OpenVPN 3 Core Library
Loading...
Searching...
No Matches
TlsAuthSessionTest Class Reference

A plain tls-auth server: no tls-crypt of either version. More...

Inheritance diagram for TlsAuthSessionTest:
[legend]
Collaboration diagram for TlsAuthSessionTest:
[legend]

Protected Member Functions

 TlsAuthSessionTest ()
 
- Protected Member Functions inherited from PsidCookieTlsCryptV2Test
 PsidCookieTlsCryptV2Test ()
 
BufferAllocated make_wkc (const std::string &metadata, int metadata_type=0x00)
 Build the WKc a client appends to its handshake packets.
 
BufferAllocated wrap_wkc (const unsigned char *kc, const std::string &metadata, int metadata_type, size_t kc_size=OpenVPNStaticKey::KEY_SIZE)
 
BufferAllocated build_third_packet_tls_crypt_v2 (const ProtoSessionID &cli_psid, const ProtoSessionID &cookie_psid, const BufferAllocated &wkc, unsigned char op_field)
 Build the tls-crypt-v2 third packet of the 3-way handshake: a CONTROL_WKC_V1 wrapped with Kc, ACKing the server's HARD_RESET and echoing the cookie psid back, with the WKc appended.
 
BufferAllocated wrap_third_packet (const OpenVPNStaticKey &kc, const ProtoSessionID &cli_psid, const ProtoSessionID &cookie_psid, const BufferAllocated &wkc, unsigned char op_field, std::uint32_t own_pktid_be)
 
BufferAllocated build_foreign_third_packet (const ProtoSessionID &cookie_psid, std::uint32_t own_pktid_be=0)
 The handshake packet a client of this server can forge for another's address.
 
BufferAllocated build_first_packet_tls_crypt_v2 (const ProtoSessionID &cli_psid, const BufferAllocated &wkc)
 Build the tls-crypt-v2 first handshake packet: a CONTROL_HARD_RESET_CLIENT_V3 with the WKc behind the tls-crypt frame.
 
- Protected Member Functions inherited from PsidCookieInterceptTest
BufferAllocated build_third_packet_tls_auth (const ProtoSessionID &cli_psid, const ProtoSessionID &cookie_psid, std::uint32_t acked_pktid_be, std::uint32_t own_pktid_be, unsigned char ack_count, unsigned char op_field)
 
Fixture make_fixture ()
 
- Protected Member Functions inherited from PsidCookieTest
 PsidCookieTest ()
 
Time set_clock (Time setting)
 
Time advance_clock (uint64_t binary_ms)
 
void SetUp () override
 
void TearDown () override
 

Additional Inherited Members

- Static Protected Member Functions inherited from PsidCookieTlsCryptV2Test
static unsigned char wkc_v1_op_field ()
 the opcode of the third packet, the one whose WKc keys the session behind it
 
static unsigned char control_v1_op_field ()
 the opcode of the packets that follow, which carry no WKc to key a session from
 
- Protected Attributes inherited from PsidCookieTlsCryptV2Test
RCPtr< MetadataRecorderFactorymeta_factory
 
unsigned char client_key_raw_ [OpenVPNStaticKey::KEY_SIZE]
 
OpenVPNStaticKey client_key_
 Kc, as the client keys its tls-crypt instance.
 
OpenVPNStaticKey server_key_
 Ka/Ke, used here to wrap the WKc.
 
- Protected Attributes inherited from PsidCookieTest
ServerProto::Factory::Ptr spf
 the server factory each session's ProtoConfig is cloned from
 
std::unique_ptr< PsidCookieImplpcookie_impl
 
- Static Protected Attributes inherited from PsidCookieTlsCryptV2Test
static constexpr std::uint32_t SERVER_KEY_ID = 0x063FE634
 K_id of test/ssl/06/063FE634.key, the server key the WKc names.
 

Detailed Description

A plain tls-auth server: no tls-crypt of either version.

Its pre-filter is validate_tls_auth().

Definition at line 1154 of file test_psid_cookie.cpp.

Constructor & Destructor Documentation

◆ TlsAuthSessionTest()

TlsAuthSessionTest::TlsAuthSessionTest ( )
inlineprotected

Definition at line 1157 of file test_psid_cookie.cpp.


The documentation for this class was generated from the following file: