fakeserver\r\n"
            s.puts "250-STARTTLS\r\n" if starttls
            s.puts "250 8BITMIME\r\n"
          when /\ASTARTTLS/
            @starttls_executed = true
            s.puts "220 2.0.0 Ready to start TLS\r\n"
          else
            raise "unsupported command: #{cmd}"
          end
        end
      end
      @client_socket
    end

    def test_default
      smtp = MySMTP.new(start_smtpd(true))
      smtp.start
      assert_equal(OpenSSL::SSL::VERIFY_PEER, smtp.__ssl_context.verify_mode)
    end

    def test_enable_tls
      smtp = MySMTP.new(start_smtpd(true))
      context = OpenSSL::SSL::SSLContext.new
      smtp.enable_tls(context)
      smtp.start
      assert_equal(context, smtp.__ssl_context)
    end

    def test_enable_tls_before_disable_starttls
      smtp = MySMTP.new(start_smtpd(true))
      context = OpenSSL::SSL::SSLContext.new
      smtp.enable_tls(context)
      smtp.disable_starttls
      smtp.start
      assert_equal(context, smtp.__ssl_context)
    end

    def test_enable_starttls
      smtp = MySMTP.new(start_smtpd(true))
      context = OpenSSL::SSL::SSLContext.new
      smtp.enable_starttls(context)
      smtp.start
      assert_equal(context, smtp.__ssl_context)
    end

    def test_enable_starttls_before_disable_tls
      smtp = MySMTP.new(start_smtpd(true))
      context = OpenSSL::SSL::SSLContext.new
      smtp.enable_starttls(context)
      smtp.disable_tls
      smtp.start
      assert_equal(context, smtp.__ssl_context)
    end

    def test_start_with_tls_verify_true
      smtp = MySMTP.new(start_smtpd(true))
      smtp.start(tls_verify: true)
      assert_equal(OpenSSL::SSL::VERIFY_PEER, smtp.__ssl_context.verify_mode)
    end

    def test_start_with_tls_verify_false
      smtp = MySMTP.new(start_smtpd(true))
      smtp.start(tls_verify: false)
      assert_equal(OpenSSL::SSL::VERIFY_NONE, smtp.__ssl_context.verify_mode)
    end

    def test_start_with_tls_hostname
      smtp = MySMTP.new(start_smtpd(true))
      smtp.start(tls_hostname: "localhost")
      assert_equal("localhost", smtp.__tls_hostname)
    end

    def test_start_without_tls_hostname
      smtp = MySMTP.new(start_smtpd(true))
      smtp.start
      assert_equal("smtp.example.com", smtp.__tls_hostname)
    end

  end
end