| OLD | NEW |
| 1 /* | 1 /* |
| 2 * Copyright 2011 The WebRTC Project Authors. All rights reserved. | 2 * Copyright 2011 The WebRTC Project Authors. All rights reserved. |
| 3 * | 3 * |
| 4 * Use of this source code is governed by a BSD-style license | 4 * Use of this source code is governed by a BSD-style license |
| 5 * that can be found in the LICENSE file in the root of the source | 5 * that can be found in the LICENSE file in the root of the source |
| 6 * tree. An additional intellectual property rights grant can be found | 6 * tree. An additional intellectual property rights grant can be found |
| 7 * in the file PATENTS. All contributing project authors may | 7 * in the file PATENTS. All contributing project authors may |
| 8 * be found in the AUTHORS file in the root of the source tree. | 8 * be found in the AUTHORS file in the root of the source tree. |
| 9 */ | 9 */ |
| 10 | 10 |
| (...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 44 enum Flags { NF_REOFFER = 0x1, NF_EXPECT_FAILURE = 0x2 }; | 44 enum Flags { NF_REOFFER = 0x1, NF_EXPECT_FAILURE = 0x2 }; |
| 45 | 45 |
| 46 class DtlsTestClient : public sigslot::has_slots<> { | 46 class DtlsTestClient : public sigslot::has_slots<> { |
| 47 public: | 47 public: |
| 48 DtlsTestClient(const std::string& name, | 48 DtlsTestClient(const std::string& name, |
| 49 rtc::Thread* signaling_thread, | 49 rtc::Thread* signaling_thread, |
| 50 rtc::Thread* worker_thread) : | 50 rtc::Thread* worker_thread) : |
| 51 name_(name), | 51 name_(name), |
| 52 signaling_thread_(signaling_thread), | 52 signaling_thread_(signaling_thread), |
| 53 worker_thread_(worker_thread), | 53 worker_thread_(worker_thread), |
| 54 protocol_(cricket::ICEPROTO_GOOGLE), | |
| 55 packet_size_(0), | 54 packet_size_(0), |
| 56 use_dtls_srtp_(false), | 55 use_dtls_srtp_(false), |
| 57 ssl_max_version_(rtc::SSL_PROTOCOL_DTLS_10), | 56 ssl_max_version_(rtc::SSL_PROTOCOL_DTLS_10), |
| 58 negotiated_dtls_(false), | 57 negotiated_dtls_(false), |
| 59 received_dtls_client_hello_(false), | 58 received_dtls_client_hello_(false), |
| 60 received_dtls_server_hello_(false) { | 59 received_dtls_server_hello_(false) { |
| 61 } | 60 } |
| 62 void CreateCertificate(rtc::KeyType key_type) { | 61 void CreateCertificate(rtc::KeyType key_type) { |
| 63 certificate_ = rtc::RTCCertificate::Create( | 62 certificate_ = rtc::RTCCertificate::Create( |
| 64 rtc::scoped_ptr<rtc::SSLIdentity>( | 63 rtc::scoped_ptr<rtc::SSLIdentity>( |
| 65 rtc::SSLIdentity::Generate(name_, key_type)).Pass()); | 64 rtc::SSLIdentity::Generate(name_, key_type)).Pass()); |
| 66 } | 65 } |
| 67 const rtc::scoped_refptr<rtc::RTCCertificate>& certificate() { | 66 const rtc::scoped_refptr<rtc::RTCCertificate>& certificate() { |
| 68 return certificate_; | 67 return certificate_; |
| 69 } | 68 } |
| 70 void SetIceProtocol(cricket::TransportProtocol proto) { | |
| 71 protocol_ = proto; | |
| 72 } | |
| 73 void SetupSrtp() { | 69 void SetupSrtp() { |
| 74 ASSERT(certificate_); | 70 ASSERT(certificate_); |
| 75 use_dtls_srtp_ = true; | 71 use_dtls_srtp_ = true; |
| 76 } | 72 } |
| 77 void SetupMaxProtocolVersion(rtc::SSLProtocolVersion version) { | 73 void SetupMaxProtocolVersion(rtc::SSLProtocolVersion version) { |
| 78 ASSERT(transport_.get() == NULL); | 74 ASSERT(transport_.get() == NULL); |
