The Tor Browser / file comparison

comparison: toolkit/mozapps/extensions/test/browser/browser_updatessl.js

toolkit/mozapps/extensions/test/browser/browser_updatessl.js

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:af1d6f8d2b3c
1 /* Any copyright is dedicated to the Public Domain.
2 * http://creativecommons.org/publicdomain/zero/1.0/
3 */
4
5 let tempScope = {};
6 Components.utils.import("resource://gre/modules/addons/AddonUpdateChecker.jsm", tempScope);
7 let AddonUpdateChecker = tempScope.AddonUpdateChecker;
8
9 const updaterdf = RELATIVE_DIR + "browser_updatessl.rdf";
10 const redirect = RELATIVE_DIR + "redirect.sjs?";
11 const SUCCESS = 0;
12 const DOWNLOAD_ERROR = AddonUpdateChecker.ERROR_DOWNLOAD_ERROR;
13
14 const HTTP = "http://example.com/";
15 const HTTPS = "https://example.com/";
16 const NOCERT = "https://nocert.example.com/";
17 const SELFSIGNED = "https://self-signed.example.com/";
18 const UNTRUSTED = "https://untrusted.example.com/";
19 const EXPIRED = "https://expired.example.com/";
20
21 const PREF_UPDATE_REQUIREBUILTINCERTS = "extensions.update.requireBuiltInCerts";
22
23 var gTests = [];
24 var gStart = 0;
25 var gLast = 0;
26
27 var HTTPObserver = {
28 observeActivity: function(aChannel, aType, aSubtype, aTimestamp, aSizeData,
29 aStringData) {
30 aChannel.QueryInterface(Ci.nsIChannel);
31
32 dump("*** HTTP Activity 0x" + aType.toString(16) + " 0x" + aSubtype.toString(16) +
33 " " + aChannel.URI.spec + "\n");
34 }
35 };
36
37 function test() {
38 gStart = Date.now();
39 requestLongerTimeout(4);
40 waitForExplicitFinish();
41
42 let observerService = Cc["@mozilla.org/network/http-activity-distributor;1"].
43 getService(Ci.nsIHttpActivityDistributor);
44 observerService.addObserver(HTTPObserver);
45
46 registerCleanupFunction(function() {
47 observerService.removeObserver(HTTPObserver);
48 });
49
50 run_next_test();
51 }
52
53 function end_test() {
54 Services.prefs.clearUserPref(PREF_UPDATE_REQUIREBUILTINCERTS);
55
56 var cos = Cc["@mozilla.org/security/certoverride;1"].
57 getService(Ci.nsICertOverrideService);
58 cos.clearValidityOverride("nocert.example.com", -1);
59 cos.clearValidityOverride("self-signed.example.com", -1);
60 cos.clearValidityOverride("untrusted.example.com", -1);
61 cos.clearValidityOverride("expired.example.com", -1);
62
63 info("All tests completed in " + (Date.now() - gStart) + "ms");
64 finish();
65 }
66
67 function add_update_test(mainURL, redirectURL, expectedStatus) {
68 gTests.push([mainURL, redirectURL, expectedStatus]);
69 }
70
71 function run_update_tests(callback) {
72 function run_next_update_test() {
73 if (gTests.length == 0) {
74 callback();
75 return;
76 }
77 gLast = Date.now();
78
79 let [mainURL, redirectURL, expectedStatus] = gTests.shift();
80 if (redirectURL) {
81 var url = mainURL + redirect + redirectURL + updaterdf;
82 var message = "Should have seen the right result for an update check redirected from " +
83 mainURL + " to " + redirectURL;
84 }
85 else {
86 url = mainURL + updaterdf;
87 message = "Should have seen the right result for an update check from " +
88 mainURL;
89 }
90
91 AddonUpdateChecker.checkForUpdates("addon1@tests.mozilla.org",
92 null, url, {
93 onUpdateCheckComplete: function(updates) {
94 is(updates.length, 1, "Should be the right number of results");
95 is(SUCCESS, expectedStatus, message);
96 info("Update test ran in " + (Date.now() - gLast) + "ms");
97 run_next_update_test();
98 },
99
100 onUpdateCheckError: function(status) {
101 is(status, expectedStatus, message);
102 info("Update test ran in " + (Date.now() - gLast) + "ms");
103 run_next_update_test();
104 }
105 });
106 }
107
108 run_next_update_test();
109 }
110
111 // Add overrides for the bad certificates
112 function addCertOverrides() {
113 addCertOverride("nocert.example.com", Ci.nsICertOverrideService.ERROR_MISMATCH);
114 addCertOverride("self-signed.example.com", Ci.nsICertOverrideService.ERROR_UNTRUSTED);
115 addCertOverride("untrusted.example.com", Ci.nsICertOverrideService.ERROR_UNTRUSTED);
116 addCertOverride("expired.example.com", Ci.nsICertOverrideService.ERROR_TIME);
117 }
118
119 // Runs tests with built-in certificates required and no certificate exceptions.
