STIR-SHAKEN Refactor Tests

tests/channels/pjsip/dialplan_functions/pjsip_hangup/sipp/invite-expects-200-then-bye.xml

@@ -10,9 +10,10 @@
       To: sut <sip:[dest]@[remote_ip]:[remote_port]>
       Call-ID: [call_id]
       CSeq: 1 INVITE
-      Contact: sip:sipp@[local_ip]:[local_port]
+      Contact: sip:[service]@[local_ip]:[local_port]
       Max-Forwards: 70
       Subject: Test
+      P-Asserted-Identity: "sipp" <sip:18005551212@[local_ip]>
       Content-Type: application/sdp
       Content-Length: [len]
 
@@ -40,7 +41,7 @@
       ACK sip:[dest]@[remote_ip]:[remote_port] SIP/2.0
       Via: SIP/2.0/[transport] [local_ip]:[local_port];branch=[branch]
       From: sipp <sip:[service]@[local_ip]:[local_port]>;tag=[pid]SIPpTag00[call_number]
-      To: sut <sip:[dest]@[remote_ip]:[remote_port]>[peer_tag_param]
+      To: [dest] <sip:[dest]@[remote_ip]:[remote_port]>[peer_tag_param]
       Call-ID: [call_id]
       CSeq: 1 ACK
       Contact: sip:sipp@[local_ip]:[local_port]
@@ -50,21 +51,25 @@
     ]]>
   </send>
 
-  <recv request="BYE" crlf="true" />
+<pause milliseconds="1000"/>
 
-  <send retrans="500">
+  <send>
     <![CDATA[
-      SIP/2.0 200 OK
-      [last_Via:]
-      [last_From:]
-      [last_To:];tag=[call_number]
-      [last_Call-ID:]
-      [last_CSeq:]
-      Contact: <sip:sipp@[local_ip]:[local_port];transport=[transport]>
-      Allow: INVITE, ACK, MESSAGE, BYE
-      Content-Lnegth: 0
+    BYE sip:[dest]@[remote_ip]:[remote_port] SIP/2.0
+    Via: SIP/2.0/[transport] [local_ip]:[local_port];branch=[branch]
+    From: [service] <sip:[service]@[local_ip]:[local_port]>;tag=[call_number]
+    To: [dest] <sip:[dest]@[remote_ip]:[remote_port]>[peer_tag_param]
+    Call-ID: [call_id]
+    CSeq: 2 BYE
+    Contact: sip:sipp@[local_ip]:[local_port]
+    Max-Forwards: 70
+    Subject: Performance Test
+    Content-Length: 0
+
     ]]>
   </send>
 
+  <recv response="200"  rtd="true"/>
+
 
 </scenario>

tests/channels/pjsip/stir_shaken/keys/SPAST1-caexp/SPAST1-caexp-cert.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/channels/pjsip/stir_shaken/keys/SPAST1-caexp/SPAST1-caexp-key.pem

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIEcElkLZJYcLT0rtpTQsKef/pbWLO+XV0RTesN5uyom+oAoGCCqGSM49
+AwEHoUQDQgAECjo7x8YqHlcXjhnDAf3ofSb4V/89MZgHyFwKWUONjswVRTg9C9qK
+d9n3J+6szXePNrbGlwBPn1Q9DtsFilerDw==
+-----END EC PRIVATE KEY-----

tests/channels/pjsip/stir_shaken/keys/SPAST1/SPAST1-cert.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/channels/pjsip/stir_shaken/keys/SPAST1/SPAST1-key.pem

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIGZKwJflBBppQYlkZm7rbeRCnQrv4Hp0ZdvRJRmrAqYWoAoGCCqGSM49
+AwEHoUQDQgAE8RwuFYtKh9wU/CHcYwUMR3pUZhZSwil3kiJOL4jqFmjDZ1Hz2qEP
+Y4j7t4MySPSp/R2axgWDsF5DujzqjDbYEw==
+-----END EC PRIVATE KEY-----

tests/channels/pjsip/stir_shaken/keys/SPAST2-caexp/SPAST2-caexp-cert.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/channels/pjsip/stir_shaken/keys/SPAST2-caexp/SPAST2-caexp-key.pem

