<?php

namespace React\Tests\Socket;

use React\Promise\Promise;
use React\Socket\ConnectionInterface;
use React\Socket\SecureConnector;
use React\Socket\ServerInterface;
use React\Socket\SecureServer;
use React\Socket\TcpConnector;
use React\Socket\TcpServer;

class FunctionalSecureServerTest extends TestCase
{
    const TIMEOUT = 2;

    /**
     * @before
     */
    public function setUpSkipTest()
    {
        if (defined('HHVM_VERSION')) {
            $this->markTestSkipped('Not supported on legacy HHVM');
        }
    }

    public function testClientCanConnectToServer()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        /* @var ConnectionInterface $client */
        $client = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertInstanceOf('React\Socket\ConnectionInterface', $client);
        $this->assertEquals($server->getAddress(), $client->getRemoteAddress());

        $client->close();
        $server->close();
    }

    public function testClientUsesTls13ByDefaultWhenSupportedByOpenSSL()
    {
        if (PHP_VERSION_ID < 70000 || (PHP_VERSION_ID >= 70300 && PHP_VERSION_ID < 70400) || !$this->supportsTls13()) {
            // @link https://github.com/php/php-src/pull/3909 explicitly adds TLS 1.3 on PHP 7.4
            // @link https://github.com/php/php-src/pull/3317 implicitly limits to TLS 1.2 on PHP 7.3
            // all older PHP versions support TLS 1.3 (provided OpenSSL supports it), but only PHP 7 allows checking the version
            $this->markTestSkipped('Test requires PHP 7+ for crypto meta data (but excludes PHP 7.3 because it implicitly limits to TLS 1.2) and OpenSSL 1.1.1+ for TLS 1.3');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        /* @var ConnectionInterface $client */
        $client = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertInstanceOf('React\Socket\Connection', $client);
        $this->assertTrue(isset($client->stream));

        $meta = stream_get_meta_data($client->stream);
        $this->assertTrue(isset($meta['crypto']['protocol']));

        if ($meta['crypto']['protocol'] === 'UNKNOWN') {
            // TLSv1.3 protocol will only be added via https://github.com/php/php-src/pull/3700
            // prior to merging that PR, this info is still available in the cipher version by OpenSSL
            $this->assertTrue(isset($meta['crypto']['cipher_version']));
            $this->assertEquals('TLSv1.3', $meta['crypto']['cipher_version']);
        } else {
            $this->assertEquals('TLSv1.3', $meta['crypto']['protocol']);
        }

        $client->close();
        $server->close();
    }

    public function testClientUsesTls12WhenCryptoMethodIsExplicitlyConfiguredByClient()
    {
        if (PHP_VERSION_ID < 70000) {
            $this->markTestSkipped('Test requires PHP 7+ for crypto meta data');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false,
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT
        ));
        $promise = $connector->connect($server->getAddress());

        /* @var ConnectionInterface $client */
        $client = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertInstanceOf('React\Socket\Connection', $client);
        $this->assertTrue(isset($client->stream));

        $meta = stream_get_meta_data($client->stream);
        $this->assertTrue(isset($meta['crypto']['protocol']));
        $this->assertEquals('TLSv1.2', $meta['crypto']['protocol']);

        $client->close();
        $server->close();
    }

    public function testClientUsesTls12WhenCryptoMethodIsExplicitlyConfiguredByServer()
    {
        if (PHP_VERSION_ID < 70000) {
            $this->markTestSkipped('Test requires PHP 7+ for crypto meta data');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem',
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_2_SERVER
        ));

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        /* @var ConnectionInterface $client */
        $client = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertInstanceOf('React\Socket\Connection', $client);
        $this->assertTrue(isset($client->stream));

        $meta = stream_get_meta_data($client->stream);
        $this->assertTrue(isset($meta['crypto']['protocol']));
        $this->assertEquals('TLSv1.2', $meta['crypto']['protocol']);

