wip: using generated certs

* Related #8

[ci skip]

Author: tegefaulkes

tests/QUICClient.test.ts

@@ -9,56 +9,10 @@ import * as utils from '@/utils';
 import * as testsUtils from './utils';
 import * as tls from 'tls';
 import * as errors from '@/errors';
+import { fc } from '@fast-check/jest';
+import * as tlsUtils from './tlsUtils';
 
 
-const certChain = `
------BEGIN CERTIFICATE-----
-MIIC0TCCAoOgAwIBAgIQBkNidOqLcACYmcuYTfBvfzAFBgMrZXAwQDE+MDwGA1UE
-AxM1dmxzanBiamQ3MDN2MXVlYnU5ZDFxZWs1ZTE5ZDYxMDBkOG44cXBjMWdraG9q
-dXRsc2ExNjAwHhcNMjMwNDEyMDMzNjQ2WhcNMjMwNDEyMDM1MzI2WjBAMT4wPAYD
-VQQDEzV2ZjlrZ2w5MTJ0MmxkaGNsaG1vbmo4ajE5MWU4NzBrNzJjM2Qxb2Zrc2Vl
-ZGNuaDduYTRsZzAqMAUGAytlcAMhAHppCqQi6KrYsrG2LzRMKQuQcFDiYNocPpxz
-msvE91Ero4IBkTCCAY0wDAYDVR0TBAUwAwEB/zALBgNVHQ8EBAMCAf4wRQYDVR0l
-BD4wPAYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYIKwYBBQUHAwQGCCsG
-AQUFBwMIBggrBgEFBQcDCTCBlgYDVR0RBIGOMIGLgjV2ZjlrZ2w5MTJ0MmxkaGNs
-aG1vbmo4ajE5MWU4NzBrNzJjM2Qxb2Zrc2VlZGNuaDduYTRsZ4cEfwAAAYcQAAAA
-AAAAAAAAAAAAAAAAAYY6cGs6Ly92ZjlrZ2w5MTJ0MmxkaGNsaG1vbmo4ajE5MWU4
-NzBrNzJjM2Qxb2Zrc2VlZGNuaDduYTRsZzAdBgNVHQ4EFgQUw/bBoGFsa35sm6vr
-tUP2DFb4rvUwHgYLKwYBBAGDvk8CAgEEDxYNMS4wLjEtYWxwaGEuMDBRBgsrBgEE
-AYO+TwICAgRCBEBBhLfXUK22guEGmVaeOydwKJTpkC/EqXPrPiKAwnMcOqwmaADJ
-Tf3qeF8jCUTNkSzfSosSiZVQZTd7hZ+3aXsLMAUGAytlcANBAFOzcMmuaar9ddXr
-Klgb0rFviTYrBJcJ8B9ZfGa55NZm/IP0tlZEfg1IHzae/ca6aDc4S9Tq+6QzaEqt
-QNWLTAw=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIC0TCCAoOgAwIBAgIQBkNidOiwcACGVfU86PK1vTAFBgMrZXAwQDE+MDwGA1UE
-AxM1dmxzanBiamQ3MDN2MXVlYnU5ZDFxZWs1ZTE5ZDYxMDBkOG44cXBjMWdraG9q
-dXRsc2ExNjAwHhcNMjMwNDEyMDMzNjQ2WhcNMjQwNDExMDMzNjQ2WjBAMT4wPAYD
-VQQDEzV2bHNqcGJqZDcwM3YxdWVidTlkMXFlazVlMTlkNjEwMGQ4bjhxcGMxZ2to
-b2p1dGxzYTE2MDAqMAUGAytlcAMhAK8nlc2nAP4fOX5LQ6dQrgpaYIANRdGssDCk
-cT92vFBMo4IBkTCCAY0wDAYDVR0TBAUwAwEB/zALBgNVHQ8EBAMCAf4wRQYDVR0l
-BD4wPAYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYIKwYBBQUHAwQGCCsG
-AQUFBwMIBggrBgEFBQcDCTCBlgYDVR0RBIGOMIGLgjV2bHNqcGJqZDcwM3YxdWVi
-dTlkMXFlazVlMTlkNjEwMGQ4bjhxcGMxZ2tob2p1dGxzYTE2MIcEfwAAAYcQAAAA
-AAAAAAAAAAAAAAAAAYY6cGs6Ly92bHNqcGJqZDcwM3YxdWVidTlkMXFlazVlMTlk
-NjEwMGQ4bjhxcGMxZ2tob2p1dGxzYTE2MDAdBgNVHQ4EFgQUa4ZvvTwywvz85bcu
-4iizM9fViB8wHgYLKwYBBAGDvk8CAgEEDxYNMS4wLjEtYWxwaGEuMDBRBgsrBgEE
-AYO+TwICAgRCBEBOYl4h6T/dslmDGM0nXMagUJisoVu3TRrbfPkvlBCdc4KUTree
-jedorMB3d8+L1WV1mCr5BzUChESFZ8NOPHkBMAUGAytlcANBAPyIki/6vOsIz/T6
-i2J07zvMs9omg7Kjn1HS4M4MSzwljBvMF3VY7Q2fbGWz1IAZAWwmO9JvQv3boejZ
-mw7iaQw=
------END CERTIFICATE-----
-`
-const privateKey = `
------BEGIN PRIVATE KEY-----
-MC4CAQAwBQYDK2VwBCIEIPX4FqPs5hDcshMDvEQGFsWyrySEGY3G3eSzTXBEFkrG
------END PRIVATE KEY-----
-`
-const tlsConfig = {
-  certChainPem: certChain,
-  privKeyPem: privateKey,
-}
-
 describe(QUICClient.name, () => {
   const logger = new Logger(`${QUICClient.name} Test`, LogLevel.WARN, [
     new StreamHandler(),
@@ -129,9 +83,14 @@ describe(QUICClient.name, () => {
     resolveStreamEventP = resolveP;
   };
 
