a
}|gJ @ s d Z ddlZddlZddlmZ ddlmZ ddlZddl m
Z
ddl Z ddl Z ddl
Z
ddlmZ ddlmZ edZejedd ZG d
d d ejZG d d
d
ejZG dd dejZG dd dejZG dd dejZ G dd dejZ G dd dejZ G dd dejZ G dd dejZ G d d d ejZ!G d d d ejZ"G d d! d!ejZ#e$d"kre%e &ej'd#d e(g dS )$zTests for acme.challenges. N)mock)JWKEC)errors) test_utilzcert.pemrsa512_key.pemkeyc @ s e Zd Zdd ZdS )
ChallengeTestc C s( ddl m} ddl m} |ddi}d S )Nr ) ChallengeUnrecognizedChallengetypefoo)acme.challengesr
r )selfr
r chall r H/usr/lib/python3.9/site-packages/acme/_internal/tests/challenges_test.pytest_from_json_unrecognized s z)ChallengeTest.test_from_json_unrecognizedN)__name__
__module__ __qualname__r r r r r r s r c @ s$ e Zd Zdd Zdd Zdd ZdS )UnrecognizedChallengeTestc C s& ddl m} ddi| _|| j| _d S )Nr r r
r )r r jobjr r r r r r setUp s
z UnrecognizedChallengeTest.setUpc C s d S Nr r r r r test_to_partial_json$ s z.UnrecognizedChallengeTest.test_to_partial_jsonc C s ddl m} d S )Nr r )r r r r r r test_from_json' s z(UnrecognizedChallengeTest.test_from_jsonN)r r r r r r r r r r r s r c @ s4 e Zd Zdd Zdd Zdd Zdd Zd d
Zd S ) %KeyAuthorizationChallengeResponseTestc C s dd }t | _|| jj_d S )Nc S s dS )Nr r )namer r r _encode/ s z._encode)r ZMockr encode side_effect)r r" r r r r . s
z+KeyAuthorizationChallengeResponseTest.setUpc C s ddl m} |dd}d S )Nr !KeyAuthorizationChallengeResponsez/foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYkey_authorizationr r& r r& responser r r test_verify_ok5 s
z4KeyAuthorizationChallengeResponseTest.test_verify_okc C s ddl m} |dd}d S )Nr r% z/bar.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr' r) r* r r r test_verify_wrong_token; s
z=KeyAuthorizationChallengeResponseTest.test_verify_wrong_tokenc C s ddl m} |dd}d S )Nr r% z foo.oKGqedy-b-acd5eoybm2f-NVFxvr' r) r* r r r test_verify_wrong_thumbprintA s
zBKeyAuthorizationChallengeResponseTest.test_verify_wrong_thumbprintc C s ddl m} |dd}d S )Nr r% z0.foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr' r) r* r r r test_verify_wrong_formG s
z rJ r+ rK r )r rJ rM r r r test_simple_verify_successo s z,DNS01ResponseTest.test_simple_verify_successN) r r r r r r rC rN rO r r r r r0 O s
r0 c @ s< e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
S ) DNS01Testc C s. ddl m} |tdd| _ddd| _d S )Nr r7 +evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ+PCt92wr+oAr: r4 +evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oAr
r; )r r8 rF decode_b64joser< r= r r8 r r r r w s
zDNS01Test.setUpc C s d S r r r r r r test_validation_domain_name s z%DNS01Test.test_validation_domain_namec C s d S r r r r r r test_validation s zDNS01Test.test_validationc C s d S r r r r r r r s z DNS01Test.test_to_partial_jsonc C s ddl m} d S Nr r7 )r r8 rU r r r r s zDNS01Test.test_from_jsonc C s ddl m} t|| j d S rX )r r8 rA rB r= rU r r r rC s z!DNS01Test.test_from_json_hashableN) r r r r rV rW r r rC r r r r rP u s rP c @ s e Zd Zdd Zdd Zdd Zdd Zd d
