mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
fdd01b5356
Sync with master branch of ruby/openssl.git to import changes in v2.1.0.beta1..v2.0.6. The commit log since v2.1.0.beta1 which was imported by r59734 can be found at: https://github.com/ruby/openssl/compare/v2.1.0.beta1...e72d960db262 ---------------------------------------------------------------- Kazuki Yamaguchi (16): test/test_pair: fix test_write_nonblock{,_no_exceptions} x509name: fix a typo in docs test/test_fips: skip if setting FIPS mode fails test/test_asn1: fix possible failure in test_utctime test/test_ssl: suppress warning in test_alpn_protocol_selection_cancel test/test_pair: disable compression test/test_ssl: skip tmp_ecdh_callback test for LibreSSL >= 2.6.1 test/test_ssl: do not run NPN tests for LibreSSL >= 2.6.1 tool/ruby-openssl-docker: update test/test_pair: replace sleep with IO.select ssl: prevent SSLSocket#sysread* from leaking uninitialized data ossl.c: use struct CRYPTO_dynlock_value for non-dynamic locks ossl.c: make legacy locking callbacks reentrant test/test_engine: suppress stderr test/test_engine: check if RC4 is supported Ruby/OpenSSL 2.0.6 SHIBATA Hiroshi (1): To use upstream url of github nobu (1): ruby.h: unnormalized Fixnum value git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@60013 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
97 lines
2.5 KiB
Ruby
97 lines
2.5 KiB
Ruby
# frozen_string_literal: false
|
|
require_relative 'utils'
|
|
|
|
if defined?(OpenSSL) && defined?(OpenSSL::Engine)
|
|
|
|
class OpenSSL::TestEngine < OpenSSL::TestCase
|
|
def test_engines_free # [ruby-dev:44173]
|
|
with_openssl <<-'end;'
|
|
OpenSSL::Engine.load("openssl")
|
|
OpenSSL::Engine.engines
|
|
OpenSSL::Engine.engines
|
|
end;
|
|
end
|
|
|
|
def test_openssl_engine_builtin
|
|
with_openssl <<-'end;'
|
|
orig = OpenSSL::Engine.engines
|
|
pend "'openssl' is already loaded" if orig.any? { |e| e.id == "openssl" }
|
|
engine = OpenSSL::Engine.load("openssl")
|
|
assert_equal(true, engine)
|
|
assert_equal(1, OpenSSL::Engine.engines.size - orig.size)
|
|
end;
|
|
end
|
|
|
|
def test_openssl_engine_by_id_string
|
|
with_openssl <<-'end;'
|
|
orig = OpenSSL::Engine.engines
|
|
pend "'openssl' is already loaded" if orig.any? { |e| e.id == "openssl" }
|
|
engine = get_engine
|
|
assert_not_nil(engine)
|
|
assert_equal(1, OpenSSL::Engine.engines.size - orig.size)
|
|
end;
|
|
end
|
|
|
|
def test_openssl_engine_id_name_inspect
|
|
with_openssl <<-'end;'
|
|
engine = get_engine
|
|
assert_equal("openssl", engine.id)
|
|
assert_not_nil(engine.name)
|
|
assert_not_nil(engine.inspect)
|
|
end;
|
|
end
|
|
|
|
def test_openssl_engine_digest_sha1
|
|
with_openssl <<-'end;'
|
|
engine = get_engine
|
|
digest = engine.digest("SHA1")
|
|
assert_not_nil(digest)
|
|
data = "test"
|
|
assert_equal(OpenSSL::Digest::SHA1.digest(data), digest.digest(data))
|
|
end;
|
|
end
|
|
|
|
def test_openssl_engine_cipher_rc4
|
|
begin
|
|
OpenSSL::Cipher.new("rc4")
|
|
rescue OpenSSL::Cipher::CipherError
|
|
pend "RC4 is not supported"
|
|
end
|
|
|
|
with_openssl(<<-'end;', ignore_stderr: true)
|
|
engine = get_engine
|
|
algo = "RC4"
|
|
data = "a" * 1000
|
|
key = OpenSSL::Random.random_bytes(16)
|
|
encrypted = crypt_data(data, key, :encrypt) { engine.cipher(algo) }
|
|
decrypted = crypt_data(encrypted, key, :decrypt) { OpenSSL::Cipher.new(algo) }
|
|
assert_equal(data, decrypted)
|
|
end;
|
|
end
|
|
|
|
private
|
|
|
|
# this is required because OpenSSL::Engine methods change global state
|
|
def with_openssl(code, **opts)
|
|
assert_separately([{ "OSSL_MDEBUG" => nil }, "-ropenssl"], <<~"end;", **opts)
|
|
require #{__FILE__.dump}
|
|
include OpenSSL::TestEngine::Utils
|
|
#{code}
|
|
end;
|
|
end
|
|
|
|
module Utils
|
|
def get_engine
|
|
OpenSSL::Engine.by_id("openssl")
|
|
end
|
|
|
|
def crypt_data(data, key, mode)
|
|
cipher = yield
|
|
cipher.send mode
|
|
cipher.key = key
|
|
cipher.update(data) + cipher.final
|
|
end
|
|
end
|
|
end
|
|
|
|
end
|