77 lines
2.4 KiB
JavaScript
77 lines
2.4 KiB
JavaScript
|
const test = require("node:test");
|
||
|
|
const assert = require("node:assert/strict");
|
||
|
|
const crypto = require("node:crypto");
|
||
|
|
|
||
|
|
const {
|
||
|
|
installBoringSslDhCompat,
|
||
|
|
MODP_GROUP_PRIMES,
|
||
|
|
} = require("./boringSslDhCompat.cjs");
|
||
|
|
|
||
|
|
test("falls back to an explicit-prime DH when the runtime lacks a named group", () => {
|
||
|
|
// Simulate BoringSSL: the named lookup throws "Unknown DH group".
|
||
|
|
const target = {
|
||
|
|
createDiffieHellmanGroup(name) {
|
||
|
|
throw new Error(`Unknown DH group: ${name}`);
|
||
|
|
},
|
||
|
|
};
|
||
|
|
assert.equal(installBoringSslDhCompat(target), true);
|
||
|
|
|
||
|
|
const dh = target.createDiffieHellmanGroup("modp2");
|
||
|
|
// The fallback group uses the exact RFC 2409 group1 prime.
|
||
|
|
assert.equal(dh.getPrime("hex").toUpperCase(), MODP_GROUP_PRIMES.modp2);
|
||
|
|
|
||
|
|
// And it performs a real, correct DH exchange.
|
||
|
|
const peer = crypto.createDiffieHellman(
|
||
|
|
Buffer.from(MODP_GROUP_PRIMES.modp2, "hex"),
|
||
|
|
Buffer.from([2]),
|
||
|
|
);
|
||
|
|
const ourPublic = dh.generateKeys();
|
||
|
|
const peerPublic = peer.generateKeys();
|
||
|
|
assert.ok(dh.computeSecret(peerPublic).equals(peer.computeSecret(ourPublic)));
|
||
|
|
});
|
||
|
|
|
||
|
|
test("uses the runtime's group when the name resolves (no fallback)", () => {
|
||
|
|
let calls = 0;
|
||
|
|
const sentinel = Symbol("native-group");
|
||
|
|
const target = {
|
||
|
|
createDiffieHellmanGroup() {
|
||
|
|
calls += 1;
|
||
|
|
return sentinel;
|
||
|
|
},
|
||
|
|
};
|
||
|
|
installBoringSslDhCompat(target);
|
||
|
|
|
||
|
|
assert.equal(target.createDiffieHellmanGroup("modp2"), sentinel);
|
||
|
|
assert.equal(calls, 1);
|
||
|
|
});
|
||
|
|
|
||
|
|
test("rethrows the original error for groups it cannot back", () => {
|
||
|
|
const target = {
|
||
|
|
createDiffieHellmanGroup() {
|
||
|
|
throw new Error("Unknown DH group");
|
||
|
|
},
|
||
|
|
};
|
||
|
|
installBoringSslDhCompat(target);
|
||
|
|
|
||
|
|
assert.throws(() => target.createDiffieHellmanGroup("modp-nonexistent"), /Unknown DH group/);
|
||
|
|
});
|
||
|
|
|
||
|
|
test("install is idempotent", () => {
|
||
|
|
const target = {
|
||
|
|
createDiffieHellmanGroup() {
|
||
|
|
return null;
|
||
|
|
},
|
||
|
|
};
|
||
|
|
assert.equal(installBoringSslDhCompat(target), true);
|
||
|
|
assert.equal(installBoringSslDhCompat(target), false);
|
||
|
|
});
|
||
|
|
|
||
|
|
test("on this (OpenSSL) runtime the real modp2 still works through the shim", () => {
|
||
|
|
// Sanity check against the actual crypto module: installing must not break the
|
||
|
|
// normal path where the runtime resolves the group by name.
|
||
|
|
const localCrypto = require("node:crypto");
|
||
|
|
installBoringSslDhCompat(localCrypto);
|
||
|
|
const dh = localCrypto.createDiffieHellmanGroup("modp2");
|
||
|
|
assert.equal(dh.getPrime("hex").toUpperCase(), MODP_GROUP_PRIMES.modp2);
|
||
|
|
});
|