/*
- * Copyright (c) 2014 <copyright holder> <email>
- *
- * For license details, see the LICENSE file in the root of this project.
- *
+ * Copyright (c) 2014, 2015 JANET(UK)
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in the
+ * documentation and/or other materials provided with the distribution.
+ *
+ * 3. Neither the name of JANET(UK) nor the names of its contributors
+ * may be used to endorse or promote products derived from this software
+ * without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
*/
#include "GSSCreateSecContextTest.h"
-#include "GSSCreateSecContextCommand.h"
-#include "InitSecContextMock.h"
+#include "GSSInitSecContext.h"
+#include "command_mocks/InitSecContextMock.h"
#include <iostream>
#include <string.h>
#include <exception>
-#include "util_json.h"
+#include "utils/util_json.h"
+#include <cache/GSSContextCache.h>
+#include <cache/GSSNameCache.h>
+#include <datamodel/GSSContext.h>
+#include <utils/util_base64.h>
// Registers the fixture into the 'registry'
CPPUNIT_TEST_SUITE_REGISTRATION( GSSCreateSecContextTest );
+using std::cout;
-
-OM_uint32 KRB5_CALLCONV
+static OM_uint32 KRB5_CALLCONV
mock_init_sec(
OM_uint32 *minor_status,
gss_cred_id_t claimant_cred_handle,
OM_uint32 *ret_flags,
OM_uint32 *time_rec)
{
+ gss_ctx_id_t tmpContext;
+
InitSecContextMock::visited = true;
/* Copy in the input to this function */
InitSecContextMock::req_flags = req_flags;
InitSecContextMock::time_req = time_req;
InitSecContextMock::input_chan_bindings = input_chan_bindings;
- InitSecContextMock::input_token = input_token;
+ InitSecContextMock::input_token.length = input_token->length;
+ InitSecContextMock::input_token.value = input_token->value;
+
/* Copy out the output from this function */
*minor_status = InitSecContextMock::minor_status;
*actual_mech_type = InitSecContextMock::actual_mech_type;
- output_token->length = InitSecContextMock::output_token->length;
- output_token->value = InitSecContextMock::output_token->value;
+ output_token->length = InitSecContextMock::output_token.length;
+ output_token->value = InitSecContextMock::output_token.value;
*ret_flags = InitSecContextMock::ret_flags;
*time_rec = InitSecContextMock::time_rec;
/* Handle the one that's I/O */
- if (*context_handle == GSS_C_NO_CONTEXT)
- {
- *context_handle = InitSecContextMock::context_handle;
- } else if (*context_handle != InitSecContextMock::context_handle)
- {
- InitSecContextMock::invalidContextHandle = true;
- }
+ tmpContext = *context_handle;
+ *context_handle = InitSecContextMock::context_handle;
+ InitSecContextMock::context_handle = tmpContext;
return InitSecContextMock::retVal;
}
void
GSSCreateSecContextTest::testConstructor()
{
- GSSCreateSecContextCommand cmd = GSSCreateSecContextCommand();
- void *cmdFn;
- void *GSSFn;
+ GSSInitSecContext cmd = GSSInitSecContext();
+ init_sec_context_type cmdFn;
+ init_sec_context_type GSSFn;
cmdFn = cmd.getGSSFunction();
- GSSFn = (void *)&gss_init_sec_context;
- CPPUNIT_ASSERT_MESSAGE("The default constructor for GSSCreateSecContextCommand should assign the function gss_init_sec_context", cmdFn == GSSFn);
+ GSSFn = &gss_init_sec_context;
+ CPPUNIT_ASSERT_MESSAGE(
+ "The default constructor for GSSCreateSecContextCommand should assign the function gss_init_sec_context",
+ cmdFn == GSSFn);
+
+ // Check that we defaut to the moonshot OID
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "The mech_type default value is unexpected.",
+ std::string("{ 1 3 6 1 5 5 15 1 1 18 }"),
+ cmd.getMechType().toString()
+ );
}
-
+/* JSON Input:
+ * {
+ * "method": "gss_create_sec_context",
+ * "arguments":
+ * {
+ * "req_flags": "1",
+ * "time_req": "2",
+ * "mech_type": "{ 1 2 840 113554 1 2 1 4 }",
+ * "target_name": "me@my.sha/DOW"
+ * }
+ * }
+ */
void GSSCreateSecContextTest::testConstructorWithJSONObject()
{
- const char* input = "{\"req_flags\": \"1\", \
+ OM_uint32 major, minor;
+ gss_name_t src;
+ GSSName source;
+ char *source_name = (char *)"HTTP@localhost\0";
+
+
+ major = gss_import_name(&minor, GSSBuffer(source_name).toGss(), GSS_C_NT_HOSTBASED_SERVICE, &src);
+ if (GSS_ERROR(major))
+ {
+ OM_uint32 min, context;
+ gss_buffer_desc buf;
+
+ std::cout << "Error in importing name." << std::endl;
+ gss_display_status(&min, major, GSS_C_GSS_CODE, GSS_C_NT_HOSTBASED_SERVICE, &context, &buf);
