mirror of https://github.com/apache/nifi.git
NIFI-3361:
- Refactored TestGetHTTPGroovy for componentization & customization of tests. - Ignored some TestGetHTTPGroovy tests because they cannot connect to a Jetty server running TLSv1 or TLSv1.1 (the new version of Jetty only supports TLSv1.2+). The tests are still valuable to demonstrate GetHTTP's capacity to connect to various TLS protocols, and should not be removed unless necessary. - Refactored TestPostHTTPGroovy for componentization & customization of tests. - Ignored some TestPostHTTPGroovy tests because they cannot connect to a Jetty server running TLSv1 or TLSv1.1 (the new version of Jetty only supports TLSv1.2+). The tests are still valuable to demonstrate PostHTTP's capacity to connect to various TLS protocols, and should not be removed unless necessary. - Restored one of the TestGetHTTPGroovy unit tests (GetHTTP vs. TLSv1/1.1/1.2) by connecting to https://nifi.apache.org which still supports all three protocol versions (and uses JVM cacerts as truststore). - This closes #1601
This commit is contained in:
Andy LoPresto
Matt Gilman
parent
8e61aa3c43
commit
b3b65219a0
|
|
@ -36,11 +36,14 @@ import org.junit.After
|
|||
import org.junit.AfterClass
|
||||
import org.junit.Before
|
||||
import org.junit.BeforeClass
|
||||
import org.junit.Ignore
|
||||
import org.junit.Test
|
||||
import org.junit.runner.RunWith
|
||||
import org.junit.runners.JUnit4
|
||||
import org.slf4j.Logger
|
||||
import org.slf4j.LoggerFactory
|
||||
import sun.security.ssl.SSLContextImpl
|
||||
import sun.security.ssl.SSLEngineImpl
|
||||
|
||||
import javax.crypto.Cipher
|
||||
import javax.net.SocketFactory
|
||||
|
|
@ -64,16 +67,26 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
private static final String TLSv1_2 = "TLSv1.2"
|
||||
private static final List DEFAULT_PROTOCOLS = [TLSv1, TLSv1_1, TLSv1_2]
|
||||
|
||||
private static final String TLSv1_1_CIPHER_SUITE = "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
|
||||
private static
|
||||
final List DEFAULT_CIPHER_SUITES = new SSLEngineImpl(new SSLContextImpl.TLSContext()).supportedCipherSuites as List
|
||||
|
||||
private static final String DEFAULT_HOSTNAME = "localhost"
|
||||
private static final int DEFAULT_TLS_PORT = 8456
|
||||
private static final String HTTPS_URL = "https://${DEFAULT_HOSTNAME}:${DEFAULT_TLS_PORT}"
|
||||
private static final String GET_URL = "${HTTPS_URL}/GetHandler.groovy"
|
||||
|
||||
private static final String MOZILLA_INTERMEDIATE_URL = "https://mozilla-intermediate.badssl.com/"
|
||||
private static final String TLS_1_URL = "https://nifi.apache.org/"
|
||||
private static final String TLS_1_1_URL = "https://nifi.apache.org/"
|
||||
|
||||
private static final String KEYSTORE_PATH = "src/test/resources/localhost-ks.jks"
|
||||
private static final String TRUSTSTORE_PATH = "src/test/resources/localhost-ts.jks"
|
||||
private static final String CACERTS_PATH = "/Library/Java/JavaVirtualMachines/jdk1.8.0_101.jdk/Contents/Home/jre/lib/security/cacerts"
|
||||
|
||||
private static final String KEYSTORE_PASSWORD = "localtest"
|
||||
private static final String TRUSTSTORE_PASSWORD = "localtest"
|
||||
private static final String CACERTS_PASSWORD = "changeit"
|
||||
|
||||
private static Server server
|
||||
private static X509TrustManager nullTrustManager
|
||||
|
|
@ -81,9 +94,10 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
|
||||
private static TestRunner runner
|
||||
|
||||
private static Server createServer(List supportedProtocols = DEFAULT_PROTOCOLS) {
|
