a
}|g @ s d Z ddlZddlZddlmZ ddlZddlZddlm Z ddl
Z
ddl
m Z ddl Z
ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZ e d
Z e dZ e dZ e
j !e dZ"e#ddddej#$ dZ%G dd de
j&Z'G dd de
j(Z)G dd de
j&Z*G d d d e
j&Z+e,d kre-e.ej/d d e0g dS ) zTests for acme.client. N)Dict)mock)
challenges)errors)jws)messages)
messages_test) test_util)
ClientNetwork)ClientV2z cert-san.pemz
csr-mixed.pemzcsr-nosans.pemzrsa512_key.pemz1https://www.letsencrypt-demo.org/acme/new-account/https://www.letsencrypt-demo.org/acme/new-noncez/https://www.letsencrypt-demo.org/acme/new-orderz1https://www.letsencrypt-demo.org/acme/revoke-cert)Z
newAccountnewNonceZnewOrder
revokeCertmetac @ sT e Zd ZdZdd Zdd Zdd Zdd Zd
d Zd d
Z dd Z
dd Z dd Z e
ddd Ze
ddd Zdd Zdd Zd d Zd d Zd!d" Zd#d$ Zd%d& Zd'd( Zd)d* Zd+d, Zd-d. Zd/d0 Z d1d2 Z d3d4 Z d5d6 Z d7d8 Z d9d: Z!e
dd;d< Z"e
dd=d> Z#e
dd?d@ Z$e
ddAdB Z%dCdD Z&dES )F ClientV2Testz Tests for acme.client.ClientV2.c C s t jdtji i d| _t | _| j| jj_| j| jj_t j
t j dd| _ d| _
t j| j
t d}t|}t jf i || _t j|dd| _d }t j|d
t jtjtd d d
}t j ||d| _ t j t j
t j dd|fd| _ t j | j |d| _!d| _"t#| _$t%| j$| j| _&| jj'dd| _d| _(| j j't j
t j ddt j)d| _*t j | j*| j(d| _+t j,| j j | j*j ft j)| j!j-| j(fdd| _.t j/| j.d| j!| j+gt0d| _1t j/| j.d| j!| j+gt2d| _3d S )NT)ok status_codeheaderslinksz example.com)typvalue)z mailto:cert-admin@example.comztel:+12025551212)contactkey+https://www.letsencrypt-demo.org/acme/reg/1bodyuriz-https://www.letsencrypt-demo.org/acme/authz/1z/1z+evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA)token)r statusZchall)r
authzr_uri)
identifierr )Zterms_of_service_agreedz-https://www.letsencrypt-demo.org/acme/authz/2zwww.example.com)r r z=https://www.letsencrypt-demo.org/acme/acct/1/order/1/finalize)Z identifiersr authorizationsfinalizez4https://www.letsencrypt-demo.org/acme/acct/1/order/1)r r r" Zcsr_pem)4r MagicMock http_clientOKresponsenetpost return_valuegetr Z
IdentifierZIDENTIFIER_FQDNr r Z RegistrationKEYZ
public_keydictZNewRegistrationnew_regZRegistrationResourceregrZ
ChallengeBody STATUS_VALIDr ZDNSjose b64decodeZChallengeResourcechallrZ
AuthorizationauthzAuthorizationResourceauthzrrsn DIRECTORY_V2 directoryr clientupdate authzr_uri2ZSTATUS_PENDINGauthz2authzr2ZOrderr orderZ
OrderResource
CSR_MIXED_PEMorderrCSR_NO_SANS_PEMZorderr2)selfZregZthe_argr challb rE D/usr/lib/python3.9/site-packages/acme/_internal/tests/client_test.pysetUp* s
zClientV2Test.setUpc C s0 t j| j_| jj | jj_| jj | jj
d< d S NLocation) r% CREATEDr' r r/ r to_jsonjsonr* r r rC rE rE rF test_new_accountj s
z ClientV2Test.test_new_accountc C sF t j| j_| jj | jj_| jj | jj
d< | jj dddii d S )NrI zterms-of-serviceurlz$https://www.letsencrypt-demo.org/tos)
r% rJ r' r r/ r rK rL r* r r r r; rM rE rE rF test_new_account_tos_linkq s
z&ClientV2Test.test_new_account_tos_linkc C sX t j| j_| jj| jjd< tt j
| j | j
W d n1 sJ0 Y d S rH )r% r& r' r r/ r r pytestraisesr
