a
}|g , @ sf d Z ddlZddlZddlZddlZddlZddlZddlZddlm Z ddl
Z
ddl Z ddl
Z
ddlZddlmZ ddlmZ ddlmZmZ ddlmZ ddlmZ G d d
d
e
jZG d d d e
jZ G d
d de
jZ G dd de
jZ G dd de
jZ G dd de
jZ G dd de
jZ!G dd de
jZ"e#dkrbe$e%ej&dd e'g dS )zTests for acme.crypto_util. N)List)x509)
serialization)rsax25519)errors) test_utilc @ s e Zd Zdd ZdS )
FormatTestc C s< ddl m} |j tjjks"J |j tjjks8J d S )Nr )Format)acme.crypto_utilr
ZDERZto_cryptography_encodingr EncodingPEM)selfr
r I/usr/lib/python3.9/site-packages/acme/_internal/tests/crypto_util_test.py test_to_cryptography_encoding s z(FormatTest.test_to_cryptography_encodingN)__name__
__module__ __qualname__r r r r r r s r c @ sH e Zd ZdZdd Zdd Zdd Zdd Zd
d Zd d
Z dd Z
dS )SSLSocketAndProbeSNITestz/Tests for acme.crypto_util.SSLSocket/probe_sni.c s t d| _t d}d|| jjfiddlm G fdddtj}|dtj | _
| j
j d | _
tj| j
jd
| _d S ) Nzrsa2048_cert.pemzrsa2048_key.pem foor SSLSocketc s e Zd Z fddZ ZS )z3SSLSocketAndProbeSNITest.setUp.._TestServerc s$ t j|i | | j| _d S N)super__init__socket)r argskwargs)r __class__certsr r r * s z._TestServer.__init__)r r r r
__classcell__r r r )r r _TestServer) s r# ) r )target)r Zload_comparable_certcertZload_pyopenssl_private_keywrappedr r socketserverZ TCPServerZBaseRequestHandlerserverr Z getsocknameport threadingThreadZhandle_request
server_thread)r keyr# r r" r setUp! s
z SSLSocketAndProbeSNITest.setUpc C s" | j r| j | j d S r )r. is_alivejoinr* server_closer r r r tearDown3 s
z!SSLSocketAndProbeSNITest.tearDownc C s" ddl m} t||d| jdS )Nr ) probe_sni 127.0.0.1)hostr+ )r r6 joseComparableX509r+ )r namer6 r r r _probe9 s z SSLSocketAndProbeSNITest._probec C s | j td d S )Nr% )r. starttimesleepr4 r r r
_start_server> s
z&SSLSocketAndProbeSNITest._start_serverc C s | | j| dks J d S )Nr )r@ r' r< r4 r r r
test_probe_okB s z&SSLSocketAndProbeSNITest.test_probe_okc C sB | ttj | d W d n1 s40 Y d S )N bar)r@ pytestraisesr Errorr< r4 r r r test_probe_not_recognized_nameF s z7SSLSocketAndProbeSNITest.test_probe_not_recognized_namec C sr | j t }zNtd ttj | d W d n1 sJ0 Y W t| n t| 0 d S )Nr% rB )
r* r3 r ZgetdefaulttimeoutZsetdefaulttimeoutrC rD r rE r< )r Zoriginal_timeoutr r r test_probe_connection_errorK s
*z4SSLSocketAndProbeSNITest.test_probe_connection_errorN) r r r __doc__r0 r5 r< r@ rA rF rG r r r r r s r c @ s e Zd ZdZdd ZdS )
SSLSocketTestz%Tests for acme.crypto_util.SSLSocket.c C s ddl m} tt& |d ddidd d}W d n1 sB0 Y tt |d }W d n1 st0 Y d S )Nr r Zsni)r/ r' c S s d S r r )_r r r ] zASSLSocketTest.test_ssl_socket_invalid_arguments..)Zcert_selection)r r rC rD
ValueError)r r rJ r r r !test_ssl_socket_invalid_argumentsY s
$ z/SSLSocketTest.test_ssl_socket_invalid_argumentsN)r r r rH rN r r r r rI V s rI c @ s< e Zd ZdZedd Zdd Zdd Zdd Zd
d Z d S )
PyOpenSSLCertOrReqAllNamesTestz;Test for acme.crypto_util._pyopenssl_cert_or_req_all_names.c C s ddl m} |||S )Nr ) _pyopenssl_cert_or_req_all_names)r rP )clsloaderr; rP r r r _calle s z$PyOpenSSLCertOrReqAllNamesTest._callc C s | tj|S r rS r load_certr r; r r r