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIN6vXdLyE5iwE6hKXbTRje/v5gkR0v0MlPJyoFYuFT2VoAoGCCqGSM49
+AwEHoUQDQgAEM9kvxh8/GWVZAj9Dfd1pr7uF77/Z8yu7fwqczs4boOyUNMJLDDAc
+27PoM72v3tb1Y6N5KKuHxrWAzEp1EoV5yA==
+-----END EC PRIVATE KEY-----

tests/channels/pjsip/stir_shaken/keys/SPAST2/SPAST2-cert.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/channels/pjsip/stir_shaken/keys/SPAST2/SPAST2-key.pem

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIAuK11Mg1vWREXGYW2nvnOZOIG1m3gC4HYin1du+6h40oAoGCCqGSM49
+AwEHoUQDQgAELqeKLMIUJPOOuUMyqbffYh6OB44iC0vxxZVa2NCJ7XE8iIwkMws2
++SXoriWkalrjFTRG/RQI0ZBuHx+zgMXfYg==
+-----END EC PRIVATE KEY-----

tests/channels/pjsip/stir_shaken/keys/astdev-ca-expired.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIID5jCCAs6gAwIBAgIIX9UmVhvOisEwDQYJKoZIhvcNAQELBQAweTELMAkGA1UE
+BhMCVVMxEDAOBgNVBAgTB0FsYWJhbWExEzARBgNVBAcTCkh1bnRzdmlsbGUxDzAN
+BgNVBAoTBkFTVERFVjEQMA4GA1UECxMHZXhwaXJlZDEgMB4GA1UEAxMXY2EuYXN0
+ZXJpc2sub3JnLWV4cGlyZWQwHhcNMjQwMjA4MTUyMDAwWhcNMjQwMjA4MTUyMDAw
+WjB5MQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQWxhYmFtYTETMBEGA1UEBxMKSHVu
+dHN2aWxsZTEPMA0GA1UEChMGQVNUREVWMRAwDgYDVQQLEwdleHBpcmVkMSAwHgYD
+VQQDExdjYS5hc3Rlcmlzay5vcmctZXhwaXJlZDCCASIwDQYJKoZIhvcNAQEBBQAD
+ggEPADCCAQoCggEBALdz9O+J43d3ZoHpLxgs1SK0h0mp9/fGQAPMU6rNGpx+BdV9
+WqfoI50aJjWGcK8jo4dwOLhSxDYDPkWYDBEor4YVI3vozTmTOJKorAHcb3c0gOmc
+AnvBOJ4JL/nC6ZkGbjhQsERpG9/WGjC70vf6iUIQs53pByEIBrJgGdbC+RQQYi4p
+5YRfD2iQ5SGgjAqtht6wF5OM8PsXhzm8H3MvWzRttjq82A7KqsY2FfCEpjZmWdXi
+nno1xEDFBbjgI7UjN5zYDvsBK65va9B2rZLPuorLyoOWJVzau3MdtoJvZGWMPBNX
+t5xF3UtUbO6VyZIMBSl29d/DkBG0D5lUU4ChDcECAwEAAaNyMHAwDwYDVR0TAQH/
+BAUwAwEB/zAdBgNVHQ4EFgQURzqR3wnd54KdTUBP+3RT1nv8j5EwCwYDVR0PBAQD
+AgEGMBEGCWCGSAGG+EIBAQQEAwIABzAeBglghkgBhvhCAQ0EERYPeGNhIGNlcnRp
+ZmljYXRlMA0GCSqGSIb3DQEBCwUAA4IBAQBv1/5Ejmg0lHdyea6W8FTjENWcg07q
+YepZoaXlLze0uPw2y2VY+orxZmjwq71Ir4fWSN0e0dF6g1CmayyabJUvJkSp5Miy
+Dm2nhTEnWkGeK11aov6t+jOOYhy268p/PBv1Uo4EEU3daNs6EnJaic2UdUOnOFCP
+318RikCBHZc4pMc2Bgr6NB457ac9md+NosVLqJp3T+Mw6a8azy1SagxgIA3PtOBx
+d1Kku7QXJDV4RTAikWg6pvcVGMAPetWn7bXHL6Jmdj3StRVKwCDz6QjZcJATlzeC
+Tny+tKUqIsFJYjbroWq2FLLOGJI6Y/2FTbkVym9FxLqQlUzndPbx5ep0
+-----END CERTIFICATE-----

