diff --git a/configure.ac b/configure.ac
index 001db2dc..03576e47 100644
--- a/configure.ac
+++ b/configure.ac
@@ -65,7 +65,7 @@ LIBZMQ_WITH_GCOV
# Checks for libraries
AC_CHECK_LIB([pthread], [pthread_create])
AC_CHECK_LIB([rt], [clock_gettime])
-AC_CHECK_LIB([sodium], [sodium_init])
+AC_CHECK_LIB([sodium], [sodium_init],,AC_MSG_WARN(libsodium is needed for CURVE security))
# Set pedantic
libzmq_pedantic="yes"
diff --git a/tests/Makefile.am b/tests/Makefile.am
index 8503677c..5619b01a 100644
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -23,6 +23,7 @@ noinst_PROGRAMS = test_pair_inproc \
test_disconnect_inproc \
test_ctx_options \
test_security \
+ test_security_curve \
test_iov
if !ON_MINGW
@@ -53,6 +54,7 @@ test_disconnect_inproc_SOURCES = test_disconnect_inproc.cpp
test_ctx_options_SOURCES = test_ctx_options.cpp
test_iov_SOURCES = test_iov.cpp
test_security_SOURCES = test_security.cpp
+test_security_curve_SOURCES = test_security_curve.cpp
if !ON_MINGW
test_shutdown_stress_SOURCES = test_shutdown_stress.cpp
test_pair_ipc_SOURCES = test_pair_ipc.cpp testutil.hpp
diff --git a/tests/test_security_curve.cpp b/tests/test_security_curve.cpp
new file mode 100644
index 00000000..7c685189
--- /dev/null
+++ b/tests/test_security_curve.cpp
@@ -0,0 +1,224 @@
+/*
+ Copyright (c) 2007-2013 Contributors as noted in the AUTHORS file
+
+ This file is part of 0MQ.
+
+ 0MQ is free software; you can redistribute it and/or modify it under
+ the terms of the GNU Lesser General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ 0MQ is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU Lesser General Public License for more details.
+
+ You should have received a copy of the GNU Lesser General Public License
+ along with this program. If not, see .
+*/
+
+#include "platform.hpp"
+#include
+#include
+#include "testutil.hpp"
+
+static void *
+zap_handler (void *zap)
+{
+ int rc, more;
+ size_t optlen;
+ zmq_msg_t version, seqno, domain, mechanism, key;
+ zmq_msg_t status_code, status_text, user_id;
+
+ // Version
+ rc = zmq_msg_init (&version);
+ assert (rc == 0);
+ rc = zmq_msg_recv (&version, zap, 0);
+ assert (rc == 3 && memcmp (zmq_msg_data (&version), "1.0", 3) == 0);
+ optlen = sizeof more;
+ rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen);
+ assert (rc == 0 && more == 1);
+
+ // Sequence number
+ rc = zmq_msg_init (&seqno);
+ assert (rc == 0);
+ rc = zmq_msg_recv (&seqno, zap, 0);
+ assert (rc != -1);
+ optlen = sizeof more;
+ rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen);
+ assert (rc == 0 && more == 1);
+
+ // Domain
+ rc = zmq_msg_init (&domain);
+ assert (rc == 0);
+ rc = zmq_msg_recv (&domain, zap, 0);
+ assert (rc != -1);
+ optlen = sizeof more;
+ rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen);
+ assert (rc == 0 && more == 1);
+
+ // Mechanism
+ rc = zmq_msg_init (&mechanism);
+ assert (rc == 0);
+ rc = zmq_msg_recv (&mechanism, zap, 0);
+ assert (rc == 5 && memcmp (zmq_msg_data (&mechanism), "CURVE", 5) == 0);
+ optlen = sizeof more;
+ rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen);
+ assert (rc == 0 && more == 1);
+
+ // Key
+ rc = zmq_msg_init (&key);
+ assert (rc == 0);
+ rc = zmq_msg_recv (&key, zap, 0);
+ optlen = sizeof more;
+ rc = zmq_getsockopt (zap, ZMQ_RCVMORE, &more, &optlen);
+ assert (rc == 0 && more == 0);
+
+ // Send response
+ rc = zmq_msg_send (&version, zap, ZMQ_SNDMORE);
+ assert (rc == 3);
+
+ rc = zmq_msg_send (&seqno, zap, ZMQ_SNDMORE);
+ assert (rc != -1);
+
+ rc = zmq_msg_init_size (&status_code, 3);
+ assert (rc == 0);
+ memcpy (zmq_msg_data (&status_code), "200", 3);
+ rc = zmq_msg_send (&status_code, zap, ZMQ_SNDMORE);
+ assert (rc == 3);
+
+ rc = zmq_msg_init (&status_text);
+ assert (rc == 0);
+ rc = zmq_msg_send (&status_text, zap, ZMQ_SNDMORE);
+ assert (rc == 0);
+
+ rc = zmq_msg_init (&user_id);
+ assert (rc == 0);
+ rc = zmq_msg_send (&user_id, zap, 0);
+ assert (rc == 0);
+
+ rc = zmq_msg_close (&domain);
+ assert (rc == 0);
+
+ rc = zmq_msg_close (&mechanism);
+ assert (rc == 0);
+
+ rc = zmq_msg_close (&key);
+ assert (rc == 0);
+
+ rc = zmq_close (zap);
+ assert (rc == 0);
+
+ return NULL;
+}
+
+int main (void)
+{
+#ifndef HAVE_LIBSODIUM
+ printf("Libsodium not availabile - skipping test.\n");
+ return 0;
+#endif
+ int rc;
+ size_t optsize;
+ int mechanism;
+ int as_server;
+
+ void *ctx = zmq_ctx_new ();
+ assert (ctx);
+
+ // Server socket will accept connections
+ void *server = zmq_socket (ctx, ZMQ_DEALER);
+ assert (server);
+
+ // Client socket that will try to connect to server
+ void *client = zmq_socket (ctx, ZMQ_DEALER);
+ assert (client);
+
+ as_server = 1;
+ rc = zmq_setsockopt(server, ZMQ_CURVE_SERVER, &as_server, sizeof(int));
+ // Test key from the zmq_curve man page.
