Commit f763d1b1 authored by Steve Holme's avatar Steve Holme
Browse files

tests: Added POP3 SASL downgrade tests

parent 48cd1292

tests/data/Makefile.am

+1 −1
Original line number Diff line number Diff line
@@ -71,7 +71,7 @@ test827 test828 test829 test830 test831 test832 test833 test834 test835 \ 
test850 test851 test852 test853 test854 test855 test856 test857 test858 \

test859 test860 test861 test862 test863 test864 test865 test866 test867 \

test868 test869 test870 test871 test872 test873 test874 test875 test876 \

test877 test878 \

test877 test878 test879 test880 test881 \

\

test900 test901 test902 test903 test904 test905 test906 test907 test908 \

test909 test910 test911 test912 test913 test914 test915 test916 test917 \

tests/data/test879

0 → 100644
+63 −0
Original line number Diff line number Diff line 
<testcase>

<info>

<keywords>

POP3

POP3 AUTH CRAM-MD5 SASL DOWNGRADE

RFC1734

RFC2195

RFC5034

</keywords>

</info>



#

# Server-side

<reply>

<servercmd>

AUTH CRAM-MD5 PLAIN

REPLY "AUTH CRAM-MD5" + Rubbish

REPLY * -ERR AUTH exchange cancelled by client

REPLY "AUTH PLAIN" +

REPLY dXNlcgB1c2VyAHNlY3JldA== +OK Login successful

</servercmd>

<data>

From: me@somewhere

To: fake@nowhere



body



--

  yours sincerely

</data>

</reply>



#

# Client-side

<client>

<server>

pop3

</server>

<features>

crypto

</features>

 <name>

POP3 CRAM-MD5 authentication with SASL downgrade

 </name>

 <command>

pop3://%HOSTIP:%POP3PORT/879 -u user:secret

</command>

</client>



#

# Verify data after the test has been "shot"

<verify>

<protocol>

CAPA

AUTH CRAM-MD5

*

AUTH PLAIN

dXNlcgB1c2VyAHNlY3JldA==

RETR 879

QUIT

</protocol>

</verify>

</testcase>

tests/data/test880

0 → 100644
+73 −0
Original line number Diff line number Diff line 
<testcase>

<info>

<keywords>

POP3

POP3 AUTH NTLM SASL DOWNGRADE

RFC1734

RFC5034

</keywords>

</info>



#

# Server-side

<reply>

<servercmd>

AUTH NTLM PLAIN

REPLY "AUTH NTLM" +

REPLY TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA= + Rubbish

REPLY * -ERR AUTH exchange cancelled by client

REPLY "AUTH PLAIN" +

REPLY dXNlcgB1c2VyAHNlY3JldA== +OK Login successful

</servercmd>

<data>

From: me@somewhere

To: fake@nowhere



body



--

  yours sincerely

</data>

</reply>



#

# Client-side

<client>

<server>

pop3

</server>

<features>

NTLM

</features>

 <name>

POP3 NTLM authentication with SASL downgrade

 </name>

 <setenv>

# we force our own host name, in order to make the test machine independent

CURL_GETHOSTNAME=curlhost

# we try to use the LD_PRELOAD hack, if not a debug build

LD_PRELOAD=%PWD/libtest/.libs/libhostname.so

 </setenv>

 <command>

pop3://%HOSTIP:%POP3PORT/880 -u user:secret

</command>

<precheck>

chkhostname curlhost

</precheck>

</client>



#

# Verify data after the test has been "shot"

<verify>

<protocol>

CAPA

AUTH NTLM

TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA=

*

AUTH PLAIN

dXNlcgB1c2VyAHNlY3JldA==

RETR 880

QUIT

</protocol>

</verify>

</testcase>

tests/data/test881

0 → 100644
+64 −0
Original line number Diff line number Diff line 
<testcase>

<info>

<keywords>

POP3

POP3 AUTH DIGEST-MD5 SASL DOWNGRADE

RFC1734

RFC2831

RFC5034

</keywords>

</info>



#

# Server-side

<reply>

<servercmd>

AUTH DIGEST-MD5 PLAIN

REPLY "AUTH DIGEST-MD5" + Rubbish

REPLY * -ERR AUTH exchange cancelled by client

REPLY "AUTH PLAIN" +

REPLY dXNlcgB1c2VyAHNlY3JldA== +OK Login successful

</servercmd>

<data>

From: me@somewhere

To: fake@nowhere



body



--

  yours sincerely

</data>

</reply>



#

# Client-side

<client>

<server>

pop3

</server>

<features>

debug

crypto

</features>

 <name>

POP3 DIGEST-MD5 authentication with SASL downgrade

 </name>

 <command>

pop3://%HOSTIP:%POP3PORT/881 -u user:secret

</command>

</client>



#

# Verify data after the test has been "shot"

<verify>

<protocol>

CAPA

AUTH DIGEST-MD5

*

AUTH PLAIN

dXNlcgB1c2VyAHNlY3JldA==

RETR 881

QUIT

</protocol>

</verify>

</testcase>