Chiebot-Mirror
/
grpc
8
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add Tests for the cmp() functions in Tls*SecurityConnector (#27672)

Browse Source
pull/27718/head
ZhenLian 4 years ago committed by GitHub
parent 179a7c7459
commit acb4686d92
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 148 additions and 0 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 148
      test/core/security/tls_security_connector_test.cc

148
test/core/security/tls_security_connector_test.cc
Unescape View File

@ -376,6 +376,106 @@ TEST_F(TlsSecurityConnectorTest, TlsCheckHostNameFail) {
GRPC_ERROR_UNREF(error);
}
TEST_F(TlsSecurityConnectorTest,
CompareChannelSecurityConnectorSucceedsOnSameCredentials) {
grpc_core::RefCountedPtr<grpc_tls_certificate_distributor> distributor =
grpc_core::MakeRefCounted<grpc_tls_certificate_distributor>();
distributor->SetKeyMaterials(kRootCertName, root_cert_0_, absl::nullopt);
grpc_core::RefCountedPtr<::grpc_tls_certificate_provider> provider =
grpc_core::MakeRefCounted<TlsTestCertificateProvider>(distributor);
auto options = grpc_core::MakeRefCounted<grpc_tls_credentials_options>();
options->set_certificate_provider(provider);
options->set_watch_root_cert(true);
options->set_root_cert_name(kRootCertName);
grpc_core::RefCountedPtr<TlsCredentials> credential =
grpc_core::MakeRefCounted<TlsCredentials>(options);
grpc_core::RefCountedPtr<grpc_channel_security_connector> connector =
credential->create_security_connector(nullptr, kTargetName, nullptr,
nullptr);
grpc_core::RefCountedPtr<grpc_channel_security_connector> other_connector =
credential->create_security_connector(nullptr, kTargetName, nullptr,
nullptr);
// Comparing the equality of security connectors generated from the same
// channel credentials with same settings should succeed.
EXPECT_EQ(connector->cmp(other_connector.get()), 0);
}
TEST_F(TlsSecurityConnectorTest,
CompareChannelSecurityConnectorFailsOnDifferentChannelCredentials) {
grpc_core::RefCountedPtr<grpc_tls_certificate_distributor> distributor =
grpc_core::MakeRefCounted<grpc_tls_certificate_distributor>();
distributor->SetKeyMaterials(kRootCertName, root_cert_0_, absl::nullopt);
grpc_core::RefCountedPtr<::grpc_tls_certificate_provider> provider =
grpc_core::MakeRefCounted<TlsTestCertificateProvider>(distributor);
auto options = grpc_core::MakeRefCounted<grpc_tls_credentials_options>();
options->set_certificate_provider(provider);
options->set_watch_root_cert(true);
options->set_root_cert_name(kRootCertName);
grpc_core::RefCountedPtr<TlsCredentials> credential =
grpc_core::MakeRefCounted<TlsCredentials>(options);
grpc_core::RefCountedPtr<grpc_channel_security_connector> connector =
credential->create_security_connector(nullptr, kTargetName, nullptr,
nullptr);
grpc_core::RefCountedPtr<TlsCredentials> other_credential =
grpc_core::MakeRefCounted<TlsCredentials>(options);
grpc_core::RefCountedPtr<grpc_channel_security_connector> other_connector =
other_credential->create_security_connector(nullptr, kTargetName, nullptr,
nullptr);
// Comparing the equality of security connectors generated from different
// channel credentials should fail.
EXPECT_NE(connector->cmp(other_connector.get()), 0);
}
TEST_F(TlsSecurityConnectorTest,
CompareChannelSecurityConnectorFailsOnDifferentCallCredentials) {
grpc_core::RefCountedPtr<grpc_tls_certificate_distributor> distributor =
grpc_core::MakeRefCounted<grpc_tls_certificate_distributor>();
distributor->SetKeyMaterials(kRootCertName, root_cert_0_, absl::nullopt);
grpc_core::RefCountedPtr<::grpc_tls_certificate_provider> provider =
grpc_core::MakeRefCounted<TlsTestCertificateProvider>(distributor);
auto options = grpc_core::MakeRefCounted<grpc_tls_credentials_options>();
options->set_certificate_provider(provider);
options->set_watch_root_cert(true);
options->set_root_cert_name(kRootCertName);
grpc_core::RefCountedPtr<TlsCredentials> credential =
grpc_core::MakeRefCounted<TlsCredentials>(options);
grpc_core::RefCountedPtr<grpc_channel_security_connector> connector =
credential->create_security_connector(nullptr, kTargetName, nullptr,
nullptr);
grpc_call_credentials* call_creds =
grpc_md_only_test_credentials_create("", "", true);
grpc_core::RefCountedPtr<grpc_channel_security_connector> other_connector =
credential->create_security_connector(
