a
}|äg@µ ã @ sl d Z ddlZddlZddlZddlZddlZddlZddlZddlmZ ddl m
Z
ddl m Z ddl
Z
ddlmZ ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ ddlm mZ e d ¡Z e d
¡Z G dd„ dej ƒZ G dd„ dej ƒZ!G dd„ dej ƒZ"G dd„ de"ƒZ#G dd„ de"ƒZ$G dd„ dej%ƒZ&e'dkrhe (e
)ej*dd… e+g ¡¡ dS ) z#Tests for certbot._internal.client.é N)Úmock)Ú MagicMock)Ú
interfaces)Úerrors)Úutil)Úaccount)Ú constants)Úobj)Úoszrsa512_key.pemzcsr-san_512.pemc @ sT e Zd ZdZdd„ Zej ej ddi¡dd„ ƒZ
ej ej i ¡dd „ ƒZ d
d „ Z d S )
ÚDetermineUserAgentTestz8Tests for certbot._internal.client.determine_user_agent.c C s ddl m} || jƒS )Nr )Údetermine_user_agent)Úcertbot._internal.clientr Úconfig)Úselfr © r úG/usr/lib/python3.9/site-packages/certbot/_internal/tests/client_test.pyÚ_call s z DetermineUserAgentTest._callZ CERTBOT_DOCSÚ1c C s | j dd d S )NT©Úexpect_doc_values©Ú_test©r r r r Útest_docs_value$ s z&DetermineUserAgentTest.test_docs_valuec C s | j dd d S )NFr r r r r r Útest_real_values( s z'DetermineUserAgentTest.test_real_valuesc C sZ | ¡ }|r| j}| j}n | j}| j}|d|ƒ |d|ƒ |t ¡ |ƒ |t ¡ |ƒ d S )NzOS_NAME OS_VERSIONzmajor.minor.patchlevel)r ZassertInZ assertNotInr Zget_os_info_uaÚplatformZpython_version)r r ZuaZdoc_value_checkZreal_value_checkr r r r , s
z DetermineUserAgentTest._testN)
Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r ÚpatchÚdictr
Úenvironr r r r r r r r s
r c s
e Zd ZdZ‡ fdd„Zdd„ Zedd„ ƒZedd „ ƒZed
d „ ƒZ ed d
„ ƒZ
ee j dd„ ƒƒZ
dd„ Ze d¡dd„ ƒZe ¡ dd„ ƒZe d¡dd„ ƒZdd„ Zd d „ Ze d ¡d d „ ƒZe d¡d!d"„ ƒZe ¡ d#d$„ ƒZe ¡ d%d&„ ƒZd'd(„ Z d)d*„ Z ‡ Z S )+Ú RegisterTestz,Tests for certbot._internal.client.register.c sF t ƒ ¡ d| j_d| j_d| j_t ¡ | _t
¡ | _ t
t
ƒ ¡ d S )Ni Fzalias@example.com)ÚsuperÚsetUpr Ú rsa_key_sizeÚ register_unsafely_without_emailÚemailr ZAccountMemoryStorageÚaccount_storager r Útos_cbÚ display_objZ set_displayr ©Ú __class__r r r% ? s
zRegisterTest.setUpc C s ddl m} || j| j| jƒS )Nr )Úregister)r
r. r r) r* )r r. r r r r H s zRegisterTest._callc C s t jtjd} d| j_| S )Nr, z{"a": 1})r ÚMockr ZJSONDeSerializableZto_partial_jsonÚ return_value)Úmr r r Ú_public_key_mockL s z RegisterTest._public_key_mockc C s dS )Nz/acme/new-accountr r r r r Ú_new_acct_dir_mockR s z RegisterTest._new_acct_dir_mockc C s dS ©NTr r r r r Ú
_true_mockV s zRegisterTest._true_mockc C s dS ©NFr r r r r Ú _false_mockZ s zRegisterTest._false_mockc c s6 t d¡} | jV W d ƒ n1 s(0 Y d S )Nú$certbot._internal.client.acme_client)r r ÚClientV2)Zmock_acme_clientr r r Ú_patched_acme_client^ s z!RegisterTest._patched_acme_clientc
C sÚ | ¡ ¾}d| ¡ _| j|ƒ j_t d¡~}tj |ƒ j_t
tj ¡ | ¡ W d ƒ n1 sb0 Y |j
du szJ ‚d |ƒ j_| ¡ |j
du sšJ ‚W d ƒ n1 s®0 Y W d ƒ n1 sÌ0 Y d S )Nz
