a
}|gJ @ s d Z ddlZddlZddlmZ ddlmZ ddlZddl m
Z
ddl Z ddl Z ddl
Z
ddlmZ ddlmZ edZejedd ZG d
d d ejZG d d
d
ejZG dd dejZG dd dejZG dd dejZ G dd dejZ G dd dejZ G dd dejZ G dd dejZ G d d d ejZ!G d d d ejZ"G d d! d!ejZ#e$d"kre%e &ej'd#d e(g dS )$zTests for acme.challenges. N)mock)JWKEC)errors) test_utilcert.pemrsa512_key.pemkeyc @ s e Zd Zdd ZdS )
ChallengeTestc C s< ddl m} ddl m} |ddi}|||jks8J d S )Nr ) ChallengeUnrecognizedChallengetypefoo)acme.challengesr r
from_jsonjobj)selfr r
chall r H/usr/lib/python3.9/site-packages/acme/_internal/tests/challenges_test.pytest_from_json_unrecognized s z)ChallengeTest.test_from_json_unrecognizedN)__name__
__module__ __qualname__r r r r r r
s r
c @ s$ e Zd Zdd Zdd Zdd ZdS )UnrecognizedChallengeTestc C s& ddl m} ddi| _|| j| _d S )Nr r r r )r r
r r r r
r r r setUp s
z UnrecognizedChallengeTest.setUpc C s | j | j ksJ d S N)r r to_partial_jsonr r r r test_to_partial_json$ s z.UnrecognizedChallengeTest.test_to_partial_jsonc C s& ddl m} | j|| jks"J d S )Nr r )r r
r r r r r r r test_from_json' s z(UnrecognizedChallengeTest.test_from_jsonN)r r r r r! r" r r r r r s r c @ s4 e Zd Zdd Zdd Zdd Zdd Zd d
Zd S ) %KeyAuthorizationChallengeResponseTestc C s dd }t | _|| jj_d S )Nc S s | dks J dS )Ntokenr r )namer r r _encode/ s z._encode)r ZMockr encode side_effect)r r& r r r r . s
z+KeyAuthorizationChallengeResponseTest.setUpc C s0 ddl m} |dd}|| jt s,J d S )Nr !KeyAuthorizationChallengeResponsez/foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYkey_authorizationr r* verifyr KEY
public_keyr r* responser r r test_verify_ok5 s
z4KeyAuthorizationChallengeResponseTest.test_verify_okc C s0 ddl m} |dd}|| jt r,J d S )Nr r) z/bar.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr+ r- r1 r r r test_verify_wrong_token; s
z=KeyAuthorizationChallengeResponseTest.test_verify_wrong_tokenc C s0 ddl m} |dd}|| jt r,J d S )Nr r) z foo.oKGqedy-b-acd5eoybm2f-NVFxvr+ r- r1 r r r test_verify_wrong_thumbprintA s
zBKeyAuthorizationChallengeResponseTest.test_verify_wrong_thumbprintc C s0 ddl m} |dd}|| jt r,J d S )Nr r) z0.foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr+ r- r1 r r r test_verify_wrong_formG s
z +evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ+PCt92wr+oArA r; +evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oAr r$ )r r? rK decode_b64joserB rC r r? r r r r w s
zDNS01Test.setUpc C s d| j dksJ d S )Nz _acme-challenge.www.example.comzwww.example.comrB Zvalidation_domain_namer r r r test_validation_domain_name s
z%DNS01Test.test_validation_domain_namec C s d| j tksJ d S )NZ+rAa7iIg4K2y63fvUhCfy8dP1Xl7wEhmQq0oChTcE3Zk)rB
validationr/ r r r r test_validation s
zDNS01Test.test_validationc C s | j | j ksJ d S r rC rB r r r r r r! s z DNS01Test.test_to_partial_jsonc C s& ddl m} | j|| jks"J d S Nr r> )r r? rB r rC rZ r r r r" s zDNS01Test.test_from_jsonc C s ddl m} t|| j d S r` )r r? rG r rC rZ r r r rH s z!DNS01Test.test_from_json_hashableN) r r r r r\ r^ r! r" rH r r r r rU u s rU c @ s e Zd Zdd Zdd Zdd Zdd Zd d
Ze d d d
Z
e d dd Z e d dd Z e d dd Z
e d dd Ze d dd ZdS )HTTP01ResponseTestc C sP ddl m} |dd| _dddd| _ddl m} |d d
| _| jt| _d S ) Nr HTTP01Responser r+ r: http-01r< HTTP01r@ rA )r rc rB rC rf r r2 r/ )r rc rf r r r r s zHTTP01ResponseTest.setUpc C s i | j ksJ d S r rD r r r r r! s z'HTTP01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|| jks"J d S Nr rb )r rc rB r rC r rc r r r r" s z!HTTP01ResponseTest.test_from_jsonc C s ddl m} t|| j d S rg )r rc rG r rC rh r r r rH s z*HTTP01ResponseTest.test_from_json_hashablec C s, t jtd}| j| jd| d S rI rK rL rM r rN r2 rO r r0 r rP r r r (test_simple_verify_bad_key_authorization s z;HTTP01ResponseTest.test_simple_verify_bad_key_authorizationz acme.challenges.requests.getc C sR | j t}tj|d|_| j| j dt s4J |j | j
