a
}|äg@µ ã @ sl d Z ddlZddlZddlZddlZddlZddlZddlZddlmZ ddl m
Z
ddl m Z ddl
Z
ddlmZ ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ ddlm mZ e d ¡Z e d
¡Z G dd„ dej ƒZ G dd„ dej ƒZ!G dd„ dej ƒZ"G dd„ de"ƒZ#G dd„ de"ƒZ$G dd„ dej%ƒZ&e'dkrhe (e
)ej*dd… e+g ¡¡ dS ) z#Tests for certbot._internal.client.é N)Úmock)Ú MagicMock)Ú
interfaces)Úerrors)Úutil)Úaccount)Ú constants)Úobj)Úoszrsa512_key.pemzcsr-san_512.pemc @ sT e Zd ZdZdd„ Zej ej ddi¡dd„ ƒZ
ej ej i ¡dd „ ƒZ d
d „ Z d S )
ÚDetermineUserAgentTestz8Tests for certbot._internal.client.determine_user_agent.c C s ddl m} || jƒS )Nr )Údetermine_user_agent)Úcertbot._internal.clientr Úconfig)Úselfr © r úG/usr/lib/python3.9/site-packages/certbot/_internal/tests/client_test.pyÚ_call s z DetermineUserAgentTest._callZ CERTBOT_DOCSÚ1c C s | j dd d S )NT©Úexpect_doc_values©Ú_test©r r r r Útest_docs_value$ s z&DetermineUserAgentTest.test_docs_valuec C s | j dd d S )NFr r r r r r Útest_real_values( s z'DetermineUserAgentTest.test_real_valuesc C sZ | ¡ }|r| j}| j}n | j}| j}|d|ƒ |d|ƒ |t ¡ |ƒ |t ¡ |ƒ d S )NzOS_NAME OS_VERSIONzmajor.minor.patchlevel)r ZassertInZ assertNotInr Zget_os_info_uaÚplatformZpython_version)r r ZuaZdoc_value_checkZreal_value_checkr r r r , s
z DetermineUserAgentTest._testN)
Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r ÚpatchÚdictr
Úenvironr r r r r r r r s
r c s
e Zd ZdZ‡ fdd„Zdd„ Zedd„ ƒZedd „ ƒZed
d „ ƒZ ed d
„ ƒZ
ee j dd„ ƒƒZ
dd„ Ze d¡dd„ ƒZe ¡ dd„ ƒZe d¡dd„ ƒZdd„ Zd d „ Ze d ¡d d „ ƒZe d¡d!d"„ ƒZe ¡ d#d$„ ƒZe ¡ d%d&„ ƒZd'd(„ Z d)d*„ Z ‡ Z S )+Ú RegisterTestz,Tests for certbot._internal.client.register.c sF t ƒ ¡ d| j_d| j_d| j_t ¡ | _t
¡ | _ t
t
ƒ ¡ d S )Ni Fzalias@example.com)ÚsuperÚsetUpr Ú rsa_key_sizeÚ register_unsafely_without_emailÚemailr ZAccountMemoryStorageÚaccount_storager r Útos_cbÚ display_objZ set_displayr ©Ú __class__r r r% ? s
zRegisterTest.setUpc C s ddl m} || j| j| jƒS )Nr )Úregister)r
r. r r) r* )r r. r r r r H s zRegisterTest._callc C s t jtjd} d| j_| S )Nr, z{"a": 1})r ÚMockr ZJSONDeSerializableZto_partial_jsonÚ return_value)Úmr r r Ú_public_key_mockL s z RegisterTest._public_key_mockc C s dS )Nz/acme/new-accountr r r r r Ú_new_acct_dir_mockR s z RegisterTest._new_acct_dir_mockc C s dS ©NTr r r r r Ú
_true_mockV s zRegisterTest._true_mockc C s dS ©NFr r r r r Ú _false_mockZ s zRegisterTest._false_mockc c s6 t d¡} | jV W d ƒ n1 s(0 Y d S )Nú$certbot._internal.client.acme_client)r r ÚClientV2)Zmock_acme_clientr r r Ú_patched_acme_client^ s z!RegisterTest._patched_acme_clientc
C s¾ | ¡ ¢}d| ¡ _| j|ƒ j_t d¡b}tj |ƒ j_t
tj ¡ | ¡ W d ƒ n1 sb0 Y d |ƒ j_| ¡ W d ƒ n1 s’0 Y W d ƒ n1 s°0 Y d S )Nz
http://tosú*certbot._internal.eff.prepare_subscription)