||||
private
|
||||
static Server createServer(List supportedProtocols = DEFAULT_PROTOCOLS, List supportedCipherSuites = DEFAULT_CIPHER_SUITES) {
|
||||
// Create Server
|
||||
server = new Server()
|
||||
Server server = new Server()
|
||||
|
||||
// Add some secure config
|
||||
final HttpConfiguration httpsConfiguration = new HttpConfiguration()
|
||||
|
|
@ -92,7 +106,7 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
httpsConfiguration.addCustomizer(new SecureRequestCustomizer())
|
||||
|
||||
// Build the TLS connector
|
||||
final ServerConnector https = createConnector(httpsConfiguration, supportedProtocols)
|
||||
final ServerConnector https = createConnector(server, httpsConfiguration, supportedProtocols, supportedCipherSuites)
|
||||
|
||||
// Add this connector
|
||||
server.addConnector(https)
|
||||
|
|
@ -112,9 +126,9 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
private
|
||||
static ServerConnector createConnector(HttpConfiguration httpsConfiguration, List supportedProtocols = DEFAULT_PROTOCOLS) {
|
||||
static ServerConnector createConnector(Server server, HttpConfiguration httpsConfiguration, List supportedProtocols = DEFAULT_PROTOCOLS, List supportedCipherSuites = DEFAULT_CIPHER_SUITES) {
|
||||
ServerConnector https = new ServerConnector(server,
|
||||
new SslConnectionFactory(createSslContextFactory(supportedProtocols), "http/1.1"),
|
||||
new SslConnectionFactory(createSslContextFactory(supportedProtocols, supportedCipherSuites), "http/1.1"),
|
||||
new HttpConnectionFactory(httpsConfiguration))
|
||||
|
||||
// set host and port
|
||||
|
|
@ -123,7 +137,8 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
https
|
||||
}
|
||||
|
||||
private static SslContextFactory createSslContextFactory(List supportedProtocols = DEFAULT_PROTOCOLS) {
|
||||
private
|
||||
static SslContextFactory createSslContextFactory(List supportedProtocols = DEFAULT_PROTOCOLS, List supportedCipherSuites = DEFAULT_CIPHER_SUITES) {
|
||||
final SslContextFactory contextFactory = new SslContextFactory()
|
||||
contextFactory.needClientAuth = false
|
||||
contextFactory.wantClientAuth = false
|
||||
|
|
@ -133,11 +148,14 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
contextFactory.setKeyStorePassword(KEYSTORE_PASSWORD)
|
||||
|
||||
contextFactory.setIncludeProtocols(supportedProtocols as String[])
|
||||
if (supportedCipherSuites) {
|
||||
contextFactory.setIncludeCipherSuites(supportedCipherSuites as String[])
|
||||
}
|
||||
contextFactory
|
||||
}
|
||||
|
||||
@BeforeClass
|
||||
public static void setUpOnce() throws Exception {
|
||||
static void setUpOnce() throws Exception {
|
||||
Security.addProvider(new BouncyCastleProvider())
|
||||
|
||||
logger.metaClass.methodMissing = { String name, args ->
|
||||
|
|
@ -146,8 +164,14 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
|
||||
server = createServer()
|
||||
|
||||
// Set the default trust manager for the "default" tests (the outgoing Groovy call) to ignore certificate path verification for localhost
|
||||
runner = configureRunner()
|
||||
|
||||
// Print the default cipher suite list
|
||||
logger.info("Default supported cipher suites: \n\t${DEFAULT_CIPHER_SUITES.join("\n\t")}")
|
||||
}
|
||||
|
||||
private static TestRunner configureRunner() {
|
||||
// Set the default trust manager for the "default" tests (the outgoing Groovy call) to ignore certificate path verification for localhost
|
||||
nullTrustManager = [
|
||||
checkClientTrusted: { chain, authType -> },
|
||||
checkServerTrusted: { chain, authType -> },
