internal/honeypot/smtp/smtp_test.go

package smtp

import (
	"bufio"
	"bytes"
	"log/slog"
	"net"
	"testing"
	"time"
)

func TestSMTPHandleSessionTLSHandshake(t *testing.T) {
	// Mock connection
	clientConn, serverConn := net.Pipe()
	defer clientConn.Close()
	defer serverConn.Close()

	h := &smtpHoneypot{
		logger: slog.New(slog.NewJSONHandler(&bytes.Buffer{}, nil)),
	}

	done := make(chan bool)
	go func() {
		h.handleSession(serverConn, false)
		done <- true
	}()

	// Read banner
	bannerReader := bufio.NewReader(clientConn)
	_, err := bannerReader.ReadString('\n')
	if err != nil {
		t.Fatalf("failed to read banner: %v", err)
	}

	// Send TLS Client Hello
	tlsHandshake := []byte{0x16, 0x03, 0x01, 0x00, 0x61, 0x01, 0x00, 0x00, 0x5d, 0x03, 0x03}
	_, err = clientConn.Write(tlsHandshake)
	if err != nil {
		t.Fatalf("failed to write TLS handshake: %v", err)
	}

	// The session should terminate
	select {
	case <-done:
		// Success
	case <-time.After(1 * time.Second):
		t.Fatal("session did not terminate after TLS handshake")
	}
}

func TestPeekTLS(t *testing.T) {
	tlsHandshake := []byte{0x16, 0x03, 0x01, 0x00, 0x61, 0x01, 0x00, 0x00, 0x5d, 0x03, 0x03}
	reader := bufio.NewReader(bytes.NewReader(tlsHandshake))

	peek, err := reader.Peek(1)
	if err != nil {
		t.Fatalf("peek failed: %v", err)
	}
	if peek[0] == 0x16 {
		t.Log("Successfully detected TLS handshake byte with Peek")
	} else {
		t.Fatalf("expected 0x16, got 0x%02x", peek[0])
	}
}