Authors: russell@unturf.com · brackishbert@gmail.com · foxhop.net · TimeHexOn.com Patches, unit tests, benchmarks, whitepaper, and outreach briefs. Public domain — no copyright claimed. Use freely.
234 lines
7.5 KiB
Java
234 lines
7.5 KiB
Java
/*
|
|
* Copyright (c) 2001, 2025, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
//
|
|
// SunJSSE does not support dynamic system properties, no way to re-use
|
|
// system properties in samevm/agentvm mode.
|
|
//
|
|
|
|
/*
|
|
* @test
|
|
* @bug 4404399
|
|
* @comment this test does not work in TLSv1.3 as the spec changes the
|
|
* behaviors of close_notify.
|
|
* @summary When a layered SSL socket is closed, it should wait for close_notify
|
|
* @library /test/lib /javax/net/ssl/templates
|
|
* @run main/othervm NonAutoClose TLSv1
|
|
* @run main/othervm NonAutoClose TLSv1.1
|
|
* @run main/othervm NonAutoClose TLSv1.2
|
|
* @author Brad Wetmore
|
|
*/
|
|
|
|
import java.io.*;
|
|
import java.net.InetAddress;
|
|
import java.net.ServerSocket;
|
|
import java.net.Socket;
|
|
import java.util.concurrent.CountDownLatch;
|
|
import javax.net.ssl.*;
|
|
|
|
import jdk.test.lib.security.SecurityUtils;
|
|
|
|
import static jdk.test.lib.Asserts.assertEquals;
|
|
|
|
public class NonAutoClose extends SSLContextTemplate {
|
|
|
|
/*
|
|
* Is the server ready to serve?
|
|
*/
|
|
private static final CountDownLatch SERVER_READY = new CountDownLatch(1);
|
|
|
|
/*
|
|
* Turn on SSL debugging?
|
|
*/
|
|
private final static boolean DEBUG = Boolean.getBoolean("test.debug");
|
|
private final static int NUM_ITERATIONS = 10;
|
|
private final static int PLAIN_SERVER_VAL = 1;
|
|
private final static int PLAIN_CLIENT_VAL = 2;
|
|
private final static int TLS_SERVER_VAL = 3;
|
|
private final static int TLS_CLIENT_VAL = 4;
|
|
|
|
/*
|
|
* Define the server side of the test.
|
|
*/
|
|
private void doServerSide() throws Exception {
|
|
System.out.println("Starting server");
|
|
SSLSocketFactory sslsf = createServerSSLContext().getSocketFactory();
|
|
|
|
try (ServerSocket serverSocket = new ServerSocket(SERVER_PORT)) {
|
|
SERVER_PORT = serverSocket.getLocalPort();
|
|
|
|
/*
|
|
* Signal Client, we're ready for his connect.
|
|
*/
|
|
System.out.println("Signal server ready");
|
|
SERVER_READY.countDown();
|
|
|
|
try (Socket plainSocket = serverSocket.accept();
|
|
InputStream is = plainSocket.getInputStream();
|
|
OutputStream os = plainSocket.getOutputStream()) {
|
|
|
|
assertEquals(PLAIN_CLIENT_VAL, is.read());
|
|
|
|
os.write(PLAIN_SERVER_VAL);
|
|
os.flush();
|
|
|
|
for (int i = 1; i <= NUM_ITERATIONS; i++) {
|
|
if (DEBUG) {
|
|
System.out.println("=================================");
|
|
System.out.println("Server Iteration #" + i);
|
|
}
|
|
|
|
try (SSLSocket ssls = (SSLSocket) sslsf.createSocket(plainSocket,
|
|
plainSocket.getInetAddress().getHostName(),
|
|
plainSocket.getPort(), false)) {
|
|
|
|
ssls.setEnabledProtocols(new String[]{protocol});
|
|
ssls.setUseClientMode(false);
|
|
try (InputStream sslis = ssls.getInputStream();
|
|
OutputStream sslos = ssls.getOutputStream()) {
|
|
|
|
assertEquals(TLS_CLIENT_VAL, sslis.read());
|
|
|
|
sslos.write(TLS_SERVER_VAL);
|
|
sslos.flush();
|
|
}
|
|
}
|
|
}
|
|
|
|
assertEquals(PLAIN_CLIENT_VAL, is.read());
|
|
|
|
os.write(PLAIN_SERVER_VAL);
|
|
os.flush();
|
|
}
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Define the client side of the test.