        $client->close();
        $server->close();
    }

    public function testClientUsesTls10WhenCryptoMethodIsExplicitlyConfiguredByClient()
    {
        if (PHP_VERSION_ID < 70000) {
            $this->markTestSkipped('Test requires PHP 7+ for crypto meta data');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false,
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_0_CLIENT
        ));
        $promise = $connector->connect($server->getAddress());

        /* @var ConnectionInterface $client */
        try {
            $client = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));
        } catch (\RuntimeException $e) {
            // legacy TLS 1.0 would be considered insecure by today's standards, so skip test if connection fails
            // OpenSSL error messages are version/platform specific
            // […] no protocols available
            // […] routines:state_machine:internal error
            // SSL operation failed with code 1. OpenSSL Error messages: error:0A000438:SSL routines::tlsv1 alert internal error
            // Connection lost during TLS handshake (ECONNRESET)
            $server->close();
            $this->markTestSkipped('TLS 1.0 not available on this system (' . $e->getMessage() . ')');
        }

        $this->assertInstanceOf('React\Socket\Connection', $client);
        $this->assertTrue(isset($client->stream));

        $meta = stream_get_meta_data($client->stream);
        $this->assertTrue(isset($meta['crypto']['protocol']));
        $this->assertEquals('TLSv1', $meta['crypto']['protocol']);

        $client->close();
        $server->close();
    }

    public function testServerEmitsConnectionForClientConnection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));

        $peer = new Promise(function ($resolve, $reject) use ($server) {
            $server->on('connection', $resolve);
            $server->on('error', $reject);
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $client = $connector->connect($server->getAddress());

        // await both client and server side end of connection
        /* @var ConnectionInterface[] $both */
        $both = \React\Async\await(\React\Promise\Timer\timeout(\React\Promise\all(array($peer, $client)), self::TIMEOUT));

        // both ends of the connection are represented by different instances of ConnectionInterface
        $this->assertCount(2, $both);
        $this->assertInstanceOf('React\Socket\ConnectionInterface', $both[0]);
        $this->assertInstanceOf('React\Socket\ConnectionInterface', $both[1]);
        $this->assertNotSame($both[0], $both[1]);

        // server side end has local server address and client end has remote server address
        $this->assertEquals($server->getAddress(), $both[0]->getLocalAddress());
        $this->assertEquals($server->getAddress(), $both[1]->getRemoteAddress());

        // clean up all connections and server again
        $both[0]->close();
        $both[1]->close();
        $server->close();
    }

    public function testClientEmitsDataEventOnceForDataWrittenFromServer()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));

        $server->on('connection', function (ConnectionInterface $conn) {
            $conn->write('foo');
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connecting = $connector->connect($server->getAddress());

        $promise = new Promise(function ($resolve, $reject) use ($connecting) {
            $connecting->then(function (ConnectionInterface $connection) use ($resolve) {
                $connection->on('data', $resolve);
            }, $reject);
        });

        $data = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertEquals('foo', $data);

        $server->close();

        $connecting->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    public function testWritesDataInMultipleChunksToConnection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableOnce());

        $server->on('connection', function (ConnectionInterface $conn) {
            $conn->write(str_repeat('*', 400000));
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connecting = $connector->connect($server->getAddress());

        $promise = new Promise(function ($resolve, $reject) use ($connecting) {
            $connecting->then(function (ConnectionInterface $connection) use ($resolve) {
                $received = 0;
                $connection->on('data', function ($chunk) use (&$received, $resolve, $connection) {
                    $received += strlen($chunk);

                    if ($received >= 400000) {
                        $resolve($received);
                    }
                });
            }, $reject);
        });

        $received = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertEquals(400000, $received);

        $server->close();

        $connecting->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    public function testWritesMoreDataInMultipleChunksToConnection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableOnce());

        $server->on('connection', function (ConnectionInterface $conn) {
            $conn->write(str_repeat('*', 2000000));
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connecting = $connector->connect($server->getAddress());