r: Ú new_accountZterms_of_servicer7 Úexternal_account_requiredÚ side_effectr r r ÚErrorÚpytestÚraisesr )r Ú mock_clientÚ mock_preparer r r Ú test_no_tosd s
&
zRegisterTest.test_no_tosr; c C sZ | ¡ >}ddlm} | i ¡|ƒ _| j|ƒ j_| ¡ W d ƒ n1 sL0 Y d S )Nr )Ú Directory) r: Z
acme.messagesrE Z from_jsonÚ directoryr7 r= r> r )r Zunused_mock_preparerB rE r r r Útest_empty_metar s
z RegisterTest.test_empty_metac C sj | ¡ N}| j|ƒ j_t d¡ | ¡ W d ƒ n1 s>0 Y W d ƒ n1 s\0 Y d S )Nú)certbot._internal.eff.handle_subscription)r: r7 r= r> r r r )r Úunused_mock_get_utilityrB r r r Útest_it s
&zRegisterTest.test_itz.certbot._internal.client.display_ops.get_emailc C s¤ ddl m} d| j_d}|jjd|d}| ¡ `}| j|ƒ j_ t
d¡*}|t
¡ g|ƒ j
_ | ¡ W d ƒ n1 sx0 Y W d ƒ n1 s–0 Y d S )Nr ©ÚmessagesFú3DNS problem: NXDOMAIN looking up MX for example.comÚinvalidContact©Údetailr; )ÚacmerL r Únoninteractive_moder? Ú with_coder: r7 r= r> r r r r< r )r Úmock_get_emailrL ÚmsgÚmx_errrB rC r r r Útest_email_retry‡ s
z RegisterTest.test_email_retryc
C sÐ ddl m} d| j_d}|jjd|d}| ¡ Œ}| j|ƒ j_ t
d¡V |t
¡ g|ƒ j
_ t tj¡ | ¡ W d ƒ n1 s†0 Y W d ƒ n1 s¤0 Y W d ƒ n1 sÂ0 Y d S )Nr rK TrM rN rO rH )rQ rL r rR r? rS r: r7 r= r> r r r r< r@ rA r r )r rL rU rV rB r r r Ú!test_email_invalid_noninteractive• s
z.RegisterTest.test_email_invalid_noninteractivec C s@ d | j _t tj¡ | ¡ W d ƒ n1 s20 Y d S ©N)r r( r@ rA r r? r r r r r Útest_needs_email¡ s z RegisterTest.test_needs_emailú certbot._internal.client.loggerc C s t d¡r}| ¡ J}| j|ƒ j_d | j_d| j_d| j_ |
¡ |j t j
¡ W d ƒ n1 sd0 Y W d ƒ n1 s‚0 Y d S )Nr; TF)r r r: r7 r= r> r r( r' Údry_runr ÚdebugÚassert_called_once_withÚANY)r Ú mock_loggerrC rB r r r Útest_without_email¦ s
z RegisterTest.test_without_emailc C sr | ¡ V}| j|ƒ j_t d¡ d| j_| ¡ W d ƒ n1 sF0 Y W d ƒ n1 sd0 Y dS )zJTests dry-run for no staging account, expect account created with no emailrH TN) r: r7 r= r> r r r r\ r )r rT rB r r r Ú test_dry_run_no_staging_account² s
z,RegisterTest.test_dry_run_no_staging_accountc
C s¾ | ¡ ¢}tj| jd|ƒ jj_| j|ƒ j_ t
d¡V d}t
|¡(}d| j _ d| j _
| ¡ W d ƒ n1 st0 Y W d ƒ n1 s’0 Y W d ƒ n1 s°0 Y d S )N©r> rH úBcertbot._internal.client.messages.ExternalAccountBinding.from_dataztest-kidz+J2OAqW4MHXsrHVa_PVg0Y-L_R4SYw0_aL1le6mfblbE)r: r r/ r3 ÚclientrF Ú __getitem__r7 r= r> r r Úeab_kidÚ eab_hmac_keyr ©r rI rB ÚtargetZmock_eab_from_datar r r Útest_with_eab_arguments¿ s
ÿ z$RegisterTest.test_with_eab_argumentsc
C s¨ | ¡ Œ}| j|ƒ j_t d¡V d}t |¡(}d | j_d | j_| ¡ W d ƒ n1 s^0 Y W d ƒ n1 s|0 Y W d ƒ n1 sš0 Y d S )NrH rd )
r: r7 r= r> r r r rg rh r ri r r r Útest_without_eab_argumentsÏ s
z'RegisterTest.test_without_eab_argumentsc C sè | ¡ Ì}tj| jd|ƒ jjj_| j|ƒ j _
t d¡~ t d¡T d | j _