|
|
*/
|
|
private void doClientSide() throws Exception {
|
|
/*
|
|
* Wait for server to get started.
|
|
*/
|
|
System.out.println("Waiting for server ready");
|
|
SERVER_READY.await();
|
|
|
|
SSLSocketFactory sslsf = createClientSSLContext().getSocketFactory();
|
|
|
|
try (Socket plainSocket = new Socket(InetAddress.getLocalHost(), SERVER_PORT);
|
|
InputStream is = plainSocket.getInputStream();
|
|
OutputStream os = plainSocket.getOutputStream()) {
|
|
|
|
os.write(PLAIN_CLIENT_VAL);
|
|
os.flush();
|
|
|
|
assertEquals(PLAIN_SERVER_VAL, is.read());
|
|
|
|
for (int i = 1; i <= NUM_ITERATIONS; i++) {
|
|
if (DEBUG) {
|
|
System.out.println("===================================");
|
|
System.out.println("Client Iteration #" + i);
|
|
}
|
|
try (SSLSocket ssls = (SSLSocket) sslsf.createSocket(plainSocket,
|
|
plainSocket.getInetAddress().getHostName(),
|
|
plainSocket.getPort(), false);
|
|
InputStream sslis = ssls.getInputStream();
|
|
OutputStream sslos = ssls.getOutputStream()) {
|
|
|
|
ssls.setUseClientMode(true);
|
|
|
|
sslos.write(TLS_CLIENT_VAL);
|
|
sslos.flush();
|
|
|
|
assertEquals(TLS_SERVER_VAL, sslis.read());
|
|
}
|
|
}
|
|
|
|
os.write(PLAIN_CLIENT_VAL);
|
|
os.flush();
|
|
assertEquals(PLAIN_SERVER_VAL, is.read());
|
|
}
|
|
}
|
|
|
|
/*
|
|
* =============================================================
|
|
* The remainder is just support stuff
|
|
*/
|
|
|
|
private volatile int SERVER_PORT = 0;
|
|
private volatile Exception clientException = null;
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
String protocol = args[0];
|
|
if ("TLSv1".equals(protocol) || "TLSv1.1".equals(protocol)) {
|
|
SecurityUtils.removeFromDisabledTlsAlgs(protocol);
|
|
}
|
|
|
|
if (DEBUG)
|
|
System.setProperty("javax.net.debug", "all");
|
|
|
|
/*
|
|
* Start the tests.
|
|
*/
|
|
new NonAutoClose(protocol);
|
|
}
|
|
|
|
private Thread clientThread = null;
|
|
private final String protocol;
|
|
|
|
/*
|
|
* Primary constructor, used to drive remainder of the test.
|
|
*
|
|
* Fork off the other side, then do your work.
|
|
*/
|
|
NonAutoClose(String protocol) throws Exception {
|
|
this.protocol = protocol;
|
|
startClient();
|
|
doServerSide();
|
|
|
|
/*
|
|
* Wait for other side to close down.
|
|
*/
|
|
clientThread.join();
|
|
|
|
if (clientException != null) {
|
|
System.err.print("Client Exception:");
|
|
throw clientException;
|
|
}
|
|
}
|
|
|
|
private void startClient() {
|
|
clientThread = new Thread(() -> {
|
|
try {
|
|
doClientSide();
|
|
} catch (Exception e) {
|
|
/*
|
|
* Our client thread just died.
|
|
*/
|
|
System.err.println("Client died...");
|
|
clientException = e;
|
|
}
|
|
});
|
|
clientThread.start();
|
|
}
|
|
}
|