|
||||
|
|
@ -156,13 +180,13 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
|
||||
nullHostnameVerifier = [
|
||||
verify: { String hostname, session ->
|
||||
// Will always return true if the hostname is "localhost"
|
||||
hostname.equalsIgnoreCase(DEFAULT_HOSTNAME)
|
||||
// Will always return true if the hostname is "localhost" or the Mozilla intermediate site
|
||||
hostname.equalsIgnoreCase(DEFAULT_HOSTNAME) || hostname.equalsIgnoreCase(new URL(MOZILLA_INTERMEDIATE_URL).host)
|
||||
}
|
||||
] as HostnameVerifier
|
||||
|
||||
// Configure the test runner
|
||||
runner = TestRunners.newTestRunner(GetHTTP.class)
|
||||
TestRunner runner = TestRunners.newTestRunner(GetHTTP.class)
|
||||
final SSLContextService sslContextService = new StandardSSLContextService()
|
||||
runner.addControllerService("ssl-context", sslContextService)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE, TRUSTSTORE_PATH)
|
||||
|
|
@ -172,15 +196,17 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
|
||||
runner.setProperty(GetHTTP.URL, GET_URL)
|
||||
runner.setProperty(GetHTTP.SSL_CONTEXT_SERVICE, "ssl-context")
|
||||
|
||||
runner
|
||||
}
|
||||
|
||||
@AfterClass
|
||||
public static void tearDownOnce() {
|
||||
static void tearDownOnce() {
|
||||
|
||||
}
|
||||
|
||||
@Before
|
||||
public void setUp() throws Exception {
|
||||
void setUp() throws Exception {
|
||||
// This must be executed before each test, or the connections will be re-used and if a TLSv1.1 connection is re-used against a server that only supports TLSv1.2, it will fail
|
||||
SSLContext sc = SSLContext.getInstance(TLSv1_2)
|
||||
sc.init(null, [nullTrustManager] as TrustManager[], null)
|
||||
|
|
@ -196,11 +222,11 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
@After
|
||||
public void tearDown() throws Exception {
|
||||
void tearDown() throws Exception {
|
||||
try {
|
||||
server.stop();
|
||||
server.stop()
|
||||
} catch (Exception e) {
|
||||
e.printStackTrace();
|
||||
e.printStackTrace()
|
||||
}
|
||||
|
||||
runner.clearTransferState()
|
||||
|
|
@ -208,8 +234,12 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
(runner as StandardProcessorTestRunner).clearQueue()
|
||||
}
|
||||
|
||||
/**
|
||||
* Jetty 9.4.0+ no longer supports TLSv1.
|
||||
*/
|
||||
@Test
|
||||
public void testDefaultShouldSupportTLSv1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1 is available")
|
||||
void testDefaultShouldSupportTLSv1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -228,8 +258,12 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
assert response == MSG.reverse()
|
||||
}
|
||||
|
||||
/**
|
||||
* Jetty 9.4.0+ no longer supports TLSv1.1 unless compatible ("vulnerable" according to Jetty documentation, see <a href="https://github.com/eclipse/jetty.project/issues/860">https://github.com/eclipse/jetty.project/issues/860</a>) cipher suites are explicitly provided.
|
||||
*/
|
||||
@Test
|
||||
public void testDefaultShouldSupportTLSv1_1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1.1 is available")
|
||||
void testDefaultShouldSupportTLSv1_1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -248,8 +282,32 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
assert response == MSG.reverse()
|
||||
}
|
||||
|
||||
/**
|
||||
* Jetty 9.4.0+ no longer supports TLSv1.1 unless compatible ("vulnerable" according to Jetty documentation, see <a href="https://github.com/eclipse/jetty.project/issues/860">https://github.com/eclipse/jetty.project/issues/860</a>) cipher suites are explicitly provided.