d | j _t tj¡ | ¡ W d ƒ n1 s€0 Y W d ƒ n1 sž0 Y W d ƒ n1 s¼0 Y W d ƒ n1 sÚ0 Y d S )Nrc rH rd )r: r r/ r2 re ÚnetÚkeyZ
public_keyr5 r= r> r r rg rh r@ rA r r? r )r rB r r r Ú4test_external_account_required_without_eab_argumentsÜ s
zARegisterTest.test_external_account_required_without_eab_argumentsc
C sà ddl m} d}|jjd|dd}| ¡ ¢}tj| jd|ƒ jj _
| j |ƒ j _
t d¡V}|t ¡ g|ƒ j_
t |j¡ | ¡ W d ƒ n1 s–0 Y W d ƒ n1 s´0 Y W d ƒ n1 sÒ0 Y d S ) Nr rK ZTestÚ malformedÚtitle©rP rq rc rH )rQ rL r? rS r: r r/ r3 re rF rf r7 r= r> r r r< r@ rA r )r rL rU rV rB Z mock_handler r r Útest_unsupported_errorè s
ÿ bz#RegisterTest.test_unsupported_error) r r r r r% r Ú staticmethodr2 r3 r5 r7 Ú
contextlibÚcontextmanagerr: rD r r rG Ú test_utilÚpatch_display_utilrJ rW rX rZ ra rb rk rl ro rs Ú
__classcell__r r r, r r# < sB
r# c s e Zd ZdZ‡ fdd„Z‡ ZS )ÚClientTestCommonz„ Z!‡ Z"S )AÚ
ClientTestz*Tests for certbot._internal.client.Client.c sF t ƒ ¡ d| j_d| j_d| j_ddg| _tjd gtj j
d| _ d S )NFTú example.comúwww.example.com)ÚauthorizationsÚcsr_pem) r$ r% r r} r\ Ústrict_permissionsÚ
eg_domainsr r Úsentinelrƒ Úeg_orderr r, r r r% s
þzClientTest.setUpc C s d S rY r r r r r Útest_init_acme_verify_ssl s z$ClientTest.test_init_acme_verify_sslc C sR t ¡ | j_d g| jjj_g g f| jjj_| j| jj _| j| jj
_| j| jj _d S rY ) r r re Ú auth_handlerÚhandle_authorizationsr0 Ú deactivate_valid_authorizationsr‡ rQ Úfinalize_orderÚ new_orderÚupdater r r r Ú_mock_obtain_certificate s z#ClientTest._mock_obtain_certificateé c C sJ |dkr&| j jj | j| j| jj¡ n | jjj| jt j
| jj d ud d S )Nr )Zfetch_alternative_chains) re r‰ rŠ r^ r‡ r r} rQ rŒ r r_ Úpreferred_chain)r Ú
auth_countr r r Ú_check_obtain_certificate% s
ý
þz$ClientTest._check_obtain_certificatez$certbot._internal.client.crypto_utilr[ c C sp | ¡ tjdd td}| jj}| |j¡ | j |j
¡}| || j d¡ |j
¡ | ¡ d| j _|j
|jg|j dd¡ d | j _tj ¡ tjtjd d }| jj||d | jjjj\\}}}tj ¡ tjd d }d | j _ | jj||d | jjjj\\}}}|j | j | j d¡ d | j_t t!j"¡ | j |¡ W d ƒ n1 sT0 Y |j# t$j%¡ d S )
NÚpem©ZformÚfileÚdataFz some issuerTÚissuance_timeout)Zseconds)Úorderri, )&r r ÚCSRÚCSR_SANre r‰ Ú_set_mock_from_fullchainÚ cert_and_chain_from_fullchainrQ r r— rŠ r Zfind_chain_with_issuerÚassert_not_calledr“ r‘ r^ Ú
fullchain_pemZalternative_fullchains_pemÚdatetimeZnowZ timedeltar Z CLI_DEFAULTSZobtain_certificate_from_csrrŒ Z call_argsr˜ Úassert_called_withr‡ r@ rA r r? Úerrorr r_ ) r r` Úmock_crypto_utilZtest_csrr‰ r™ Zexpected_deadlineÚ_Zdeadliner r r Ú test_obtain_certificate_from_csr2 s<
þ ÿÿÿ,z+ClientTest.test_obtain_certificate_from_csrc C sŒ t jdd td}||j_tjj|j_| |j
¡ | tjj|¡ |jj | j
jd | j
jddd |j tjj| jd dd¡ |j
