diff --git a/configure.ac b/configure.ac index 001db2dc..03576e47 100644 --- a/configure.ac +++ b/configure.ac @@ -65,7 +65,7 @@ LIBZMQ_WITH_GCOV # Checks for libraries AC_CHECK_LIB([pthread], [pthread_create]) AC_CHECK_LIB([rt], [clock_gettime]) -AC_CHECK_LIB([sodium], [sodium_init]) +AC_CHECK_LIB([sodium], [sodium_init],,AC_MSG_WARN(libsodium is needed for CURVE security)) # Set pedantic libzmq_pedantic="yes" diff --git a/tests/Makefile.am b/tests/Makefile.am index 8503677c..5619b01a 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -23,6 +23,7 @@ noinst_PROGRAMS = test_pair_inproc \ test_disconnect_inproc \ test_ctx_options \ test_security \ + test_security_curve \ test_iov if !ON_MINGW @@ -53,6 +54,7 @@ test_disconnect_inproc_SOURCES = test_disconnect_inproc.cpp test_ctx_options_SOURCES = test_ctx_options.cpp test_iov_SOURCES = test_iov.cpp test_security_SOURCES = test_security.cpp +test_security_curve_SOURCES = test_security_curve.cpp if !ON_MINGW test_shutdown_stress_SOURCES = test_shutdown_stress.cpp test_pair_ipc_SOURCES = test_pair_ipc.cpp testutil.hpp diff --git a/tests/test_security_curve.cpp b/tests/test_security_curve.cpp new file mode 100644 index 00000000..7c685189 --- /dev/null +++ b/tests/test_security_curve.cpp @@ -0,0 +1,224 @@ +/* + Copyright (c) 2007-2013 Contributors as noted in the AUTHORS file + + This file is part of 0MQ. + + 0MQ is free software; you can redistribute it and/or modify it under + the terms of the GNU Lesser General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + 0MQ is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public License + along with this program. If not, see . +*/ + +#include "platform.hpp" +#include +#include +#include "testutil.hpp" + +static void * +zap_handler (void *zap) +{ + int rc, more; + size_t optlen; + zmq_msg_t version, seqno, domain, mechanism, key; + zmq_msg_t status_code, status_text, user_id; + + // Version + rc = zmq_msg_init (&version); + assert (rc == 0); + rc = zmq_msg_recv (&version, zap, 0); + assert (rc == 3 && memcmp (zmq_msg_data (&version), "1.0", 3) == 0); + optlen = sizeof more; + rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen); + assert (rc == 0 && more == 1); + + // Sequence number + rc = zmq_msg_init (&seqno); + assert (rc == 0); + rc = zmq_msg_recv (&seqno, zap, 0); + assert (rc != -1); + optlen = sizeof more; + rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen); + assert (rc == 0 && more == 1); + + // Domain + rc = zmq_msg_init (&domain); + assert (rc == 0); + rc = zmq_msg_recv (&domain, zap, 0); + assert (rc != -1); + optlen = sizeof more; + rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen); + assert (rc == 0 && more == 1); + + // Mechanism + rc = zmq_msg_init (&mechanism); + assert (rc == 0); + rc = zmq_msg_recv (&mechanism, zap, 0); + assert (rc == 5 && memcmp (zmq_msg_data (&mechanism), "CURVE", 5) == 0); + optlen = sizeof more; + rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen); + assert (rc == 0 && more == 1); + + // Key + rc = zmq_msg_init (&key); + assert (rc == 0); + rc = zmq_msg_recv (&key, zap, 0); + optlen = sizeof more; + rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen); + assert (rc == 0 && more == 0); + + // Send response + rc = zmq_msg_send (&version, zap, ZMQ_SNDMORE); + assert (rc == 3); + + rc = zmq_msg_send (&seqno, zap, ZMQ_SNDMORE); + assert (rc != -1); + + rc = zmq_msg_init_size (&status_code, 3); + assert (rc == 0); + memcpy (zmq_msg_data (&status_code), "200", 3); + rc = zmq_msg_send (&status_code, zap, ZMQ_SNDMORE); + assert (rc == 3); + + rc = zmq_msg_init (&status_text); + assert (rc == 0); + rc = zmq_msg_send (&status_text, zap, ZMQ_SNDMORE); + assert (rc == 0); + + rc = zmq_msg_init (&user_id); + assert (rc == 0); + rc = zmq_msg_send (&user_id, zap, 0); + assert (rc == 0); + + rc = zmq_msg_close (&domain); + assert (rc == 0); + + rc = zmq_msg_close (&mechanism); + assert (rc == 0); + + rc = zmq_msg_close (&key); + assert (rc == 0); + + rc = zmq_close (zap); + assert (rc == 0); + + return NULL; +} + +int main (void) +{ +#ifndef HAVE_LIBSODIUM + printf("Libsodium not availabile - skipping test.