http://tosú*certbot._internal.eff.prepare_subscriptionFT)r: Ú new_accountZterms_of_servicer7 Úexternal_account_requiredÚ side_effectr r r ÚErrorÚpytestÚraisesr Úcalled)r Ú mock_clientÚ mock_preparer r r Ú test_no_tosd s
&
zRegisterTest.test_no_tosr; c C sj | ¡ N}ddlm} | i ¡|ƒ _| j|ƒ j_| ¡ | j j
du sHJ ‚W d ƒ n1 s\0 Y d S )Nr )Ú DirectoryF) r: Z
acme.messagesrF Z from_jsonÚ directoryr7 r= r> r r* rB )r Zunused_mock_preparerC rF r r r Útest_empty_metar s
z RegisterTest.test_empty_metac C sz | ¡ ^}| j|ƒ j_t d¡ | ¡ W d ƒ n1 s>0 Y | jjdu sXJ ‚W d ƒ n1 sl0 Y d S )Nú)certbot._internal.eff.handle_subscriptionT) r: r7 r= r> r r r r* rB )r Úunused_mock_get_utilityrC r r r Útest_it s
&zRegisterTest.test_itz.certbot._internal.client.display_ops.get_emailc C sÀ ddl m} d| j_d}|jjd|d}| ¡ |}| j|ƒ j_ t
d¡F}|t
¡ g|ƒ j
_ | ¡ |jdksrJ ‚|jd u s€J ‚W d ƒ n1 s”0 Y W d ƒ n1 s²0 Y d S )
Nr ©ÚmessagesFú3DNS problem: NXDOMAIN looking up MX for example.comÚinvalidContact©Údetailr; é T)ÚacmerM r Únoninteractive_moder? Ú with_coder: r7 r= r> r r r r< r Ú
call_countrB )r Úmock_get_emailrM ÚmsgÚmx_errrC rD r r r Útest_email_retry‡ s
z RegisterTest.test_email_retryc
C sÐ ddl m} d| j_d}|jjd|d}| ¡ Œ}| j|ƒ j_ t
d¡V |t
¡ g|ƒ j
_ t tj¡ | ¡ W d ƒ n1 s†0 Y W d ƒ n1 s¤0 Y W d ƒ n1 sÂ0 Y d S )Nr rL TrN rO rP rI )rS rM r rT r? rU r: r7 r= r> r r r r< r@ rA r r )r rM rX rY rC r r r Ú!test_email_invalid_noninteractive• s
z.RegisterTest.test_email_invalid_noninteractivec C s@ d | j _t tj¡ | ¡ W d ƒ n1 s20 Y d S ©N)r r( r@ rA r r? r r r r r Útest_needs_email¡ s z RegisterTest.test_needs_emailú certbot._internal.client.loggerc C sž t d¡€}| ¡ X}| j|ƒ j_d | j_d| j_d| j_ |
¡ |j t j
¡ |jdu s^J ‚W d ƒ n1 sr0 Y W d ƒ n1 s0 Y d S )Nr; TF)r r r: r7 r= r> r r( r' Údry_runr ÚdebugÚassert_called_once_withÚANYrB )r Ú mock_loggerrD rC r r r Útest_without_email¦ s
z RegisterTest.test_without_emailc C s˜ | ¡ |}| j|ƒ j_t d¡F d| j_| ¡ |j du s@J ‚|ƒ j
j d d j rXJ ‚W d ƒ n1 sl0 Y W d ƒ n1 sŠ0 Y dS )zJTests dry-run for no staging account, expect account created with no emailrI TFr N)
r: r7 r= r> r r r r_ r rB r< Ú call_argsZcontact)r rW rC r r r Ú test_dry_run_no_staging_account² s
z,RegisterTest.test_dry_run_no_staging_accountc
C sÌ | ¡ °}tj| jd|ƒ jj_| j|ƒ j_ t
d¡d d}t
|¡6}d| j _ d| j _
| ¡ |jdu snJ ‚W d ƒ n1 s‚0 Y W d ƒ n1 s 0 Y W d ƒ n1 s¾0 Y d S )N©r> rI úBcertbot._internal.client.messages.ExternalAccountBinding.from_dataztest-kidz+J2OAqW4MHXsrHVa_PVg0Y-L_R4SYw0_aL1le6mfblbET)r: r r/ r3 ÚclientrG Ú __getitem__r7 r= r> r r Úeab_kidÚ eab_hmac_keyr rB ©r rJ rC ÚtargetZmock_eab_from_datar r r Útest_with_eab_arguments¿ s