+ uint8_t server_secret[32] = {
+ 0x8E, 0x0B, 0xDD, 0x69, 0x76, 0x28, 0xB9, 0x1D, 0x8F, 0x24,
+ 0x55, 0x87, 0xEE, 0x95, 0xC5, 0xB0, 0x4D, 0x48, 0x96, 0x3F,
+ 0x79, 0x25, 0x98, 0x77, 0xB4, 0x9C, 0xD9, 0x06, 0x3A, 0xEA,
+ 0xD3, 0xB7
+ };
+ rc = zmq_setsockopt(server, ZMQ_CURVE_SECRETKEY, server_secret, sizeof(server_secret));
+ assert(rc == 0);
+
+ // Test client keys from the zmq_curve man page.
+ uint8_t server_public[32] = {
+ 0x54, 0xFC, 0xBA, 0x24, 0xE9, 0x32, 0x49, 0x96, 0x93, 0x16,
+ 0xFB, 0x61, 0x7C, 0x87, 0x2B, 0xB0, 0xC1, 0xD1, 0xFF, 0x14,
+ 0x80, 0x04, 0x27, 0xC5, 0x94, 0xCB, 0xFA, 0xCF, 0x1B, 0xC2,
+ 0xD6, 0x52
+ };
+ rc = zmq_setsockopt(client, ZMQ_CURVE_SERVERKEY, server_public, sizeof(server_public));
+ assert(rc == 0);
+ uint8_t client_public[32] = {
+ 0xBB, 0x88, 0x47, 0x1D, 0x65, 0xE2, 0x65, 0x9B, 0x30, 0xC5,
+ 0x5A, 0x53, 0x21, 0xCE, 0xBB, 0x5A, 0xAB, 0x2B, 0x70, 0xA3,
+ 0x98, 0x64, 0x5C, 0x26, 0xDC, 0xA2, 0xB2, 0xFC, 0xB4, 0x3F,
+ 0xC5, 0x18
+ };
+ rc = zmq_setsockopt(client, ZMQ_CURVE_PUBLICKEY, client_public, sizeof(client_public));
+ assert(rc == 0);
+ uint8_t client_secret[32] = {
+ 0x7B, 0xB8, 0x64, 0xB4, 0x89, 0xAF, 0xA3, 0x67, 0x1F, 0xBE,
+ 0x69, 0x10, 0x1F, 0x94, 0xB3, 0x89, 0x72, 0xF2, 0x48, 0x16,
+ 0xDF, 0xB0, 0x1B, 0x51, 0x65, 0x6B, 0x3F, 0xEC, 0x8D, 0xFD,
+ 0x08, 0x88
+ };
+ rc = zmq_setsockopt(client, ZMQ_CURVE_SECRETKEY, client_secret, sizeof(client_secret));
+ assert(rc == 0);
+
+ // Test the client and server both have the right mechanism.
+ optsize = sizeof (int);
+ rc = zmq_getsockopt (client, ZMQ_MECHANISM, &mechanism, &optsize);
+ assert (rc == 0);
+ assert (mechanism == ZMQ_CURVE);
+ rc = zmq_getsockopt (server, ZMQ_MECHANISM, &mechanism, &optsize);
+ assert (rc == 0);
+ assert (mechanism == ZMQ_CURVE);
+
+ // Test the server bit on both client and server.
+ rc = zmq_getsockopt (client, ZMQ_CURVE_SERVER, &as_server, &optsize);
+ assert (rc == 0);
+ assert (as_server == 0);
+ rc = zmq_getsockopt (server, ZMQ_CURVE_SERVER, &as_server, &optsize);
+ assert (rc == 0);
+ assert (as_server == 1);
+
+ // Create and bind ZAP socket
+ void *zap = zmq_socket (ctx, ZMQ_REP);
+ assert (zap);
+
+ rc = zmq_bind (zap, "inproc://zeromq.zap.01");
+ assert (rc == 0);
+
+ // Spawn ZAP handler
+ pthread_t zap_thread;
+ rc = pthread_create (&zap_thread, NULL, &zap_handler, zap);
+ assert (rc == 0);
+
+ rc = zmq_bind (server, "tcp://*:9998");
+ assert (rc == 0);
+ rc = zmq_connect (client, "tcp://localhost:9998");
+ assert (rc == 0);
+
+ bounce (server, client);
+
+ rc = zmq_close (client);
+ assert (rc == 0);
+ rc = zmq_close (server);
+ assert (rc == 0);
+
+ // Wait until ZAP handler terminates.
+ pthread_join (zap_thread, NULL);
+
+ // Shutdown
+ rc = zmq_ctx_term (ctx);
+ assert (rc == 0);
+
+ return 0;
+}