120 add_test(function() {
121 // Tests that a simple update.rdf retrieval works as expected.
122 add_update_test(HTTP, null, SUCCESS);
123 add_update_test(HTTPS, null, DOWNLOAD_ERROR);
124 add_update_test(NOCERT, null, DOWNLOAD_ERROR);
125 add_update_test(SELFSIGNED, null, DOWNLOAD_ERROR);
126 add_update_test(UNTRUSTED, null, DOWNLOAD_ERROR);
127 add_update_test(EXPIRED, null, DOWNLOAD_ERROR);
128
129 // Tests that redirecting from http to other servers works as expected
130 add_update_test(HTTP, HTTP, SUCCESS);
131 add_update_test(HTTP, HTTPS, SUCCESS);
132 add_update_test(HTTP, NOCERT, DOWNLOAD_ERROR);
133 add_update_test(HTTP, SELFSIGNED, DOWNLOAD_ERROR);
134 add_update_test(HTTP, UNTRUSTED, DOWNLOAD_ERROR);
135 add_update_test(HTTP, EXPIRED, DOWNLOAD_ERROR);
136
137 // Tests that redirecting from valid https to other servers works as expected
138 add_update_test(HTTPS, HTTP, DOWNLOAD_ERROR);
139 add_update_test(HTTPS, HTTPS, DOWNLOAD_ERROR);
140 add_update_test(HTTPS, NOCERT, DOWNLOAD_ERROR);
141 add_update_test(HTTPS, SELFSIGNED, DOWNLOAD_ERROR);
142 add_update_test(HTTPS, UNTRUSTED, DOWNLOAD_ERROR);
143 add_update_test(HTTPS, EXPIRED, DOWNLOAD_ERROR);
144
145 // Tests that redirecting from nocert https to other servers works as expected
146 add_update_test(NOCERT, HTTP, DOWNLOAD_ERROR);
147 add_update_test(NOCERT, HTTPS, DOWNLOAD_ERROR);
148 add_update_test(NOCERT, NOCERT, DOWNLOAD_ERROR);
149 add_update_test(NOCERT, SELFSIGNED, DOWNLOAD_ERROR);
150 add_update_test(NOCERT, UNTRUSTED, DOWNLOAD_ERROR);
151 add_update_test(NOCERT, EXPIRED, DOWNLOAD_ERROR);
152
153 // Tests that redirecting from self-signed https to other servers works as expected
154 add_update_test(SELFSIGNED, HTTP, DOWNLOAD_ERROR);
155 add_update_test(SELFSIGNED, HTTPS, DOWNLOAD_ERROR);
156 add_update_test(SELFSIGNED, NOCERT, DOWNLOAD_ERROR);
157 add_update_test(SELFSIGNED, SELFSIGNED, DOWNLOAD_ERROR);
158 add_update_test(SELFSIGNED, UNTRUSTED, DOWNLOAD_ERROR);
159 add_update_test(SELFSIGNED, EXPIRED, DOWNLOAD_ERROR);
160
161 // Tests that redirecting from untrusted https to other servers works as expected
162 add_update_test(UNTRUSTED, HTTP, DOWNLOAD_ERROR);
163 add_update_test(UNTRUSTED, HTTPS, DOWNLOAD_ERROR);
164 add_update_test(UNTRUSTED, NOCERT, DOWNLOAD_ERROR);
165 add_update_test(UNTRUSTED, SELFSIGNED, DOWNLOAD_ERROR);
166 add_update_test(UNTRUSTED, UNTRUSTED, DOWNLOAD_ERROR);
167 add_update_test(UNTRUSTED, EXPIRED, DOWNLOAD_ERROR);
168
169 // Tests that redirecting from expired https to other servers works as expected
170 add_update_test(EXPIRED, HTTP, DOWNLOAD_ERROR);
171 add_update_test(EXPIRED, HTTPS, DOWNLOAD_ERROR);
172 add_update_test(EXPIRED, NOCERT, DOWNLOAD_ERROR);
173 add_update_test(EXPIRED, SELFSIGNED, DOWNLOAD_ERROR);
174 add_update_test(EXPIRED, UNTRUSTED, DOWNLOAD_ERROR);
175 add_update_test(EXPIRED, EXPIRED, DOWNLOAD_ERROR);
176
177 run_update_tests(run_next_test);
178 });
179
180 // Runs tests without requiring built-in certificates and no certificate
181 // exceptions.