ConflictErrorr: Z new_accountr. rM rE rE rF test_new_account_conflict} s
z&ClientV2Test.test_new_account_conflictc C sH | j j| j jjddd}|j | jj_tj| j_ | j j
| jj d< d S )NZ deactivatedr r rI ) r/ r; r rK r' rL r* r% r& r r r )rC Zdeactivated_regrrE rE rF test_deactivate_account s
z$ClientV2Test.test_deactivate_accountc C s> | j j| j jjtjdd}|j | jj_| j
| j }d S )NrU rV ) r6 r; r r ZSTATUS_DEACTIVATEDrK r' rL r* r: Zdeactivate_authorization)rC Zdeactivated_authzr6 rE rE rF test_deactivate_authorization s z*ClientV2Test.test_deactivate_authorizationc C s t | j}tj|_| j |j_ | j
j |j d< || j
j_ t | j}| j |j_ | jj |j d< | j}| j |j_ | jj |j d< td}||f|_W d n1 s0 Y td}||f|_W d n1 s0 Y d S )NrI z!acme.client.ClientV2._post_as_get)copydeepcopyr' r% rJ r r? rK rL r* rA r r r( r) r4 r6 r= r> r patch side_effect)rC Zorder_responseZauthz_responseZauthz_response2Zmock_post_as_getrE rE rF test_new_order s"
zClientV2Test.test_new_orderc C s d| j ji| jjd< | j j | jj_tj d d}| j
| j j| t
tj* | j
| j jjdd| W d n1 s0 Y d S )NrO ZupZ
validationfoo)r )r3 r r' r r rK rL r* r DNSResponser: answer_challengerQ rR r UnexpectedUpdater; )rC Zchall_responserE rE rF test_answer_challege s z!ClientV2Test.test_answer_challegec C sJ t tj* | j| jjtj d d W d n1 s<0 Y d S )Nr^ )
rQ rR r ClientErrorr: ra r3 r r r` rM rE rE rF "test_answer_challenge_missing_next s z/ClientV2Test.test_answer_challenge_missing_nextzacme.client.datetimec C s~ t ddd|j j_t j|_|j t jdd }tj| jd| j_tj| jd| j_ | jj
| j| | jj
| j| d S )N Z Zsecondsr* ) datetimenowr* timedeltar ZMockrA r: poll_authorizationsfinalize_orderassert_called_once_with)rC
mock_datetimeZexpected_deadlinerE rE rF test_poll_and_finalize s z#ClientV2Test.test_poll_and_finalizec C s t dddt dddt dddg}||j j_| j | j | j g| jj_t t
j $ | j
| j|d W d n1 s0 Y d S )Nrf rg rh r! )rl rm r\ r4 rK r= r' rL rQ rR r TimeoutErrorr: ro rA )rC rr Znow_side_effectrE rE rF test_poll_authorizations_timeout s
z-ClientV2Test.test_poll_authorizations_timeoutc C s t ddd}| jjjtjtjdd}| jjtj|fd}| | j
j _ t
tj | j| j| W d n1 s~0 Y d S )N' unauthorized)r error)r r )rl r3 r r; r STATUS_INVALIDError with_coder4 rK r' rL r* rQ rR r ZValidationErrorr: ro rA )rC deadlinerD r4 rE rE rF test_poll_authorizations_failure s
z-ClientV2Test.test_poll_authorizations_failurec C sf t ddd}| jjtjd}tj|| jd}| jj| j|gd}| j
| j
|
f| j j _
d S )Nrx ry rU r )r" )rl r= r; r r0 r5 r< rA r6 r4 rK r' rL r\ )rC r Zupdated_authz2Zupdated_authzr2updated_orderrrE rE rF test_poll_authorizations_success s
z-ClientV2Test.test_poll_authorizations_successc C sd | j j| jjddd}| | jj_tt j
| j | j
W d n1 sV0 Y d S )Nr_ r )r )r4 r; r rK r' rL r* rQ rR r rb r: pollr6 )rC Z
updated_authzrE rE rF test_poll_unexpected_update s z(ClientV2Test.test_poll_unexpected_updatec C sJ | j jdtjd}| jj|td}| | jj_ t| j_
t ddd}d S )N+https://www.letsencrypt-demo.org/acme/cert/Z certificater )r