|
||||
*/
|
||||
@Test
|
||||
public void testDefaultShouldSupportTLSv1_2() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1 is available")
|
||||
void testDefaultShouldSupportTLSv1_1WithVulnerableCipherSuites() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
||||
// Configure server with TLSv1.1 only but explicitly provide the legacy cipher suite
|
||||
server = createServer([TLSv1_1], [TLSv1_1_CIPHER_SUITE])
|
||||
|
||||
// Start server
|
||||
server.start()
|
||||
|
||||
// Act
|
||||
String response = new URL(url).text
|
||||
logger.info("Response from ${HTTPS_URL}: ${response}")
|
||||
|
||||
// Assert
|
||||
assert response == MSG.reverse()
|
||||
}
|
||||
|
||||
@Test
|
||||
void testDefaultShouldSupportTLSv1_2() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -269,7 +327,7 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
@Test
|
||||
public void testDefaultShouldPreferTLSv1_2() {
|
||||
void testDefaultShouldPreferTLSv1_2() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -298,11 +356,11 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
assert selectedProtocol == TLSv1_2
|
||||
}
|
||||
|
||||
private static void enableContextServiceProtocol(TestRunner runner, String protocol) {
|
||||
private static void enableContextServiceProtocol(TestRunner runner, String protocol, String truststorePath = TRUSTSTORE_PATH, String truststorePassword = TRUSTSTORE_PASSWORD) {
|
||||
final SSLContextService sslContextService = new StandardSSLContextService()
|
||||
runner.addControllerService("ssl-context", sslContextService)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE, TRUSTSTORE_PATH)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE_PASSWORD, TRUSTSTORE_PASSWORD)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE, truststorePath)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE_PASSWORD, truststorePassword)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE_TYPE, KEYSTORE_TYPE)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.SSL_ALGORITHM, protocol)
|
||||
runner.enableControllerService(sslContextService)
|
||||
|
|
@ -311,25 +369,21 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
/**
|
||||
* This test creates a server that supports TLSv1. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. All three context services should be able to communicate successfully.
|
||||
* This test connects to a server running TLSv1/1.1/1.2. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. All three context services should be able to communicate successfully.
|
||||
*/
|
||||
@Test
|
||||
public void testGetHTTPShouldConnectToServerWithTLSv1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1 is available")
|
||||
void testGetHTTPShouldConnectToServerWithTLSv1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
|
||||
// Configure server with TLSv1 only
|
||||
server = createServer([TLSv1])
|
||||
|
||||
// Start server
|
||||
server.start()
|
||||
// Connect to a server that still runs TLSv1/1.1/1.2
|
||||
runner.setProperty(GetHTTP.URL, TLS_1_URL)
|
||||
|
||||
// Act
|
||||
[TLSv1, TLSv1_1, TLSv1_2].each { String tlsVersion ->
|
||||
logger.info("Set context service protocol to ${tlsVersion}")
|
||||
enableContextServiceProtocol(runner, tlsVersion)
|
||||
enableContextServiceProtocol(runner, tlsVersion, CACERTS_PATH, CACERTS_PASSWORD)
|
||||
runner.assertQueueEmpty()
|
||||
// runner.enqueue(MSG.getBytes())
|
||||
logger.info("Queue size (before run): ${runner.queueSize}")
|
||||
runner.run()
|
||||
|
||||
|
|
@ -345,7 +399,8 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
* This test creates a server that supports TLSv1.1. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. The context service with TLSv1 should not be able to communicate with a server that does not support it, but TLSv1.1 and TLSv1.2 should be able to communicate successfully.
|
||||
*/
|
||||
@Test
|
||||
public void testGetHTTPShouldConnectToServerWithTLSv1_1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that only supports TLSv1.1 is available")
|
||||
void testGetHTTPShouldConnectToServerWithTLSv1_1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
|
||||
|
|
@ -389,7 +444,7 @@ class TestGetHTTPGroovy extends GroovyTestCase {
|
|||
* This test creates a server that supports TLSv1.2. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. The context services with TLSv1 and TLSv1.1 should not be able to communicate with a server that does not support it, but TLSv1.2 should be able to communicate successfully.