\n"); + return 0; +#endif + int rc; + size_t optsize; + int mechanism; + int as_server; + + void *ctx = zmq_ctx_new (); + assert (ctx); + + // Server socket will accept connections + void *server = zmq_socket (ctx, ZMQ_DEALER); + assert (server); + + // Client socket that will try to connect to server + void *client = zmq_socket (ctx, ZMQ_DEALER); + assert (client); + + as_server = 1; + rc = zmq_setsockopt(server, ZMQ_CURVE_SERVER, &as_server, sizeof(int)); + // Test key from the zmq_curve man page. + uint8_t server_secret[32] = { + 0x8E, 0x0B, 0xDD, 0x69, 0x76, 0x28, 0xB9, 0x1D, 0x8F, 0x24, + 0x55, 0x87, 0xEE, 0x95, 0xC5, 0xB0, 0x4D, 0x48, 0x96, 0x3F, + 0x79, 0x25, 0x98, 0x77, 0xB4, 0x9C, 0xD9, 0x06, 0x3A, 0xEA, + 0xD3, 0xB7 + }; + rc = zmq_setsockopt(server, ZMQ_CURVE_SECRETKEY, server_secret, sizeof(server_secret)); + assert(rc == 0); + + // Test client keys from the zmq_curve man page. + uint8_t server_public[32] = { + 0x54, 0xFC, 0xBA, 0x24, 0xE9, 0x32, 0x49, 0x96, 0x93, 0x16, + 0xFB, 0x61, 0x7C, 0x87, 0x2B, 0xB0, 0xC1, 0xD1, 0xFF, 0x14, + 0x80, 0x04, 0x27, 0xC5, 0x94, 0xCB, 0xFA, 0xCF, 0x1B, 0xC2, + 0xD6, 0x52 + }; + rc = zmq_setsockopt(client, ZMQ_CURVE_SERVERKEY, server_public, sizeof(server_public)); + assert(rc == 0); + uint8_t client_public[32] = { + 0xBB, 0x88, 0x47, 0x1D, 0x65, 0xE2, 0x65, 0x9B, 0x30, 0xC5, + 0x5A, 0x53, 0x21, 0xCE, 0xBB, 0x5A, 0xAB, 0x2B, 0x70, 0xA3, + 0x98, 0x64, 0x5C, 0x26, 0xDC, 0xA2, 0xB2, 0xFC, 0xB4, 0x3F, + 0xC5, 0x18 + }; + rc = zmq_setsockopt(client, ZMQ_CURVE_PUBLICKEY, client_public, sizeof(client_public)); + assert(rc == 0); + uint8_t client_secret[32] = { + 0x7B, 0xB8, 0x64, 0xB4, 0x89, 0xAF, 0xA3, 0x67, 0x1F, 0xBE, + 0x69, 0x10, 0x1F, 0x94, 0xB3, 0x89, 0x72, 0xF2, 0x48, 0x16, + 0xDF, 0xB0, 0x1B, 0x51, 0x65, 0x6B, 0x3F, 0xEC, 0x8D, 0xFD, + 0x08, 0x88 + }; + rc = zmq_setsockopt(client, ZMQ_CURVE_SECRETKEY, client_secret, sizeof(client_secret)); + assert(rc == 0); + + // Test the client and server both have the right mechanism. + optsize = sizeof (int); + rc = zmq_getsockopt (client, ZMQ_MECHANISM, &mechanism, &optsize); + assert (rc == 0); + assert (mechanism == ZMQ_CURVE); + rc = zmq_getsockopt (server, ZMQ_MECHANISM, &mechanism, &optsize); + assert (rc == 0); + assert (mechanism == ZMQ_CURVE); + + // Test the server bit on both client and server. + rc = zmq_getsockopt (client, ZMQ_CURVE_SERVER, &as_server, &optsize); + assert (rc == 0); + assert (as_server == 0); + rc = zmq_getsockopt (server, ZMQ_CURVE_SERVER, &as_server, &optsize); + assert (rc == 0); + assert (as_server == 1); + + // Create and bind ZAP socket + void *zap = zmq_socket (ctx, ZMQ_REP); + assert (zap); + + rc = zmq_bind (zap, "inproc://zeromq.zap.01"); + assert (rc == 0); + + // Spawn ZAP handler + pthread_t zap_thread; + rc = pthread_create (&zap_thread, NULL, &zap_handler, zap); + assert (rc == 0); + + rc = zmq_bind (server, "tcp://*:9998"); + assert (rc == 0); + rc = zmq_connect (client, "tcp://localhost:9998"); + assert (rc == 0); + + bounce (server, client); + + rc = zmq_close (client); + assert (rc == 0); + rc = zmq_close (server); + assert (rc == 0); + + // Wait until ZAP handler terminates. + pthread_join (zap_thread, NULL); + + // Shutdown + rc = zmq_ctx_term (ctx); + assert (rc == 0); + + return 0; +}