182 add_test(function() {
183 Services.prefs.setBoolPref(PREF_UPDATE_REQUIREBUILTINCERTS, false);
184
185 // Tests that a simple update.rdf retrieval works as expected.
186 add_update_test(HTTP, null, SUCCESS);
187 add_update_test(HTTPS, null, SUCCESS);
188 add_update_test(NOCERT, null, DOWNLOAD_ERROR);
189 add_update_test(SELFSIGNED, null, DOWNLOAD_ERROR);
190 add_update_test(UNTRUSTED, null, DOWNLOAD_ERROR);
191 add_update_test(EXPIRED, null, DOWNLOAD_ERROR);
192
193 // Tests that redirecting from http to other servers works as expected
194 add_update_test(HTTP, HTTP, SUCCESS);
195 add_update_test(HTTP, HTTPS, SUCCESS);
196 add_update_test(HTTP, NOCERT, DOWNLOAD_ERROR);
197 add_update_test(HTTP, SELFSIGNED, DOWNLOAD_ERROR);
198 add_update_test(HTTP, UNTRUSTED, DOWNLOAD_ERROR);
199 add_update_test(HTTP, EXPIRED, DOWNLOAD_ERROR);
200
201 // Tests that redirecting from valid https to other servers works as expected
202 add_update_test(HTTPS, HTTP, DOWNLOAD_ERROR);
203 add_update_test(HTTPS, HTTPS, SUCCESS);
204 add_update_test(HTTPS, NOCERT, DOWNLOAD_ERROR);
205 add_update_test(HTTPS, SELFSIGNED, DOWNLOAD_ERROR);
206 add_update_test(HTTPS, UNTRUSTED, DOWNLOAD_ERROR);
207 add_update_test(HTTPS, EXPIRED, DOWNLOAD_ERROR);
208
209 // Tests that redirecting from nocert https to other servers works as expected
210 add_update_test(NOCERT, HTTP, DOWNLOAD_ERROR);
211 add_update_test(NOCERT, HTTPS, DOWNLOAD_ERROR);
212 add_update_test(NOCERT, NOCERT, DOWNLOAD_ERROR);
213 add_update_test(NOCERT, SELFSIGNED, DOWNLOAD_ERROR);
214 add_update_test(NOCERT, UNTRUSTED, DOWNLOAD_ERROR);
215 add_update_test(NOCERT, EXPIRED, DOWNLOAD_ERROR);
216
217 // Tests that redirecting from self-signed https to other servers works as expected
218 add_update_test(SELFSIGNED, HTTP, DOWNLOAD_ERROR);
219 add_update_test(SELFSIGNED, HTTPS, DOWNLOAD_ERROR);
220 add_update_test(SELFSIGNED, NOCERT, DOWNLOAD_ERROR);
221 add_update_test(SELFSIGNED, SELFSIGNED, DOWNLOAD_ERROR);
222 add_update_test(SELFSIGNED, UNTRUSTED, DOWNLOAD_ERROR);
223 add_update_test(SELFSIGNED, EXPIRED, DOWNLOAD_ERROR);
224
225 // Tests that redirecting from untrusted https to other servers works as expected
226 add_update_test(UNTRUSTED, HTTP, DOWNLOAD_ERROR);
227 add_update_test(UNTRUSTED, HTTPS, DOWNLOAD_ERROR);
228 add_update_test(UNTRUSTED, NOCERT, DOWNLOAD_ERROR);
229 add_update_test(UNTRUSTED, SELFSIGNED, DOWNLOAD_ERROR);
230 add_update_test(UNTRUSTED, UNTRUSTED, DOWNLOAD_ERROR);
231 add_update_test(UNTRUSTED, EXPIRED, DOWNLOAD_ERROR);
232
233 // Tests that redirecting from expired https to other servers works as expected
234 add_update_test(EXPIRED, HTTP, DOWNLOAD_ERROR);
235 add_update_test(EXPIRED, HTTPS, DOWNLOAD_ERROR);
236 add_update_test(EXPIRED, NOCERT, DOWNLOAD_ERROR);
237 add_update_test(EXPIRED, SELFSIGNED, DOWNLOAD_ERROR);
238 add_update_test(EXPIRED, UNTRUSTED, DOWNLOAD_ERROR);
239 add_update_test(EXPIRED, EXPIRED, DOWNLOAD_ERROR);
240
241 run_update_tests(run_next_test);
242 });
243
244 // Runs tests with built-in certificates required and all certificate exceptions.