| jj¡ d S )Nr” r• Ú secp256r1T)Zkey_sizeZkey_dirÚkey_typeÚelliptic_curver„ F)r rš r› Ú generate_csrr0 r r† rn Ú generate_keyrœ r Ú _test_obtain_certificate_commonr^ r r& r§ r… r‡ rŸ )r r£ Úcsrr r r Útest_obtain_certificatel s$ ûÿÿz"ClientTest.test_obtain_certificatec C sn t jdtjjtd}t jdtjjtd}||j_||j _|
|j ¡ | dg¡}d| j
_| j|||dd d S )Nr” r• r€ Té )Ú
authzr_retr’ )r rš r r† Úcsr_filer› Úkey_filer© r0 rª rœ r Ú_authzr_from_domainsr r} r« )r r£ r¬ rn Úauthzrr r r Ú'test_obtain_certificate_partial_success s z2ClientTest.test_obtain_certificate_partial_successc
C sT ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|j|jdd}|jjddd |d
}|jjd d d |gd
}|tjg| jj j_ d| j _ t ¡ | j !| j¡} W d ƒ n1 sø0 Y dd„ | jD ƒ}
|j "t #|| jd | j j$| j j%¡t #||
d | j j$| j j%¡g¡ d S )Nr rK r” r• r€ ©ÚtypÚvalueÚcaaÚbarrq ©rP rq Ú
identifierrp Úfoo©rP rq Z subproblemsTc S s g | ]}|d kr|‘qS ©r€ r ©Ú.0Údr r r Ú
® ó zUClientTest.test_obtain_certificate_finalize_order_partial_success..)&rQ rL r rš r r† r° r› r± r© r0 rª rœ r r r² r… r‡ r‚ re r‰ rŠ Ú
IdentifierÚIDENTIFIER_FQDNr? rS ÚDEFAULTrŒ r> r r} rw rx Úobtain_certificateÚassert_has_callsÚcallÚ must_stapler„ © r r£ rL r¬ rn r³ r» Z
subproblemÚerror_with_subproblemsÚresultZsuccessful_domainsr r r Ú6test_obtain_certificate_finalize_order_partial_success‘ s.
,þzAClientTest.test_obtain_certificate_finalize_order_partial_successc C s, ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|j|jdd}|j|jdd}|jjdd d
|d }|jjdd d
|d } |jjd d
d
|| gd}
|
| jj j_d| j _ t |j¡ | j | j¡ W d ƒ n1 s 0 Y d S ©Nr rK r” r• r€ rµ r r¸ r¹ rq rº rp r¼ r½ T)!rQ rL r rš r r† r° r› r± r© r0 rª rœ r r r² r… r‡ r‚ re r‰ rŠ rÄ rÅ r? rS rŒ r> r r} r@ rA rÇ © r r£ rL r¬ rn r³ Z identifier1Z identifier2Z subproblem1Z subproblem2rÌ r r r Ú;test_obtain_certificate_finalize_order_no_retryable_domainsµ s( .zFClientTest.test_obtain_certificate_finalize_order_no_retryable_domainsc C sÜ ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|jjdddd}|| jj j_d | j_t |j¡ | j | j¡ W d ƒ n1 sÎ0 Y d S ©
Nr rK r” r• r¸ r¼ rq rr T) rQ rL r rš r r† r° r› r± r© r0 rª rœ r r r² r… r‡ r‚ re r‰ rŠ r? rS rŒ r> r r} r@ rA rÇ ©r r£ rL r¬ rn r³ r¢ r r r ÚItest_obtain_certificate_finalize_order_rejected_identifier_no_subproblemsÓ s ,zTClientTest.test_obtain_certificate_finalize_order_rejected_identifier_no_subproblemsc
C sT ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|j|jdd}|jjddd |d
}|jjd d d |gd
}|tjg| jj j_ d| j _ t ¡ | j !| j¡} W d ƒ n1 sø0 Y dd„ | jD ƒ}
|j "t #|| jd | j j$| j j%¡t #||
d | j j$| j j%¡g¡ d S )Nr rK r” r• r€ rµ r¸ r¹ rq rº rp r¼ r½ Tc S s g | ]}|d kr|‘qS r¾ r r¿ r r r rÂ
rà zPClientTest.test_obtain_certificate_get_order_partial_success..)&rQ rL r rš r r† r° r› r± r© r0 rª rœ r r r² r… r‡ r‚ re r‰ rŠ rÄ rÅ r? rS rÆ r r> r r} rw rx rÇ rÈ rÉ rÊ r„ rË r r r Ú1test_obtain_certificate_get_order_partial_successí s.
