From 64e52596abaf4bdd4c17f79c4e8acf25d1a452b4 Mon Sep 17 00:00:00 2001
From: jvoisin
Date: Wed, 29 Aug 2018 08:55:49 +0000
Subject: Verify certs (#223)

Ensure that certificates are verified in curl
should close #47 ---
 .../config/disabled_function_curl_verify_certs.ini     |  1 +
 src/tests/ensure_client_valid_certs.phpt               | 18 ++++++++++++++++++
 src/tests/ensure_server_valid_certs.phpt               | 18 ++++++++++++++++++
 3 files changed, 37 insertions(+)
 create mode 100644 src/tests/config/disabled_function_curl_verify_certs.ini
 create mode 100644 src/tests/ensure_client_valid_certs.phpt
 create mode 100644 src/tests/ensure_server_valid_certs.phpt

(limited to 'src/tests')

diff --git a/src/tests/config/disabled_function_curl_verify_certs.ini b/src/tests/config/disabled_function_curl_verify_certs.ini
new file mode 100644
index 0000000..64d54a7
--- /dev/null
+++ b/src/tests/config/disabled_function_curl_verify_certs.ini
@@ -0,0 +1 @@
+sp.curl_verify_certificates.enable();
diff --git a/src/tests/ensure_client_valid_certs.phpt b/src/tests/ensure_client_valid_certs.phpt
new file mode 100644
index 0000000..64c523c
--- /dev/null
+++ b/src/tests/ensure_client_valid_certs.phpt
@@ -0,0 +1,18 @@
+--TEST--
+Disable functions - Ensure that client certificates validation can't be disabled
+--SKIPIF--
+<?php
+if (!extension_loaded("snuffleupagus")) die "skip"; 
+if (!extension_loaded("curl")) die "skip"; 
+?>
+--INI--
+sp.configuration_file={PWD}/config/disabled_function_curl_verify_certs.ini
+--FILE--
+<?php
+$ch = curl_init();
+curl_setopt($ch, CURLOPT_VERBOSE, '1'); 
+curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, '0'); 
+echo "1337";
+?>
+--EXPECTF--
+Fatal error: [snuffleupagus][verify_vertificates] Please don't deactivate client certificate validation in %s/tests/ensure_client_valid_certs.php on line %d
diff --git a/src/tests/ensure_server_valid_certs.phpt b/src/tests/ensure_server_valid_certs.phpt
new file mode 100644
index 0000000..7eaf1a4
--- /dev/null
+++ b/src/tests/ensure_server_valid_certs.phpt
@@ -0,0 +1,18 @@
+--TEST--
+Disable functions - Ensure that server certificates validation can't be disabled
+--SKIPIF--
+<?php
+if (!extension_loaded("snuffleupagus")) die "skip"; 
+if (!extension_loaded("curl")) die "skip"; 
+?>
+--INI--
+sp.configuration_file={PWD}/config/disabled_function_curl_verify_certs.ini
+--FILE--
+<?php
+$ch = curl_init();
+curl_setopt($ch, CURLOPT_VERBOSE, '1'); 
+curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, '0'); 
+echo "1337";
+?>
+--EXPECTF--
+Fatal error: [snuffleupagus][verify_vertificates] Please don't deactivate client certificate validation in %s/tests/ensure_server_valid_certs.php on line 3
-- 
cgit v1.3