245 add_test(function() {
246 Services.prefs.clearUserPref(PREF_UPDATE_REQUIREBUILTINCERTS);
247 addCertOverrides();
248
249 // Tests that a simple update.rdf retrieval works as expected.
250 add_update_test(HTTP, null, SUCCESS);
251 add_update_test(HTTPS, null, DOWNLOAD_ERROR);
252 add_update_test(NOCERT, null, DOWNLOAD_ERROR);
253 add_update_test(SELFSIGNED, null, DOWNLOAD_ERROR);
254 add_update_test(UNTRUSTED, null, DOWNLOAD_ERROR);
255 add_update_test(EXPIRED, null, DOWNLOAD_ERROR);
256
257 // Tests that redirecting from http to other servers works as expected
258 add_update_test(HTTP, HTTP, SUCCESS);
259 add_update_test(HTTP, HTTPS, SUCCESS);
260 add_update_test(HTTP, NOCERT, SUCCESS);
261 add_update_test(HTTP, SELFSIGNED, SUCCESS);
262 add_update_test(HTTP, UNTRUSTED, SUCCESS);
263 add_update_test(HTTP, EXPIRED, SUCCESS);
264
265 // Tests that redirecting from valid https to other servers works as expected
266 add_update_test(HTTPS, HTTP, DOWNLOAD_ERROR);
267 add_update_test(HTTPS, HTTPS, DOWNLOAD_ERROR);
268 add_update_test(HTTPS, NOCERT, DOWNLOAD_ERROR);
269 add_update_test(HTTPS, SELFSIGNED, DOWNLOAD_ERROR);
270 add_update_test(HTTPS, UNTRUSTED, DOWNLOAD_ERROR);
271 add_update_test(HTTPS, EXPIRED, DOWNLOAD_ERROR);
272
273 // Tests that redirecting from nocert https to other servers works as expected
274 add_update_test(NOCERT, HTTP, DOWNLOAD_ERROR);
275 add_update_test(NOCERT, HTTPS, DOWNLOAD_ERROR);
276 add_update_test(NOCERT, NOCERT, DOWNLOAD_ERROR);
277 add_update_test(NOCERT, SELFSIGNED, DOWNLOAD_ERROR);
278 add_update_test(NOCERT, UNTRUSTED, DOWNLOAD_ERROR);
279 add_update_test(NOCERT, EXPIRED, DOWNLOAD_ERROR);
280
281 // Tests that redirecting from self-signed https to other servers works as expected
282 add_update_test(SELFSIGNED, HTTP, DOWNLOAD_ERROR);
283 add_update_test(SELFSIGNED, HTTPS, DOWNLOAD_ERROR);
284 add_update_test(SELFSIGNED, NOCERT, DOWNLOAD_ERROR);
285 add_update_test(SELFSIGNED, SELFSIGNED, DOWNLOAD_ERROR);
286 add_update_test(SELFSIGNED, UNTRUSTED, DOWNLOAD_ERROR);
287 add_update_test(SELFSIGNED, EXPIRED, DOWNLOAD_ERROR);
288
289 // Tests that redirecting from untrusted https to other servers works as expected
290 add_update_test(UNTRUSTED, HTTP, DOWNLOAD_ERROR);
291 add_update_test(UNTRUSTED, HTTPS, DOWNLOAD_ERROR);
292 add_update_test(UNTRUSTED, NOCERT, DOWNLOAD_ERROR);
293 add_update_test(UNTRUSTED, SELFSIGNED, DOWNLOAD_ERROR);
294 add_update_test(UNTRUSTED, UNTRUSTED, DOWNLOAD_ERROR);
295 add_update_test(UNTRUSTED, EXPIRED, DOWNLOAD_ERROR);
296
297 // Tests that redirecting from expired https to other servers works as expected
298 add_update_test(EXPIRED, HTTP, DOWNLOAD_ERROR);
299 add_update_test(EXPIRED, HTTPS, DOWNLOAD_ERROR);
300 add_update_test(EXPIRED, NOCERT, DOWNLOAD_ERROR);
301 add_update_test(EXPIRED, SELFSIGNED, DOWNLOAD_ERROR);
302 add_update_test(EXPIRED, UNTRUSTED, DOWNLOAD_ERROR);
303 add_update_test(EXPIRED, EXPIRED, DOWNLOAD_ERROR);
304
305 run_update_tests(run_next_test);
306 });
307
308 // Runs tests without requiring built-in certificates and all certificate
309 // exceptions.