tests/channels/pjsip/stir_shaken/keys/astdev-ca.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIIDzDCCArSgAwIBAgIIQhCQxx6KXYowDQYJKoZIhvcNAQELBQAwbDELMAkGA1UE
+BhMCVVMxEDAOBgNVBAgTB0FsYWJhbWExEzARBgNVBAcTCkh1bnRzdmlsbGUxDzAN
+BgNVBAoTBkFTVERFVjELMAkGA1UECxMCQ0ExGDAWBgNVBAMTD2NhLmFzdGVyaXNr
+Lm9yZzAeFw0yNDAyMDgxNTE2MDBaFw0zNDAyMDgxNTE2MDBaMGwxCzAJBgNVBAYT
+AlVTMRAwDgYDVQQIEwdBbGFiYW1hMRMwEQYDVQQHEwpIdW50c3ZpbGxlMQ8wDQYD
+VQQKEwZBU1RERVYxCzAJBgNVBAsTAkNBMRgwFgYDVQQDEw9jYS5hc3Rlcmlzay5v
+cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1c9RZhSdCzfGuYHV
+SnOn6hgSbpJNeOjiEIX6mvvqZ/d8g7tIBiuuNh07c9gNz44ogEq09ul5CmGCsNYy
+m/ntFbIfJGnLY5WwULe+avgwB3GtcIc/simk9VEXhgC+K72iWA3GTJ9ljMIkmlQC
+mQBVvNm9nBamwYM202j0ss0GWd+M6dSpDQeSjo2QniJDRTDLrskfr+LiEL0wZbxL
+VCZtSNJjgie4t8Gz1OMpTNOJBrqfTUP5xiJ9vAw6SoK90qO63IAMYu+06VoKlX6L
+QkirzlFjzdRMr76IOg7fs7qgAdLJKWzd89qGva9Xj2luJj4GPHYgZBsriPCbDCuj
+UCs/AgMBAAGjcjBwMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNC/TYnoYNZE
+Tem8vtFC8tHCN9iAMAsGA1UdDwQEAwIBBjARBglghkgBhvhCAQEEBAMCAAcwHgYJ
+YIZIAYb4QgENBBEWD3hjYSBjZXJ0aWZpY2F0ZTANBgkqhkiG9w0BAQsFAAOCAQEA
+enOAWpTslHDUxtxXACZoEBC9oDOzQbFX1ZjSsCPVDEy6AFckA/VQY9Dr2kKKIS9z
+tNLPilUh5cX4IviSj91VO9XwRYpyWWWQWhVNxmKszKvEBEFzI/x5b0d9ybj/++X9
+dnD/jJNZQfoFnXsaH0uTpZ92bQkrVETfyS1C0iJRhL1LxBT93CvT83ykqoq3cd2M
+WqPARPBkU9wnaG68wD6M8YIctRwM5xkjcNfgRGclwxzh+CvfUJgKD6RzZpcE4UEm
+adAVALmtLSxysZkSzt8dGh1PpFJTWLBAkBf5oKss+cGU0t5SZZHn3qMaWYISin12
+O8LXzdeikMIwRBcwnpRXrw==
+-----END CERTIFICATE-----

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/configs/ast1/extensions.conf

@@ -0,0 +1,3 @@
+[default]
+exten => _X.,1,Dial(PJSIP/${EXTEN}@ast2,,)
+ same => n,Hangup()