ÿ z$RegisterTest.test_with_eab_argumentsc
C s¶ | ¡ š}| j|ƒ j_t d¡d d}t |¡6}d | j_d | j_| ¡ |j
du sXJ ‚W d ƒ n1 sl0 Y W d ƒ n1 sŠ0 Y W d ƒ n1 s¨0 Y d S )NrI rh F) r: r7 r= r> r r r rk rl r rB rm r r r Útest_without_eab_argumentsÏ s
z'RegisterTest.test_without_eab_argumentsc C sè | ¡ Ì}tj| jd|ƒ jjj_| j|ƒ j _
t d¡~ t d¡T d | j _
d | j _t tj¡ | ¡ W d ƒ n1 s€0 Y W d ƒ n1 sž0 Y W d ƒ n1 s¼0 Y W d ƒ n1 sÚ0 Y d S )Nrg rI rh )r: r r/ r2 ri ÚnetÚkeyZ
public_keyr5 r= r> r r rk rl r@ rA r r? r )r rC r r r Ú4test_external_account_required_without_eab_argumentsÜ s
zARegisterTest.test_external_account_required_without_eab_argumentsc
C sî ddl m} d}|jjd|dd}| ¡ ¢}tj| jd|ƒ jj _
| j |ƒ j _
t d¡V}|t ¡ g|ƒ j_
t |j¡ | ¡ W d ƒ n1 s–0 Y W d ƒ n1 s´0 Y W d ƒ n1 sÒ0 Y |jd u sêJ ‚d S )
Nr rL ZTestÚ malformedÚtitle©rQ ru rg rI F)rS rM r? rU r: r r/ r3 ri rG rj r7 r= r> r r r< r@ rA r rB )r rM rX rY rC Z mock_handler r r Útest_unsupported_errorè s
ÿ bz#RegisterTest.test_unsupported_error) r r r r r% r Ú staticmethodr2 r3 r5 r7 Ú
contextlibÚcontextmanagerr: rE r r rH Ú test_utilÚpatch_display_utilrK rZ r[ r] rd rf ro rp rs rw Ú
__classcell__r r r, r r# < sB
r# c s e Zd ZdZ‡ fdd„Z‡ ZS )ÚClientTestCommonz„ Z!‡ Z"S )AÚ
ClientTestz*Tests for certbot._internal.client.Client.c sF t ƒ ¡ d| j_d| j_d| j_ddg| _tjd gtj j
d| _ d S )NFTú example.comúwww.example.com)ÚauthorizationsÚcsr_pem) r$ r% r r r_ Ústrict_permissionsÚ
eg_domainsr r Úsentinelrˆ Úeg_orderr r, r r r% s
þzClientTest.setUpc C s | j jd d du sJ ‚d S )NrR Z
verify_sslT)rƒ re r r r r Útest_init_acme_verify_ssl s z$ClientTest.test_init_acme_verify_sslc C sR t ¡ | j_d g| jjj_g g f| jjj_| j| jj _| j| jj
_| j| jj _d S r\ ) r r ri Ú auth_handlerÚhandle_authorizationsr0 Ú deactivate_valid_authorizationsrŒ rS Úfinalize_orderÚ new_orderÚupdater r r r Ú_mock_obtain_certificate s z#ClientTest._mock_obtain_certificaterR c C s^ |dkr&| j jj | j| j| jj¡ n| j jjj|ks:J ‚| jj j| jt
j | jj d ud d S )NrR )Zfetch_alternative_chains)
ri rŽ r ra rŒ r r rV rS r‘ r rb Úpreferred_chain)r Ú
auth_countr r r Ú_check_obtain_certificate% s
ý
þz$ClientTest._check_obtain_certificatez$certbot._internal.client.crypto_utilr^ c C s | ¡ tjdd td}| jj}| |j¡ | j |j
¡}| || j d¡ t
jjt
jjf| jj||dksnJ ‚|j ¡ | ¡ d| j _t
jjt
jjf| jj||dks¬J ‚|j |jg|j dd¡ d | j _tj ¡ tjt j d d }| jj||d | jjj j \\}}}t || ƒtjd dks,J ‚tj ¡ tjd
d }d
| j _!| jj||d | jjj j \\}}}t || ƒtjd dksŒJ ‚t
jjt
jjf| jj|d dks²J ‚|j "| j#| j d¡ d | j_t$ %t&j'¡ | j |¡ W d ƒ n1 sþ0 Y |j( t
j)¡ d S ) NÚpem©ZformÚfileÚdataF)Úorderrz some issuerTÚissuance_timeout)ZsecondsrR i, )*r” r ÚCSRÚCSR_SANri rŽ Ú_set_mock_from_fullchainÚ cert_and_chain_from_fullchainrS r’ r› r r r r‹ ÚcertÚchainZobtain_certificate_from_csrZfind_chain_with_issuerÚassert_not_calledr— r• ra Ú
