[BACK]Return to mod-secdownload.t CVS log [TXT] [DIR] Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / lighttpd / tests

Diff for /embedaddon/lighttpd/tests/mod-secdownload.t between versions 1.1.1.1 and 1.1.1.2

version 1.1.1.1, 2013/10/14 10:32:47 version 1.1.1.2, 2016/11/02 10:35:00
Line 8  BEGIN { Line 8  BEGIN {
   
 use strict;  use strict;
 use IO::Socket;  use IO::Socket;
use Test::More tests => 7;use Test::More tests => 15;
 use LightyTest;  use LightyTest;
 use Digest::MD5 qw(md5_hex);  use Digest::MD5 qw(md5_hex);
   use Digest::SHA qw(hmac_sha1 hmac_sha256);
   use MIME::Base64 qw(encode_base64url);
   
 my $tf = LightyTest->new();  my $tf = LightyTest->new();
 my $t;  my $t;
Line 18  my $t; Line 20  my $t;
 ok($tf->start_proc == 0, "Starting lighttpd") or die();  ok($tf->start_proc == 0, "Starting lighttpd") or die();
   
 my $secret = "verysecret";  my $secret = "verysecret";
my $f = "/index.html";my ($f, $thex, $m);
my $thex = sprintf("%08x", time); 
my $m = md5_hex($secret.$f.$thex); 
   
 $t->{REQUEST}  = ( <<EOF  $t->{REQUEST}  = ( <<EOF
   GET /index.html HTTP/1.0
   Host: www.example.org
   EOF
    );
   $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200 } ];
   
   ok($tf->handle_http($t) == 0, 'skipping secdownload - direct access');
   
   ## MD5
   $f = "/index.html";
   $thex = sprintf("%08x", time);
   $m = md5_hex($secret.$f.$thex);
   
   $t->{REQUEST}  = ( <<EOF
 GET /sec/$m/$thex$f HTTP/1.0  GET /sec/$m/$thex$f HTTP/1.0
 Host: vvv.example.org  Host: vvv.example.org
 EOF  EOF
  );   );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200 } ];  $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200 } ];
   
ok($tf->handle_http($t) == 0, 'secdownload');ok($tf->handle_http($t) == 0, 'secdownload (md5)');
   
 $thex = sprintf("%08x", time - 1800);  $thex = sprintf("%08x", time - 1800);
 $m = md5_hex($secret.$f.$thex);  $m = md5_hex($secret.$f.$thex);
Line 41  EOF Line 55  EOF
  );   );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 410 } ];  $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 410 } ];
   
ok($tf->handle_http($t) == 0, 'secdownload - gone (timeout)');ok($tf->handle_http($t) == 0, 'secdownload - gone (timeout) (md5)');
   
 $t->{REQUEST}  = ( <<EOF  $t->{REQUEST}  = ( <<EOF
 GET /sec$f HTTP/1.0  GET /sec$f HTTP/1.0
Line 50  EOF Line 64  EOF
  );   );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];  $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];
   
ok($tf->handle_http($t) == 0, 'secdownload - direct access');ok($tf->handle_http($t) == 0, 'secdownload - direct access (md5)');
   
   $f = "/noexists";
   $thex = sprintf("%08x", time);
   $m = md5_hex($secret.$f.$thex);
   
 $t->{REQUEST}  = ( <<EOF  $t->{REQUEST}  = ( <<EOF
GET $f HTTP/1.0GET /sec/$m/$thex$f HTTP/1.0
Host: www.example.orgHost: vvv.example.org
 EOF  EOF
  );   );
   $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];
   
   ok($tf->handle_http($t) == 0, 'secdownload - timeout (md5)');
   
   ## HMAC-SHA1
   $f = "/index.html";
   $thex = sprintf("%08x", time);
   $m = encode_base64url(hmac_sha1("/$thex$f", $secret));
   