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/configs/ast1/pjsip.conf

@@ -0,0 +1,42 @@
+[system]
+type=system
+timer_t1=100
+timer_b=6400
+
+[transport-udp]
+type=transport
+protocol=udp
+bind=127.0.0.1:5060
+
+[sipp]
+type=endpoint
+context=default
+allow=!all,ulaw
+send_pai = yes
+direct_media = no
+connected_line_method = update
+send_connected_line = no
+send_diversion = no
+trust_id_inbound = true
+trust_id_outbound = true
+identify_by = ip
+
+[sipp]
+type = identify
+endpoint=sipp
+match=127.0.0.4
+
+
+[ast2]
+type=endpoint
+aors=ast2
+context=default
+allow=!all,ulaw
+send_pai = yes
+stir_shaken_profile=to-ast2
+trust_id_inbound = true
+trust_id_outbound = true
+
+[ast2]
+type = aor
+contact=sip:ast2@127.0.0.2:5060

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/configs/ast1/stir_shaken.conf

@@ -0,0 +1,30 @@
+
+[verification]
+load_system_certs = no
+ca_file=<<astetcdir>>/stir/astdev-ca.crt
+curl_timeout=2
+max_iat_age=60
+max_date_header_age=60
+max_cache_entry_age = 300
+max_cache_size=666
+failure_action = continue
+x5u_deny=0.0.0.0/0.0.0.0
+x5u_permit = 127.0.0.0/8
+relax_x5u_path_restrictions = yes
+relax_x5u_port_scheme_restrictions = yes
+
+[attestation]
+global_disable = no
+check_tn_cert_public_url = no
+private_key_file=<<astetcdir>>/stir/SPAST1-key.pem
+public_cert_url=http://localhost:8087/SPAST1-cert.pem
+
+[18005551212]
+type=tn
+attest_level=C
+
+[to-ast2]
+type = profile
+endpoint_behavior = attest
+send_mky = no
+use_rfc9410_responses = no

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/configs/ast2/extensions.conf

@@ -0,0 +1,4 @@
+[default]
+exten => _X.,1,Answer()
+ same => n,UserEvent(TestResult, result: ${STIR_SHAKEN(0,verify_result)})
+ same => n,Hangup()

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/configs/ast2/pjsip.conf

@@ -0,0 +1,23 @@
+[system]
+type=system
+timer_t1=100
+timer_b=6400
+
+[transport-udp]
+type=transport
+protocol=udp
+bind=127.0.0.2:5060
+
+[ast1]
+type=endpoint
+context=default
+allow=!all,ulaw
+stir_shaken_profile=from-ast1
+send_pai = yes
+trust_id_inbound = true
+identify_by = ip
+
+[ast1]
+type = identify
+endpoint = ast1
+match =	127.0.0.1

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/configs/ast2/stir_shaken.conf

@@ -0,0 +1,26 @@
+
+[verification]
+load_system_certs = no
+ca_file=<<astetcdir>>/stir/astdev-ca.crt
+curl_timeout=2
+max_iat_age=60
+max_date_header_age=60
+max_cache_entry_age = 300
+max_cache_size=666
+failure_action = continue
+; Use default ACL which should fail 127.0.0.0/8
+;x5u_deny=0.0.0.0/0.0.0.0
+;x5u_permit = 127.0.0.0/8
+relax_x5u_path_restrictions = yes
+relax_x5u_port_scheme_restrictions = yes
+
+[attestation]
+global_disable = no
+check_tn_cert_public_url = no
+
+[from-ast1]
+type = profile
+endpoint_behavior = verify
+failure_action = continue_return_reason
+send_mky = no
+use_rfc9410_responses = no

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/files/ast1/astetcdir/stir/SPAST1-cert.pem

@@ -0,0 +1 @@
+../../../../../keys/SPAST1/SPAST1-cert.pem

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/files/ast1/astetcdir/stir/SPAST1-key.pem

@@ -0,0 +1 @@
+../../../../../keys/SPAST1/SPAST1-key.pem

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/files/ast1/astetcdir/stir/astdev-ca.crt

@@ -0,0 +1 @@
+../../../../../keys/astdev-ca.crt

tests/channels/pjsip/stir_shaken/stir_shaken_acl_fail/files/ast2/astetcdir/stir/astdev-ca.crt

@@ -0,0 +1 @@
+../../../../../keys/astdev-ca.crt