| 79 ssl_max_version_ = version; | 75 ssl_max_version_ = version; |
| 80 } | 76 } |
| 81 void SetupChannels(int count, cricket::IceRole role) { | 77 void SetupChannels(int count, cricket::IceRole role) { |
| 82 transport_.reset(new cricket::DtlsTransport<cricket::FakeTransport>( | 78 transport_.reset(new cricket::DtlsTransport<cricket::FakeTransport>( |
| (...skipping 76 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 159 if (use_dtls_srtp_ && !(flags & NF_REOFFER)) { | 155 if (use_dtls_srtp_ && !(flags & NF_REOFFER)) { |
| 160 // SRTP ciphers will be set only in the beginning. | 156 // SRTP ciphers will be set only in the beginning. |
| 161 for (std::vector<cricket::DtlsTransportChannelWrapper*>::iterator it = | 157 for (std::vector<cricket::DtlsTransportChannelWrapper*>::iterator it = |
| 162 channels_.begin(); it != channels_.end(); ++it) { | 158 channels_.begin(); it != channels_.end(); ++it) { |
| 163 std::vector<std::string> ciphers; | 159 std::vector<std::string> ciphers; |
| 164 ciphers.push_back(AES_CM_128_HMAC_SHA1_80); | 160 ciphers.push_back(AES_CM_128_HMAC_SHA1_80); |
| 165 ASSERT_TRUE((*it)->SetSrtpCiphers(ciphers)); | 161 ASSERT_TRUE((*it)->SetSrtpCiphers(ciphers)); |
| 166 } | 162 } |
| 167 } | 163 } |
| 168 | 164 |
| 169 std::string transport_type = (protocol_ == cricket::ICEPROTO_GOOGLE) ? | |
| 170 cricket::NS_GINGLE_P2P : cricket::NS_JINGLE_ICE_UDP; | |
| 171 cricket::TransportDescription local_desc( | 165 cricket::TransportDescription local_desc( |
| 172 transport_type, std::vector<std::string>(), kIceUfrag1, kIcePwd1, | 166 std::vector<std::string>(), kIceUfrag1, kIcePwd1, |
| 173 cricket::ICEMODE_FULL, local_role, | 167 cricket::ICEMODE_FULL, local_role, |
| 174 // If remote if the offerer and has no DTLS support, answer will be | 168 // If remote if the offerer and has no DTLS support, answer will be |
| 175 // without any fingerprint. | 169 // without any fingerprint. |
| 176 (action == cricket::CA_ANSWER && !remote_cert) ? | 170 (action == cricket::CA_ANSWER && !remote_cert) ? |
| 177 NULL : local_fingerprint.get(), | 171 NULL : local_fingerprint.get(), |
| 178 cricket::Candidates()); | 172 cricket::Candidates()); |
| 179 | 173 |
| 180 cricket::TransportDescription remote_desc( | 174 cricket::TransportDescription remote_desc( |
| 181 transport_type, std::vector<std::string>(), kIceUfrag1, kIcePwd1, | 175 std::vector<std::string>(), kIceUfrag1, kIcePwd1, |
| 182 cricket::ICEMODE_FULL, remote_role, remote_fingerprint.get(), | 176 cricket::ICEMODE_FULL, remote_role, remote_fingerprint.get(), |
| 183 cricket::Candidates()); | 177 cricket::Candidates()); |
| 184 | 178 |
| 185 bool expect_success = (flags & NF_EXPECT_FAILURE) ? false : true; | 179 bool expect_success = (flags & NF_EXPECT_FAILURE) ? false : true; |
| 186 // If |expect_success| is false, expect SRTD or SLTD to fail when | 180 // If |expect_success| is false, expect SRTD or SLTD to fail when |
| 187 // content action is CA_ANSWER. | 181 // content action is CA_ANSWER. |
| 188 if (action == cricket::CA_OFFER) { | 182 if (action == cricket::CA_OFFER) { |
| 189 ASSERT_TRUE(transport_->SetLocalTransportDescription( | 183 ASSERT_TRUE(transport_->SetLocalTransportDescription( |
| 190 local_desc, cricket::CA_OFFER, NULL)); | 184 local_desc, cricket::CA_OFFER, NULL)); |
