tls-tester 0.1.0

A TLS 1.3 server for testing client implementations
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

use tls_tester::{ServerCertificates, TlsStream, TlsStreamBuilder};

use std::{
    io::{Read as _, Write as _},
    net::TcpListener,
    process::{Command, Output},
};

fn main() {
    stderrlog::new()
        .verbosity(3)
        .timestamp(stderrlog::Timestamp::Microsecond)
        .init()
        .unwrap();

    let certs: ServerCertificates = ServerCertificates::from_secpr256r1_pem("cert.pem", "key.pem")
        .expect("Invalid certificates");

    let listener: TcpListener = TcpListener::bind("127.0.0.1:12345").unwrap();

    let curl_thread = std::thread::spawn(move || {
        log::info!("sending http request with curl");
        let output: Output = Command::new("curl")
            .arg("https://127.0.0.1:12345")
            .arg("--tlsv1.3")
            .arg("--curves")
            .arg("secp256r1")
            .arg("--insecure")
            .arg("--connect-timeout")
            .arg("1")
            .arg("--max-time")
            .arg("5")
            .arg("-v")
            .arg("--http1.1")
            .output()
            .unwrap();

        eprintln!("{}", String::from_utf8_lossy(&output.stderr));
        let stdout = String::from_utf8_lossy(&output.stdout);
        if !stdout.is_empty() {
            panic!("{}", String::from_utf8_lossy(&output.stdout));
        }

        output.status.success()
    });

    // openssl s_client -connect 127.0.0.1:12345 -tls1_3 -debug -curves secp256r1 -psk 2f42ace2b6be1681b3d2fcdd4bb57b4ffe3484ee77fdaa8e216e3272cd78259d
    // let output: Output = Command::new("openssl")
    //     .arg("s_client")
    //     .arg("-connect")
    //     .arg("127.0.0.1:12345")
    //     .arg("-tls1_3")
    //     .arg("-curves")
    //     .arg("secp256r1")
    //     .arg("-debug")
    //     .arg("-psk")
    //     .arg("2f42ace2b6be1681b3d2fcdd4bb57b4ffe3484ee77fdaa8e216e3272cd78259d")
    //     .output()
    //     .unwrap();

    log::info!("Accepting connections");
    let (client, addr) = listener.accept().expect("Unable to accept connections");
    log::info!("Accepted connection from {addr}");
    let mut tls_stream: TlsStream = TlsStreamBuilder::new()
        .handshake(client, certs)
        .expect("Failed to create TLS stream");
    let mut http_buf: [u8; 4096] = [0; 4096];
    let read_len: usize = tls_stream
        .read(&mut http_buf)
        .expect("Failed to read from TLS stream");
    let request: &[u8] = &http_buf[..read_len];
    log::info!("REQUEST={}", String::from_utf8_lossy(request));

    let http_response: &[u8] = b"HTTP/1.1 200 OK\r\nContent-Length: 0\r\n\r\n";
    tls_stream
        .write_all(http_response)
        .expect("Failed to write HTTP response");

    let curl_status = curl_thread.join().expect("Failed to join curl thread");
    assert!(curl_status);
}