| // Copyright Joyent, Inc. and other Node contributors. |
| // |
| // Permission is hereby granted, free of charge, to any person obtaining a |
| // copy of this software and associated documentation files (the |
| // "Software"), to deal in the Software without restriction, including |
| // without limitation the rights to use, copy, modify, merge, publish, |
| // distribute, sublicense, and/or sell copies of the Software, and to permit |
| // persons to whom the Software is furnished to do so, subject to the |
| // following conditions: |
| // |
| // The above copyright notice and this permission notice shall be included |
| // in all copies or substantial portions of the Software. |
| // |
| // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS |
| // OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF |
| // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN |
| // NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, |
| // DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR |
| // OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE |
| // USE OR OTHER DEALINGS IN THE SOFTWARE. |
| |
| |
| |
| |
| if (!process.features.tls_sni) { |
| console.error('Skipping because node compiled without OpenSSL or ' + |
| 'with old OpenSSL version.'); |
| process.exit(0); |
| } |
| |
| var common = require('../common'), |
| assert = require('assert'), |
| fs = require('fs'), |
| tls = require('tls'); |
| |
| function filenamePEM(n) { |
| return require('path').join(common.fixturesDir, 'keys', n + '.pem'); |
| } |
| |
| function loadPEM(n) { |
| return fs.readFileSync(filenamePEM(n)); |
| } |
| |
| var serverOptions = { |
| key: loadPEM('agent2-key'), |
| cert: loadPEM('agent2-cert') |
| }; |
| |
| var SNIContexts = { |
| 'a.example.com': { |
| key: loadPEM('agent1-key'), |
| cert: loadPEM('agent1-cert') |
| }, |
| 'asterisk.test.com': { |
| key: loadPEM('agent3-key'), |
| cert: loadPEM('agent3-cert') |
| } |
| }; |
| |
| var serverPort = common.PORT; |
| |
| var clientsOptions = [{ |
| port: serverPort, |
| key: loadPEM('agent1-key'), |
| cert: loadPEM('agent1-cert'), |
| ca: [loadPEM('ca1-cert')], |
| servername: 'a.example.com', |
| rejectUnauthorized: false |
| },{ |
| port: serverPort, |
| key: loadPEM('agent2-key'), |
| cert: loadPEM('agent2-cert'), |
| ca: [loadPEM('ca2-cert')], |
| servername: 'b.test.com', |
| rejectUnauthorized: false |
| },{ |
| port: serverPort, |
| key: loadPEM('agent3-key'), |
| cert: loadPEM('agent3-cert'), |
| ca: [loadPEM('ca1-cert')], |
| servername: 'c.wrong.com', |
| rejectUnauthorized: false |
| }]; |
| |
| var serverResults = [], |
| clientResults = []; |
| |
| var server = tls.createServer(serverOptions, function(c) { |
| serverResults.push(c.servername); |
| }); |
| |
| server.addContext('a.example.com', SNIContexts['a.example.com']); |
| server.addContext('*.test.com', SNIContexts['asterisk.test.com']); |
| |
| server.listen(serverPort, startTest); |
| |
| function startTest() { |
| function connectClient(options, callback) { |
| var client = tls.connect(options, function() { |
| clientResults.push( |
| client.authorizationError && |
| /Hostname\/IP doesn't/.test(client.authorizationError)); |
| client.destroy(); |
| |
| callback(); |
| }); |
| }; |
| |
| connectClient(clientsOptions[0], function() { |
| connectClient(clientsOptions[1], function() { |
| connectClient(clientsOptions[2], function() { |
| server.close(); |
| }); |
| }); |
| }); |
| } |
| |
| process.on('exit', function() { |
| assert.deepEqual(serverResults, ['a.example.com', 'b.test.com', |
| 'c.wrong.com']); |
| assert.deepEqual(clientResults, [true, true, false]); |
| }); |