        $promise = new Promise(function ($resolve, $reject) use ($connecting) {
            $connecting->then(function (ConnectionInterface $connection) use ($resolve) {
                $received = 0;
                $connection->on('data', function ($chunk) use (&$received, $resolve) {
                    $received += strlen($chunk);

                    if ($received >= 2000000) {
                        $resolve($received);
                    }
                });
            }, $reject);
        });

        $received = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertEquals(2000000, $received);

        $server->close();

        $connecting->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    public function testEmitsDataFromConnection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableOnce());

        $promise = new Promise(function ($resolve, $reject) use ($server) {
            $server->on('connection', function (ConnectionInterface $connection) use ($resolve) {
                $connection->on('data', $resolve);
            });
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connecting = $connector->connect($server->getAddress());
        $connecting->then(function (ConnectionInterface $connection) {
            $connection->write('foo');
        });

        $data = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertEquals('foo', $data);

        $server->close();

        $connecting->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    public function testEmitsDataInMultipleChunksFromConnection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableOnce());

        $promise = new Promise(function ($resolve, $reject) use ($server) {
            $server->on('connection', function (ConnectionInterface $connection) use ($resolve) {
                $received = 0;
                $connection->on('data', function ($chunk) use (&$received, $resolve) {
                    $received += strlen($chunk);

                    if ($received >= 400000) {
                        $resolve($received);
                    }
                });
            });
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connecting = $connector->connect($server->getAddress());
        $connecting->then(function (ConnectionInterface $connection) {
            $connection->write(str_repeat('*', 400000));
        });

        $received = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertEquals(400000, $received);

        $server->close();

        $connecting->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    public function testPipesDataBackInMultipleChunksFromConnection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableOnce());

        $server->on('connection', function (ConnectionInterface $conn) {
            $conn->pipe($conn);
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connecting = $connector->connect($server->getAddress());

        $promise = new Promise(function ($resolve, $reject) use ($connecting) {
            $connecting->then(function (ConnectionInterface $connection) use ($resolve) {
                $received = 0;
                $connection->on('data', function ($chunk) use (&$received, $resolve) {
                    $received += strlen($chunk);

                    if ($received >= 400000) {
                        $resolve($received);
                    }
                });
                $connection->write(str_repeat('*', 400000));
            }, $reject);
        });

        $received = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $this->assertEquals(400000, $received);

        $server->close();

        $connecting->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    /**
     * @requires PHP 5.6
     * @depends testClientUsesTls10WhenCryptoMethodIsExplicitlyConfiguredByClient
     */
    public function testEmitsConnectionForNewTlsv11Connection()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem',
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_1_SERVER
        ));
        $server->on('connection', $this->expectCallableOnce());

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false,
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT
        ));
        $promise = $connector->connect($server->getAddress());

        \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));

        $server->close();
        $promise->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    /**
     * @requires PHP 5.6
     * @depends testClientUsesTls10WhenCryptoMethodIsExplicitlyConfiguredByClient
     */
    public function testEmitsErrorForClientWithTlsVersionMismatch()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem',
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_1_SERVER|STREAM_CRYPTO_METHOD_TLSv1_2_SERVER
        ));
        $server->on('connection', $this->expectCallableNever());
        $server->on('error', $this->expectCallableOnce());

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false,
            'crypto_method' => STREAM_CRYPTO_METHOD_TLSv1_0_CLIENT
        ));
        $promise = $connector->connect($server->getAddress());

        $this->setExpectedException('RuntimeException', 'handshake');

        try {
            \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));
        } catch (\Exception $e) {
            $server->close();

            throw $e;
        }
    }

    public function testServerEmitsConnectionForNewConnectionWithEncryptedCertificate()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost_swordfish.pem',
            'passphrase' => 'swordfish'
        ));

        $peer = new Promise(function ($resolve, $reject) use ($server) {
            $server->on('connection', $resolve);
            $server->on('error', $reject);
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $connector->connect($server->getAddress());

        $connection = \React\Async\await(\React\Promise\Timer\timeout($peer, self::TIMEOUT));

        $this->assertInstanceOf('React\Socket\ConnectionInterface', $connection);