|
||||
*/
|
||||
@Test
|
||||
public void testGetHTTPShouldConnectToServerWithTLSv1_2() {
|
||||
void testGetHTTPShouldConnectToServerWithTLSv1_2() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
|
||||
|
|
|
|||
|
|
@ -34,11 +34,14 @@ import org.junit.After
|
|||
import org.junit.AfterClass
|
||||
import org.junit.Before
|
||||
import org.junit.BeforeClass
|
||||
import org.junit.Ignore
|
||||
import org.junit.Test
|
||||
import org.junit.runner.RunWith
|
||||
import org.junit.runners.JUnit4
|
||||
import org.slf4j.Logger
|
||||
import org.slf4j.LoggerFactory
|
||||
import sun.security.ssl.SSLContextImpl
|
||||
import sun.security.ssl.SSLEngineImpl
|
||||
|
||||
import javax.crypto.Cipher
|
||||
import javax.net.SocketFactory
|
||||
|
|
@ -62,6 +65,10 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
private static final String TLSv1_2 = "TLSv1.2"
|
||||
private static final List DEFAULT_PROTOCOLS = [TLSv1, TLSv1_1, TLSv1_2]
|
||||
|
||||
private static final String TLSv1_1_CIPHER_SUITE = "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
|
||||
private static
|
||||
final List DEFAULT_CIPHER_SUITES = new SSLEngineImpl(new SSLContextImpl.TLSContext()).supportedCipherSuites as List
|
||||
|
||||
private static final String DEFAULT_HOSTNAME = "localhost"
|
||||
private static final int DEFAULT_TLS_PORT = 8456
|
||||
private static final String HTTPS_URL = "https://${DEFAULT_HOSTNAME}:${DEFAULT_TLS_PORT}"
|
||||
|
|
@ -79,9 +86,10 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
|
||||
private static TestRunner runner
|
||||
|
||||
private static Server createServer(List supportedProtocols = DEFAULT_PROTOCOLS) {
|
||||
private
|
||||
static Server createServer(List supportedProtocols = DEFAULT_PROTOCOLS, List supportedCipherSuites = DEFAULT_CIPHER_SUITES) {
|
||||
// Create Server
|
||||
server = new Server()
|
||||
Server server = new Server()
|
||||
|
||||
// Add some secure config
|
||||
final HttpConfiguration httpsConfiguration = new HttpConfiguration()
|
||||
|
|
@ -90,7 +98,7 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
httpsConfiguration.addCustomizer(new SecureRequestCustomizer())
|
||||
|
||||
// Build the TLS connector
|
||||
final ServerConnector https = createConnector(httpsConfiguration, supportedProtocols)
|
||||
final ServerConnector https = createConnector(server, httpsConfiguration, supportedProtocols, supportedCipherSuites)
|
||||
|
||||
// Add this connector
|
||||
server.addConnector(https)
|
||||
|
|
@ -109,9 +117,10 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
server
|
||||
}
|
||||
|
||||
private static ServerConnector createConnector(HttpConfiguration httpsConfiguration, List supportedProtocols = DEFAULT_PROTOCOLS) {
|
||||
private
|
||||
static ServerConnector createConnector(Server server, HttpConfiguration httpsConfiguration, List supportedProtocols = DEFAULT_PROTOCOLS, List supportedCipherSuites = DEFAULT_CIPHER_SUITES) {
|
||||
ServerConnector https = new ServerConnector(server,
|
||||
new SslConnectionFactory(createSslContextFactory(supportedProtocols), "http/1.1"),
|
||||
new SslConnectionFactory(createSslContextFactory(supportedProtocols, supportedCipherSuites), "http/1.1"),
|
||||
new HttpConnectionFactory(httpsConfiguration))
|
||||
|
||||
// set host and port
|
||||
|
|
@ -120,7 +129,8 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
https
|
||||
}
|
||||
|
||||
private static SslContextFactory createSslContextFactory(List supportedProtocols = DEFAULT_PROTOCOLS) {
|
||||
private
|
||||