grpc_core::RefCountedPtr<grpc_call_credentials>(call_creds),
kTargetName, nullptr, nullptr);
// Comparing the equality of security connectors generated with different call
// credentials should fail.
EXPECT_NE(connector->cmp(other_connector.get()), 0);
}
TEST_F(TlsSecurityConnectorTest,
CompareChannelSecurityConnectorFailsOnDifferentTargetNames) {
grpc_core::RefCountedPtr<grpc_tls_certificate_distributor> distributor =
grpc_core::MakeRefCounted<grpc_tls_certificate_distributor>();
distributor->SetKeyMaterials(kRootCertName, root_cert_0_, absl::nullopt);
grpc_core::RefCountedPtr<::grpc_tls_certificate_provider> provider =
grpc_core::MakeRefCounted<TlsTestCertificateProvider>(distributor);
auto options = grpc_core::MakeRefCounted<grpc_tls_credentials_options>();
options->set_certificate_provider(provider);
options->set_watch_root_cert(true);
options->set_root_cert_name(kRootCertName);
grpc_core::RefCountedPtr<TlsCredentials> credential =
grpc_core::MakeRefCounted<TlsCredentials>(options);
grpc_core::RefCountedPtr<grpc_channel_security_connector> connector =
credential->create_security_connector(nullptr, kTargetName, nullptr,
nullptr);
grpc_core::RefCountedPtr<grpc_channel_security_connector> other_connector =
credential->create_security_connector(nullptr, "", nullptr, nullptr);
// Comparing the equality of security connectors generated with different
// target names should fail.
EXPECT_NE(connector->cmp(other_connector.get()), 0);
}
// Tests for ServerSecurityConnector.
TEST_F(TlsSecurityConnectorTest,
RootAndIdentityCertsObtainedWhenCreateServerSecurityConnector) {
@ -543,6 +643,54 @@ TEST_F(TlsSecurityConnectorTest, CreateServerSecurityConnectorFailNoOptions) {
EXPECT_EQ(connector, nullptr);
}
TEST_F(TlsSecurityConnectorTest,
CompareServerSecurityConnectorSucceedsOnSameCredentials) {
grpc_core::RefCountedPtr<grpc_tls_certificate_distributor> distributor =
grpc_core::MakeRefCounted<grpc_tls_certificate_distributor>();
distributor->SetKeyMaterials(kIdentityCertName, absl::nullopt,
identity_pairs_0_);
grpc_core::RefCountedPtr<::grpc_tls_certificate_provider> provider =
grpc_core::MakeRefCounted<TlsTestCertificateProvider>(distributor);
auto options = grpc_core::MakeRefCounted<grpc_tls_credentials_options>();
options->set_certificate_provider(provider);
options->set_watch_identity_pair(true);
options->set_identity_cert_name(kIdentityCertName);
grpc_core::RefCountedPtr<TlsServerCredentials> credential =
grpc_core::MakeRefCounted<TlsServerCredentials>(options);
grpc_core::RefCountedPtr<grpc_server_security_connector> connector =
credential->create_security_connector(nullptr);
grpc_core::RefCountedPtr<grpc_server_security_connector> other_connector =
credential->create_security_connector(nullptr);
// Comparing the equality of security connectors generated from the same
// server credentials with same settings should succeed.
EXPECT_EQ(connector->cmp(other_connector.get()), 0);
}
TEST_F(TlsSecurityConnectorTest,
CompareServerSecurityConnectorFailsOnDifferentServerCredentials) {
grpc_core::RefCountedPtr<grpc_tls_certificate_distributor> distributor =
grpc_core::MakeRefCounted<grpc_tls_certificate_distributor>();
distributor->SetKeyMaterials(kIdentityCertName, absl::nullopt,
identity_pairs_0_);
grpc_core::RefCountedPtr<::grpc_tls_certificate_provider> provider =
grpc_core::MakeRefCounted<TlsTestCertificateProvider>(distributor);
auto options = grpc_core::MakeRefCounted<grpc_tls_credentials_options>();
options->set_certificate_provider(provider);
options->set_watch_identity_pair(true);
options->set_identity_cert_name(kIdentityCertName);
grpc_core::RefCountedPtr<TlsServerCredentials> credential =
grpc_core::MakeRefCounted<TlsServerCredentials>(options);
grpc_core::RefCountedPtr<grpc_server_security_connector> connector =
credential->create_security_connector(nullptr);
grpc_core::RefCountedPtr<TlsServerCredentials> other_credential =
grpc_core::MakeRefCounted<TlsServerCredentials>(options);
grpc_core::RefCountedPtr<grpc_server_security_connector> other_connector =
other_credential->create_security_connector(nullptr);
// Comparing the equality of security connectors generated from different
// server credentials should fail.
EXPECT_NE(connector->cmp(other_connector.get()), 0);
}
} // namespace testing
} // namespace grpc

Write Preview
Loading…
Cancel
Save