,þz r r} r@ rA rÇ rÐ r r r Ú6test_obtain_certificate_get_order_no_retryable_domains s( .zAClientTest.test_obtain_certificate_get_order_no_retryable_domainsc C sÜ ddl m} tjdtjjtd}tjdtjjtd}||j _
||j _
| |j
¡ | ¡ | | j¡}|| j_|| jjj_
|jjdddd}|| jj j_d | j_t |j¡ | j | j¡ W d ƒ n1 sÎ0 Y d S rÒ ) rQ rL r rš r r† r° r› r± r© r0 rª rœ r r r² r… r‡ r‚ re r‰ rŠ r? rS r r> r r} r@ rA rÇ rÓ r r r ÚDtest_obtain_certificate_get_order_rejected_identifier_no_subproblems/ s ,zOClientTest.test_obtain_certificate_get_order_rejected_identifier_no_subproblemsz)certbot._internal.client.acme_crypto_utilc C s¤ t jdd td}t|j_tjj|j_t j d tjjd}|
|j ¡ d| j j
_| ||¡ |jj| j
jd| j
jd |j tjj| j| j
j¡ |j ¡ |j ¡ d S )Nr” r• ©r– r” Tr¦ )Úbitsr¨ r§ )r rš r› Úmake_csrr0 r r† Úkey_pemÚmake_keyÚKeyrœ r re r r\ r« r^ r& r§ r… rÊ rª rž r© )r Úmock_acme_cryptoÚ mock_cryptor¬ rn r r r Ú test_obtain_certificate_dry_runI s$
ýÿ
z*ClientTest.test_obtain_certificate_dry_runc C s ddl m} tjdd td}t|j_tjj |j
_tj d tjj d}| |j
¡ | ¡ d| jj_| ddg¡}|D ]}|j|j_qr| jj} |d g|d gf| j_|| j_|| jjj_t ¡ | j | j ¡}
W d ƒ n1 sâ0 Y | d ¡ |j !d
¡ d S ) Nr rK r” r• rØ Tr€ r r zCertbot was unable to obtain fresh authorizations for every domain. The dry run will continue, but results may not be accurate.)"rQ rL r rš r› rÚ r0 r r† rÛ rÜ rÝ rœ r r re r r\ r² Z STATUS_VALIDÚbodyÚstatusr‰ r‹ r‡ r‚ rŠ rw rx rÇ r… r“ Zwarningr¡ ) r rÞ rß Úmock_logrL r¬ rn Zauthzrsr³ r‰ rÍ r r r Ú:test_obtain_certificate_dry_run_authz_deactivations_failed` s&
,
zEClientTest.test_obtain_certificate_dry_run_authz_deactivations_failedc C s6 t ¡ }t jj|j_t ¡ }t jj|j_||f|_d S rY )r r/ r† ÚcertÚencoder0 Úchain)r Zmock_from_fullchainZ mock_certZ
mock_chainr r r rœ ‰ s
z#ClientTest._set_mock_from_fullchainc C s8 g }t |ƒD ]&}| tjtjtj|ddd¡ q |S )N)r· )r» )rá )ÚreversedÚappendr r )r Údomainsr³ Údomainr r r r² s ÿÿÿÿz ClientTest._authzr_from_domainsNc C sp | ¡ |p| | j¡}|| j_|| jjj_t
¡ | j | j¡}W d ƒ n1 sX0 Y | |¡ d S rY )
r r² r… r‡ r‚ re r‰ rŠ r0 rw rx rÇ r“ )r rn r¬ r¯ r’ r³ rÍ r r r r« œ s
,z*ClientTest._test_obtain_certificate_commonz2certbot._internal.client.Client.obtain_certificatez3certbot._internal.storage.RenewableCert.new_lineagec C sJ ddg}t ¡ t ¡ t ¡ d f|_d| jj_d| jj_dd„ |jD ƒ}d S )Nz
*.example.comr€ FTc S s g | ]}|d d ‘qS )r r )rÀ rÉ r r r r À rà zAClientTest.test_obtain_and_enroll_certificate..)r r r0 re r r\ Zcall_args_list)r Z mock_storageZmock_obtain_certificaterê Únamesr r r Ú"test_obtain_and_enroll_certificate® s ÿ
