1 files changed, 89 insertions, 0 deletions
diff --git a/src/tests/test_tls_handshake_transitions.cpp b/src/tests/test_tls_handshake_transitions.cpp
new file mode 100644
index 000000000..17415f159
--- /dev/null
+++ b/src/tests/test_tls_handshake_transitions.cpp
@@ -0,0 +1,89 @@
+/*
+* (C) 2022 Jack Lloyd
+* (C) 2022 Hannes Rantzsch, René Meusel - neXenio
+*
+* Botan is released under the Simplified BSD License (see license.txt)
+*/
+
+#include "tests.h"
+
+#if defined(BOTAN_HAS_TLS)
+
+#include <botan/internal/tls_handshake_transitions.h>
+
+namespace Botan_Tests {
+
+namespace {
+
+std::vector<Test::Result> test_handshake_state_transitions()
+   {
+   return {
+      CHECK("uninitialized expects nothing", [](Test::Result& result) {
+         Botan::TLS::Handshake_Transitions ht;
+         result.confirm("CCS is not expected by default", !ht.change_cipher_spec_expected());
+
+         result.confirm("no messages were received", !ht.received_handshake_msg(Botan::TLS::Handshake_Type::CLIENT_HELLO));
+         result.test_throws("no expectations set, always throws", [&] {
+            ht.confirm_transition_to(Botan::TLS::Handshake_Type::CLIENT_HELLO);
+         });
+      }),
+
+      CHECK("expect exactly one message", [](Test::Result& result) {
+         Botan::TLS::Handshake_Transitions ht;
+         ht.set_expected_next(Botan::TLS::Handshake_Type::CLIENT_HELLO);
+
+         result.test_no_throw("client hello met expectation", [&] {
+            ht.confirm_transition_to(Botan::TLS::Handshake_Type::CLIENT_HELLO);
+         });
+
+         result.confirm("received client hello", ht.received_handshake_msg(Botan::TLS::Handshake_Type::CLIENT_HELLO));
+
+         result.test_throws("confirmation resets expectations", [&] {
+            ht.confirm_transition_to(Botan::TLS::Handshake_Type::CLIENT_HELLO);
+         });
+      }),
+
+      CHECK("expect exactly one message but don't satisfy it", [](Test::Result& result)
+         {
+         Botan::TLS::Handshake_Transitions ht;
+         ht.set_expected_next(Botan::TLS::Handshake_Type::CLIENT_HELLO);
+
+         result.test_throws("server hello does not meet expectation", [&]{
+            ht.confirm_transition_to(Botan::TLS::Handshake_Type::SERVER_HELLO);
+         });
+         }),
+
+      CHECK("two expectations can be fulfilled", [](Test::Result& result)
+         {
+         Botan::TLS::Handshake_Transitions ht;
+         ht.set_expected_next({Botan::TLS::Handshake_Type::CERTIFICATE_REQUEST,Botan::TLS::Handshake_Type::CERTIFICATE});
+
+         auto ht2 = ht;  // copying, as confirmation reset the object's superposition
+
+         result.test_no_throw("CERTIFICATE", [&] {
+            ht.confirm_transition_to(Botan::TLS::Handshake_Type::CERTIFICATE);
+         });
+         result.confirm("received CERTIFICATE", ht.received_handshake_msg(Botan::TLS::Handshake_Type::CERTIFICATE));
+
+         result.test_no_throw("CERTIFICATE_REQUEST", [&] {
+            ht2.confirm_transition_to(Botan::TLS::Handshake_Type::CERTIFICATE_REQUEST);
+         });
+         result.confirm("received CERTIFICATE_REQUEST", ht2.received_handshake_msg(Botan::TLS::Handshake_Type::CERTIFICATE_REQUEST));
+         }),
+
+      CHECK("expect CCS", [](Test::Result& result)
+         {
+         Botan::TLS::Handshake_Transitions ht;
+         ht.set_expected_next(Botan::TLS::Handshake_Type::HANDSHAKE_CCS);
+         result.confirm("CCS expected", ht.change_cipher_spec_expected());
+         }),
+      };
+   }
+
+}  // namespace
+
+BOTAN_REGISTER_TEST_FN("tls", "tls_handshake_transitions",
+                       test_handshake_state_transitions);
+}
+
+#endif