fullchain_pemZalternative_fullchains_pemÚdatetimeZnowZ timedeltar Z CLI_DEFAULTSr‘ re Úabsr Úassert_called_withrŒ r@ rA r r? Úerrorrb ) r rc Úmock_crypto_utilZtest_csrrŽ rœ Zexpected_deadlineÚ_Zdeadliner r r Ú test_obtain_certificate_from_csr2 sd þÿ
þÿ þ ÿÿ ÿ þÿ
,z+ClientTest.test_obtain_certificate_from_csrc C sΠt jdd td}||j_tjj|j_| |j
¡ | tjj|¡ |jj | j
jd | j
jddd |j tjj| jd dd¡ |j
| jj¡ d S )Nr˜ r™ Ú secp256r1T)Zkey_sizeZkey_dirÚkey_typeÚelliptic_curver‰ F)r rž rŸ Ú generate_csrr0 r r‹ rr Ú generate_keyr r¡ Ú _test_obtain_certificate_commonra r r& r® rŠ rŒ r¥ )r rª Úcsrr r r Útest_obtain_certificatel s$ ûÿÿz"ClientTest.test_obtain_certificatec C sž t jdtjjtd}t jdtjjtd}||j_||j _|
|j ¡ | dg¡}d| j
_| j|||dd |j jdkszJ ‚|jjdksŠJ ‚|j jdksšJ ‚d S )Nr˜ r™ r… Té )Ú
authzr_retr– rR )r rž r r‹ Úcsr_filerŸ Úkey_filer° r0 r± r r¡ Ú_authzr_from_domainsr r r² rV )r rª r³ rr Úauthzrr r r Ú'test_obtain_certificate_partial_success s z2ClientTest.test_obtain_certificate_partial_successc
C sÀ ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|j|jdd}|jjddd |d
}|jjd d d |gd
}|tjg| jj j_ d| j _ t ¡ | j !| j¡} W d ƒ n1 sø0 Y | tjj"tjj#||fks J ‚| jjjj$dks6J ‚| j jj$dksJJ ‚dd„ | jD ƒ}
|j j$dkslJ ‚|j %t &|| jd | j j'| j j(¡t &||
d | j j'| j j(¡g¡ |j
j$dks¼J ‚d S )Nr rL r˜ r™ r… ©ÚtypÚvalueÚcaaÚbarru ©rQ ru Ú
identifierrt Úfoo©rQ ru Z subproblemsTrµ c S s g | ]}|d kr|‘qS ©r… r ©Ú.0Údr r r Ú
® ó zUClientTest.test_obtain_certificate_finalize_order_partial_success..rR ))rS rM r rž r r‹ r· rŸ r¸ r° r0 r± r r¡ r” r¹ rŠ rŒ r‡ ri rŽ r Ú
IdentifierÚIDENTIFIER_FQDNr? rU ÚDEFAULTr‘ r> r r r{ r| Úobtain_certificater¢ r£ rV Úassert_has_callsÚcallÚ must_stapler‰ © r rª rM r³ rr rº r Z
subproblemÚerror_with_subproblemsÚresultZsuccessful_domainsr r r Ú6test_obtain_certificate_finalize_order_partial_success‘ s:
,ÿ
þzAClientTest.test_obtain_certificate_finalize_order_partial_successc C sz ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|j|jdd}|j|jdd}|jjdd d
|d }|jjdd d
|d } |jjd d
d
|| gd}
|
| jj j_d| j _ t |j¡ | j | j¡ W d ƒ n1 s 0 Y | jjjj!dks>J ‚| j jj!dksRJ ‚|j j!dksdJ ‚|j
j!dksvJ ‚d S ©Nr rL r˜ r™ r… r¼ r† r¿ rÀ ru rÁ rt rà rÄ TrR )"rS rM r rž r r‹ r· rŸ r¸ r° r0 r± r r¡ r” r¹ rŠ rŒ r‡ ri rŽ r rË rÌ r? rU r‘ r> r r r@ rA rÎ rV © r rª rM r³ rr rº Z identifier1Z identifier2Z subproblem1Z subproblem2rÓ r r r Ú;test_obtain_certificate_finalize_order_no_retryable_domainsµ s. .zFClientTest.test_obtain_certificate_finalize_order_no_retryable_domainsc C s& ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|jjdddd}|| jj j_d | j_t |j¡ | j | j¡ W d ƒ n1 sÎ0 Y | jjjj d
