psiphon-tunnel-core/psiphon/common/tls/obfuscated_test.go

/*
 * Copyright (c) 2016, Psiphon Inc.
 * All rights reserved.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 */

package tls

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/sha1"
	"crypto/x509"
	"crypto/x509/pkix"
	"encoding/pem"
	"errors"
	"io"
	"math/big"
	"net"
	"testing"
	"time"
)

// [Psiphon]
// TestObfuscatedSessionTicket exercises the Obfuscated Session Tickets facility.
func TestObfuscatedSessionTicket(t *testing.T) {
	runObfuscatedSessionTicket(t, false)
}

func TestObfuscatedSessionTicketEmulateChrome(t *testing.T) {
	runObfuscatedSessionTicket(t, true)
}

func runObfuscatedSessionTicket(t *testing.T, emulateChrome bool) {

	var standardSessionTicketKey [32]byte
	rand.Read(standardSessionTicketKey[:])

	var obfuscatedSessionTicketSharedSecret [32]byte
	rand.Read(obfuscatedSessionTicketSharedSecret[:])

	// Note: SNI and certificate CN don't match
	clientConfig := &Config{
		ServerName:    "www.example.com",
		EmulateChrome: emulateChrome,
		ClientSessionCache: NewObfuscatedClientSessionCache(
			obfuscatedSessionTicketSharedSecret),
	}

	certificate, err := generateCertificate()
	if err != nil {
		t.Fatalf("generateCertificate failed: %s", err)
	}

	serverConfig := &Config{
		Certificates:     []Certificate{*certificate},
		NextProtos:       []string{"http/1.1"},
		MinVersion:       VersionTLS10,
		SessionTicketKey: obfuscatedSessionTicketSharedSecret,
	}

	serverConfig.SetSessionTicketKeys([][32]byte{
		standardSessionTicketKey, obfuscatedSessionTicketSharedSecret})

	serverAddress := ":8443"

	testMessage := "test"

	result := make(chan error, 1)

	listening := make(chan struct{}, 1)

	go func() {

		listener, err := Listen("tcp", serverAddress, serverConfig)
		defer listener.Close()

		listening <- *new(struct{})

		var conn net.Conn
		if err == nil {
			conn, err = listener.Accept()
		}

		recv := make([]byte, len(testMessage))
		if err == nil {
			defer conn.Close()

			_, err = io.ReadFull(conn, recv)
		}
		if err == nil {
			if string(recv) != testMessage {
				err = errors.New("unexpected payload")
			}
		}

		// Sends nil on success
		select {
		case result <- err:
		default:
		}

	}()

	go func() {

		<-listening

		conn, err := Dial("tcp", serverAddress, clientConfig)

		if err == nil {
			defer conn.Close()
			_, err = conn.Write([]byte(testMessage))
		}

		if err != nil {
			select {
			case result <- err:
			default:
			}
		}
	}()

	err = <-result
	if err != nil {
		t.Fatalf("connect failed: %s", err)
	}
}

func generateCertificate() (*Certificate, error) {

	rsaKey, err := rsa.GenerateKey(rand.Reader, 2048)
	if err != nil {
		return nil, err
	}

	publicKeyBytes, err := x509.MarshalPKIXPublicKey(rsaKey.Public())
	if err != nil {
		return nil, err
	}
	subjectKeyID := sha1.Sum(publicKeyBytes)

	template := x509.Certificate{
		SerialNumber:          big.NewInt(1),
		Subject:               pkix.Name{CommonName: "www.example.org"},
		NotBefore:             time.Now().Add(-1 * time.Hour).UTC(),
		NotAfter:              time.Now().Add(time.Hour).UTC(),
		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
		BasicConstraintsValid: true,
		IsCA:         true,
		SubjectKeyId: subjectKeyID[:],
		MaxPathLen:   1,
		Version:      2,
	}

	derCert, err := x509.CreateCertificate(
		rand.Reader,
		&template,
		&template,
		rsaKey.Public(),
		rsaKey)
	if err != nil {
		return nil, err
	}

	certificate := pem.EncodeToMemory(
		&pem.Block{
			Type:  "CERTIFICATE",
			Bytes: derCert,
		},
	)

	privateKey := pem.EncodeToMemory(
		&pem.Block{
			Type:  "RSA PRIVATE KEY",
			Bytes: x509.MarshalPKCS1PrivateKey(rsaKey),
		},
	)

	keyPair, err := X509KeyPair(certificate, privateKey)
	if err != nil {
		return nil, err
	}

	return &keyPair, nil
}