| 191 ASSERT_EQ(expect_success, transport_->SetRemoteTransportDescription( | 185 ASSERT_EQ(expect_success, transport_->SetRemoteTransportDescription( |
| (...skipping 181 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 373 ASSERT_TRUE(VerifyPacket(data, size, NULL)); | 367 ASSERT_TRUE(VerifyPacket(data, size, NULL)); |
| 374 } | 368 } |
| 375 } | 369 } |
| 376 } | 370 } |
| 377 } | 371 } |
| 378 | 372 |
| 379 private: | 373 private: |
| 380 std::string name_; | 374 std::string name_; |
| 381 rtc::Thread* signaling_thread_; | 375 rtc::Thread* signaling_thread_; |
| 382 rtc::Thread* worker_thread_; | 376 rtc::Thread* worker_thread_; |
| 383 | |
| 384 rtc::scoped_refptr<rtc::RTCCertificate> certificate_; | 377 rtc::scoped_refptr<rtc::RTCCertificate> certificate_; |
| 385 cricket::TransportProtocol protocol_; | |
| 386 | |
| 387 rtc::scoped_ptr<cricket::FakeTransport> transport_; | 378 rtc::scoped_ptr<cricket::FakeTransport> transport_; |
| 388 std::vector<cricket::DtlsTransportChannelWrapper*> channels_; | 379 std::vector<cricket::DtlsTransportChannelWrapper*> channels_; |
| 389 size_t packet_size_; | 380 size_t packet_size_; |
| 390 std::set<int> received_; | 381 std::set<int> received_; |
| 391 bool use_dtls_srtp_; | 382 bool use_dtls_srtp_; |
| 392 rtc::SSLProtocolVersion ssl_max_version_; | 383 rtc::SSLProtocolVersion ssl_max_version_; |
| 393 bool negotiated_dtls_; | 384 bool negotiated_dtls_; |
| 394 bool received_dtls_client_hello_; | 385 bool received_dtls_client_hello_; |
| 395 bool received_dtls_server_hello_; | 386 bool received_dtls_server_hello_; |
| 396 }; | 387 }; |
| (...skipping 151 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 548 DtlsTestClient client1_; | 539 DtlsTestClient client1_; |
| 549 DtlsTestClient client2_; | 540 DtlsTestClient client2_; |
| 550 int channel_ct_; | 541 int channel_ct_; |
| 551 bool use_dtls_; | 542 bool use_dtls_; |
| 552 bool use_dtls_srtp_; | 543 bool use_dtls_srtp_; |
| 553 rtc::SSLProtocolVersion ssl_expected_version_; | 544 rtc::SSLProtocolVersion ssl_expected_version_; |
| 554 }; | 545 }; |
| 555 | 546 |
| 556 // Test that transport negotiation of ICE, no DTLS works properly. | 547 // Test that transport negotiation of ICE, no DTLS works properly. |
| 557 TEST_F(DtlsTransportChannelTest, TestChannelSetupIce) { | 548 TEST_F(DtlsTransportChannelTest, TestChannelSetupIce) { |
| 558 client1_.SetIceProtocol(cricket::ICEPROTO_RFC5245); | |
| 559 client2_.SetIceProtocol(cricket::ICEPROTO_RFC5245); | |
| 560 Negotiate(); | 549 Negotiate(); |
| 561 cricket::FakeTransportChannel* channel1 = client1_.GetFakeChannel(0); | 550 cricket::FakeTransportChannel* channel1 = client1_.GetFakeChannel(0); |
| 562 cricket::FakeTransportChannel* channel2 = client2_.GetFakeChannel(0); | 551 cricket::FakeTransportChannel* channel2 = client2_.GetFakeChannel(0); |
| 563 ASSERT_TRUE(channel1 != NULL); | |
| 564 ASSERT_TRUE(channel2 != NULL); | |
| 565 EXPECT_EQ(cricket::ICEROLE_CONTROLLING, channel1->GetIceRole()); | |
| 566 EXPECT_EQ(1U, channel1->IceTiebreaker()); | |
| 567 EXPECT_EQ(cricket::ICEPROTO_RFC5245, channel1->protocol()); | |
| 568 EXPECT_EQ(kIceUfrag1, channel1->ice_ufrag()); | |
| 569 EXPECT_EQ(kIcePwd1, channel1->ice_pwd()); | |
| 570 EXPECT_EQ(cricket::ICEROLE_CONTROLLED, channel2->GetIceRole()); | |