ksìJ ‚| j jj d
ksþJ ‚|j j d
ksJ ‚|j
j dks"J ‚d S © Nr rL r˜ r™ r¿ rà ru rv TrR ) rS rM r rž r r‹ r· rŸ r¸ r° r0 r± r r¡ r” r¹ rŠ rŒ r‡ ri rŽ r r? rU r‘ r> r r r@ rA rÎ rV ©r rª rM r³ rr rº r© r r r ÚItest_obtain_certificate_finalize_order_rejected_identifier_no_subproblemsÓ s& ,zTClientTest.test_obtain_certificate_finalize_order_rejected_identifier_no_subproblemsc
C sÀ ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|j|jdd}|jjddd |d
}|jjd d d |gd
}|tjg| jj j_ d| j _ t ¡ | j !| j¡} W d ƒ n1 sø0 Y | tjj"tjj#||fks J ‚| jjjj$dks6J ‚| j jj$dksJJ ‚dd„ | jD ƒ}
|j j$dkslJ ‚|j %t &|| jd | j j'| j j(¡t &||
d | j j'| j j(¡g¡ |j
j$dks¼J ‚d S )Nr rL r˜ r™ r… r¼ r¿ rÀ ru rÁ rt rà rÄ TrR rµ c S s g | ]}|d kr|‘qS rÅ r rÆ r r r rÉ
rÊ zPClientTest.test_obtain_certificate_get_order_partial_success..))rS rM r rž r r‹ r· rŸ r¸ r° r0 r± r r¡ r” r¹ rŠ rŒ r‡ ri rŽ r rË rÌ r? rU rÍ r’ r> r r r{ r| rÎ r¢ r£ rV rÏ rÐ rÑ r‰ rÒ r r r Ú1test_obtain_certificate_get_order_partial_successí s:
,ÿ
þzJ ‚| j jj!dksRJ ‚|j j!dksdJ ‚|j
j!dksvJ ‚d S rÖ )"rS rM r rž r r‹ r· rŸ r¸ r° r0 r± r r¡ r” r¹ rŠ rŒ r‡ ri rŽ r rË rÌ r? rU r’ r> r r r@ rA rÎ rV r× r r r Ú6test_obtain_certificate_get_order_no_retryable_domains s. .zAClientTest.test_obtain_certificate_get_order_no_retryable_domainsc C s& ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|jjdddd}|| jj j_d | j_t |j¡ | j | j¡ W d ƒ n1 sÎ0 Y | jjjj dksìJ ‚| j jj d
ksþJ ‚|j j d
ksJ ‚|j
j dks"J ‚d S rÙ ) rS rM r rž r r‹ r· rŸ r¸ r° r0 r± r r¡ r” r¹ rŠ rŒ r‡ ri rŽ r r? rU r’ r> r r r@ rA rÎ rV rÚ r r r ÚDtest_obtain_certificate_get_order_rejected_identifier_no_subproblems/ s& ,zOClientTest.test_obtain_certificate_get_order_rejected_identifier_no_subproblemsz)certbot._internal.client.acme_crypto_utilc C s´ t jdd td}t|j_tjj|j_t j d tjjd}|
|j ¡ d| j j
_| ||¡ |jj| j
jd| j
jd |j tjj| j| j
j¡ |j ¡ |j ¡ |j jdks°J ‚d S )Nr˜ r™ ©rš r˜ Tr )Úbitsr¯ r® rR )r rž rŸ Úmake_csrr0 r r‹ Úkey_pemÚmake_keyÚKeyr r¡ ri r r_ r² ra r& r® rŠ rÑ r± r¤ r° rV )r Úmock_acme_cryptoÚ mock_cryptor³ rr r r r Ú test_obtain_certificate_dry_runI s$
ýÿ
z*ClientTest.test_obtain_certificate_dry_runc C sR ddl m} tjdd td}t|j_tjj |j
_tj d tjj d}| |j
¡ | ¡ d| jj_| ddg¡}|D ]}|j|j_qr| jj} |d g|d gf| j_|| j_|| jjj_t ¡ | j | j ¡}
W d ƒ n1 sâ0 Y |
tjj tjj ||fks
J ‚| !d ¡ | jj"d ks*J d
ƒ‚| j j#j"d ksBJ d ƒ‚|j$ %d