fullchain_pemrx ry ) r? r; r r0 rA CERT_SAN_PEMrK r' rL r* textrl )rC
updated_orderr r rE rE rF test_finalize_order_success s z(ClientV2Test.test_finalize_order_successc C sv | j jtjdtjd}| | jj_ t
ddd}t t
j | j| j| W d n1 sh0 Y d S )Nrz r{ r rx ry )r? r; r r} r~ r| rK r' rL r* rl rQ rR r Z
IssuanceErrorr: rp rA )rC r r rE rE rF test_finalize_order_error s
z&ClientV2Test.test_finalize_order_errorc C sn | j jd tjd}| | jj_tj t
j dd* | j
| jtddd W d n1 s`0 Y d S )Nr z The certificate order failed)matchrx ry )r? r; r r| rK r' rL r* rQ rR r r} r: rp rA rl )rC r? rE rE rF "test_finalize_order_invalid_status s z/ClientV2Test.test_finalize_order_invalid_statusc C sV t j t jdd }ttj | j| j | W d n1 sH0 Y d S )N< rj )
rl rm rn rQ rR r rv r: rp rA )rC r rE rE rF test_finalize_order_timeout s z(ClientV2Test.test_finalize_order_timeoutc C s | j jdtjd}| jj|tttgd}| | jj_ t| j_
d| jj d< t ddd}| j
j| j|dd }| jjjd
tjtjd | jjjd tjtjd | jj d= | j
j| j|dd }d S )
Nr r )r r Zalternative_fullchains_pemz;rel="alternate", ;rel="index", ;title="foo";rel="alternate"ZLinkrx ry T)Zfetch_alternative_chainsz https://example.com/acme/cert/1
new_nonce_urlz https://example.com/acme/cert/2)r? r; r r0 rA r rK r' rL r* r r rl r: rp r( r) Zassert_any_callr ANY)rC r r r ZresprE rE rF test_finalize_order_alt_chains
s0
z+ClientV2Test.test_finalize_order_alt_chainsc C s6 | j tj| j | jjj| jd t j
t d d d S )Nr r
r ) r: revoker CERTr7 r( r) rq r9 r r r8 rM rE rE rF test_revoke( s zClientV2Test.test_revokec C sL t j| j_ttj" | j t
j | j W d n1 s>0 Y d S N)
r% METHOD_NOT_ALLOWEDr' r rQ rR r rd r: r r r r7 rM rE rE rF #test_revoke_bad_status_raises_error- s
z0ClientV2Test.test_revoke_bad_status_raises_errorc C s@ | j j| jjd< | j j | jj_| j jjdd | jj_d S )NrI rE )r ) r/ r r' r r rK rL r* r; rM rE rE rF test_update_registration3 s
z%ClientV2Test.test_update_registrationc C s t dt jjddi| j_d S )Nr TZexternal_account_requiredr DirectoryMetar: r9 rM rE rE rF #test_external_account_required_true? s
z0ClientV2Test.test_external_account_required_truec C s t dt jjddi| j_d S )Nr Fr r rM rE rE rF $test_external_account_required_falseF s
z1ClientV2Test.test_external_account_required_falsec C s d S r rE rM rE rE rF &test_external_account_required_defaultM s z3ClientV2Test.test_external_account_required_defaultc C s" | j j | jj_d| jjd< d S )Nr rI )r/ r rK r' rL r* r rM rE rE rF test_query_registration_clientP s z+ClientV2Test.test_query_registration_clientc C sl t dN}| j|_| j| j | jjjj| jj d dd | jjj
W d n1 s^0 Y d S )Nz*acme.client.ClientV2._authzr_from_responser r ) r r[ r> r* r: r r( r) rq r r+ Zassert_not_called)rC Z mock_clientrE rE rF test_post_as_getU s
