Function TestMutuallyAuthenticatedFailure

http/integration_test.go:188–235

(t *testing.T)

}

func TestMutuallyAuthenticatedFailure(t *testing.T) {
	caPrivKey, caCert, caCertBytes, err := createCA()
	if err != nil {
		assert.Fail(t, "failed to create CA", err)
		return
	}
	serverPrivKey, serverCert, err := createSignedCert(
		[]x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
		caPrivKey,
		caCert,
	)
	if err != nil {
		assert.Fail(t, "failed to create server cert", err)
		return
	}

	clientCaPriv, clientCaCert, _, err := createCA()
	if err != nil {
		assert.Fail(t, "failed to create client CA", err)
		return
	}
	clientPrivKey, clientCert, err := createSignedCert(
		[]x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
		clientCaPriv,
		clientCaCert,
	)
	if err != nil {
		assert.Fail(t, "failed to create server cert", err)
		return
	}

	clientConfig, serverConfig := createClientServerConfig(t)
	clientConfig.URL = "https://127.0.0.1:8080"
	clientConfig.CACert = string(caCertBytes)
	clientConfig.ClientCert = string(clientCert)
	clientConfig.ClientKey = string(clientPrivKey)
	serverConfig.Key = string(serverPrivKey)
	serverConfig.Cert = string(serverCert)
	//Pass wrong client CA cert to test failure
	serverConfig.ClientCACert = string(caCertBytes)

	message := "Hi"

	if _, _, err = runRequest(clientConfig, serverConfig, t, message); err == nil {
		assert.Fail(t, "Client request with invalid CA verification did not fail.")
		return
	}
}

func createCA() (*rsa.PrivateKey, *x509.Certificate, []byte, error) {
	ca := &x509.Certificate{