¡ d S )Nr rL r˜ r™ rß Tr… r† rR z*Deactivate authorizations should be calledrµ zHOrder should be recreated due to successfully deactivated authorizationszCertbot was unable to obtain fresh authorizations for every domain. The dry run will continue, but results may not be accurate.)&rS rM r rž rŸ rá r0 r r‹ râ rã rä r r¡ r” ri r r_ r¹ Z STATUS_VALIDÚbodyÚstatusrŽ r rŒ r‡ r r{ r| rÎ rŠ r¢ r£ r— rV r’ Úwarningr¨ ) r rå ræ Úmock_logrM r³ rr Zauthzrsrº rŽ rÔ r r r Ú:test_obtain_certificate_dry_run_authz_deactivations_failed` s4
,
ÿÿzEClientTest.test_obtain_certificate_dry_run_authz_deactivations_failedc C s6 t ¡ }t jj|j_t ¡ }t jj|j_||f|_d S r\ )r r/ r‹ r¢ Úencoder0 r£ )r Zmock_from_fullchainZ mock_certZ
mock_chainr r r r ‰ s
z#ClientTest._set_mock_from_fullchainc C s8 g }t |ƒD ]&}| tjtjtj|ddd¡ q |S )N)r¾ )r )rè )ÚreversedÚappendr r )r Údomainsrº Údomainr r r r¹ s ÿÿÿÿz ClientTest._authzr_from_domainsNc C sŒ | ¡ |p| | j¡}|| j_|| jjj_t
¡ | j | j¡}W d ƒ n1 sX0 Y |t j
jt j
j||fks~J ‚| |¡ d S r\ )r” r¹ rŠ rŒ r‡ ri rŽ r r0 r{ r| rÎ r r‹ r¢ r£ r— )r rr r³ r¶ r– rº rÔ r r r r² œ s
,ÿz*ClientTest._test_obtain_certificate_commonz2certbot._internal.client.Client.obtain_certificatez3certbot._internal.storage.RenewableCert.new_lineagec C sª ddg}t ¡ t ¡ t ¡ d f|_d| jj_| j |d¡s>J ‚| j |d ¡sPJ ‚| j |dd … d ¡sjJ ‚d| jj_| j |d ¡r†J ‚dd„ |jD ƒ}|g d ¢ks¦J ‚d S )
Nz
*.example.comr… FÚ example_certrR Tc S s g | ]}|d d ‘qS )r r )rÇ rÐ r r r rÉ À rÊ zAClientTest.test_obtain_and_enroll_certificate..)rò r… r… )r r r0 ri r r_ Z obtain_and_enroll_certificateÚcall_args_list)r Z mock_storageZmock_obtain_certificaterð Únamesr r r Ú"test_obtain_and_enroll_certificate® s ÿ
z-ClientTest.test_obtain_and_enroll_certificatez$certbot._internal.cli.helpful_parserc C s¤ ddg}t ¡ }t |d ¡}t |d ¡t |d ¡ }tj |dd¡}tj |dd¡}tj |dd¡}d |_d
|d |d |g|_| j
|||||¡\} }
} tj | ¡tj |¡ks¸J ‚tj |
¡tj |¡ksÔJ ‚tj | ¡tj |¡ksðJ ‚t | d
ƒ} |
¡ }
W d ƒ n1 s0 Y |
t |d ¡ks r@ rA r Úrecovery_routinera Zassert_any_call)r r Ú mock_notifyr€ r r r Ú test_deploy_certificate_failureú s
4
z*ClientTest.test_deploy_certificate_failurec C sj t ¡ }|| j_tj|j_t tj¡& | j
dgdddd¡ W d ƒ n1 sR0 Y |j ¡ d S )Nr rr r¢ r£ r )
r r ri r€ r r r r> r@ rA r r ra r
r r r Ú$test_deploy_certificate_save_failure s
4z/ClientTest.test_deploy_certificate_save_failurec C sˆ t ¡ }tjd g|j_|| j_t tj¡& | j
dgdddd¡ W d ƒ n1 sV0 Y | d¡ |j
¡ |jjdks„J ‚d S )Nr rr r¢ r£ r zuWe were unable to install your certificate, however, we successfully restored your server to its prior configuration.rµ )r r r r r r> ri r€ r@ rA r r¨ Úrollback_checkpointsra rV )r Úmock_get_utilityr r€ r r r Ú'test_deploy_certificate_restart_failure s 4ÿ
z2ClientTest.test_deploy_certificate_restart_failurec C s¬ t ¡ }tj|j_tj|j_|| j_ t
tj¡& | j dgdddd¡ W d ƒ n1 s\0 Y |j
jdksvJ ‚d|j