+ std::cout << " message: " << (char *)buf.value << std::endl;
+ }
+ CPPUNIT_ASSERT_MESSAGE(
+ "Could not generate a name to test GSSCreateSecContext JSON parsing.",
+ !GSS_ERROR(major)
+ );
+ source.setValue(src);
+ std::string key = GSSNameCache::instance()->store(source);
+
+ std::string input = "{\"req_flags\": \"1\", \
\"time_req\": \"2\", \
\"mech_type\": \"{ 1 2 840 113554 1 2 1 4 }\", \
- \"target_name\": \"me@my.sha/DOW\"}";
+ \"target_name\": \"";
+ input = input + key + "\"}";
json_error_t jsonErr;
- JSONObject json = JSONObject::load(input, 0, &jsonErr);
+ const char *in = input.c_str();
+ JSONObject json = JSONObject::load(in, 0, &jsonErr);
- GSSCreateSecContextCommand cmd = GSSCreateSecContextCommand(
+ GSSInitSecContext cmd = GSSInitSecContext(
&json,
- (void *)&mock_init_sec
+ &mock_init_sec
);
-
-
- const char *from_json = json["target_name"].string();
+
const char *from_cmd = cmd.getTargetDisplayName();
CPPUNIT_ASSERT_MESSAGE(
"The object does not have a target name.",
- ( strcmp(from_json, from_cmd) == 0 )
+ ( strcmp(source_name, from_cmd) == 0 )
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
(json_int_t)cmd.getContextHandle()
);
- CPPUNIT_ASSERT_MESSAGE(
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
"The mech_type values differ.",
- ( strcmp(json["mech_type"].string(), cmd.getMechType()) == 0 )
+ std::string(json["mech_type"].string()),
+ cmd.getMechType().toString()
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
(int)cmd.getTimeReq()
);
-
}
void
GSSCreateSecContextTest::testEmptyCall()
{
- GSSCreateSecContextCommand cmd ((void *)&mock_init_sec);
+ gss_ctx_id_t expectedResult, expectedArgument;
+
+ GSSInitSecContext cmd (&mock_init_sec);
/* Set expectations on what the GSS function will be called with */
cmd.time_req = rand() % 1024;
cmd.req_flags = rand() % 1024;
cmd.target_name = NULL;
- cmd.context_handle = GSS_C_NO_CONTEXT;
-
- CPPUNIT_ASSERT_MESSAGE(
- "The mech_type values differ.",
- ( strcmp("{ 1 2 840 113554 1 2 1 4 }", cmd.getMechType()) == 0 )
- );
+ cmd.context_handle = expectedArgument = (gss_ctx_id_t)(long)rand();
/* Set expectations on what the GSS function will produce */
InitSecContextMock::retVal = rand() % 1024;
InitSecContextMock::minor_status = rand() % 1024;
- InitSecContextMock::context_handle = GSS_C_NO_CONTEXT;
+ InitSecContextMock::context_handle = expectedResult = (gss_ctx_id_t)(long)rand();
InitSecContextMock::actual_mech_type = NULL;
- InitSecContextMock::output_token = (gss_buffer_t)malloc(sizeof(gss_buffer_desc));
- InitSecContextMock::output_token->value = (void *)"http@project-moonshot.org/PROJECT-MOONSHOT.ORG\0";
- InitSecContextMock::output_token->length = strlen((char *)InitSecContextMock::output_token->value);
+ InitSecContextMock::output_token.value = (void *)"http@project-moonshot.org/PROJECT-MOONSHOT.ORG\0";
+ InitSecContextMock::output_token.length = strlen((char *)InitSecContextMock::output_token.value);
InitSecContextMock::ret_flags = rand() % 1024;
InitSecContextMock::time_req = rand() % 1024;
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
"The mech_type field was not used in the call to init_sec_context",
- cmd.mech_type,
+ cmd.getMechType().toGss(),
InitSecContextMock::mech_type
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
"context_handle was not copied back to the command.",
- InitSecContextMock::context_handle,
+ expectedResult,
cmd.context_handle
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "context_handle was not copied back to the command.",
+ expectedArgument,
+ InitSecContextMock::context_handle
+ );
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
"actual_mech_type was not copied back to the command.",
InitSecContextMock::actual_mech_type,
- cmd.actual_mech_type
+ cmd.getActualMechType().toGss()
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
"output_token was not copied back to the command.",
- InitSecContextMock::output_token->value,
- cmd.output_token->value
+ InitSecContextMock::output_token.value,
+ cmd.output_token.value
);
CPPUNIT_ASSERT_EQUAL_MESSAGE(
"ret_flags was not copied back to the command.",
InitSecContextMock::time_rec,
cmd.time_rec
);
+
+ // Set this to no context, or cleanup attempts to free the not-a-real-pointer.