ddtj d d S )NtextrJ Fr. timeout) r r] r/ r MagicMock return_valuer2 rO r0 assert_called_once_withuriANY)r mock_getr] r r r "test_simple_verify_good_validation s z5HTTP01ResponseTest.test_simple_verify_good_validationc C s, t jdd|_| j| jdt r(J d S )N!rl rJ )r rp rq r2 rO r r/ r0 r ru r r r !test_simple_verify_bad_validation s z4HTTP01ResponseTest.test_simple_verify_bad_validationc C s` ddl m} tj| jt|j d|_| j
| jdt sBJ |j | j
ddtjd d S )Nr rb rl rJ Frn )r rc r rp r r] r/ ZWHITESPACE_CUTSETrq r2 rO r0 rr rs rt )r ru rc r r r (test_simple_verify_whitespace_validation s
z;HTTP01ResponseTest.test_simple_verify_whitespace_validationc C s( t jj|_| j| jdt r$J d S rS ) requests
exceptionsZRequestExceptionr( r2 rO r r/ r0 rx r r r #test_simple_verify_connection_error s
z6HTTP01ResponseTest.test_simple_verify_connection_errorc C s@ | j j| jdt dd dt|jd d d jksJ d S Nr )r load_pyopenssl_private_keyr2 gen_certr~ verify_certr Zkey1certrP r r r test_gen_verify_cert% s
z*TLSALPN01ResponseTest.test_gen_verify_certc C s< | j | j\}}t|tjjs$J | j | j|s8J d S r )r2 r r~
isinstanceOpenSSLZcryptoZPKeyr )r r r r r r test_gen_verify_cert_gen_key+ s z2TLSALPN01ResponseTest.test_gen_verify_cert_gen_keyc C s | j | jtdrJ d S )Nr )r2 r r~ r Z load_certr r r r test_verify_bad_cert0 s
z*TLSALPN01ResponseTest.test_verify_bad_certc C sB t d}| j| j|\}}||ks*J | j| j|r>J d S r )r r r2 r r~ r r r r r r test_verify_bad_domain4 s
z,TLSALPN01ResponseTest.test_verify_bad_domainc C s, t jtd}| j| jd| d S rI ri rj r r r rk : s z>TLSALPN01ResponseTest.test_simple_verify_bad_key_authorizationz-acme.challenges.TLSALPN01Response.verify_certT)Zautospecc C sP t jj|_t jj| jj| j| jt t jj
dks6J | | j| jt jj
d S )N)r ) r sentinelZ verificationrq r2 rO r r~ r/ r0 r rr )r Zmock_verify_certr r r test_simple_verify> s
z(TLSALPN01ResponseTest.test_simple_verifyz$acme.challenges.socket.gethostbynamez%acme.challenges.crypto_util.probe_snic C s^ d|_ | jd |d |jd| jjddgd | jjddd |jd tjddgd d S )
Nz 127.0.0.1zfoo.coms 127.0.0.1s foo.coms
acme-tls/1)hostr r% Zalpn_protocolsz8.8.8.8)r s 8.8.8.8)rq r2 Z
probe_certrr ZPORTZassert_called_withr rt )r Zmock_probe_sniZmock_gethostbynamer r r test_probe_certG s
z%TLSALPN01ResponseTest.test_probe_certz,acme.challenges.TLSALPN01Response.probe_certc C s( t j|_| j| j| jt r$J d S r ) r Errorr( r2 rO r r~ r/ r0 )r Zmock_probe_certr r r 'test_simple_verify_false_on_probe_errorV s z=TLSALPN01ResponseTest.test_simple_verify_false_on_probe_errorN)r r r r r! r" rH r r r r rk r r r r r r r r r r
s
r c @ sF e Zd Zdd Zdd Zdd Zdd Zd d
Ze d d d
Z
dS )
TLSALPN01Testc C s. ddl m} |tdd| _ddd| _d S )Nr r Z a82d5ff8ef740d12881f6d3c2277ab2erA r rX )r r rK r rB rC r r r r r _ s zTLSALPN01Test.setUpc C s | j | j ksJ d S r r_ r r r r r! h s z"TLSALPN01Test.test_to_partial_jsonc C s& ddl m} | j|| jks"J d S Nr r )r r rB r rC r r r r r" k s z TLSALPN01Test.test_from_jsonc C s ddl m} t|| j d S r )r r rG r rC r r r r rH o s z%TLSALPN01Test.test_from_json_hashablec C sX ddl m} td| jd< ttj || j W d n1 sJ0 Y d S )Nr r s abcdr$ ) r r rK Zencode_b64joserC pytestZraisesZDeserializationErrorr r r r r #test_from_json_invalid_token_lengths s z1TLSALPN01Test.test_from_json_invalid_token_lengthz*acme.challenges.TLSALPN01Response.gen_certc C sB d|_ d| jjttjjtjjdks(J |jtjjtjjd d S )N)r r )cert_keyr~ )r r~ ) rq rB r] r/ r r r r~ rr )r Z
