From 48e59e5ffcd18165b45d3a50ac193fd511933aa3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andreas=20N=C3=A4geli?= <andr.naegeli@gmail.com>
Date: Mon, 23 Dec 2019 10:21:52 +0100
Subject: [PATCH] Add acceptance test for failed SSL handshake

---
 .../Core/SecurityTests.cs                     | 50 +++++++++++++++++--
 1 file changed, 45 insertions(+), 5 deletions(-)

diff --git a/Testing/GenHTTP.Testing.Acceptance/Core/SecurityTests.cs b/Testing/GenHTTP.Testing.Acceptance/Core/SecurityTests.cs
index f1282f9e..cb7c5149 100644
--- a/Testing/GenHTTP.Testing.Acceptance/Core/SecurityTests.cs
+++ b/Testing/GenHTTP.Testing.Acceptance/Core/SecurityTests.cs
@@ -8,7 +8,8 @@
 using GenHTTP.Testing.Acceptance.Domain;
 using GenHTTP.Modules.Core;
 using GenHTTP.Api.Infrastructure;
-
+using System.Security.Authentication;
+
 namespace GenHTTP.Testing.Acceptance.Core
 {
 
@@ -168,6 +169,25 @@ public void TestSecurityError()
             });
         }
 
+        /// <summary>
+        /// As a web developer, I can decide not to return a certificate which will
+        /// abort the server SSL handshake.
+        /// </summary>
+        [Fact]
+        public void TestNoCertificate()
+        {
+            RunSecure((insec, sec) =>
+            {
+                Assert.Throws<WebException>(() =>
+                {
+                    var failedRequest = WebRequest.CreateHttp($"https://localhost:{sec}");
+                    failedRequest.IgnoreSecurityErrors();
+
+                    failedRequest.GetSafeResponse();
+                });
+            }, host: "myserver");
+        }
+
         private static void RunSecure(Action<ushort, ushort> logic, Action<IServerBuilder>? adjustments = null, SecureUpgrade? mode = null, string host = "localhost")
         {
             var content = Layout.Create().Add("index", Content.From("Hello Alice!"), true);
@@ -176,13 +196,13 @@ private static void RunSecure(Action<ushort, ushort> logic, Action<IServerBuilde
 
             var port = TestRunner.NextPort();
 
-            using var cert = GetCertificate();
-
+            using var cert = GetCertificate();
+
             var builder = runner.Builder
                                 .Router(content)
                                 .Bind(IPAddress.Any, runner.Port)
-                                .Bind(IPAddress.Any, port, host, cert);
-
+                                .Bind(IPAddress.Any, port, new PickyCertificateProvider(host, cert), SslProtocols.Tls12);
+            
             if (mode != null)
             {
                 builder.SecureUpgrade(mode.Value);
@@ -207,6 +227,26 @@ private static X509Certificate2 GetCertificate()
             }
         }
 
+        private class PickyCertificateProvider : ICertificateProvider
+        {
+
+            private string Host { get; }
+
+            private X509Certificate2 Certificate { get; }
+
+            public PickyCertificateProvider(string host, X509Certificate2 certificate)
+            {
+                Host = host;
+                Certificate = certificate;
+            }
+
+            public X509Certificate2? Provide(string? host)
+            {
+                return (host == Host) ? Certificate : null;
+            }
+
+        }
+
     }
 
 }