        $server->close();
        $connection->close();
    }

    public function testClientRejectsWithErrorForServerWithInvalidCertificate()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => 'invalid.pem'
        ));

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        $this->setExpectedException('RuntimeException', 'handshake');

        try {
            \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));
        } catch (\Exception $e) {
            $server->close();

            throw $e;
        }
    }

    public function testServerEmitsErrorForClientWithInvalidCertificate()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => 'invalid.pem'
        ));

        $peer = new Promise(function ($resolve, $reject) use ($server) {
            $server->on('connection', function () use ($reject) {
                $reject(new \RuntimeException('Did not expect connection to succeed'));
            });
            $server->on('error', $reject);
        });

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        try {
            \React\Async\await($promise);
        } catch (\RuntimeException $e) {
            // ignore client-side exception
        }

        $this->setExpectedException('RuntimeException', 'handshake');

        try {
            \React\Async\await(\React\Promise\Timer\timeout($peer, self::TIMEOUT));
        } catch (\Exception $e) {
            $server->close();

            throw $e;
        }
    }

    public function testEmitsErrorForServerWithEncryptedCertificateMissingPassphrase()
    {
        if (DIRECTORY_SEPARATOR === '\\') {
            $this->markTestSkipped('Not supported on Windows');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost_swordfish.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $server->on('error', $this->expectCallableOnce());

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        $this->setExpectedException('RuntimeException', 'handshake');

        try {
            \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));
        } catch (\Exception $e) {
            $server->close();

            throw $e;
        }
    }

    public function testEmitsErrorForServerWithEncryptedCertificateWithInvalidPassphrase()
    {
        if (DIRECTORY_SEPARATOR === '\\') {
            $this->markTestSkipped('Not supported on Windows');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost_swordfish.pem',
            'passphrase' => 'nope'
        ));
        $server->on('connection', $this->expectCallableNever());
        $server->on('error', $this->expectCallableOnce());

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());

        $this->setExpectedException('RuntimeException', 'handshake');

        try {
            \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));
        } catch (\Exception $e) {
            $server->close();

            throw $e;
        }
    }

    public function testEmitsErrorForConnectionWithPeerVerification()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $errorEvent = $this->createPromiseForServerError($server);

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => true
        ));
        $promise = $connector->connect($server->getAddress());
        $promise->then(null, $this->expectCallableOnce());

        \React\Async\await(\React\Promise\Timer\timeout($errorEvent, self::TIMEOUT));

        $server->close();
    }

    public function testEmitsErrorIfConnectionIsCancelled()
    {
        if (PHP_OS !== 'Linux') {
            $this->markTestSkipped('Linux only (OS is ' . PHP_OS . ')');
        }

        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $errorEvent = $this->createPromiseForServerError($server);

        $connector = new SecureConnector(new TcpConnector(), null, array(
            'verify_peer' => false
        ));
        $promise = $connector->connect($server->getAddress());
        $promise->cancel();
        $promise->then(null, $this->expectCallableOnce());

        \React\Async\await(\React\Promise\Timer\timeout($errorEvent, self::TIMEOUT));

        $server->close();
    }

    public function testEmitsErrorIfConnectionIsClosedBeforeHandshake()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $errorEvent = $this->createPromiseForServerError($server);

        $connector = new TcpConnector();
        $promise = $connector->connect(str_replace('tls://', '', $server->getAddress()));

        $promise->then(function (ConnectionInterface $stream) {
            $stream->close();
        });

        $error = \React\Async\await(\React\Promise\Timer\timeout($errorEvent, self::TIMEOUT));

        // Connection from tcp://127.0.0.1:39528 failed during TLS handshake: Connection lost during TLS handshake (ECONNRESET)
        $this->assertInstanceOf('RuntimeException', $error);
        $this->assertStringStartsWith('Connection from tcp://', $error->getMessage());
        $this->assertStringEndsWith('failed during TLS handshake: Connection lost during TLS handshake (ECONNRESET)', $error->getMessage());
        $this->assertEquals(defined('SOCKET_ECONNRESET') ? SOCKET_ECONNRESET : 104, $error->getCode());
        $this->assertNull($error->getPrevious());

