emqx / quic / 17355777816

86%

push

github

Support in-memory Cert and Key options (#369)

* Support in-memory cert passing instead of file paths

Changes:
- Split the `parse_cert_options` into `parse_cert_options_file` and `parse_cert_options_in_memory`
- `parse_cert_options_in_memory` parses credential opts that contain a `certkeyasn1` option
- `parse_cert_options_file` copy&paste from the old `parse_cert_options`

`parse_cert_options` now first checks the present options and then calls either of its
specialization functions to do the actual parsing.

Signed-off-by: Oliver Tale-Yazdi <oliver@tasty.limo>

* Remove debug prints

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* Generate PKCS12 ASN1 encoded cert and key file for tests

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* handle additional password and optimize arg parsing

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* add tests

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* use certkeyasn1 in snb test suite

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* Add better default options ctor

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* more specific comment

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* Remove TODOs and use proper listener opts fn

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* cleanup tests

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* Free PKCS 12 cert and avoid double free by setting pointer to null

Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>

* chore: format code.

* test(tls-pkcs12): use aes-256-cbc for compatibillity

---------

Signed-off-by: Oliver Tale-Yazdi <oliver@tasty.limo>
Signed-off-by: Oliver Tale-Yazdi <oliver.tale-yazdi@parity.io>
Co-authored-by: William Yang <mscame@gmail.com>

45 of 49 new or added lines in 1 file covered. (91.84%)

4143 of 4791 relevant lines covered (86.47%)

149908.97 hits per line