-  // We need to test the stream making
+  let tlsConfig: {
+    certChainPem: string,
+    privKeyPem: string,
+  };
 
+  // We need to test the stream making
   beforeEach(async () => {
+    tlsConfig = await fc.sample(tlsUtils.tlsConfigArb(), 1)[0]
     crypto = {
       key: await testsUtils.generateKey(),
       ops: {

tests/playground.test.ts renamed to tests/tlsUtils.ts

@@ -1,57 +1,11 @@
-import { quiche } from '@/native';
 import * as x509 from '@peculiar/x509';
 import * as asn1 from '@peculiar/asn1-schema';
 import * as asn1X509 from '@peculiar/asn1-x509';
 import * as asn1Pkcs8 from '@peculiar/asn1-pkcs8';
-import { testProp, fc } from '@fast-check/jest';
+import { fc } from '@fast-check/jest';
 import { X509Certificate } from '@peculiar/x509';
 import { Crypto } from '@peculiar/webcrypto';
 
-const certChain = `
------BEGIN CERTIFICATE-----
-MIIC0TCCAoOgAwIBAgIQBkNidOqLcACYmcuYTfBvfzAFBgMrZXAwQDE+MDwGA1UE
-AxM1dmxzanBiamQ3MDN2MXVlYnU5ZDFxZWs1ZTE5ZDYxMDBkOG44cXBjMWdraG9q
-dXRsc2ExNjAwHhcNMjMwNDEyMDMzNjQ2WhcNMjMwNDEyMDM1MzI2WjBAMT4wPAYD
-VQQDEzV2ZjlrZ2w5MTJ0MmxkaGNsaG1vbmo4ajE5MWU4NzBrNzJjM2Qxb2Zrc2Vl
-ZGNuaDduYTRsZzAqMAUGAytlcAMhAHppCqQi6KrYsrG2LzRMKQuQcFDiYNocPpxz
-msvE91Ero4IBkTCCAY0wDAYDVR0TBAUwAwEB/zALBgNVHQ8EBAMCAf4wRQYDVR0l
-BD4wPAYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYIKwYBBQUHAwQGCCsG
-AQUFBwMIBggrBgEFBQcDCTCBlgYDVR0RBIGOMIGLgjV2ZjlrZ2w5MTJ0MmxkaGNs
-aG1vbmo4ajE5MWU4NzBrNzJjM2Qxb2Zrc2VlZGNuaDduYTRsZ4cEfwAAAYcQAAAA
-AAAAAAAAAAAAAAAAAYY6cGs6Ly92ZjlrZ2w5MTJ0MmxkaGNsaG1vbmo4ajE5MWU4
-NzBrNzJjM2Qxb2Zrc2VlZGNuaDduYTRsZzAdBgNVHQ4EFgQUw/bBoGFsa35sm6vr
-tUP2DFb4rvUwHgYLKwYBBAGDvk8CAgEEDxYNMS4wLjEtYWxwaGEuMDBRBgsrBgEE
-AYO+TwICAgRCBEBBhLfXUK22guEGmVaeOydwKJTpkC/EqXPrPiKAwnMcOqwmaADJ
-Tf3qeF8jCUTNkSzfSosSiZVQZTd7hZ+3aXsLMAUGAytlcANBAFOzcMmuaar9ddXr
-Klgb0rFviTYrBJcJ8B9ZfGa55NZm/IP0tlZEfg1IHzae/ca6aDc4S9Tq+6QzaEqt
-QNWLTAw=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIC0TCCAoOgAwIBAgIQBkNidOiwcACGVfU86PK1vTAFBgMrZXAwQDE+MDwGA1UE
-AxM1dmxzanBiamQ3MDN2MXVlYnU5ZDFxZWs1ZTE5ZDYxMDBkOG44cXBjMWdraG9q
-dXRsc2ExNjAwHhcNMjMwNDEyMDMzNjQ2WhcNMjQwNDExMDMzNjQ2WjBAMT4wPAYD
-VQQDEzV2bHNqcGJqZDcwM3YxdWVidTlkMXFlazVlMTlkNjEwMGQ4bjhxcGMxZ2to
-b2p1dGxzYTE2MDAqMAUGAytlcAMhAK8nlc2nAP4fOX5LQ6dQrgpaYIANRdGssDCk
-cT92vFBMo4IBkTCCAY0wDAYDVR0TBAUwAwEB/zALBgNVHQ8EBAMCAf4wRQYDVR0l
-BD4wPAYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYIKwYBBQUHAwQGCCsG
-AQUFBwMIBggrBgEFBQcDCTCBlgYDVR0RBIGOMIGLgjV2bHNqcGJqZDcwM3YxdWVi
-dTlkMXFlazVlMTlkNjEwMGQ4bjhxcGMxZ2tob2p1dGxzYTE2MIcEfwAAAYcQAAAA
-AAAAAAAAAAAAAAAAAYY6cGs6Ly92bHNqcGJqZDcwM3YxdWVidTlkMXFlazVlMTlk
-NjEwMGQ4bjhxcGMxZ2tob2p1dGxzYTE2MDAdBgNVHQ4EFgQUa4ZvvTwywvz85bcu
-4iizM9fViB8wHgYLKwYBBAGDvk8CAgEEDxYNMS4wLjEtYWxwaGEuMDBRBgsrBgEE
-AYO+TwICAgRCBEBOYl4h6T/dslmDGM0nXMagUJisoVu3TRrbfPkvlBCdc4KUTree
-jedorMB3d8+L1WV1mCr5BzUChESFZ8NOPHkBMAUGAytlcANBAPyIki/6vOsIz/T6
-i2J07zvMs9omg7Kjn1HS4M4MSzwljBvMF3VY7Q2fbGWz1IAZAWwmO9JvQv3boejZ
-mw7iaQw=
------END CERTIFICATE-----
-`
-
-const privateKey = `
------BEGIN PRIVATE KEY-----
-MC4CAQAwBQYDK2VwBCIEIPX4FqPs5hDcshMDvEQGFsWyrySEGY3G3eSzTXBEFkrG
------END PRIVATE KEY-----
-`
-
 /**
  * WebCrypto polyfill from @peculiar/webcrypto
  * This behaves differently with respect to Ed25519 keys
@@ -282,8 +236,8 @@ async function createTLSConfigWithChain(
   keyPairs: Array<KeyPair>,
   generateCertId?: () => string,
 ): Promise<{
-  keyPrivatePem: string;
   certChainPem: string;
+  privKeyPem: string;
 }> {
   if (keyPairs.length === 0) throw Error('Must have at least 1 keypair');
   let num = 0;
@@ -313,38 +267,44 @@ async function createTLSConfigWithChain(
   }
 
