blob: 2bf11f4a1e9ca7a50186844d06b6ce4cba57f224 [file] [log] [blame]
/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
/**
* Copyright (c) 2013-2016 Regents of the University of California.
*
* This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
*
* ndn-cxx library is free software: you can redistribute it and/or modify it under the
* terms of the GNU Lesser General Public License as published by the Free Software
* Foundation, either version 3 of the License, or (at your option) any later version.
*
* ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
* WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
* PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
*
* You should have received copies of the GNU General Public License and GNU Lesser
* General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
* <http://www.gnu.org/licenses/>.
*
* See AUTHORS.md for complete list of ndn-cxx authors and contributors.
*/
#include "security/certificate-cache-ttl.hpp"
#include "face.hpp"
#include "util/time-unit-test-clock.hpp"
#include "boost-test.hpp"
#include "../unit-test-time-fixture.hpp"
namespace ndn {
namespace security {
namespace tests {
using namespace ndn::tests;
BOOST_AUTO_TEST_SUITE(Security)
BOOST_AUTO_TEST_SUITE(TestCertificateCacheTtl)
class CertificateCacheFixture : public UnitTestTimeFixture
{
public:
CertificateCacheFixture()
: scheduler(io)
, cache(make_shared<CertificateCacheTtl>(ref(io), time::seconds(1)))
{
cert1 = make_shared<v1::IdentityCertificate>();
Name certName1("/tmp/KEY/ksk-1/ID-CERT/1");
cert1->setName(certName1);
cert1->setFreshnessPeriod(time::milliseconds(500));
cert2 = make_shared<v1::IdentityCertificate>();
Name certName2("/tmp/KEY/ksk-2/ID-CERT/2");
cert2->setName(certName2);
cert2->setFreshnessPeriod(time::milliseconds(1000));
name1 = certName1.getPrefix(-1);
name2 = certName2.getPrefix(-1);
}
public:
Scheduler scheduler;
shared_ptr<CertificateCacheTtl> cache;
shared_ptr<v1::IdentityCertificate> cert1;
shared_ptr<v1::IdentityCertificate> cert2;
Name name1;
Name name2;
};
BOOST_FIXTURE_TEST_CASE(Expiration, CertificateCacheFixture)
{
cache->insertCertificate(cert1);
cache->insertCertificate(cert2);
advanceClocks(time::nanoseconds(1));
BOOST_CHECK_EQUAL(cache->getSize(), 2);
scheduler.scheduleEvent(time::milliseconds(200), [&] {
BOOST_CHECK_EQUAL(cache->getSize(), 2);
BOOST_CHECK_EQUAL(static_cast<bool>(cache->getCertificate(name1)), true);
BOOST_CHECK_EQUAL(static_cast<bool>(cache->getCertificate(name2)), true);
});
advanceClocks(time::milliseconds(200));
// cert1 should removed from the cache
scheduler.scheduleEvent(time::milliseconds(700), [&] {
BOOST_CHECK_EQUAL(static_cast<bool>(cache->getCertificate(name1)), false);
BOOST_CHECK_EQUAL(static_cast<bool>(cache->getCertificate(name2)), true);
});
advanceClocks(time::milliseconds(700));
BOOST_CHECK_EQUAL(cache->getSize(), 1);
advanceClocks(time::milliseconds(700));
BOOST_CHECK_EQUAL(cache->getSize(), 0);
}
BOOST_FIXTURE_TEST_CASE(TtlRefresh, CertificateCacheFixture)
{
cache->insertCertificate(cert1); // 500ms
advanceClocks(time::nanoseconds(1));
BOOST_CHECK_EQUAL(cache->getSize(), 1);
advanceClocks(time::milliseconds(400));
BOOST_CHECK_EQUAL(cache->getSize(), 1);
// Refresh certificate in cache
cache->insertCertificate(cert1); // +500ms
advanceClocks(time::nanoseconds(1));
BOOST_CHECK_EQUAL(cache->getSize(), 1);
advanceClocks(time::milliseconds(400));
BOOST_CHECK_EQUAL(cache->getSize(), 1);
advanceClocks(time::milliseconds(200));
BOOST_CHECK_EQUAL(cache->getSize(), 0);
}
BOOST_FIXTURE_TEST_CASE(Reset, CertificateCacheFixture)
{
cache->insertCertificate(cert1);
cache->insertCertificate(cert2);
advanceClocks(time::nanoseconds(1));
BOOST_CHECK_EQUAL(cache->getSize(), 2);
cache->reset();
advanceClocks(time::nanoseconds(1));
BOOST_CHECK_EQUAL(cache->getSize(), 0);
}
BOOST_AUTO_TEST_SUITE_END() // TestCertificateCacheTtl
BOOST_AUTO_TEST_SUITE_END() // Security
} // namespace tests
} // namespace security
} // namespace ndn