        $server->close();
    }

    public function testEmitsErrorIfConnectionIsClosedWithIncompleteHandshake()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $errorEvent = $this->createPromiseForServerError($server);

        $connector = new TcpConnector();
        $promise = $connector->connect(str_replace('tls://', '', $server->getAddress()));

        $promise->then(function (ConnectionInterface $stream) {
            $stream->end("\x1e");
        });

        $error = \React\Async\await(\React\Promise\Timer\timeout($errorEvent, self::TIMEOUT));

        // Connection from tcp://127.0.0.1:39528 failed during TLS handshake: Connection lost during TLS handshake (ECONNRESET)
        $this->assertInstanceOf('RuntimeException', $error);
        $this->assertStringStartsWith('Connection from tcp://', $error->getMessage());
        $this->assertStringEndsWith('failed during TLS handshake: Connection lost during TLS handshake (ECONNRESET)', $error->getMessage());
        $this->assertEquals(defined('SOCKET_ECONNRESET') ? SOCKET_ECONNRESET : 104, $error->getCode());
        $this->assertNull($error->getPrevious());

        $server->close();
    }

    public function testEmitsNothingIfPlaintextConnectionIsIdle()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $server->on('error', $this->expectCallableNever());

        $connector = new TcpConnector();
        $promise = $connector->connect(str_replace('tls://', '', $server->getAddress()));

        $connection = \React\Async\await(\React\Promise\Timer\timeout($promise, self::TIMEOUT));
        $this->assertInstanceOf('React\Socket\ConnectionInterface', $connection);

        $server->close();
        $promise->then(function (ConnectionInterface $connection) {
            $connection->close();
        });
    }

    public function testEmitsErrorIfConnectionIsHttpInsteadOfSecureHandshake()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $errorEvent = $this->createPromiseForServerError($server);

        $connector = new TcpConnector();
        $promise = $connector->connect(str_replace('tls://', '', $server->getAddress()));

        $promise->then(function (ConnectionInterface $stream) {
            $stream->write("GET / HTTP/1.0\r\n\r\n");
        });

        $error = \React\Async\await(\React\Promise\Timer\timeout($errorEvent, self::TIMEOUT));

        $this->assertInstanceOf('RuntimeException', $error);

        // OpenSSL error messages are version/platform specific
        // Unable to complete TLS handshake: SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:SSL3_GET_RECORD:http request
        // Unable to complete TLS handshake: SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
        // Unable to complete TLS handshake: SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:func(143):reason(267)
        // Unable to complete TLS handshake: Failed setting RSA key

        $server->close();
    }

    public function testEmitsErrorIfConnectionIsUnknownProtocolInsteadOfSecureHandshake()
    {
        $server = new TcpServer(0);
        $server = new SecureServer($server, null, array(
            'local_cert' => __DIR__ . '/../examples/localhost.pem'
        ));
        $server->on('connection', $this->expectCallableNever());
        $errorEvent = $this->createPromiseForServerError($server);

        $connector = new TcpConnector();
        $promise = $connector->connect(str_replace('tls://', '', $server->getAddress()));

        $promise->then(function (ConnectionInterface $stream) {
            $stream->write("Hello world!\n");
        });

        $error = \React\Async\await(\React\Promise\Timer\timeout($errorEvent, self::TIMEOUT));

        $this->assertInstanceOf('RuntimeException', $error);

        // OpenSSL error messages are version/platform specific
        // Unable to complete TLS handshake: SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:SSL3_GET_RECORD:unknown protocol
        // Unable to complete TLS handshake: SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
        // Unable to complete TLS handshake: SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:func(143):reason(267)
        // Unable to complete TLS handshake: Failed setting RSA key

        $server->close();
    }

    private function createPromiseForServerError(ServerInterface $server)
    {
        return new Promise(function ($resolve) use ($server) {
            $server->on('error', function ($arg) use ($resolve) {
                $resolve($arg);
            });
        });
    }
}