   return {
-    keyPrivatePem: privateKeyToPEM(previousKeyPair!.privateKey),
+    privKeyPem: privateKeyToPEM(previousKeyPair!.privateKey),
     certChainPem: certChainPEM,
   };
 }
 
-describe('Playground tests', () => {
-  test('someTest', async () => {
-    // console.log(quiche.Config.withBoringSslCtx);
-    const config = quiche.Config.withBoringSslCtx(
-      null, //Buffer.from(certChain),
-      null, //Buffer.from(privateKey),
-    );
-    config.grease(true);
-    config.verifyPeer(true);
+const privateKeyArb = fc.uint8Array({
+  minLength: 32,
+  maxLength: 32,
+}).map(v => Buffer.from(v))
 
-    console.log(config);
-  })
+// FIXME: Public key should be derived from private key
+const publicKeyArb = (
+  privateKey: fc.Arbitrary<Buffer> = privateKeyArb,
+) => privateKey.map(privateKey => {
+  const publicKey = Buffer.from(privateKey);
+  publicKey.reverse();
+  publicKey[0] = publicKey[0] += 1;
+  return publicKey;
+})
 
-  test('generate a certificate', async () => {
+const keyPairArb = (
+  privateKey: fc.Arbitrary<Buffer> = privateKeyArb,
+): fc.Arbitrary<KeyPair> => privateKey.chain( privateKey =>  fc.record({
+  privateKey: fc.constant(privateKey),
+  publicKey: publicKeyArb(fc.constant(privateKey)),
+}));
 
-    const tlsConfig = await createTLSConfigWithChain(
-      [
-        {
-          privateKey: Buffer.alloc(32, 0x01),
-          publicKey: Buffer.alloc(32, 0x02),
-        },
-      ],
-    );
-    console.log(tlsConfig);
-  })
+const keyPairsArb = fc.array(keyPairArb(), {minLength: 1, size: 'xsmall'});
 
-  testProp.skip('asd', [fc.integer()], async (int) => {
-    console.log(int);
-  })
-});
+const tlsConfigArb = (keyPairs: fc.Arbitrary<Array<KeyPair>> = keyPairsArb) =>
+  keyPairs.map(async keyPairs => await createTLSConfigWithChain(keyPairs))
+
+
+export {
+  generateCertificate,
+  privateKeyArb,
+  publicKeyArb,
+  keyPairArb,
+  keyPairsArb,
+  tlsConfigArb,
+}