z ClientV2Test.test_post_as_getc C s d| j jd< d S )Nz Fri, 31 Dec 1999 23:59:59 GMT Retry-After)r' r rM rE rE rF test_retry_after_date` s z"ClientV2Test.test_retry_after_datec C s, t ddd|j j_t j|_d| jjd< d S )N Zfoooor rl rm r* rn r' r rC Zdt_mockrE rE rF test_retry_after_invalide s z%ClientV2Test.test_retry_after_invalidc C s6 t ddd|j j_t j|_t j |j _d| jjd< d S )Nr r r z Tue, 116 Feb 2016 11:50:00 MSTr )rl rm r* rn r\ r' r r rE rE rF test_retry_after_overflown s
z&ClientV2Test.test_retry_after_overflowc C s, t ddd|j j_t j|_d| jjd< d S )Nr r r Z50r r r rE rE rF test_retry_after_secondsx s z%ClientV2Test.test_retry_after_secondsc C s t ddd|j j_t j|_d S )Nr r r )rl rm r* rn r rE rE rF test_retry_after_missing s z%ClientV2Test.test_retry_after_missingc C s t | jj_d S r )r8 rK r' rL r* rM rE rE rF test_get_directory s z ClientV2Test.test_get_directoryN)'__name__
__module__ __qualname____doc__rG rN rP rT rW rX r] rc re r r[ rs rw r r r r r r r r r r r r r r r r r r r r r r rE rE rE rF r ' sP @
r c @ s( e Zd Zdd Zdd Zedd ZdS )MockJSONDeSerializablec C s
|| _ d S r r )rC r rE rE rF __init__ s z MockJSONDeSerializable.__init__c C s
d| j iS )Nr_ r rM rE rE rF to_partial_json s z&MockJSONDeSerializable.to_partial_jsonc C s d S r rE )clsZjobjrE rE rF from_json s z MockJSONDeSerializable.from_jsonN)r r r r r classmethodr rE rE rE rF r s r c @ s e Zd ZdZdd Zdd Zdd Zdd Zd
d Zd d
Z dd Z
dd Z dd Z e
ddd Ze
ddd Zdd Zdd Zd d Ze
dd d Zd!d" Zd#d$ Zd%d& Zd'd( Zd3d*d+Zd,d- Ze
d.d/d0 Zd1d2 Z d)S )4ClientNetworkTestz$Tests for acme.client.ClientNetwork.c C sX t | _t jt jjd| _tttj | jdd| _
t jdt j d| _
i | j
_i | j
_d S )Nrk acme-python-test)r alg
verify_sslZ
user_agentTr r )r r$ r sentinelwrappedZ wrap_in_jwsr
r, r1 ZRS256r( r% r& r' r r rM rE rE rF rG s
zClientNetworkTest.setUpc C s d S r rE rM rE rE rF test_init s zClientNetworkTest.test_initc C s& | j jtdddd}tj|}d S )Nr_ TgrO ZnoncerO )r( _wrap_in_jwsr acme_jwsJWS
json_loadsrC Zjws_dumpr rE rE rF test_wrap_in_jws s
z"ClientNetworkTest.test_wrap_in_jwsc C s2 ddi| j _| j jtdddd}tj|}d S )Nr zacct-urir_ r rO r )r( Zaccountr r r r r r rE rE rF test_wrap_in_jws_v2 s
z%ClientNetworkTest.test_wrap_in_jws_v2c C s d| j _i | j j_tdR}tj|_t
t j | j
| j W d n1 sV0 Y W d n1 st0 Y d S )NFz$acme.client.messages.Error.from_json)r' r rL r* r r[ r1 ZDeserializationErrorr\ rQ rR r rd r( _check_response)rC r rE rE rF (test_check_response_not_ok_jobj_no_error s
z:ClientNetworkTest.test_check_response_not_ok_jobj_no_errorc C sb d| j _tjjdddd | j j_t tj | j
| j W d n1 sT0 Y d S )NFZserverInternalr_ z
some title)Zdetailtitle) r' r r r} r~ rK rL r* rQ rR r( r rM rE rE rF %test_check_response_not_ok_jobj_error s z7ClientNetworkTest.test_check_response_not_ok_jobj_errorc C sP d| j _t| j j_ttj | j
| j W d n1 sB0 Y d S )NF) r' r
ValueErrorrL r\ rQ rR r rd r( r rM rE rE rF "test_check_response_not_ok_no_jobj s
z4ClientNetworkTest.test_check_response_not_ok_no_jobjc C sn t | jj_| jjdfD ]R}|| jjd< tt j
& | jj | j| jjd W d q1 s^0 Y qd S )Nr_ Content-Type content_type) r r' rL r\ r( JSON_CONTENT_TYPEr rQ rR r rd r rC Z response_ctrE rE rF *test_check_response_ok_no_jobj_ct_required s
