Mercurial > hg > nginx-tests

comparison lib/Test/Nginx/HTTP3.pm @ 1938:e1059682aeef

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: fixed ClientHello with resending Initial QUIC packets. Previously it was rebuilt each time using distinct ClientHello.random resulting in different CRYPTO payload. As such, it led to TLS digest hash and derived secrets mismatch when resending Initial packet. Now ClientHello is built once and reused when resending Initial packets. Additionally, this required to preserve a generated secret value used in shared secret calculation as part of TLS key schedule. Previously it was regenerated when receiving a Retry packet, but this won't work with reused ClientHello as the resulting shared secrets won't match.
author Sergey Kandaurov <pluknet@nginx.com>
date Wed, 30 Aug 2023 02:22:58 +0400
parents 4d13c9e74d04
children aec72dcee93b
comparison
equal deleted inserted replaced
1937:2a0a6035a1af 1938:e1059682aeef
57 $self->{dynamic_encode} = []; 57 $self->{dynamic_encode} = [];
58 $self->{last_stream} = -4; 58 $self->{last_stream} = -4;
59 $self->{buf} = ''; 59 $self->{buf} = '';
60 60
61 $self->init(); 61 $self->init();
62 $self->init_key_schedule();
62 $self->retry(%extra) or return; 63 $self->retry(%extra) or return;
63 64
64 return $self; 65 return $self;
65 } 66 }
66 67
98 Test::Nginx::log_core('||', "prk = " . unpack("H*", $prk)); 99 Test::Nginx::log_core('||', "prk = " . unpack("H*", $prk));
99 100
100 $self->set_traffic_keys('tls13 client in', 'SHA256', 32, 0, 'w', $prk); 101 $self->set_traffic_keys('tls13 client in', 'SHA256', 32, 0, 'w', $prk);
101 $self->set_traffic_keys('tls13 server in', 'SHA256', 32, 0, 'r', $prk); 102 $self->set_traffic_keys('tls13 server in', 'SHA256', 32, 0, 'r', $prk);
102 103
103 $self->init_key_schedule();
104 $self->initial(); 104 $self->initial();
105 return $self if $extra{probe}; 105 return $self if $extra{probe};
106 $self->handshake() or return; 106 $self->handshake() or return;
107 107
108 # RFC 9204, 4.3.1. Set Dynamic Table Capacity 108 # RFC 9204, 4.3.1. Set Dynamic Table Capacity
132 $self->tls_generate_key(); 132 $self->tls_generate_key();
133 } 133 }
134 134
135 sub initial { 135 sub initial {
136 my ($self) = @_; 136 my ($self) = @_;
137 $self->{tlsm}{ch} = $self->build_tls_client_hello(); 137 $self->{tlsm}{ch} ||= $self->build_tls_client_hello();
138 my $ch = $self->{tlsm}{ch}; 138 my $ch = $self->{tlsm}{ch};
139 my $crypto = build_crypto($ch); 139 my $crypto = build_crypto($ch);
140 my $padding = 1200 - length($crypto); 140 my $padding = 1200 - length($crypto);
141 $padding = 0 if $padding < 0; 141 $padding = 0 if $padding < 0;
142 $padding = 0 if $self->{psk}{ed} && $self->{early_data}; 142 $padding = 0 if $self->{psk}{ed} && $self->{early_data};