_call_certk s z)PyOpenSSLCertOrReqAllNamesTest._call_certc C s | ddgksJ d S )Nz
cert-nocn.derzno-common-name.badssl.comrW r4 r r r test_cert_one_san_no_commonn s z:PyOpenSSLCertOrReqAllNamesTest.test_cert_one_san_no_commonc C s | ddgksJ d S )Ncert.pem example.comrX r4 r r r test_cert_no_sans_yes_commonr s z;PyOpenSSLCertOrReqAllNamesTest.test_cert_no_sans_yes_commonc C s | dddgksJ d S N cert-san.pemr[ www.example.comrX r4 r r r test_cert_two_sans_yes_commonu s z rL z.i i iA i i iw c s& g | ] }d ||d d qS )r$ - z.invalid)r2 re charsr r rh s r ri ) itertoolschainrangelen)rQ r rj r _get_idn_names s
z(PyOpenSSLCertOrReqSANTest._get_idn_namesc C s | tj|S r rT rV r r r rW s z$PyOpenSSLCertOrReqSANTest._call_certc C s | tj|S r )rS r Zload_csrrV r r r _call_csr s z#PyOpenSSLCertOrReqSANTest._call_csrc C s | dg ksJ d S )NrZ rX r4 r r r test_cert_no_sans s z+PyOpenSSLCertOrReqSANTest.test_cert_no_sansc C s | dddgksJ d S r] rX r4 r r r test_cert_two_sans s z,PyOpenSSLCertOrReqSANTest.test_cert_two_sansc C s& | ddd tddD ks"J d S )Nzcert-100sans.pemc S s g | ]}d |qS zexample{0}.comformatre r r r rh rL zDPyOpenSSLCertOrReqSANTest.test_cert_hundred_sans..r% e )rW rn r4 r r r test_cert_hundred_sans s z0PyOpenSSLCertOrReqSANTest.test_cert_hundred_sansc C s | d| ksJ d S )Ncert-idnsans.pem)rW rp r4 r r r test_cert_idn_sans s z,PyOpenSSLCertOrReqSANTest.test_cert_idn_sansc C s | dg ksJ d S )Nzcsr-nosans.pemrq r4 r r r test_csr_no_sans s z*PyOpenSSLCertOrReqSANTest.test_csr_no_sansc C s | ddgksJ d S )Nzcsr.pemr[ r{ r4 r r r test_csr_one_san s z*PyOpenSSLCertOrReqSANTest.test_csr_one_sanc C s | dddgksJ d S )Nz csr-san.pemr[ r_ r{ r4 r r r test_csr_two_sans s z+PyOpenSSLCertOrReqSANTest.test_csr_two_sansc C s | dg dksJ d S )Nz
csr-6sans.pem)r[ z example.orgz example.netz example.infozsubdomain.example.comzother.subdomain.example.comr{ r4 r r r test_csr_six_sans s z+PyOpenSSLCertOrReqSANTest.test_csr_six_sansc C s& | ddd tddD ks"J d S )Nzcsr-100sans.pemc S s g | ]}d |qS rt ru re r r r rh rL zCPyOpenSSLCertOrReqSANTest.test_csr_hundred_sans..r% rw )rq rn r4 r r r test_csr_hundred_sans s z/PyOpenSSLCertOrReqSANTest.test_csr_hundred_sansc C s | d| ksJ d S )Nzcsr-idnsans.pem)rq rp r4 r r r test_csr_idn_sans s z+PyOpenSSLCertOrReqSANTest.test_csr_idn_sansc C s | dddgksJ d S )Nzcritical-san.pemzchicago-cubs.venafi.examplezcubs.venafi.examplerX r4 r r r test_critical_san s z+PyOpenSSLCertOrReqSANTest.test_critical_sanN)r r r rH ra rS rp rW rq rr rs rx rz r| r} r~ r r r r r r r r rb z s$
rb c @ s( e Zd ZdZdd Zdd Zdd ZdS )
GenSsCertTestz6Test for gen_ss_cert (generation of self-signed cert).c C s. d| _ g | _tj | _| jtjjd d S )N )
cert_count
serial_numOpenSSLcryptoZPKeyr/ Z generate_keyZTYPE_RSAr4 r r r r0 s zGenSsCertTest.setUpc C sd ddl m} t| jD ]0}|| jdgdtdgd}| j| qt
t | j| jks`J d S )Nr gen_ss_certZdummyTz 10.10.10.10)Z force_sanips) r r rn r r/ ipaddress
ip_addressr appendZget_serial_numberro set)r r rJ r' r r r test_sn_collisions s
