1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
package org.onap.ccsdk.sli.core.utils.common;
import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertTrue;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLSession;
import org.junit.Test;
import org.mockito.Mockito;
public class AcceptIpAddressHostNameVerifierTest {
@Test
public void testVerify() {
HostnameVerifier hv = new AcceptIpAddressHostNameVerifier();
SSLSession sslSession = Mockito.mock(SSLSession.class);
// Test that IPv4 style address is accepted
assertTrue(hv.verify("127.0.0.1", sslSession));
// Test that IPv6 style addresses are also accepted
assertTrue(hv.verify("2001:db8:3333:4444:5555:6666:7777:8888", sslSession));
assertTrue(hv.verify("2001:db8:3333:4444:CCCC:DDDD:EEEE:FFFF", sslSession));
assertTrue(hv.verify("2001:db8::", sslSession));
assertTrue(hv.verify("::1234:5678", sslSession));
assertTrue(hv.verify("2001:db8::1234:5678", sslSession));
assertTrue(hv.verify("::1", sslSession));
// Test that localhost is accepted
assertTrue(hv.verify("localhost", sslSession));
// Test that FQDN is not accepted (since there is no certificate)
assertFalse(hv.verify("bogus.org", sslSession));
// Repeat tests with verification disabled via arg to constructor
hv = new AcceptIpAddressHostNameVerifier(true);
// Test that IPv4 style address is accepted
assertTrue(hv.verify("127.0.0.1", sslSession));
// Test that IPv6 style addresses are also accepted
assertTrue(hv.verify("2001:db8:3333:4444:5555:6666:7777:8888", sslSession));
assertTrue(hv.verify("2001:db8:3333:4444:CCCC:DDDD:EEEE:FFFF", sslSession));
assertTrue(hv.verify("2001:db8::", sslSession));
assertTrue(hv.verify("::1234:5678", sslSession));
assertTrue(hv.verify("2001:db8::1234:5678", sslSession));
assertTrue(hv.verify("::1", sslSession));
// Test that localhost is accepted
assertTrue(hv.verify("localhost", sslSession));
// Test that FQDN is accepted (since verification is disabled)
assertTrue(hv.verify("bogus.org", sslSession));
// Repeat tests with verification disabled via arg to constructor
System.setProperty(AcceptIpAddressHostNameVerifier.DISABLE_HOSTNAME_VERIFICATION, "true");
hv = new AcceptIpAddressHostNameVerifier();
// Test that IPv4 style address is accepted
assertTrue(hv.verify("127.0.0.1", sslSession));
// Test that IPv6 style addresses are also accepted
assertTrue(hv.verify("2001:db8:3333:4444:5555:6666:7777:8888", sslSession));
assertTrue(hv.verify("2001:db8:3333:4444:CCCC:DDDD:EEEE:FFFF", sslSession));
assertTrue(hv.verify("2001:db8::", sslSession));
assertTrue(hv.verify("::1234:5678", sslSession));
assertTrue(hv.verify("2001:db8::1234:5678", sslSession));
assertTrue(hv.verify("::1", sslSession));
// Test that localhost is accepted
assertTrue(hv.verify("localhost", sslSession));
// Test that FQDN is accepted (since verification is disabled)
assertTrue(hv.verify("bogus.org", sslSession));
}
}
|
