Function TestTLSHandshakeFirst

test/conn_test.go:3361–3468

(t *testing.T)

}

func TestTLSHandshakeFirst(t *testing.T) {
	s, opts := RunServerWithConfig("./configs/tls.conf")
	defer s.Shutdown()

	secureURL := fmt.Sprintf("tls://derek:porkchop@localhost:%d", opts.Port)
	nc, err := nats.Connect(secureURL,
		nats.RootCAs("./configs/certs/ca.pem"),
		nats.TLSHandshakeFirst())
	if err == nil || !strings.Contains(err.Error(), "TLS handshake") {
		if err == nil {
			nc.Close()
		}
		t.Fatalf("Expected error about not being a TLS handshake, got %v", err)
	}

	tc := &server.TLSConfigOpts{
		CertFile: "./configs/certs/server.pem",
		KeyFile:  "./configs/certs/key.pem",
	}
	tlsConf, err := server.GenTLSConfig(tc)
	if err != nil {
		t.Fatalf("Can't build TLCConfig: %v", err)
	}
	tlsConf.ServerName = "localhost"

	// Start a mockup server that will do the TLS handshake first
	// and then send the INFO protocol.
	l, e := net.Listen("tcp", ":0")
	if e != nil {
		t.Fatal("Could not listen on an ephemeral port")
	}
	tl := l.(*net.TCPListener)
	defer tl.Close()

	addr := tl.Addr().(*net.TCPAddr)

	errCh := make(chan error, 1)
	doneCh := make(chan struct{})
	wg := sync.WaitGroup{}
	wg.Add(1)
	go func() {
		defer wg.Done()
		conn, err := l.Accept()
		if err != nil {
			errCh <- fmt.Errorf("error accepting client connection: %v", err)
			return
		}
		defer conn.Close()

		// Do the TLS handshake now.
		conn = tls.Server(conn, tlsConf)
		tlsconn := conn.(*tls.Conn)
		if err := tlsconn.Handshake(); err != nil {
			errCh <- fmt.Errorf("Server error during handshake: %v", err)
			return
		}

		// Send back the INFO