fips-core 0.4.64

Reusable FIPS mesh, endpoint, transport, and protocol library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

use super::*;

fn insert_awaiting_msg3_session(node: &mut Node, peer: &Identity) {
    let mut handshake = crate::noise::HandshakeState::new_xk_responder(node.identity().keypair());
    handshake.set_local_epoch([1; 8]);
    let entry = crate::node::session::SessionEntry::new(
        *peer.node_addr(),
        peer.pubkey_full(),
        EndToEndState::AwaitingMsg3(handshake),
        1_000,
        false,
    );
    node.sessions.insert(*peer.node_addr(), entry);
}

#[test]
fn existing_session_is_admitted_when_table_is_full() {
    let mut config = Config::new();
    config.node.limits.max_sessions = 1;
    let mut node = Node::new(config).unwrap();
    let peer = Identity::generate();
    insert_initiating_session(&mut node, &peer);

    assert!(node.admit_new_session(peer.node_addr()));
    assert_eq!(node.stats().sessions.table_full, 0);
}

#[test]
fn new_session_is_refused_when_table_is_full() {
    let mut config = Config::new();
    config.node.limits.max_sessions = 1;
    let mut node = Node::new(config).unwrap();
    let present = Identity::generate();
    let stranger = Identity::generate();
    insert_initiating_session(&mut node, &present);

    assert!(!node.admit_new_session(stranger.node_addr()));
    assert_eq!(node.stats().sessions.table_full, 1);
    assert_eq!(node.stats().sessions.half_open_full, 0);
}

#[test]
fn half_open_sessions_cannot_occupy_more_than_half_the_table() {
    let mut config = Config::new();
    config.node.limits.max_sessions = 4;
    let mut node = Node::new(config).unwrap();
    insert_awaiting_msg3_session(&mut node, &Identity::generate());
    insert_awaiting_msg3_session(&mut node, &Identity::generate());

    assert!(!node.admit_new_session(Identity::generate().node_addr()));
    assert_eq!(node.stats().sessions.table_full, 0);
    assert_eq!(node.stats().sessions.half_open_full, 1);
}

#[test]
fn zero_session_limit_preserves_unlimited_behavior() {
    let mut config = Config::new();
    config.node.limits.max_sessions = 0;
    let mut node = Node::new(config).unwrap();
    for _ in 0..8 {
        insert_awaiting_msg3_session(&mut node, &Identity::generate());
    }

    assert!(node.admit_new_session(Identity::generate().node_addr()));
    assert_eq!(node.stats().sessions.table_full, 0);
    assert_eq!(node.stats().sessions.half_open_full, 0);
}