content: /**
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements.  See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License.  You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.activemq.transport.amqp.protocol;
  
  import static org.junit.Assert.assertNotNull;
  import static org.junit.Assert.assertTrue;
  
  import java.io.IOException;
  import java.io.InputStream;
  import java.io.OutputStream;
  import java.net.Socket;
  import java.net.UnknownHostException;
  import java.util.concurrent.TimeUnit;
  
  import javax.net.SocketFactory;
  import javax.net.ssl.SSLSocketFactory;
  
  import org.apache.activemq.transport.amqp.AmqpHeader;
  import org.apache.activemq.transport.amqp.AmqpTestSupport;
  import org.apache.activemq.util.Wait;
  import org.fusesource.hawtbuf.Buffer;
  import org.junit.Before;
  import org.junit.Test;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  
  /**
   * Test that the Broker handles connections from older clients or
   * non-AMQP client correctly by returning an AMQP header prior to
   * closing the socket.
   */
  public class UnsupportedClientTest extends AmqpTestSupport {
  
      private static final Logger LOG = LoggerFactory.getLogger(UnsupportedClientTest.class);
  
      @Override
      @Before
      public void setUp() throws Exception {
          System.setProperty("javax.net.ssl.trustStore", "src/test/resources/client.keystore");
          System.setProperty("javax.net.ssl.trustStorePassword", "password");
          System.setProperty("javax.net.ssl.trustStoreType", "jks");
          System.setProperty("javax.net.ssl.keyStore", "src/test/resources/server.keystore");
          System.setProperty("javax.net.ssl.keyStorePassword", "password");
          System.setProperty("javax.net.ssl.keyStoreType", "jks");
  
          super.setUp();
      }
  
      @Override
      public String getAdditionalConfig() {
          return "&wireFormat.allowNonSaslConnections=false";
      }
  
      @Test(timeout = 60000)
      public void testOlderProtocolIsRejected() throws Exception {
  
          AmqpHeader header = new AmqpHeader();
  
          header.setProtocolId(3);
          header.setMajor(0);
          header.setMinor(9);
          header.setRevision(1);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      @Test(timeout = 60000)
      public void testNewerMajorIsRejected() throws Exception {
  
          AmqpHeader header = new AmqpHeader();
  
          header.setProtocolId(3);
          header.setMajor(2);
          header.setMinor(0);
          header.setRevision(0);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      @Test(timeout = 60000)
      public void testNewerMinorIsRejected() throws Exception {
  
          AmqpHeader header = new AmqpHeader();
  
          header.setProtocolId(3);
          header.setMajor(1);
          header.setMinor(1);
          header.setRevision(0);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      @Test(timeout = 60000)
      public void testNewerRevisionIsRejected() throws Exception {
  
          AmqpHeader header = new AmqpHeader();
  
          header.setProtocolId(3);
          header.setMajor(1);
          header.setMinor(0);
          header.setRevision(1);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      @Test(timeout = 60000)
      public void testNonSaslClientIsRejected() throws Exception {
  
          AmqpHeader header = new AmqpHeader();
  
          header.setProtocolId(0);
          header.setMajor(1);
          header.setMinor(0);
          header.setRevision(0);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      @Test(timeout = 60000)
      public void testUnkownProtocolIdIsRejected() throws Exception {
  
          AmqpHeader header = new AmqpHeader();
  
          header.setProtocolId(5);
          header.setMajor(1);
          header.setMinor(0);
          header.setRevision(0);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      @Test(timeout = 60000)
      public void testInvalidProtocolHeader() throws Exception {
  
          AmqpHeader header = new AmqpHeader(new Buffer(new byte[]{'S', 'T', 'O', 'M', 'P', 0, 0, 0}), false);
  
          // Test TCP
          doTestInvalidHeaderProcessing(amqpPort, header, false);
  
          // Test SSL
          doTestInvalidHeaderProcessing(amqpSslPort, header, true);
  
          // Test NIO
          doTestInvalidHeaderProcessing(amqpNioPort, header, false);
  
          // Test NIO+SSL
          doTestInvalidHeaderProcessing(amqpNioPlusSslPort, header, true);
      }
  
      protected void doTestInvalidHeaderProcessing(int port, final AmqpHeader header, boolean ssl) throws Exception {
          final ClientConnection connection = createClientConnection(ssl);
          connection.open("localhost", port);
          connection.send(header);
  
          AmqpHeader response = connection.readAmqpHeader();
          assertNotNull(response);
          LOG.info("Broker responded with: {}", response);
  
          assertTrue("Broker should have closed client connection", Wait.waitFor(new Wait.Condition() {
  
              @Override
              public boolean isSatisified() throws Exception {
                  try {
                      connection.send(header);
                      return false;
                  } catch (Exception e) {
                      return true;
                  }
              }
          }, TimeUnit.SECONDS.toMillis(15), TimeUnit.MILLISECONDS.toMillis(250)));
      }
  
      private ClientConnection createClientConnection(boolean ssl) {
          if (ssl) {
              return new SslClientConnection();
          } else {
              return new ClientConnection();
          }
      }
  
      private class ClientConnection {
  
          protected static final long RECEIVE_TIMEOUT = 10000;
          protected Socket clientSocket;
  
          public void open(String host, int port) throws IOException, UnknownHostException {
              clientSocket = new Socket(host, port);
              clientSocket.setTcpNoDelay(true);
          }
  
          public void send(AmqpHeader header) throws Exception {
              OutputStream outputStream = clientSocket.getOutputStream();
              header.getBuffer().writeTo(outputStream);
              outputStream.flush();
          }
  
          public AmqpHeader readAmqpHeader() throws Exception {
              clientSocket.setSoTimeout((int)RECEIVE_TIMEOUT);
              InputStream is = clientSocket.getInputStream();
  
              byte[] header = new byte[8];
              int read = is.read(header);
              if (read == header.length) {
                  return new AmqpHeader(new Buffer(header));
              } else {
                  return null;
              }
          }
      }
  
      private class SslClientConnection extends ClientConnection {
  
          @Override
          public void open(String host, int port) throws IOException, UnknownHostException {
              SocketFactory factory = SSLSocketFactory.getDefault();
              clientSocket = factory.createSocket(host, port);
              clientSocket.setTcpNoDelay(true);
          }
      }
  
      @Override
      protected boolean isUseTcpConnector() {
          return true;
      }
  
      @Override
      protected boolean isUseSslConnector() {
          return true;
      }
  
      @Override
      protected boolean isUseNioConnector() {
          return true;
      }
  
      @Override
      protected boolean isUseNioPlusSslConnector() {
          return true;
      }
  }
  