Ze d d d
Z
e d dd Z e d dd Z e d dd Z
e d dd Ze d dd ZdS )HTTP01ResponseTestc C sP ddl m} |dd| _dddd| _ddl m} |d d
| _| jt| _d S ) Nr HTTP01Responser r' r3 http-01r5 HTTP01r9 r: )r r[ r< r= r^ r r+ r> )r r[ r^ r r r r s zHTTP01ResponseTest.setUpc C s d S r r r r r r r s z'HTTP01ResponseTest.test_to_partial_jsonc C s ddl m} d S Nr rZ )r r[ r r[ r r r r s z!HTTP01ResponseTest.test_from_jsonc C s ddl m} t|| j d S r_ )r r[ rA rB r= r` r r r rC s z*HTTP01ResponseTest.test_from_json_hashablec C s, t jtd}| j| jd| d S rD rF rG rH r rI r+ rK r rJ r rL r r r (test_simple_verify_bad_key_authorization s z;HTTP01ResponseTest.test_simple_verify_bad_key_authorizationz acme.challenges.requests.getc C s8 | j t}tj|d|_|j| j ddtjd d S )NtextrE FZverifytimeout) r
validationr> r MagicMock return_valueassert_called_once_withuriANY)r mock_getrh r r r "test_simple_verify_good_validation s
z5HTTP01ResponseTest.test_simple_verify_good_validationc C s t jdd|_d S )N!rd )r ri rj r rn r r r !test_simple_verify_bad_validation s z4HTTP01ResponseTest.test_simple_verify_bad_validationc C sF ddl m} tj| jt|j d|_|j | j
ddtj d d S )Nr rZ rd rE Frf ) r r[ r ri r rh r> ZWHITESPACE_CUTSETrj rk rl rm )r rn r[ r r r (test_simple_verify_whitespace_validation s
z;HTTP01ResponseTest.test_simple_verify_whitespace_validationc C s t jj|_d S r )requests
exceptionsZRequestExceptionr$ rq r r r #test_simple_verify_connection_error s
z6HTTP01ResponseTest.test_simple_verify_connection_errorc C s | j j| jdt dd d S )NrE i )domainZaccount_public_keyport)r+ rK r r> rJ rq r r r test_simple_verify_port s
z*HTTP01ResponseTest.test_simple_verify_portc C sl | j | jdt |j| jdddd | | j j| jdt dd |j| jdddd d S )NrE F rf i )rg )r+ rK r r> rJ rk rl Z
reset_mockrq r r r test_simple_verify_timeout s z-HTTP01ResponseTest.test_simple_verify_timeoutN)r r r r r r rC rc r patchro rr rs rv ry r{ r r r r rY s"
rY c @ sD e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dS )
HTTP01Testc C s. ddl m} |tdd| _ddd| _d S )Nr r] rQ r: r\ rR rS )r r^ rF rT r< r= r r^ r r r r s zHTTP01Test.setUpc C s d S r r r r r r test_path s zHTTP01Test.test_pathc C s d S r r r r r r test_uri s zHTTP01Test.test_uric C s d S r r r r r r r s z HTTP01Test.test_to_partial_jsonc C s ddl m} d S Nr r] )r r^ r~ r r r r s zHTTP01Test.test_from_jsonc C s ddl m} t|| j d S r )r r^ rA rB r= r~ r r r rC s z"HTTP01Test.test_from_json_hashablec C s d S r r r r r r test_good_token s zHTTP01Test.test_good_tokenN)
r r r r r r r r rC r r r r r r} s
r} c @ s e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dd Z
dd Z e j
ddddd Ze
de
ddd Ze
d d d Zd S ) TLSALPN01ResponseTestc C sN ddl m} |tdd| _d| _d| _| jt| _dd| jj d | _
d S )