| 571 EXPECT_EQ(2U, channel2->IceTiebreaker()); | |
| 572 EXPECT_EQ(cricket::ICEPROTO_RFC5245, channel2->protocol()); | |
| 573 } | |
| 574 | |
| 575 // Test that transport negotiation of GICE, no DTLS works properly. | |
| 576 TEST_F(DtlsTransportChannelTest, TestChannelSetupGice) { | |
| 577 client1_.SetIceProtocol(cricket::ICEPROTO_GOOGLE); | |
| 578 client2_.SetIceProtocol(cricket::ICEPROTO_GOOGLE); | |
| 579 Negotiate(); | |
| 580 cricket::FakeTransportChannel* channel1 = client1_.GetFakeChannel(0); | |
| 581 cricket::FakeTransportChannel* channel2 = client2_.GetFakeChannel(0); | |
| 582 ASSERT_TRUE(channel1 != NULL); | 552 ASSERT_TRUE(channel1 != NULL); |
| 583 ASSERT_TRUE(channel2 != NULL); | 553 ASSERT_TRUE(channel2 != NULL); |
| 584 EXPECT_EQ(cricket::ICEROLE_CONTROLLING, channel1->GetIceRole()); | 554 EXPECT_EQ(cricket::ICEROLE_CONTROLLING, channel1->GetIceRole()); |
| 585 EXPECT_EQ(1U, channel1->IceTiebreaker()); | 555 EXPECT_EQ(1U, channel1->IceTiebreaker()); |
| 586 EXPECT_EQ(cricket::ICEPROTO_GOOGLE, channel1->protocol()); | |
| 587 EXPECT_EQ(kIceUfrag1, channel1->ice_ufrag()); | 556 EXPECT_EQ(kIceUfrag1, channel1->ice_ufrag()); |
| 588 EXPECT_EQ(kIcePwd1, channel1->ice_pwd()); | 557 EXPECT_EQ(kIcePwd1, channel1->ice_pwd()); |
| 589 EXPECT_EQ(cricket::ICEROLE_CONTROLLED, channel2->GetIceRole()); | 558 EXPECT_EQ(cricket::ICEROLE_CONTROLLED, channel2->GetIceRole()); |
| 590 EXPECT_EQ(2U, channel2->IceTiebreaker()); | 559 EXPECT_EQ(2U, channel2->IceTiebreaker()); |
| 591 EXPECT_EQ(cricket::ICEPROTO_GOOGLE, channel2->protocol()); | |
| 592 } | 560 } |
| 593 | 561 |
| 594 // Connect without DTLS, and transfer some data. | 562 // Connect without DTLS, and transfer some data. |
| 595 TEST_F(DtlsTransportChannelTest, TestTransfer) { | 563 TEST_F(DtlsTransportChannelTest, TestTransfer) { |
| 596 ASSERT_TRUE(Connect()); | 564 ASSERT_TRUE(Connect()); |
| 597 TestTransfer(0, 1000, 100, false); | 565 TestTransfer(0, 1000, 100, false); |
| 598 } | 566 } |
| 599 | 567 |
| 600 // Create two channels without DTLS, and transfer some data. | 568 // Create two channels without DTLS, and transfer some data. |
| 601 TEST_F(DtlsTransportChannelTest, TestTransferTwoChannels) { | 569 TEST_F(DtlsTransportChannelTest, TestTransferTwoChannels) { |
| (...skipping 299 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 901 // Each side's remote certificate is the other side's local certificate. | 869 // Each side's remote certificate is the other side's local certificate. |
| 902 ASSERT_TRUE( | 870 ASSERT_TRUE( |
| 903 client1_.transport()->GetRemoteSSLCertificate(remote_cert1.accept())); | 871 client1_.transport()->GetRemoteSSLCertificate(remote_cert1.accept())); |
| 904 ASSERT_EQ(remote_cert1->ToPEMString(), | 872 ASSERT_EQ(remote_cert1->ToPEMString(), |
| 905 certificate2->ssl_certificate().ToPEMString()); | 873 certificate2->ssl_certificate().ToPEMString()); |
| 906 ASSERT_TRUE( | 874 ASSERT_TRUE( |
| 907 client2_.transport()->GetRemoteSSLCertificate(remote_cert2.accept())); | 875 client2_.transport()->GetRemoteSSLCertificate(remote_cert2.accept())); |
| 908 ASSERT_EQ(remote_cert2->ToPEMString(), | 876 ASSERT_EQ(remote_cert2->ToPEMString(), |
| 909 certificate1->ssl_certificate().ToPEMString()); | 877 certificate1->ssl_certificate().ToPEMString()); |
| 910 } | 878 } |
| OLD | NEW |