Class: EchSpec::Spec::Spec7_1_1_2

Inherits:
WithSocket show all
Defined in:
lib/echspec/spec/7.1.1-2.rb

Class Method Summary collapse

Instance Method Summary collapse

Methods inherited from WithSocket

#initialize, #message_stack, #with_socket

Constructor Details

This class inherits a constructor from EchSpec::Spec::WithSocket

Class Method Details

.spec_group ⇒ EchSpec::SpecGroup

Returns:



15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 15

def self.spec_group
  SpecGroup.new(
    '7.1.1-2',
    [
      SpecCase.new(
        'MUST abort with a "missing_extension" alert, if 2nd ClientHelloOuter does not contains the "encrypted_client_hello" extension.',
        method(:validate_2nd_ch_missing_ech)
      ),
      SpecCase.new(
        'MUST abort with an "illegal_parameter" alert, if 2nd ClientHelloOuter "encrypted_client_hello" enc is empty.',
        method(:validate_2nd_ch_unchanged_ech)
      )
    ]
  )
end

.validate_2nd_ch_missing_ech(hostname, port, ech_config) ⇒ EchSpec::Ok | Err

Parameters:

  • hostname (String)
  • port (Integer)
  • ech_config (ECHConfig)

Returns:



36
37
38
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 36

def self.validate_2nd_ch_missing_ech(hostname, port, ech_config)
  Spec7_1_1_2.new.do_validate_2nd_ch_missing_ech(hostname, port, ech_config)
end

.validate_2nd_ch_unchanged_ech(hostname, port, ech_config) ⇒ EchSpec::Ok | Err

Parameters:

  • hostname (String)
  • port (Integer)
  • ech_config (ECHConfig)

Returns:



60
61
62
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 60

def self.validate_2nd_ch_unchanged_ech(hostname, port, ech_config)
  Spec7_1_1_2.new.do_validate_2nd_ch_unchanged_ech(hostname, port, ech_config)
end

Instance Method Details

#do_validate_2nd_ch_missing_ech(hostname, port, ech_config) ⇒ EchSpec::Ok | Err

Parameters:

  • hostname (String)
  • port (Integer)
  • ech_config (ECHConfig)

Returns:



45
46
47
48
49
50
51
52
53
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 45

def do_validate_2nd_ch_missing_ech(hostname, port, ech_config)
  with_socket(hostname, port) do |socket|
    recv = send_2nd_ch_missing_ech(socket, hostname, ech_config)
    return Err.new('did not send expected alert: missing_extension', message_stack) \
      unless Spec.expect_alert(recv, :missing_extension)

    Ok.new(nil)
  end
end

#do_validate_2nd_ch_unchanged_ech(hostname, port, ech_config) ⇒ EchSpec::Ok | Err

Parameters:

  • hostname (String)
  • port (Integer)
  • ech_config (ECHConfig)

Returns:



69
70
71
72
73
74
75
76
77
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 69

def do_validate_2nd_ch_unchanged_ech(hostname, port, ech_config)
  with_socket(hostname, port) do |socket|
    recv = send_2nd_ch_unchanged_ech(socket, hostname, ech_config)
    return Err.new('did not send expected alert: illegal_parameter', message_stack) \
      unless Spec.expect_alert(recv, :illegal_parameter)

    Ok.new(nil)
  end
end

#send_2nd_ch_missing_ech(socket, hostname, ech_config) ⇒ Object 



79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 79

def send_2nd_ch_missing_ech(socket, hostname, ech_config)
  conn, _inner1, ch1, hrr, = TLS13Client.recv_hrr(socket, hostname, ech_config, @stack)
  # send 2nd ClientHello without ech
  new_exs = TLS13Client.gen_newch_extensions(ch1, hrr)
  new_exs.delete(TTTLS13::Message::ExtensionType::ENCRYPTED_CLIENT_HELLO)
  ch = TTTLS13::Message::ClientHello.new(
    legacy_version: ch1.legacy_version,
    random: ch1.random,
    legacy_session_id: ch1.legacy_session_id,
    cipher_suites: ch1.cipher_suites,
    legacy_compression_methods: ch1.legacy_compression_methods,
    extensions: new_exs
  )
  conn.send_record(
    TTTLS13::Message::Record.new(
      type: TTTLS13::Message::ContentType::HANDSHAKE,
      messages: [ch],
      cipher: TTTLS13::Cryptograph::Passer.new
    )
  )
  @stack << ch

  recv, = conn.recv_message(TTTLS13::Cryptograph::Passer.new)
  @stack << recv

  recv, = conn.recv_message(TTTLS13::Cryptograph::Passer.new) \
    if recv.is_a?(TTTLS13::Message::ChangeCipherSpec)
  recv
end

#send_2nd_ch_unchanged_ech(socket, hostname, ech_config) ⇒ Object 



109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
 
# File 'lib/echspec/spec/7.1.1-2.rb', line 109

def send_2nd_ch_unchanged_ech(socket, hostname, ech_config)
  conn, inner1, ch1, hrr, = TLS13Client.recv_hrr(socket, hostname, ech_config, @stack)
  # send 2nd ClientHello with unchanged ech
  new_exs = TLS13Client.gen_newch_extensions(ch1, hrr)
  new_exs[TTTLS13::Message::ExtensionType::ENCRYPTED_CLIENT_HELLO] =
    ch1.extensions[TTTLS13::Message::ExtensionType::ENCRYPTED_CLIENT_HELLO]
  ch = TTTLS13::Message::ClientHello.new(
    legacy_version: ch1.legacy_version,
    random: ch1.random,
    legacy_session_id: ch1.legacy_session_id,
    cipher_suites: ch1.cipher_suites,
    legacy_compression_methods: ch1.legacy_compression_methods,
    extensions: new_exs
  )
  conn.send_record(
    TTTLS13::Message::Record.new(
      type: TTTLS13::Message::ContentType::HANDSHAKE,
      messages: [ch],
      cipher: TTTLS13::Cryptograph::Passer.new
    )
  )
  @stack << inner1
  @stack << ch

  recv, = conn.recv_message(TTTLS13::Cryptograph::Passer.new)
  @stack << recv

  recv, = conn.recv_message(TTTLS13::Cryptograph::Passer.new) \
    if recv.is_a?(TTTLS13::Message::ChangeCipherSpec)
  recv
end