import asyncio import multiaddr import pytest from libp2p import new_node from libp2p.crypto.rsa import create_new_key_pair from libp2p.peer.peerinfo import info_from_p2p_addr from libp2p.protocol_muxer.multiselect_client import MultiselectClientError from libp2p.security.insecure.transport import InsecureSession, InsecureTransport from libp2p.security.simple.transport import SimpleSecurityTransport from tests.utils import cleanup, connect # TODO: Add tests for multiple streams being opened on different # protocols through the same connection def peer_id_for_node(node): addr = node.get_addrs()[0] info = info_from_p2p_addr(addr) return info.peer_id initiator_key_pair = create_new_key_pair() noninitiator_key_pair = create_new_key_pair() async def perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ): # Create libp2p nodes and connect them, then secure the connection, then check # the proper security was chosen # TODO: implement -- note we need to introduce the notion of communicating over a raw connection # for testing, we do NOT want to communicate over a stream so we can't just create two nodes # and use their conn because our mplex will internally relay messages to a stream sec_opt1 = transports_for_initiator sec_opt2 = transports_for_noninitiator node1 = await new_node(transport_opt=["/ip4/127.0.0.1/tcp/0"], sec_opt=sec_opt1) node2 = await new_node(transport_opt=["/ip4/127.0.0.1/tcp/0"], sec_opt=sec_opt2) await node1.get_network().listen(multiaddr.Multiaddr("/ip4/127.0.0.1/tcp/0")) await node2.get_network().listen(multiaddr.Multiaddr("/ip4/127.0.0.1/tcp/0")) await connect(node1, node2) # Wait a very short period to allow conns to be stored (since the functions # storing the conns are async, they may happen at slightly different times # on each node) await asyncio.sleep(0.1) # Get conns node1_conn = node1.get_network().connections[peer_id_for_node(node2)] node2_conn = node2.get_network().connections[peer_id_for_node(node1)] # Perform assertion assertion_func(node1_conn.conn) assertion_func(node2_conn.conn) # Success, terminate pending tasks. await cleanup() @pytest.mark.asyncio async def test_single_insecure_security_transport_succeeds(): transports_for_initiator = {"foo": InsecureTransport(initiator_key_pair)} transports_for_noninitiator = {"foo": InsecureTransport(noninitiator_key_pair)} def assertion_func(conn): assert isinstance(conn, InsecureSession) await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ) @pytest.mark.asyncio async def test_single_simple_test_security_transport_succeeds(): transports_for_initiator = { "tacos": SimpleSecurityTransport(initiator_key_pair, "tacos") } transports_for_noninitiator = { "tacos": SimpleSecurityTransport(noninitiator_key_pair, "tacos") } def assertion_func(conn): assert conn.key_phrase == "tacos" await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ) @pytest.mark.asyncio async def test_two_simple_test_security_transport_for_initiator_succeeds(): transports_for_initiator = { "tacos": SimpleSecurityTransport(initiator_key_pair, "tacos"), "shleep": SimpleSecurityTransport(initiator_key_pair, "shleep"), } transports_for_noninitiator = { "shleep": SimpleSecurityTransport(noninitiator_key_pair, "shleep") } def assertion_func(conn): assert conn.key_phrase == "shleep" await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ) @pytest.mark.asyncio async def test_two_simple_test_security_transport_for_noninitiator_succeeds(): transports_for_initiator = { "tacos": SimpleSecurityTransport(initiator_key_pair, "tacos") } transports_for_noninitiator = { "shleep": SimpleSecurityTransport(noninitiator_key_pair, "shleep"), "tacos": SimpleSecurityTransport(noninitiator_key_pair, "tacos"), } def assertion_func(conn): assert conn.key_phrase == "tacos" await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ) @pytest.mark.asyncio async def test_two_simple_test_security_transport_for_both_succeeds(): transports_for_initiator = { "a": SimpleSecurityTransport(initiator_key_pair, "a"), "b": SimpleSecurityTransport(initiator_key_pair, "b"), } transports_for_noninitiator = { "b": SimpleSecurityTransport(noninitiator_key_pair, "b"), "c": SimpleSecurityTransport(noninitiator_key_pair, "c"), } def assertion_func(conn): assert conn.key_phrase == "b" await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ) @pytest.mark.asyncio async def test_multiple_security_none_the_same_fails(): transports_for_initiator = { "a": SimpleSecurityTransport(initiator_key_pair, "a"), "b": SimpleSecurityTransport(initiator_key_pair, "b"), } transports_for_noninitiator = { "d": SimpleSecurityTransport(noninitiator_key_pair, "d"), "c": SimpleSecurityTransport(noninitiator_key_pair, "c"), } def assertion_func(_): assert False with pytest.raises(MultiselectClientError): await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator ) await cleanup() @pytest.mark.asyncio async def test_default_insecure_security(): transports_for_initiator = None transports_for_noninitiator = None conn1 = None conn2 = None def assertion_func(conn): nonlocal conn1 nonlocal conn2 if not conn1: conn1 = conn elif not conn2: conn2 = conn else: assert conn1 == conn2 await perform_simple_test( assertion_func, transports_for_initiator, transports_for_noninitiator )