   $t->{REQUEST}  = ( <<EOF
   GET /sec/$m/$thex$f HTTP/1.0
   Host: vvv-sha1.example.org
   EOF
    );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200 } ];  $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200 } ];
   
ok($tf->handle_http($t) == 0, 'secdownload - conditional access');ok($tf->handle_http($t) == 0, 'secdownload (hmac-sha1)');
   
   $thex = sprintf("%08x", time - 1800);
   $m = encode_base64url(hmac_sha1("/$thex$f", $secret));
   
   $t->{REQUEST}  = ( <<EOF
   GET /sec/$m/$thex$f HTTP/1.0
   Host: vvv-sha1.example.org
   EOF
    );
   $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 410 } ];
   
   ok($tf->handle_http($t) == 0, 'secdownload - gone (timeout) (hmac-sha1)');
   
   $t->{REQUEST}  = ( <<EOF
   GET /sec$f HTTP/1.0
   Host: vvv-sha1.example.org
   EOF
    );
   $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];
   
   ok($tf->handle_http($t) == 0, 'secdownload - direct access (hmac-sha1)');
   
   
 $f = "/noexists";  $f = "/noexists";
 $thex = sprintf("%08x", time);  $thex = sprintf("%08x", time);
$m = md5_hex($secret.$f.$thex);$m = encode_base64url(hmac_sha1("/$thex$f", $secret));
   
 $t->{REQUEST}  = ( <<EOF  $t->{REQUEST}  = ( <<EOF
 GET /sec/$m/$thex$f HTTP/1.0  GET /sec/$m/$thex$f HTTP/1.0
Host: vvv.example.orgHost: vvv-sha1.example.org
 EOF  EOF
  );   );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];  $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];
   
ok($tf->handle_http($t) == 0, 'secdownload - timeout');ok($tf->handle_http($t) == 0, 'secdownload - timeout (hmac-sha1)');
 
 ## HMAC-SHA256
 $f = "/index.html";
 $thex = sprintf("%08x", time);
 $m = encode_base64url(hmac_sha256("/$thex$f", $secret));
 
 $t->{REQUEST}  = ( <<EOF
 GET /sec/$m/$thex$f HTTP/1.0
 Host: vvv-sha256.example.org
 EOF
  );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 200 } ];
 
 ok($tf->handle_http($t) == 0, 'secdownload (hmac-sha256)');
 
 $thex = sprintf("%08x", time - 1800);
 $m = encode_base64url(hmac_sha256("/$thex$f", $secret));
 
 $t->{REQUEST}  = ( <<EOF
 GET /sec/$m/$thex$f HTTP/1.0
 Host: vvv-sha256.example.org
 EOF
  );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 410 } ];
 
 ok($tf->handle_http($t) == 0, 'secdownload - gone (timeout) (hmac-sha256)');
 
 $t->{REQUEST}  = ( <<EOF
 GET /sec$f HTTP/1.0
 Host: vvv-sha256.example.org
 EOF
  );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];
 
 ok($tf->handle_http($t) == 0, 'secdownload - direct access (hmac-sha256)');
 
 
 $f = "/noexists";
 $thex = sprintf("%08x", time);
 $m = encode_base64url(hmac_sha256("/$thex$f", $secret));
 
 $t->{REQUEST}  = ( <<EOF
 GET /sec/$m/$thex$f HTTP/1.0
 Host: vvv-sha256.example.org
 EOF
  );
 $t->{RESPONSE} = [ { 'HTTP-Protocol' => 'HTTP/1.0', 'HTTP-Status' => 404 } ];
 
 ok($tf->handle_http($t) == 0, 'secdownload - timeout (hmac-sha256)');
 
 ## THE END
   
 ok($tf->stop_proc == 0, "Stopping lighttpd");  ok($tf->stop_proc == 0, "Stopping lighttpd");
   
Removed from v.1.1.1.1  
changed lines
  Added in v.1.1.1.2

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>