z-ClientTest.test_obtain_and_enroll_certificatez$certbot._internal.cli.helpful_parserc C s ddg}t ¡ }t |d ¡}t |d ¡t |d ¡ }tj |dd¡}tj |dd¡}tj |dd¡}d |_d
|d |d |g|_| j
|||||¡\} }
} t | d
ƒ} | ¡ }
W d ƒ n1 sÄ0 Y t |
d
ƒ}| ¡ }W d ƒ n1 sö0 Y t
|¡ d S )Nz cert_512.pemzcert-san_512.pemr r ÚcertsZchainsz chain.pemz
fullchain.pemZcertonlyz --cert-pathz --chain-pathz--fullchain-pathÚrb)ÚtempfileZmkdtemprw Ú load_vectorr
ÚpathÚjoinZverbÚargsre Zsave_certificateÚopenÚreadÚshutilÚrmtree)r Z mock_parserrî Ztmp_pathZcert_pemZ chain_pemZcandidate_cert_pathZcandidate_chain_pathZcandidate_fullchain_pathÚ cert_pathÚ
chain_pathÚfullchain_pathZ cert_fileZ
cert_contentsZ
chain_fileZchain_contentsr r r Útest_save_certificateà s* þþ
& &z ClientTest.test_save_certificatec C s¤ t tj¡& | j dgdddd¡ W d ƒ n1 s80 Y t ¡ }|| j_| j dgdddd¡ |j j
t j
d¡t j
d¡ddt j
d¡d |j
¡ d S )Núfoo.barrn rå rç Ú fullchain)rù rú rë rû Zkey_path)r@ rA r r? re Údeploy_certificater r r| Ú deploy_certr^ r
rò ÚabspathÚrestart©r Ú mock_utilr| r r r Ú test_deploy_certificate_successè s 4
ûz*ClientTest.test_deploy_certificate_successz,certbot._internal.client.display_util.notifyc C s| t ¡ }|| j_d| j_tj|j_t
tj¡& | j dgdddd¡ W d ƒ n1 sZ0 Y |j
¡ | d¡ d S )NZfoobarrý rn rå rç rþ zDeploying certificate)r r re r| r r Ú PluginErrorr r> r@ rA rÿ Úrecovery_routiner^ Zassert_any_call)r r Ú mock_notifyr| r r r Ú test_deploy_certificate_failureú s
4
z*ClientTest.test_deploy_certificate_failurec C sj t ¡ }|| j_tj|j_t tj¡& | j
dgdddd¡ W d ƒ n1 sR0 Y |j ¡ d S ©Nrý rn rå rç rþ )
r r re r| r r Úsaver> r@ rA rÿ r r^ r r r r Ú$test_deploy_certificate_save_failure s
4z/ClientTest.test_deploy_certificate_save_failurec C sx t ¡ }tjd g|j_|| j_t tj¡& | j
dgdddd¡ W d ƒ n1 sV0 Y | d¡ |j
¡ d S )Nrý rn rå rç rþ zuWe were unable to install your certificate, however, we successfully restored your server to its prior configuration.)r r r r r r> re r| r@ rA rÿ r¡ Úrollback_checkpointsr^ )r Úmock_get_utilityr r| r r r Ú'test_deploy_certificate_restart_failure s 4ÿ
z2ClientTest.test_deploy_certificate_restart_failurec C st t ¡ }tj|j_tj|j_|| j_ t
tj¡& | j dgdddd¡ W d ƒ n1 s\0 Y |j
¡ d S r
)r r r r r r> Ú
ReverterErrorr
re r| r@ rA rÿ r^ )r r r` r| r r r Ú(test_deploy_certificate_restart_failure2" s
4