static SslContextFactory createSslContextFactory(List supportedProtocols = DEFAULT_PROTOCOLS, List supportedCipherSuites = DEFAULT_CIPHER_SUITES) {
|
||||
final SslContextFactory contextFactory = new SslContextFactory()
|
||||
contextFactory.needClientAuth = false
|
||||
contextFactory.wantClientAuth = false
|
||||
|
|
@ -130,11 +140,14 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
contextFactory.setKeyStorePassword(KEYSTORE_PASSWORD)
|
||||
|
||||
contextFactory.setIncludeProtocols(supportedProtocols as String[])
|
||||
if (supportedCipherSuites) {
|
||||
contextFactory.setIncludeCipherSuites(supportedCipherSuites as String[])
|
||||
}
|
||||
contextFactory
|
||||
}
|
||||
|
||||
@BeforeClass
|
||||
public static void setUpOnce() throws Exception {
|
||||
static void setUpOnce() throws Exception {
|
||||
Security.addProvider(new BouncyCastleProvider())
|
||||
|
||||
logger.metaClass.methodMissing = { String name, args ->
|
||||
|
|
@ -143,8 +156,14 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
|
||||
server = createServer()
|
||||
|
||||
// Set the default trust manager for the "default" tests (the outgoing Groovy call) to ignore certificate path verification for localhost
|
||||
runner = configureRunner()
|
||||
|
||||
// Print the default cipher suite list
|
||||
logger.info("Default supported cipher suites: \n\t${DEFAULT_CIPHER_SUITES.join("\n\t")}")
|
||||
}
|
||||
|
||||
private static TestRunner configureRunner() {
|
||||
// Set the default trust manager for the "default" tests (the outgoing Groovy call) to ignore certificate path verification for localhost
|
||||
nullTrustManager = [
|
||||
checkClientTrusted: { chain, authType -> },
|
||||
checkServerTrusted: { chain, authType -> },
|
||||
|
|
@ -159,7 +178,7 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
] as HostnameVerifier
|
||||
|
||||
// Configure the test runner
|
||||
runner = TestRunners.newTestRunner(PostHTTP.class)
|
||||
TestRunner runner = TestRunners.newTestRunner(PostHTTP.class)
|
||||
final SSLContextService sslContextService = new StandardSSLContextService()
|
||||
runner.addControllerService("ssl-context", sslContextService)
|
||||
runner.setProperty(sslContextService, StandardSSLContextService.TRUSTSTORE, TRUSTSTORE_PATH)
|
||||
|
|
@ -170,15 +189,17 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
runner.setProperty(PostHTTP.URL, POST_URL)
|
||||
runner.setProperty(PostHTTP.SSL_CONTEXT_SERVICE, "ssl-context")
|
||||
runner.setProperty(PostHTTP.CHUNKED_ENCODING, "false")
|
||||
|
||||
runner
|
||||
}
|
||||
|
||||
@AfterClass
|
||||
public static void tearDownOnce() {
|
||||
static void tearDownOnce() {
|
||||
|
||||
}
|
||||
|
||||
@Before
|
||||
public void setUp() throws Exception {
|
||||
void setUp() throws Exception {
|
||||
// This must be executed before each test, or the connections will be re-used and if a TLSv1.1 connection is re-used against a server that only supports TLSv1.2, it will fail
|
||||
SSLContext sc = SSLContext.getInstance(TLSv1_2)
|
||||
sc.init(null, [nullTrustManager] as TrustManager[], null)
|
||||
|
|
@ -190,19 +211,23 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
@After
|
||||
public void tearDown() throws Exception {
|
||||
void tearDown() throws Exception {
|
||||
try {
|
||||
server.stop();
|
||||
server.stop()
|
||||
} catch (Exception e) {
|
||||
e.printStackTrace();
|
||||
e.printStackTrace()
|
||||
}
|
||||
|
||||
runner.clearTransferState()
|
||||
runner.clearProvenanceEvents()
|
||||
}
|
||||
|
||||
/**
|
||||
* Jetty 9.4.0+ no longer supports TLSv1.