z GenSsCertTest.test_sn_collisionsc C sZ ddl m} tt0 || jtdgd || j W d n1 sL0 Y d S )Nr r z1.1.1.1)r )r r rC rD AssertionErrorr/ r r )r r r r r test_no_name s zGenSsCertTest.test_no_nameN)r r r rH r0 r r r r r r r s r c @ sD e Zd ZdZedd Zdd Zdd Zdd Zd
d Z d d
Z
dS ) MakeCSRTestz Test for standalone functions.c O sJ t jddd}|tjjtjjt }ddl m
} ||g|R i |S )Ni r )Zpublic_exponentZkey_sizer make_csr) r Zgenerate_private_key
private_bytesr r r
PrivateFormatPKCS8 NoEncryptionr r )rQ r r privkey privkey_pemr r r r _call_with_key s zMakeCSRTest._call_with_keyc C sr | ddg}d|v sJ d|v s&J t|}t|jdksBJ t|jtjjt dt dgksnJ d S )N a.examplez b.example --BEGIN CERTIFICATE REQUEST-- --END CERTIFICATE REQUEST--r% )
r r load_pem_x509_csrro
extensionslistget_extension_for_classSubjectAlternativeNamevalueDNSNamer Zcsr_pemZcsrr r r
test_make_csr s
zMakeCSRTest.test_make_csrc C s | dgdtdtdg}d|v s,J d|v s8J t|}t|jdksTJ t|jtj j
t dt tdt tdgksJ d S )Nr Fr7 z::1r r r% )
r r r r r ro r r r r r r Z IPAddressr r r r test_make_csr_ip s"
z MakeCSRTest.test_make_csr_ipc C sR | j dgdd}t|}t|jdks,J t|jtjjtj j
gksNJ d S )Nr T)Z must_staple ) r r r ro r r r Z
TLSFeaturer ZTLSFeatureTypeZstatus_requestr r r r test_make_csr_must_staple s
z%MakeCSRTest.test_make_csr_must_staplec C s6 t t | W d n1 s(0 Y d S r )rC rD rM r r4 r r r test_make_csr_without_hostname s z*MakeCSRTest.test_make_csr_without_hostnamec C sj t j }|tjjtjjt }ddl
m } t
t ||dg W d n1 s\0 Y d S )Nr r r )r ZX25519PrivateKeyZgenerater r r r
r r r r r rC rD rM )r r r r r r r test_make_csr_invalid_key_type s
z*MakeCSRTest.test_make_csr_invalid_key_typeN) r r r rH ra r r r r r r r r r r r s
r c @ s, e Zd ZdZedd Zdd Zdd ZdS ) DumpPyopensslChainTestz Test for dump_pyopenssl_chain.c C s ddl m} ||S )Nr )dump_pyopenssl_chain)r r )rQ loadedr r r r rS & s z DumpPyopensslChainTest._callc C sB g d}dd |D }t dd |D }t| ||ks>J d S )NrZ r^ ry c S s g | ]}t |qS r r rU rf r; r r r rh . rL zDDumpPyopensslChainTest.test_dump_pyopenssl_chain..c s s$ | ] }t tjtjj|V qd S r )ro r r dump_certificate FILETYPE_PEMrf r' r r r / s zCDumpPyopensslChainTest.test_dump_pyopenssl_chain..)sumro rS )r namesr lengthr r r test_dump_pyopenssl_chain, s z0DumpPyopensslChainTest.test_dump_pyopenssl_chainc sf g d}dd |D }t jfdd|D }tjj t fdd|D }t| ||ksbJ d S )Nr c S s g | ]}t |qS r r r r r r rh 6 rL zLDumpPyopensslChainTest.test_dump_pyopenssl_chain_wrapped..c s g | ] } |qS r r r ) wrap_funcr r rh 8 rL c 3 s | ]}t tjj|V qd S r )ro r r r r ) dump_funcr r r : rL zKDumpPyopensslChainTest.test_dump_pyopenssl_chain_wrapped..)r9 r: r r r r ro rS )r r r r( r r )r r r !test_dump_pyopenssl_chain_wrapped4 s z8DumpPyopensslChainTest.test_dump_pyopenssl_chain_wrappedN)r r r rH ra rS r r r r r r r # s
r __main__r% )(rH r rl r r) sysr, r> typingr ZunittestZjosepyr9 r rC Z cryptographyr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zacmer Zacme._internal.testsr ZTestCaser r rI rO rb r r r r exitmainargv__file__r r r r s6 8 DK