310 add_test(function() {
311 Services.prefs.setBoolPref(PREF_UPDATE_REQUIREBUILTINCERTS, false);
312
313 // Tests that a simple update.rdf retrieval works as expected.
314 add_update_test(HTTP, null, SUCCESS);
315 add_update_test(HTTPS, null, SUCCESS);
316 add_update_test(NOCERT, null, SUCCESS);
317 add_update_test(SELFSIGNED, null, SUCCESS);
318 add_update_test(UNTRUSTED, null, SUCCESS);
319 add_update_test(EXPIRED, null, SUCCESS);
320
321 // Tests that redirecting from http to other servers works as expected
322 add_update_test(HTTP, HTTP, SUCCESS);
323 add_update_test(HTTP, HTTPS, SUCCESS);
324 add_update_test(HTTP, NOCERT, SUCCESS);
325 add_update_test(HTTP, SELFSIGNED, SUCCESS);
326 add_update_test(HTTP, UNTRUSTED, SUCCESS);
327 add_update_test(HTTP, EXPIRED, SUCCESS);
328
329 // Tests that redirecting from valid https to other servers works as expected
330 add_update_test(HTTPS, HTTP, DOWNLOAD_ERROR);
331 add_update_test(HTTPS, HTTPS, SUCCESS);
332 add_update_test(HTTPS, NOCERT, SUCCESS);
333 add_update_test(HTTPS, SELFSIGNED, SUCCESS);
334 add_update_test(HTTPS, UNTRUSTED, SUCCESS);
335 add_update_test(HTTPS, EXPIRED, SUCCESS);
336
337 // Tests that redirecting from nocert https to other servers works as expected
338 add_update_test(NOCERT, HTTP, DOWNLOAD_ERROR);
339 add_update_test(NOCERT, HTTPS, SUCCESS);
340 add_update_test(NOCERT, NOCERT, SUCCESS);
341 add_update_test(NOCERT, SELFSIGNED, SUCCESS);
342 add_update_test(NOCERT, UNTRUSTED, SUCCESS);
343 add_update_test(NOCERT, EXPIRED, SUCCESS);
344
345 // Tests that redirecting from self-signed https to other servers works as expected
346 add_update_test(SELFSIGNED, HTTP, DOWNLOAD_ERROR);
347 add_update_test(SELFSIGNED, HTTPS, SUCCESS);
348 add_update_test(SELFSIGNED, NOCERT, SUCCESS);
349 add_update_test(SELFSIGNED, SELFSIGNED, SUCCESS);
350 add_update_test(SELFSIGNED, UNTRUSTED, SUCCESS);
351 add_update_test(SELFSIGNED, EXPIRED, SUCCESS);
352
353 // Tests that redirecting from untrusted https to other servers works as expected
354 add_update_test(UNTRUSTED, HTTP, DOWNLOAD_ERROR);
355 add_update_test(UNTRUSTED, HTTPS, SUCCESS);
356 add_update_test(UNTRUSTED, NOCERT, SUCCESS);
357 add_update_test(UNTRUSTED, SELFSIGNED, SUCCESS);
358 add_update_test(UNTRUSTED, UNTRUSTED, SUCCESS);
359 add_update_test(UNTRUSTED, EXPIRED, SUCCESS);
360
361 // Tests that redirecting from expired https to other servers works as expected
362 add_update_test(EXPIRED, HTTP, DOWNLOAD_ERROR);
363 add_update_test(EXPIRED, HTTPS, SUCCESS);
364 add_update_test(EXPIRED, NOCERT, SUCCESS);
365 add_update_test(EXPIRED, SELFSIGNED, SUCCESS);
366 add_update_test(EXPIRED, UNTRUSTED, SUCCESS);
367 add_update_test(EXPIRED, EXPIRED, SUCCESS);
368
369 run_update_tests(run_next_test);
370 });

Mercurial Repository: The Tor Browser

Europalab SCM Repository Server

mercurial