mock_gen_certr r r r^ y s
z TLSALPN01Test.test_validationN) r r r r r! r" rH r r r r^ r r r r r ] s r c @ sd e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dd Z
dd Z dd Z dd Z
dS )DNSTestc C s. ddl m} |tdd| _ddd| _d S )Nr DNS+ evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oArA dnsrW rX )r r rK r rB rC r r r r r r s
z
DNSTest.setUpc C s | j | j ksJ d S r r_ r r r r r! s z DNSTest.test_to_partial_jsonc C s& ddl m} | j|| jks"J d S Nr r )r r rB r rC r r r r r" s zDNSTest.test_from_jsonc C s ddl m} t|| j d S r )r r rG r rC r r r r rH s z DNSTest.test_from_json_hashablec C s t tdd}ttjf|tjffD ]X\}}| j||d2 | j | jj
||d| s^J W d q$1 sr0 Y q$d S )Nec_secp384r1_key.pemr )r algr ) r r load_ecdsa_private_keyr/ rK RS256ES384ZsubTestrB check_validationgen_validationr0 )r ec_key_secp384r1r r r r r test_gen_check_validation s z!DNSTest.test_gen_check_validationc C s4 t jtd}| j| jt| r0J d S )Nzrsa1024_key.pem)
rK rL rM r rN rB r r r/ r0 rj r r r #test_gen_check_validation_wrong_key s z+DNSTest.test_gen_check_validation_wrong_keyc C s6 t dd dD }|D ]}| j|t rJ qd S )Nc s s" | ]}t jj|t jtd V qdS )payloadr r N)rK JWSsignr r/ ).0r r r r s z>DNSTest.test_check_validation_wrong_payload..) {})tuplerB r r/ r0 )r Z validationsr] r r r #test_check_validation_wrong_payload s z+DNSTest.test_check_validation_wrong_payloadc C sB t jj| jjdd dt jtd}| j |t
r>J d S )Ns xxxxxxxxxxxxxxxxxxxxrA zutf-8r ) rK r r rB r
json_dumpsr' r r/ r r0 )r Zbad_validationr r r "test_check_validation_wrong_fields s
z*DNSTest.test_check_validation_wrong_fieldsc C sp t d&}t jj|_| jt}W d n1 s60 Y ddlm } t
||sZJ |jt jjkslJ d S )Nz"acme.challenges.DNS.gen_validationr DNSResponse) r r r r] rq rB Z gen_responser/ r r r )r Zmock_genr2 r r r r test_gen_response s
* zDNSTest.test_gen_responsec C s d| j dksJ d S )Nz_acme-challenge.le.wtfzle.wtfr[ r r r r r\ s z#DNSTest.test_validation_domain_namec C s< t tdd}| j| jj|tjd| du s8J d S )Nr r r T) r r r rB r r rK r r0 )r r r r r !test_validation_domain_name_ecdsa s z)DNSTest.test_validation_domain_name_ecdsaN)r r r r r! r" rH r r r r r r\ r r r r r r s r c @ s4 e Zd Zdd Zdd Zdd Zdd Zd d
Zd S ) DNSResponseTestc C s ddl m} |tdd| _tjj| jjdd t tj
d| _ ddl m } || j d | _
d
| j i| _d d | j d
| _d S )Nr r r rA T)Z sort_keys)r r r r )r] r] r: r )r= r r] )r r rK r r r r r r' r/ r r] r rB jmsg_toZto_json jmsg_from)r r r r r r r s
zDNSResponseTest.setUpc C s | j | j ksJ d S r )r rB r r r r r r! s z$DNSResponseTest.test_to_partial_jsonc C s& ddl m} | j|| jks"J d S Nr r )r r rB r r r r r r r r" s z DNSResponseTest.test_from_jsonc C s ddl m} t|| j d S r )r r rG r r r r r r rH s z'DNSResponseTest.test_from_json_hashablec C s | j | jt sJ d S r )rB r r r/ r0 r r r r test_check_validation s z%DNSResponseTest.test_check_validationN)r r r r r! r" rH r r r r r r s
r c @ s e Zd ZdZdd ZdS )JWSPayloadRFC8555CompliantzFTest for RFC8555 compliance of JWS generated from resources/challengesc C s2 ddl m} | }|jdd }|dks.J d S )Nr rb )indentr )r rc r r' )r rc Zchallenge_bodyr r r r test_challenge_payload s z1JWSPayloadRFC8555Compliant.test_challenge_payloadN)r r r __doc__r r r r r r s r __main__r ))r sysZunittestr urllib.parseparser ZjosepyrK Z
josepy.jwkr r r r{ Zacmer Zacme._internal.testsr Zload_comparable_certZCERTrL Zload_rsa_private_keyr/ ZTestCaser
r r# r7 rU ra r r r r r r r exitmainargv__file__r r r r s6
#& Q%S%D$