Nr TLSALPN01s a82d5ff8ef740d12881f6d3c2277ab2er: z example.comz example2.comr3 tls-alpn-01r5 ) r r rF b64decoder rw Zdomain2r+ r> r( r= r r r r r r s zTLSALPN01ResponseTest.setUpc C s d S r r r r r r r s z*TLSALPN01ResponseTest.test_to_partial_jsonc C s ddl m} d S Nr )TLSALPN01Response)r r r r r r r r s z$TLSALPN01ResponseTest.test_from_jsonc C s ddl m} t|| j d S r )r r rA rB r= r r r r rC ! s z-TLSALPN01ResponseTest.test_from_json_hashablec C s" t d}| j| j|\}}d S Nr r Zload_pyopenssl_private_keyr+ gen_certrw r Zkey1certrL r r r test_gen_verify_cert% s
z*TLSALPN01ResponseTest.test_gen_verify_certc C s | j | j\}}d S r )r+ r rw )r r r r r r test_gen_verify_cert_gen_key+ s z2TLSALPN01ResponseTest.test_gen_verify_cert_gen_keyc C s d S r r r r r r test_verify_bad_cert0 s z*TLSALPN01ResponseTest.test_verify_bad_certc C s" t d}| j| j|\}}d S r r r r r r test_verify_bad_domain4 s
z,TLSALPN01ResponseTest.test_verify_bad_domainc C s, t jtd}| j| jd| d S rD ra rb r r r rc : s z>TLSALPN01ResponseTest.test_simple_verify_bad_key_authorizationz-acme.challenges.TLSALPN01Response.verify_certT)Zautospecc C s$ t jj|_|| j| jt jj d S r )r sentinelZ verificationrj rk r+ rw r )r Zmock_verify_certr r r test_simple_verify> s
z(TLSALPN01ResponseTest.test_simple_verifyz$acme.challenges.socket.gethostbynamez%acme.challenges.crypto_util.probe_snic C s^ d|_ | jd |d |jd| jjddgd | jjddd |jd tjddgd d S )
Nz 127.0.0.1zfoo.coms 127.0.0.1s foo.coms
acme-tls/1)hostrx r! Zalpn_protocolsz8.8.8.8)r s 8.8.8.8)rj r+ Z
probe_certrk ZPORTZassert_called_withr rm )r Zmock_probe_sniZmock_gethostbynamer r r test_probe_certG s
z%TLSALPN01ResponseTest.test_probe_certz,acme.challenges.TLSALPN01Response.probe_certc C s t j|_d S r )r Errorr$ )r Zmock_probe_certr r r 'test_simple_verify_false_on_probe_errorV s z=TLSALPN01ResponseTest.test_simple_verify_false_on_probe_errorN)r r r r r r rC r r r r rc r r| r r r r r r r r
s
r c @ sF e Zd Zdd Zdd Zdd Zdd Zd d
Ze d d d
Z
dS )
TLSALPN01Testc C s. ddl m} |tdd| _ddd| _d S )Nr r Z a82d5ff8ef740d12881f6d3c2277ab2er: r rS )r r rF r r< r= r r r r r _ s zTLSALPN01Test.setUpc C s d S r r r r r r r h s z"TLSALPN01Test.test_to_partial_jsonc C s ddl m} d S Nr r )r r r r r r r k s z TLSALPN01Test.test_from_jsonc C s ddl m} t|| j d S r )r r rA rB r= r r r r rC o s z%TLSALPN01Test.test_from_json_hashablec C sX ddl m} td| jd< ttj || j W d n1 sJ0 Y d S )Nr r s abcdr; ) r r rF Zencode_b64joser= pytestZraisesZDeserializationErrorrB r r r r #test_from_json_invalid_token_lengths s z1TLSALPN01Test.test_from_json_invalid_token_lengthz*acme.challenges.TLSALPN01Response.gen_certc C s d|_ |jtjjtjjd d S )N)r r )r rw )rj rk r r Zcert_keyrw )r Z
mock_gen_certr r r rW y s
z TLSALPN01Test.test_validationN) r r r r r r rC r r r| rW r r r r r ] s r c @ sd e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dd Z
dd Z dd Z dd Z