jd d v sŽJ ‚|j ¡ |jjdks¨J ‚d S ) Nr rr r¢ r£ r rR z6An error occurred and we failed to restore your configr )r r r r r r> Ú
ReverterErrorr ri r€ r@ rA r r© rV re ra )r r rc r€ r r r Ú(test_deploy_certificate_restart_failure2" s
4ÿ
z3ClientTest.test_deploy_certificate_restart_failure2c C s6 t jj}d|› dg}dg}d|› d}d}d|› dg}t tj¡ | j |d ¡ W d ƒ n1 sj0 Y t tj¡ | j ||¡ W d ƒ n1 s¤0 Y t tj¡ | j ||¡ W d ƒ n1 sÞ0 Y t tj¡ | j |d ¡ W d ƒ n1 s0 Y | j ||¡ d S )NZexamzple.comr… rà z.barr z*.exam) r
rú Úsepr@ rA r r? ri Z_choose_lineagename)r r Zinvalid_domainsZ
valid_domainsZinvalid_certnameZvalid_certnameZinvalid_wildcard_domainr r r Útest_choose_lineage_name2 s ,,,.z#ClientTest.test_choose_lineage_name)rR )NrR )#r r r r r% r r” r— r r r¬ r´ r» rÕ rØ rÛ rÜ rÝ rÞ rç rì r r¹ r² rõ r r{ r| r r r r r r r} r r r, r r„ sj
8
#
#
&
$
r„ c sÚ e Zd ZdZ‡ fdd„Zdd„ Zdd„ Ze d¡d d
„ ƒZ e d¡d d „ ƒZ
e d¡d
d„ ƒZ e d¡dd„ ƒZ dd„ Z
dd„ Zdd„ Zdd„ Zdd„ Zdd „ Zd d „ Zd d „ Zd!d"„ Zd*d$d%„Zd&d'„ Zd(d)„ Z‡ ZS )+ÚEnhanceConfigTestz9Tests for certbot._internal.client.Client.enhance_config.c s4 t ƒ ¡ d| j_d| j_d| j_d| j_d| _d S )NFz example.org)r$ r% r ÚhstsÚredirectÚstapleÚuirrñ r r, r r r% I s
zEnhanceConfigTest.setUpc C sB t tj¡" | j | jgd ¡ W d ƒ n1 s40 Y d S r\ )r@ rA r r? ri Úenhance_configrñ r r r r Útest_no_installerR s z#EnhanceConfigTest.test_no_installerc C s† t ¡ | j_g | jjj_d | j_d| j_t d¡"}| j
| j gd ¡ W d ƒ n1 sZ0 Y |j j
dkstJ ‚| jjj ¡ d S )NTr^ rR )r r ri r€ Úsupported_enhancementsr0 r r r r r! rñ r© rV Úenhancer¤ )r rc r r r Útest_unsupportedV s 0z"EnhanceConfigTest.test_unsupportedr^ c C s< d| j _| ¡ |jjdu s J ‚|jjd d dks8J ‚d S )NTr rR úStrict-Transport-Security)r r Ú_test_with_already_existingÚinforB re ©r rë r r r Útest_already_exists_headera s ÿz,EnhanceConfigTest.test_already_exists_headerc C s< d| j _| ¡ |jjdu s J ‚|jjd d dks8J ‚d S )NTr rR r )r r r' r( rB re r) r r r Ú test_already_exists_redirecti s ÿz.EnhanceConfigTest.test_already_exists_redirectc C s$ d| j _| ¡ |jjdu s J ‚d S r6 )r r r' rê rB r) r r r Ú#test_config_set_no_warning_redirectq s z5EnhanceConfigTest.test_config_set_no_warning_redirectc C s$ d | j _| ¡ |jjdu s J ‚d S r6 )r r Ú_test_with_all_supportedrê rB r) r r r Útest_no_warn_redirectw s z'EnhanceConfigTest.test_no_warn_redirectc C s* d| j _| ¡ | jjj | jdd¡ d S )NTúensure-http-headerr& )r r r- ri r€ r$ r¨ rñ r r r r Útest_no_ask_hsts} s
ÿz"EnhanceConfigTest.test_no_ask_hstsc C s* d| j _| ¡ | jjj | jdd ¡ d S )NTr )r r r- ri r€ r$ r¨ rñ r r r r Útest_no_ask_redirectƒ s
ÿz&EnhanceConfigTest.test_no_ask_redirectc C s* d| j _| ¡ | jjj | jdd ¡ d S )NTú staple-ocsp)r r r- ri r€ r$ r¨ rñ r r r r Útest_no_ask_staple‰ s