+ InitSecContextMock::context_handle = GSS_C_NO_CONTEXT;
+
}
+/* Expected JSON output:
+ *
+ * {
+ * "command": "gss_init_sec_context",
+ * "return_values":
+ * {
+ * "context_handle": "base64_encoded_string",
+ * "major_status": ##,
+ * "output_token": "http@project-moonshot.org/PROJECT-MOONSHOT.ORG",
+ * "actual_mech_type": "{ 1 3 6 1 5 5 13 4 }",
+ * "minor_status": ##,
+ * ret_flags": ##,
+ * "time_rec": ##
+ * }
+ * }
+ *
+ */
+void GSSCreateSecContextTest::testJSONMarshal()
+{
+ /* Variables */
+ GSSInitSecContext cmd (&mock_init_sec);
+ JSONObject *result;
+ GSSContextCache *cache = GSSContextCache::instance();
+ GSSContext context;
+ gss_ctx_id_t expectedResult;
+
+ /* Error checking */
+
+ /* Setup */
+ // Set expectations on what the GSS function will produce
+ InitSecContextMock::retVal = GSS_S_CONTINUE_NEEDED;
+ InitSecContextMock::minor_status = 0;
+ InitSecContextMock::context_handle = expectedResult = (gss_ctx_id_t)(long)rand();
+ InitSecContextMock::actual_mech_type = (gss_OID)GSS_C_MA_MECH_NEGO;
+ InitSecContextMock::output_token.value = (void *)"http@project-moonshot.org/PROJECT-MOONSHOT.ORG\0";
+ InitSecContextMock::output_token.length = strlen((char *)InitSecContextMock::output_token.value);
+ InitSecContextMock::ret_flags = GSS_C_MUTUAL_FLAG |
+ GSS_C_REPLAY_FLAG |
+ GSS_C_SEQUENCE_FLAG |
+ GSS_C_CONF_FLAG |
+ GSS_C_INTEG_FLAG |
+ GSS_C_ANON_FLAG |
+ GSS_C_PROT_READY_FLAG;
+ InitSecContextMock::time_req = GSS_C_INDEFINITE;
+
+ /* Main */
+ cmd.execute();
+ result = cmd.toJSON();
+/*
+ std::cout << "create sec context json: " << result->dump() << "\n";*/
+
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "The return value was reported incorrectly",
+ (int)InitSecContextMock::retVal,
+ (int)( (*result)["major_status"].integer() )
+ );
+
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "The minor_status value was reported incorrectly",
+ (int)InitSecContextMock::minor_status,
+ (int)( (*result)["minor_status"].integer() )
+ );
+
+ CPPUNIT_ASSERT_MESSAGE(
+ "The actual_mech_type value was reported incorrectly",
+ ( strcmp("{ 1 3 6 1 5 5 13 4 }",
+ (*result)["actual_mech_type"].string() ) == 0 )
+ );
+
+
+
+ std::string str = (*result)["output_token"].string();
+ size_t len;
+ void *decoded = base64Decode(str.c_str(), &len);
+ CPPUNIT_ASSERT_MESSAGE(
+ "The decoded token size is incorrect",
+ ( len == InitSecContextMock::output_token.length )
+ );
+ CPPUNIT_ASSERT_MESSAGE(
+ "The output_token value was reported incorrectly",
+ ( memcmp(InitSecContextMock::output_token.value,
+ decoded, len ) == 0 )
+ );
+ base64Free(decoded);
+
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "The minor_status value was reported incorrectly",
+ (int)InitSecContextMock::ret_flags,
+ (int)( (*result)["ret_flags"].integer() )
+ );
+
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "The minor_status value was reported incorrectly",
+ (int)InitSecContextMock::time_rec,
+ (int)( (*result)["time_rec"].integer() )
+ );
+
+ context = cache->retrieve( (*result)["context_handle"].string() );
+
+ CPPUNIT_ASSERT_EQUAL_MESSAGE(
+ "The returned context was reported incorrectly",
+ (long)expectedResult,
+ (long)context.getContext()
+ );
+
+ /* Cleanup */
+ /* Return */
+}
+
+
projects / gssweb.git / blobdiff