kerberos-parser 0.9.0

use der_parser::asn1_rs::FromDer;
use kerberos_parser::krb5::*;
use kerberos_parser::krb5_parser::*;

#[test]
fn test_parse_kerberos_string() {
    let bytes = &[0x1b, 0x04, 0x63, 0x69, 0x66, 0x73];
    let empty = &b""[..];
    let expected = Realm(String::from("cifs"));

    let res = Realm::from_der(bytes);
    assert_eq!(res, Ok((empty, expected)));
}

#[test]
fn test_parse_realm() {
    let bytes = &[0x1b, 0x05, 0x4a, 0x6f, 0x6e, 0x65, 0x73];
    let empty = &b""[..];
    let expected = Realm(String::from("Jones"));

    let res = Realm::from_der(bytes);
    assert_eq!(res, Ok((empty, expected)));
}

#[test]
fn test_parse_principalname() {
    let bytes = &[
        0x30, 0x81, 0x11, 0xa0, 0x03, 0x02, 0x01, 0x00, 0xa1, 0x0a, 0x30, 0x81, 0x07, 0x1b, 0x05,
        0x4a, 0x6f, 0x6e, 0x65, 0x73,
    ];
    let empty = &b""[..];
    let expected = PrincipalName {
        name_type: NameType(0),
        name_string: vec![String::from("Jones")],
    };

    let res = PrincipalName::from_der(bytes);
    assert_eq!(res, Ok((empty, expected)));
}

#[test]
fn test_parse_principalname2() {
    let bytes = &[
        0x30, 0x27, 0xa0, 0x03, 0x02, 0x01, 0x02, 0xa1, 0x20, 0x30, 0x1e, 0x1b, 0x04, 0x63, 0x69,
        0x66, 0x73, 0x1b, 0x16, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x2d, 0x50, 0x43, 0x2e, 0x63, 0x6f,
        0x6e, 0x74, 0x6f, 0x73, 0x6f, 0x2e, 0x6c, 0x6f, 0x63, 0x61, 0x6c,
    ];
    let empty = &b""[..];
    let expected = PrincipalName {
        name_type: NameType::KRB_NT_SRV_INST,
        name_string: vec![String::from("cifs"), String::from("Admin-PC.contoso.local")],
    };

    let res = PrincipalName::from_der(bytes);
    assert_eq!(res, Ok((empty, expected)));
}

static KRB5_TICKET: &[u8] = include_bytes!("../assets/krb5-ticket.bin");
#[test]
fn test_parse_ticket() {
    let bytes = KRB5_TICKET;

    let res = Ticket::from_der(bytes);
    // println!("parse_krb5_ticket: {:?}", res);
    match res {
        Ok((rem, tkt)) => {
            assert!(rem.is_empty());
            assert_eq!(tkt.tkt_vno, 5);
            assert_eq!(tkt.realm, Realm(String::from("CONTOSO.LOCAL")));
            assert_eq!(
                tkt.sname,
                PrincipalName {
                    name_type: NameType::KRB_NT_SRV_INST,
                    name_string: vec![String::from("cifs"), String::from("Admin-PC.contoso.local")]
                }
            );
            let enc = &tkt.enc_part;
            // println!("enc: {:?}", enc);
            assert_eq!(enc.etype, EncryptionType::AES256_CTS_HMAC_SHA1_96);
            assert_eq!(enc.kvno, Some(1));
        }
        _ => panic!("parsing failed"),
    }
}

static AS_REQ: &[u8] = include_bytes!("../assets/as-req.bin");
#[test]
fn test_parse_as_req() {
    let bytes = AS_REQ;

    let res = parse_as_req(bytes);
    // println!("parse_as_req: {:?}", res);
    match res {
        Ok((rem, req)) => {
            assert!(rem.is_empty());
            assert_eq!(req.pvno, 5);
            assert_eq!(req.msg_type, MessageType::KRB_AS_REQ);
            assert_eq!(req.req_body.realm, Realm(String::from("DENYDC")));
            assert_eq!(
                req.req_body.cname,
                Some(PrincipalName {
                    name_type: NameType::KRB_NT_PRINCIPAL,
                    name_string: vec![String::from("des")]
                })
            );
            assert_eq!(
                req.req_body.sname,
                Some(PrincipalName {
                    name_type: NameType::KRB_NT_SRV_INST,
                    name_string: vec![String::from("krbtgt"), String::from("DENYDC")]
                })
            );
        }
        _ => panic!("parsing failed"),
    }
}

static AS_REP: &[u8] = include_bytes!("../assets/as-rep.bin");
#[test]
fn test_parse_as_rep() {
    let bytes = AS_REP;