ÿz$EnhanceConfigTest.test_no_ask_staplec C s* d| j _| ¡ | jjj | jdd¡ d S )NTr/ zUpgrade-Insecure-Requests)r r r- ri r€ r$ r¨ rñ r r r r Útest_no_ask_uir s
ÿz!EnhanceConfigTest.test_no_ask_uirc C s8 t ¡ | j_tj| jjj_| jdd | jjj
¡ d S )NT)Ú
enhance_error) r r ri r€ r r r$ r> Ú _test_errorr ra r r r r Útest_enhance_failure• s z&EnhanceConfigTest.test_enhance_failurec C sF t ¡ | j_tj| jjj_| ¡ | jjj
¡ | jjj
t j ¡ d S r\ ) r r ri r€ r r r r> r6 r ra rb r r r r Útest_save_failure› s
z#EnhanceConfigTest.test_save_failurec C s* t ¡ | j_tjd g| jjj_| ¡ d S r\ ) r r ri r€ r r r r> Ú_test_error_with_rollbackr r r r Útest_restart_failure¢ s z&EnhanceConfigTest.test_restart_failurec C s0 t ¡ }tj|j_tj|j_|| j_ |
¡ d S r\ ) r r r r r r> r r ri r€ r9 )r r€ r r r Útest_restart_failure2§ s
z'EnhanceConfigTest.test_restart_failure2c C s | ¡ | jjjjdu s J ‚d S r4 )r6 ri r€ r rB r r r r r9 ® s z+EnhanceConfigTest._test_error_with_rollbackFc
C sÒ d| j _t d¡l}t ¡ D}t tj ¡ |
¡ W d ƒ n1 sH0 Y W d ƒ n1 sf0 Y W d ƒ n1 s„0 Y |r¾|j j dks¢J ‚d|j j
d d d ks¾J ‚|rÎ|j d¡ d S )NTr^ rR z(Unable to set the %s enhancement for %s.r z0Rolling back to previous server configuration...)r r r r r{ r| r@ rA r r r- r© rV ró Zcriticalr¨ )r r5 Z
restart_errorrc Zmock_gur r r r6 ² s ÿb ÿz EnhanceConfigTest._test_errorc C sf | j jd u rt ¡ | j _g d¢| j jj_| j | jgd ¡ | j jjj dksNJ ‚| j jj
j dksbJ ‚d S )N©r/ r r2 rR ) ri r€ r r r# r0 r! rñ r rV r r r r r r- À s z*EnhanceConfigTest._test_with_all_supportedc C sB t ¡ | j_g d¢| jjj_t ¡ | jjj_ | j
| j gd ¡ d S )Nr< ) r r ri r€ r# r0 r Z PluginEnhancementAlreadyPresentr$ r> r! rñ r r r r r' É s z-EnhanceConfigTest._test_with_already_existing)FF)r r r r r% r" r% r r r* r+ r, r. r0 r1 r3 r4 r7 r8 r: r; r9 r6 r- r' r} r r r, r r F s0
r c @ s4 e Zd ZdZdd„ Zedd„ ƒZdd„ Zdd „ Zd
S ) Ú RollbackTestz,Tests for certbot._internal.client.rollback.c C s t ¡ | _d S r\ )r r Ú m_installr r r r r% Ô s zRollbackTest.setUpc C sR ddl m} t d¡(}||_|d |i t ¡ ƒ W d ƒ n1 sD0 Y d S )Nr )Úrollbackz8certbot._internal.client.plugin_selection.pick_installer)r
r? r r r> r )ÚclsZ checkpointsr> r? Zmpir r r r × s zRollbackTest._callc C s: | d| j¡ | ¡ jjdks"J ‚| ¡ jjdks6J ‚d S ©NrR )r r> r rV r r r r r Útest_no_problemsÞ s z RollbackTest.test_no_problemsc C s | dd ¡ d S rA )r r r r r r" ã s z RollbackTest.test_no_installerN) r r r r r% Ú classmethodr rB r" r r r r r= Ñ s
r= Ú__main__rR ),r ry r¦ r r Úsysrø Zunittestr Z
unittest.mockr Zjosepyr r@ Zcertbotr r Zcertbot._internalr r Zcertbot._internal.displayr r+ Zcertbot.compatr
Zcertbot.tests.utilZtestsr{ rù r‚ rŸ ZConfigTestCaser r# r~ r„ r ZTestCaser= r ÚexitÚmainÚargvÚ__file__r r r r Ú sD
= >