mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
feafe07874
OpenSSL::SSL::SSLSocket#accept may block indefinitely on clients which negotiate the TCP connection, but fail (or are slow) to negotiate the subsequent TLS handshake. This prevents the multi-threaded WEBrick server from accepting other connections. Since the TLS handshake (via OpenSSL::SSL::SSLSocket#accept) consists of normal read/write traffic over TCP, handle it in the per-client thread, instead. Furthermore, using non-blocking accept() is useful for non-TLS sockets anyways because spurious wakeups are possible from select(2). * lib/webrick/server.rb (accept_client): use TCPServer#accept_nonblock and remove OpenSSL::SSL::SSLSocket#accept call * lib/webrick/server.rb (start_thread): call OpenSSL::SSL::SSLSocket#accept * test/webrick/test_ssl_server.rb (test_slow_connect): new test [ruby-core:83221] [Bug #14005] git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@60172 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
67 lines
1.7 KiB
Ruby
67 lines
1.7 KiB
Ruby
require "test/unit"
|
|
require "webrick"
|
|
require "webrick/ssl"
|
|
require_relative "utils"
|
|
require 'timeout'
|
|
|
|
class TestWEBrickSSLServer < Test::Unit::TestCase
|
|
class Echo < WEBrick::GenericServer
|
|
def run(sock)
|
|
while line = sock.gets
|
|
sock << line
|
|
end
|
|
end
|
|
end
|
|
|
|
def test_self_signed_cert_server
|
|
assert_self_signed_cert(
|
|
:SSLEnable => true,
|
|
:SSLCertName => [["C", "JP"], ["O", "www.ruby-lang.org"], ["CN", "Ruby"]],
|
|
)
|
|
end
|
|
|
|
def test_self_signed_cert_server_with_string
|
|
assert_self_signed_cert(
|
|
:SSLEnable => true,
|
|
:SSLCertName => "/C=JP/O=www.ruby-lang.org/CN=Ruby",
|
|
)
|
|
end
|
|
|
|
def assert_self_signed_cert(config)
|
|
TestWEBrick.start_server(Echo, config){|server, addr, port, log|
|
|
io = TCPSocket.new(addr, port)
|
|
sock = OpenSSL::SSL::SSLSocket.new(io)
|
|
sock.connect
|
|
sock.puts(server.ssl_context.cert.subject.to_s)
|
|
assert_equal("/C=JP/O=www.ruby-lang.org/CN=Ruby\n", sock.gets, log.call)
|
|
sock.close
|
|
io.close
|
|
}
|
|
end
|
|
|
|
def test_slow_connect
|
|
poke = lambda do |io, msg|
|
|
begin
|
|
sock = OpenSSL::SSL::SSLSocket.new(io)
|
|
sock.connect
|
|
sock.puts(msg)
|
|
assert_equal "#{msg}\n", sock.gets, msg
|
|
ensure
|
|
sock&.close
|
|
io.close
|
|
end
|
|
end
|
|
config = {
|
|
:SSLEnable => true,
|
|
:SSLCertName => "/C=JP/O=www.ruby-lang.org/CN=Ruby",
|
|
}
|
|
Timeout.timeout(10) do
|
|
TestWEBrick.start_server(Echo, config) do |server, addr, port, log|
|
|
outer = TCPSocket.new(addr, port)
|
|
inner = TCPSocket.new(addr, port)
|
|
poke.call(inner, 'fast TLS negotiation')
|
|
poke.call(outer, 'slow TLS negotiation')
|
|
end
|
|
end
|
|
end
|
|
end
|