|
||||
*/
|
||||
@Test
|
||||
public void testDefaultShouldSupportTLSv1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1 is available")
|
||||
void testDefaultShouldSupportTLSv1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -221,8 +246,12 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
assert response == MSG.reverse()
|
||||
}
|
||||
|
||||
/**
|
||||
* Jetty 9.4.0+ no longer supports TLSv1.
|
||||
*/
|
||||
@Test
|
||||
public void testDefaultShouldSupportTLSv1_1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1.1 is available")
|
||||
void testDefaultShouldSupportTLSv1_1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -242,7 +271,7 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
@Test
|
||||
public void testDefaultShouldSupportTLSv1_2() {
|
||||
void testDefaultShouldSupportTLSv1_2() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -262,7 +291,7 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
}
|
||||
|
||||
@Test
|
||||
public void testDefaultShouldPreferTLSv1_2() {
|
||||
void testDefaultShouldPreferTLSv1_2() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
final String url = "${HTTPS_URL}/ReverseHandler.groovy?string=${URLEncoder.encode(MSG, "UTF-8")}"
|
||||
|
|
@ -307,7 +336,8 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
* This test creates a server that supports TLSv1. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. All three context services should be able to communicate successfully.
|
||||
*/
|
||||
@Test
|
||||
public void testPostHTTPShouldConnectToServerWithTLSv1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1 is available")
|
||||
void testPostHTTPShouldConnectToServerWithTLSv1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
|
||||
|
|
@ -335,7 +365,8 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
* This test creates a server that supports TLSv1.1. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. The context service with TLSv1 should not be able to communicate with a server that does not support it, but TLSv1.1 and TLSv1.2 should be able to communicate successfully.
|
||||
*/
|
||||
@Test
|
||||
public void testPostHTTPShouldConnectToServerWithTLSv1_1() {
|
||||
@Ignore("Ignore until embeddable test HTTPS server that supports TLSv1.1 is available")
|
||||
void testPostHTTPShouldConnectToServerWithTLSv1_1() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
|
||||
|
|
@ -373,7 +404,7 @@ class TestPostHTTPGroovy extends GroovyTestCase {
|
|||
* This test creates a server that supports TLSv1.2. It iterates over an {@link SSLContextService} with TLSv1, TLSv1.1, and TLSv1.2 support. The context services with TLSv1 and TLSv1.1 should not be able to communicate with a server that does not support it, but TLSv1.2 should be able to communicate successfully.
|
||||
*/
|
||||
@Test
|
||||
public void testPostHTTPShouldConnectToServerWithTLSv1_2() {
|
||||
void testPostHTTPShouldConnectToServerWithTLSv1_2() {
|
||||
// Arrange
|
||||
final String MSG = "This is a test message"
|
||||
|
||||
|
|
|
|||
1
pom.xml
1
pom.xml
|
|
@ -92,7 +92,6 @@ language governing permissions and limitations under the License. -->
|
|||
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
|
||||
<inceptionYear>2014</inceptionYear>
|
||||
<org.slf4j.version>1.7.12</org.slf4j.version>
|
||||
<!--<jetty.version>9.3.9.v20160517</jetty.version>-->
|
||||
<jetty.version>9.4.2.v20170220</jetty.version>
|
||||
<lucene.version>4.10.4</lucene.version>
|
||||
<spring.version>4.2.4.RELEASE</spring.version>
|
||||
|
|
|
|||
Loading…
Reference in New Issue