mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-25 19:15:34 +00:00
da8def8e13
The //go:build syntax was introduced in Go 1.17: https://go.dev/doc/go1.17#build-lines gofmt has kept the +build and go:build lines in sync since then, but enough time has passed. Time to remove them. Done with: perl -i -npe 's,^// \+build.*\n,,' $(git grep -l -F '+build') Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
112 lines
2.5 KiB
Go
112 lines
2.5 KiB
Go
//go:build glidertests
|
|
|
|
package ssh
|
|
|
|
import (
|
|
"net"
|
|
"strings"
|
|
"sync/atomic"
|
|
"testing"
|
|
|
|
gossh "github.com/tailscale/golang-x-crypto/ssh"
|
|
)
|
|
|
|
func newTestSessionWithOptions(t *testing.T, srv *Server, cfg *gossh.ClientConfig, options ...Option) (*gossh.Session, *gossh.Client, func()) {
|
|
for _, option := range options {
|
|
if err := srv.SetOption(option); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
return newTestSession(t, srv, cfg)
|
|
}
|
|
|
|
func TestPasswordAuth(t *testing.T) {
|
|
t.Parallel()
|
|
testUser := "testuser"
|
|
testPass := "testpass"
|
|
session, _, cleanup := newTestSessionWithOptions(t, &Server{
|
|
Handler: func(s Session) {
|
|
// noop
|
|
},
|
|
}, &gossh.ClientConfig{
|
|
User: testUser,
|
|
Auth: []gossh.AuthMethod{
|
|
gossh.Password(testPass),
|
|
},
|
|
HostKeyCallback: gossh.InsecureIgnoreHostKey(),
|
|
}, PasswordAuth(func(ctx Context, password string) bool {
|
|
if ctx.User() != testUser {
|
|
t.Fatalf("user = %#v; want %#v", ctx.User(), testUser)
|
|
}
|
|
if password != testPass {
|
|
t.Fatalf("user = %#v; want %#v", password, testPass)
|
|
}
|
|
return true
|
|
}))
|
|
defer cleanup()
|
|
if err := session.Run(""); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func TestPasswordAuthBadPass(t *testing.T) {
|
|
t.Parallel()
|
|
l := newLocalListener()
|
|
srv := &Server{Handler: func(s Session) {}}
|
|
srv.SetOption(PasswordAuth(func(ctx Context, password string) bool {
|
|
return false
|
|
}))
|
|
go srv.serveOnce(l)
|
|
_, err := gossh.Dial("tcp", l.Addr().String(), &gossh.ClientConfig{
|
|
User: "testuser",
|
|
Auth: []gossh.AuthMethod{
|
|
gossh.Password("testpass"),
|
|
},
|
|
HostKeyCallback: gossh.InsecureIgnoreHostKey(),
|
|
})
|
|
if err != nil {
|
|
if !strings.Contains(err.Error(), "unable to authenticate") {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
}
|
|
|
|
type wrappedConn struct {
|
|
net.Conn
|
|
written int32
|
|
}
|
|
|
|
func (c *wrappedConn) Write(p []byte) (n int, err error) {
|
|
n, err = c.Conn.Write(p)
|
|
atomic.AddInt32(&(c.written), int32(n))
|
|
return
|
|
}
|
|
|
|
func TestConnWrapping(t *testing.T) {
|
|
t.Parallel()
|
|
var wrapped *wrappedConn
|
|
session, _, cleanup := newTestSessionWithOptions(t, &Server{
|
|
Handler: func(s Session) {
|
|
// nothing
|
|
},
|
|
}, &gossh.ClientConfig{
|
|
User: "testuser",
|
|
Auth: []gossh.AuthMethod{
|
|
gossh.Password("testpass"),
|
|
},
|
|
HostKeyCallback: gossh.InsecureIgnoreHostKey(),
|
|
}, PasswordAuth(func(ctx Context, password string) bool {
|
|
return true
|
|
}), WrapConn(func(ctx Context, conn net.Conn) net.Conn {
|
|
wrapped = &wrappedConn{conn, 0}
|
|
return wrapped
|
|
}))
|
|
defer cleanup()
|
|
if err := session.Shell(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if atomic.LoadInt32(&(wrapped.written)) == 0 {
|
|
t.Fatal("wrapped conn not written to")
|
|
}
|
|
}
|