1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
|
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
"use strict";
/* import-globals-from head_cache.js */
/* import-globals-from head_cookies.js */
/* import-globals-from head_channels.js */
/* import-globals-from head_servers.js */
function makeChan(uri) {
let chan = NetUtil.newChannel({
uri,
loadUsingSystemPrincipal: true,
}).QueryInterface(Ci.nsIHttpChannel);
chan.loadFlags = Ci.nsIChannel.LOAD_INITIAL_DOCUMENT_URI;
return chan;
}
async function test_cert_failure(server_creator, https_proxy) {
let certdb = Cc["@mozilla.org/security/x509certdb;1"].getService(
Ci.nsIX509CertDB
);
addCertFromFile(certdb, "http2-ca.pem", "CTu,u,u");
addCertFromFile(certdb, "proxy-ca.pem", "CTu,u,u");
let server = new server_creator();
await server.start();
registerCleanupFunction(async () => {
await server.stop();
});
await server.registerPathHandler("/test", (req, resp) => {
resp.writeHead(200);
resp.end("done");
});
let url;
if (server_creator == NodeHTTPServer) {
url = `http://localhost:${server.port()}/test`;
} else {
url = `https://localhost:${server.port()}/test`;
}
let chan = makeChan(url);
let req = await new Promise(resolve => {
chan.asyncOpen(new ChannelListener(resolve, null, CL_ALLOW_UNKNOWN_CL));
});
equal(req.status, Cr.NS_OK);
equal(req.QueryInterface(Ci.nsIHttpChannel).responseStatus, 200);
let secinfo = req.securityInfo;
if (server_creator == NodeHTTPServer) {
if (!https_proxy) {
Assert.equal(secinfo, null);
} else {
// In the case we are connecting to an insecure HTTP server
// through a secure proxy, nsHttpChannel will have the security
// info from the proxy.
// We will discuss this behavir in bug 1785777.
secinfo.QueryInterface(Ci.nsITransportSecurityInfo);
Assert.equal(secinfo.serverCert.commonName, " Proxy Test Cert");
}
} else {
secinfo.QueryInterface(Ci.nsITransportSecurityInfo);
Assert.equal(secinfo.serverCert.commonName, " HTTP2 Test Cert");
}
}
add_task(async function test_http() {
await test_cert_failure(NodeHTTPServer, false);
});
add_task(async function test_https() {
await test_cert_failure(NodeHTTPSServer, false);
});
add_task(async function test_http2() {
await test_cert_failure(NodeHTTP2Server, false);
});
add_task(async function test_http_proxy_http_server() {
let proxy = new NodeHTTPProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTPServer, false);
});
add_task(async function test_http_proxy_https_server() {
let proxy = new NodeHTTPProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTPSServer, false);
});
add_task(async function test_http_proxy_http2_server() {
let proxy = new NodeHTTPProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTP2Server, false);
});
add_task(async function test_https_proxy_http_server() {
let proxy = new NodeHTTPSProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTPServer, true);
});
add_task(async function test_https_proxy_https_server() {
let proxy = new NodeHTTPSProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTPSServer, true);
});
add_task(async function test_https_proxy_http2_server() {
let proxy = new NodeHTTPSProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTP2Server, true);
});
add_task(async function test_http2_proxy_http_server() {
let proxy = new NodeHTTP2ProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTPServer, true);
});
add_task(async function test_http2_proxy_https_server() {
let proxy = new NodeHTTP2ProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTPSServer, true);
});
add_task(async function test_http2_proxy_http2_server() {
let proxy = new NodeHTTP2ProxyServer();
await proxy.start();
registerCleanupFunction(() => {
proxy.stop();
});
await test_cert_failure(NodeHTTP2Server, true);
});
|