    let res = parse_as_rep(bytes);
    // println!("parse_as_rep: {:?}", res);
    match res {
        Ok((rem, req)) => {
            assert!(rem.is_empty());
            assert_eq!(req.pvno, 5);
            assert_eq!(req.msg_type, MessageType::KRB_AS_REP);
            assert_eq!(req.crealm, Realm(String::from("DENYDC.COM")));
            assert_eq!(
                req.cname,
                PrincipalName {
                    name_type: NameType::KRB_NT_PRINCIPAL,
                    name_string: vec![String::from("des")]
                }
            );
        }
        _ => panic!("parsing failed"),
    }
}

static AP_REQ: &[u8] = include_bytes!("../assets/ap-req.bin");
#[test]
fn test_parse_ap_req() {
    let bytes = AP_REQ;

    let res = ApReq::from_der(bytes);
    // println!("parse_ap_req: {:?}", res);
    match res {
        Ok((rem, req)) => {
            assert!(rem.is_empty());
            assert_eq!(req.pvno, 5);
            assert_eq!(req.msg_type, MessageType::KRB_AP_REQ);
            assert_eq!(req.ticket.realm, Realm(String::from("DENYDC.COM")));
            assert_eq!(
                req.ticket.sname,
                PrincipalName {
                    name_type: NameType::KRB_NT_SRV_INST,
                    name_string: vec![String::from("krbtgt"), String::from("DENYDC.COM")]
                }
            );
        }
        _ => panic!("parsing failed"),
    }
}

static KRB_ERROR: &[u8] = include_bytes!("../assets/krb-error.bin");
#[test]
fn test_parse_krb_error() {
    let bytes = KRB_ERROR;

    let res = KrbError::from_der(bytes);
    // println!("parse_krb_error: {:?}", res);
    match res {
        Ok((rem, err)) => {
            assert!(rem.is_empty());
            assert_eq!(err.pvno, 5);
            assert_eq!(err.msg_type, MessageType::KRB_ERROR);
            assert_eq!(err.error_code, ErrorCode::KDC_ERR_ETYPE_NOSUPP);
            assert_eq!(err.realm, Realm(String::from("DENYDC")));
            assert_eq!(
                err.sname,
                PrincipalName {
                    name_type: NameType::KRB_NT_SRV_INST,
                    name_string: vec![String::from("krbtgt"), String::from("DENYDC")]
                }
            );
        }
        _ => panic!("parsing failed"),
    }
}

static TGS_REP_NO_PADATA: &[u8] = include_bytes!("../assets/tgs-rep-no-padata.bin");
#[test]
fn test_parse_tgs_rep_no_padata() {
    let bytes = TGS_REP_NO_PADATA;

    let res = parse_tgs_rep(bytes);
    match res {
        Ok((rem, rep)) => {
            assert!(rem.is_empty());
            assert_eq!(rep.pvno, 5);
            assert_eq!(rep.msg_type, MessageType::KRB_TGS_REP);
            assert!(rep.padata.is_empty());
            assert_eq!(rep.crealm, Realm(String::from("DENYDC.COM")));
            assert_eq!(
                rep.cname,
                PrincipalName {
                    name_type: NameType::KRB_NT_PRINCIPAL,
                    name_string: vec![String::from("des")]
                }
            );
        }
        _ => panic!("parsing failed"),
    }
}

#[test]
fn test_parse_int32() {
    let empty = &b""[..];
    assert_eq!(parse_der_int32(&[0x02, 0x01, 0xff]), Ok((empty, -1)));
    assert_eq!(parse_der_int32(&[0x02, 0x01, 0x01]), Ok((empty, 1)));
    // XXX: not valid in DER: multiple leading 0xff
    // assert_eq!(parse_der_int32(&[0x02, 0x02, 0xff, 0xff]), Ok((empty, -1)));
    assert_eq!(
        parse_der_int32(&[0x02, 0x02, 0x01, 0x23]),
        Ok((empty, 0x123))
    );
    // XXX: not valid in DER: multiple leading 0xff
    // assert_eq!(
    //     parse_der_int32(&[0x02, 0x03, 0xff, 0xff, 0xff]),
    //     Ok((empty, -1))
    // );
    assert_eq!(
        parse_der_int32(&[0x02, 0x03, 0x01, 0x23, 0x45]),
        Ok((empty, 0x12345))
    );
    // XXX: not valid in DER: multiple leading 0xff
    // assert_eq!(
    //     parse_der_int32(&[0x02, 0x04, 0xff, 0xff, 0xff, 0xff]),
    //     Ok((empty, -1))
    // );
    assert_eq!(parse_der_int32(&[0x02, 0x01, 0xff]), Ok((empty, -1)));
    assert_eq!(
        parse_der_int32(&[0x02, 0x04, 0x01, 0x23, 0x45, 0x67]),
        Ok((empty, 0x1234567))
    );
}

#[test]
fn test_principalname_display() {
    let pn = PrincipalName {
        name_type: NameType::KRB_NT_SRV_INST,
        name_string: vec!["krb5".to_string(), "DOMAIN.COM".to_string()],
    };
    assert_eq!("krb5/DOMAIN.COM", format!("{}", pn));
}