z.send_request)r\ rk )r
r( r r$ r% r& r' r r checkedr r objZ wrapped_objr r r1 b64encode
all_noncesr r r check_responser r )rC r rE rM rF rG s,
z)ClientNetworkWithMockedResponseTest.setUpc C s d| j _| j S )NT)r' r )rC r' r rE rE rF r s z2ClientNetworkWithMockedResponseTest.check_responsec C s | j jddddd d S )Nr r r_ r r r rq rM rE rE rF test_head s z-ClientNetworkWithMockedResponseTest.test_headc C s | j jddddd d S )Nr r
r_ r r r rM rE rE rF test_head_v2 s z0ClientNetworkWithMockedResponseTest.test_head_v2c C s | j jdddd d S )Nr r r r r rM rE rE rF test_get s z,ClientNetworkWithMockedResponseTest.test_getc C s | j j| _d S r )r( ZJOSE_CONTENT_TYPEr rM rE rE rF test_post_no_content_type s
z=ClientNetworkWithMockedResponseTest.test_post_no_content_typec C s | j j| jt| j d g | _t
t j & | j j
d| j| jd W d n1 s^0 Y | j j| jt| j d d S )Nr r )r( r rq r r1 r2 r r
r rQ rR r Z MissingNoncer) r r rM rE rE rF test_post s 4z-ClientNetworkWithMockedResponseTest.test_postc C sV dt dg| _ttj& | jjd| j | j
d W d n1 sH0 Y d S )N f goodr r r1 r r rQ rR r ZBadNoncer( r) r r rM rE rE rF test_post_wrong_initial_nonce s
zAClientNetworkWithMockedResponseTest.test_post_wrong_initial_noncec C sV t ddg| _ttj& | jjd| j | j
d W d n1 sH0 Y d S )Nr r r r r! rM rE rE rF #test_post_wrong_post_response_nonce s
zGClientNetworkWithMockedResponseTest.test_post_wrong_post_response_noncec C sd t }tjd|_|| j_t tj& | jj
d| j | j d W d n1 sV0 Y d S )NbadNoncer r )
r r$ r r} r~ r\ r( r rQ rR r) r r rC r rE rE rF test_post_failed_retry s z:ClientNetworkWithMockedResponseTest.test_post_failed_retryc C sj t }tjd| jg|_|| j_t
tj& | jj d| j | j
d W d n1 s\0 Y d S )NZ malformedr r )r r$ r r} r~ r' r\ r( r rQ rR r) r r r% rE rE rF test_post_not_retried s
z9ClientNetworkWithMockedResponseTest.test_post_not_retriedc C s t }tjd| jg|_d S )Nr$ )r r$ r r} r~ r' r\ )rC Z post_oncerE rE rF test_post_successful_retry s
z>ClientNetworkWithMockedResponseTest.test_post_successful_retryc C s t jj| j_| jj| jjfD ]<}t t jj |dd W d q 1 sN0 Y q t t jj" | jj
d| j d W d n1 s0 Y d S )Nr r )r ) r r r r r\ r( headr+ rQ rR r) r )rC r rE rE rF $test_head_get_post_error_passthrough s *zHClientNetworkWithMockedResponseTest.test_head_get_post_error_passthroughc C s t jdtjd}t | j_|| jj_d | _t }|| j_t
t j ( | jj
d| j| jdd W d n1 sv0 Y d S )NFr r r
r r )r r$ r% ZSERVICE_UNAVAILABLEr( r r* r r rQ rR r rd r) r )rC Z bad_responser rE rE rF test_post_bad_nonce_head s
$zClientNetworkWithMockedResponseTest.test_new_nonce_uri_removedN)r r r r rG r r r r r r r" r# r& r' r( r* r, r- rE rE rE rF r s +
r __main__r! )1r rY rl Z http.clientr: r% rL systypingr Zunittestr Zjosepyr1 rQ r Zacmer r r r r Zacme._internal.testsr r Z acme.clientr
r Z load_vectorr r@ rB ZJWKRSAloadr, r r r8 ZTestCaser ZJSONDeSerializabler r r r exitmainargv__file__rE rE rE rF sP
j
e #