dS )DNSTestc C s. ddl m} |tdd| _ddd| _d S )Nr DNS+ evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oAr: dnsrR rS )r r rF r r< r= r r r r r r s
z
DNSTest.setUpc C s d S r r r r r r r s z DNSTest.test_to_partial_jsonc C s ddl m} d S Nr r )r r r r r r r s zDNSTest.test_from_jsonc C s ddl m} t|| j d S r )r r rA rB r= r r r r rC s z DNSTest.test_from_json_hashablec C s` t tdd}ttjf|tjffD ]6\}}| j||d W d q$1 sP0 Y q$d S )Nec_secp384r1_key.pemr )r alg)r r load_ecdsa_private_keyr> rF RS256ZES384ZsubTest)r ec_key_secp384r1r r r r r test_gen_check_validation s z!DNSTest.test_gen_check_validationc C s t jtd}d S )Nzrsa1024_key.pem)rF rG rH r rI rb r r r #test_gen_check_validation_wrong_key s z+DNSTest.test_gen_check_validation_wrong_keyc C s t dd dD }|D ]}qd S )Nc s s" | ]}t jj|t jtd V qdS )payloadr r N)rF JWSsignr r> ).0r r r r s z>DNSTest.test_check_validation_wrong_payload..) s {})tuple)r Z validationsrh r r r #test_check_validation_wrong_payload s
z+DNSTest.test_check_validation_wrong_payloadc C s, t jj| jjdd dt jtd}d S )Ns xxxxxxxxxxxxxxxxxxxxr: zutf-8r ) rF r r r< update
json_dumpsr# r r> )r Zbad_validationr r r "test_check_validation_wrong_fields s
z*DNSTest.test_check_validation_wrong_fieldsc C sP t d&}t jj|_| jt}W d n1 s60 Y ddlm } d S )Nz"acme.challenges.DNS.gen_validationr DNSResponse)
r r| r rh rj r< Z gen_responser> r r )r Zmock_genr+ r r r r test_gen_response s
* zDNSTest.test_gen_responsec C s d S r r r r r r rV s z#DNSTest.test_validation_domain_namec C s t tdd}d S )Nr r )r r r )r r r r r !test_validation_domain_name_ecdsa s z)DNSTest.test_validation_domain_name_ecdsaN)r r r r r r rC r r r r r rV r r r r r r s r c @ s4 e Zd Zdd Zdd Zdd Zdd Zd d
Zd S ) DNSResponseTestc C s ddl m} |tdd| _tjj| jjdd t tj
d| _ ddl m } || j d | _
d
| j i| _d d | j d
| _d S )Nr r r r: T)Z sort_keys)r r r r )rh rh r3 r )r6 r
rh )r r rF r r r r r r# r> r rh r r< Zjmsg_toZto_json jmsg_from)r r r r r r r s
zDNSResponseTest.setUpc C s d S r r r r r r r s z$DNSResponseTest.test_to_partial_jsonc C s ddl m} d S Nr r )r r r r r r r r s z DNSResponseTest.test_from_jsonc C s ddl m} t|| j d S r )r r rA rB r r r r r rC s z'DNSResponseTest.test_from_json_hashablec C s d S r r r r r r test_check_validation s z%DNSResponseTest.test_check_validationN)r r r r r r rC r r r r r r s
r c @ s e Zd ZdZdd ZdS )JWSPayloadRFC8555CompliantzFTest for RFC8555 compliance of JWS generated from resources/challengesc C s& ddl m} | }|jdd }d S )Nr rZ )indent)r r[ r r# )r r[ Zchallenge_bodyr r r r test_challenge_payload s z1JWSPayloadRFC8555Compliant.test_challenge_payloadN)r r r __doc__r r r r r r s r __main__ ))r sysZunittestr urllib.parseparseZ urllib_parseZjosepyrF Z
josepy.jwkr ZOpenSSLr rt Zacmer Zacme._internal.testsr Zload_comparable_certZCERTrG Zload_rsa_private_keyr> ZTestCaser r r r0 rP rY r} r r r r r r exitmainargv__file__r r r r s6
#& Q%S%D$