Impressum test_bad_cert.html Sprache: HTML

products/Sources/formale Sprachen/C/Firefox/dom/security/test/https-first/test_bad_cert.html

<!DOCTYPE HTML>
<html>


<head>
  <title>HTTPS-FirstMode - Bad Certificates</title>
  <script src="/tests/SimpleTest/SimpleTest.js"></script>
  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>

<body>
  <h1>HTTPS-First Mode</h1>
  <p>Test: Downgrade bad certificates without warning page </p>
  <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1706351">Bug 1719309</a>

  <script class="testbody" type="text/javascript">
  "use strict";
  /*
   * We perform the following tests:
   * 1. Request nocert.example.com which is a site without a certificate
   * 2. Request a site with self-signed cert (self-signed.example.com)
   * 3. Request a site with an untrusted cert (untrusted.example.com)
   * 4. Request a site with an expired cert
   * 5. Request a site with an untrusted and expired cert
   * 6. Request a site with no subject alternative dns name matching
   *
   * Expected result: Https-first tries to upgrade each request. Receives for each one an SSL_ERROR_*
   * and downgrades back to http.
   */
  const badCertificates = ["nocert","self-signed", "untrusted","expired","untrusted-expired", "no-subject-alt-name"];
  let currentTest = 0;
  let testWin;
  window.addEventListener("message", receiveMessage);

  // Receive message and verify that it is from an http site.
  // Verify that we got the correct message and an http scheme
  async function receiveMessage(event) {
    let data = event.data;
    let currentBadCert = badCertificates[currentTest];
    ok(data.result === "downgraded", "Downgraded request " + currentBadCert);
    ok(data.scheme === "http:", "Received 'http' for " + currentBadCert);
    testWin.close();
    await SpecialPowers.removePermission(
      "https-only-load-insecure",
      `http://${currentBadCert}.example.com`
    );
    if (++currentTest < badCertificates.length) {
      startTest();
      return;
    }
    window.removeEventListener("message", receiveMessage);
    SimpleTest.finish();
  }

  async function startTest() {
    const currentCode = badCertificates[currentTest];
    // make a request to a subdomain of example.com with a bad certificate
    testWin = window.open(`http://${currentCode}.example.com/tests/dom/security/test/https-first/file_bad_cert.sjs`);
  }

  // Set preference and start test
  SpecialPowers.pushPrefEnv({ set: [
    ["dom.security.https_first", true],
  ]}, startTest);
  SimpleTest.waitForExplicitFinish();
  </script>
</body>
</html>

Messung V0.5

¤ Die Informationen auf dieser Webseite wurden nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit, noch Qualität der bereit gestellten Informationen zugesichert.0.25Bemerkung: (vorverarbeitet) ¤

*Bot Zugriff

Wurzel

Suchen

Beweissystem der NASA

Beweissystem Isabelle

NIST Cobol Testsuite

Cephes Mathematical Library

Wiener Entwicklungsmethode

Haftungshinweis

Die Informationen auf dieser Webseite wurden nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit, noch Qualität der bereit gestellten Informationen zugesichert.

Bemerkung:

Die farbliche Syntaxdarstellung und die Messung sind noch experimentell.