tls_mock_server.h

Go to the documentation of this file.

/*
 * Copyright (C) Max Dymond, <cmeister2@gmail.com>, et al.
 *
 * SPDX-License-Identifier: curl
 */

 
#ifndef PROTO_FUZZER_TLS_MOCK_SERVER_H_
#define PROTO_FUZZER_TLS_MOCK_SERVER_H_
 
#include <cstddef>
#include <memory>
#include <string>
 
#include "proto_fuzzer/mock_server.h"
 
namespace proto_fuzzer {

enum class TlsApplicationProtocol {
  kHttp11,
  kHttp2,
};

enum class TlsGroupPolicy {
  kProviderDefault,
  kX25519,
};

class TlsServerContext;

class TlsMockTransport {
 public:
  explicit TlsMockTransport(
      TlsApplicationProtocol protocol = TlsApplicationProtocol::kHttp11,
      curl::fuzzer::proto::TlsCertificateChainProfile certificate_chain =
          curl::fuzzer::proto::TLS_CERTIFICATE_CHAIN_DEFAULT_EC,
      TlsGroupPolicy group_policy = TlsGroupPolicy::kProviderDefault,
      curl::fuzzer::proto::TlsHandshakeProfile handshake_profile = curl::fuzzer::proto::TLS_HANDSHAKE_DEFAULT);
  ~TlsMockTransport();
 
  TlsMockTransport(const TlsMockTransport&) = delete;
  TlsMockTransport& operator=(const TlsMockTransport&) = delete;
 
  void Install(CURL* easy) const;
 
  std::unique_ptr<MockConnection> CreateConnection();
 
  std::unique_ptr<MockConnection> CreateAcceptedConnection(int accepted_fd);
 
  int negotiated_tls_version() const;
  std::size_t completed_handshake_count() const;
  std::size_t reused_session_count() const;
  std::size_t write_retry_count() const;
  std::string negotiated_alpn() const;
  TlsGroupPolicy group_policy() const;
  std::string negotiated_group() const;
  int ech_status() const;
  std::string ech_inner_name() const;
  std::string ech_outer_name() const;
 
 private:
  const TlsGroupPolicy group_policy_;
  const bool openssl_close_notify_;
  const bool openssl_hello_request_;
  std::unique_ptr<TlsServerContext> context_;
};

class TlsMockServer : public MockServer {
 public:
  TlsMockServer();
 
  explicit TlsMockServer(
      curl::fuzzer::proto::TlsCertificateChainProfile certificate_chain,
      curl::fuzzer::proto::TlsHandshakeProfile handshake_profile = curl::fuzzer::proto::TLS_HANDSHAKE_DEFAULT);
  ~TlsMockServer() override;
 
  TlsMockServer(const TlsMockServer&) = delete;
  TlsMockServer& operator=(const TlsMockServer&) = delete;
 
  void Install(CURL* easy) override;
 
  bool saw_live_tls_session() const;
 
  std::size_t exported_session_count() const;
 
  std::size_t imported_session_count() const;
 
  int negotiated_tls_version() const;
 
  std::size_t completed_handshake_count() const;
 
  std::size_t reused_session_count() const;
 
  std::size_t write_retry_count() const;
 
  std::string negotiated_alpn() const;
 
  std::string negotiated_group() const;
 
  int ech_status() const;
 
  std::string ech_inner_name() const;
 
  std::string ech_outer_name() const;
 
 protected:
  explicit TlsMockServer(
      TlsApplicationProtocol protocol,
      curl::fuzzer::proto::TlsCertificateChainProfile certificate_chain =
          curl::fuzzer::proto::TLS_CERTIFICATE_CHAIN_DEFAULT_EC,
      TlsGroupPolicy group_policy = TlsGroupPolicy::kProviderDefault,
      curl::fuzzer::proto::TlsHandshakeProfile handshake_profile = curl::fuzzer::proto::TLS_HANDSHAKE_DEFAULT);
 
  TlsGroupPolicy group_policy() const;
 
  std::unique_ptr<MockConnection> CreateConnection() override;
 
  void ObserveActiveTransfer(CURL* easy) override;
 
 private:
  TlsMockTransport transport_;
  bool saw_live_tls_session_;
  std::size_t session_export_attempt_count_;
  std::size_t exported_session_count_;
  std::size_t imported_session_count_;
};
 
}  // namespace proto_fuzzer
 
#endif  // PROTO_FUZZER_TLS_MOCK_SERVER_H_