z3ClientTest.test_deploy_certificate_restart_failure2c C s6 t jj}d|› dg}dg}d|› d}d}d|› dg}t tj¡ | j |d ¡ W d ƒ n1 sj0 Y t tj¡ | j ||¡ W d ƒ n1 s¤0 Y t tj¡ | j ||¡ W d ƒ n1 sÞ0 Y t tj¡ | j |d ¡ W d ƒ n1 s0 Y | j ||¡ d S )NZexamzple.comr€ r¼ z.barrý z*.exam) r
rò Úsepr@ rA r r? re Z_choose_lineagename)r r Zinvalid_domainsZ
valid_domainsZinvalid_certnameZvalid_certnameZinvalid_wildcard_domainr r r Útest_choose_lineage_name2 s ,,,.z#ClientTest.test_choose_lineage_name)r )Nr )#r r r r r% rˆ r r“ r r r¥ r r´ rÎ rÑ rÔ rÕ rÖ r× rà rä rœ r² r« rí rü rw rx r r r r r r ry r r r, r r sj
8
#
#
&
$
r c sÚ e Zd ZdZ‡ fdd„Zdd„ Zdd„ Ze d¡d d
„ ƒZ e d¡d d „ ƒZ
e d¡d
d„ ƒZ e d¡dd„ ƒZ dd„ Z
dd„ Zdd„ Zdd„ Zdd„ Zdd „ Zd d „ Zd d „ Zd!d"„ Zd*d$d%„Zd&d'„ Zd(d)„ Z‡ ZS )+ÚEnhanceConfigTestz9Tests for certbot._internal.client.Client.enhance_config.c s4 t ƒ ¡ d| j_d| j_d| j_d| j_d| _d S )NFz example.org)r$ r% r ÚhstsÚredirectÚstapleÚuirrë r r, r r r% I s
zEnhanceConfigTest.setUpc C sB t tj¡" | j | jgd ¡ W d ƒ n1 s40 Y d S rY )r@ rA r r? re Úenhance_configrë r r r r Útest_no_installerR s z#EnhanceConfigTest.test_no_installerc C sv t ¡ | j_g | jjj_d | j_d| j_t d¡"}| j
| j gd ¡ W d ƒ n1 sZ0 Y | jjj
¡ d S )NTr[ )r r re r| Úsupported_enhancementsr0 r r r r r rë Úenhancerž )r r` r r r Útest_unsupportedV s 0z"EnhanceConfigTest.test_unsupportedr[ c C s d| j _| ¡ d S r4 )r r Ú_test_with_already_existing©r rã r r r Útest_already_exists_headera s z,EnhanceConfigTest.test_already_exists_headerc C s d| j _| ¡ d S r4 ©r r r r r r r Ú test_already_exists_redirecti s z.EnhanceConfigTest.test_already_exists_redirectc C s d| j _| ¡ d S r6 r! r r r r Ú#test_config_set_no_warning_redirectq s z5EnhanceConfigTest.test_config_set_no_warning_redirectc C s d | j _| ¡ d S rY )r r Ú_test_with_all_supportedr r r r Útest_no_warn_redirectw s z'EnhanceConfigTest.test_no_warn_redirectc C s* d| j _| ¡ | jjj | jdd¡ d S )NTúensure-http-headerzStrict-Transport-Security)r r r$ re r| r r¡ rë r r r r Útest_no_ask_hsts} s
ÿz"EnhanceConfigTest.test_no_ask_hstsc C s* d| j _| ¡ | jjj | jdd ¡ d S )NTr )r r r$ re r| r r¡ rë r r r r Útest_no_ask_redirectƒ s
ÿz&EnhanceConfigTest.test_no_ask_redirectc C s* d| j _| ¡ | jjj | jdd ¡ d S )NTú staple-ocsp)r r r$ re r| r r¡ rë r r r r Útest_no_ask_staple‰ s
ÿz$EnhanceConfigTest.test_no_ask_staplec C s* d| j _| ¡ | jjj | jdd¡ d S )NTr& zUpgrade-Insecure-Requests)r r r$ re r| r r¡ rë r r r r Útest_no_ask_uir s
ÿz!EnhanceConfigTest.test_no_ask_uirc C s8 t ¡ | j_tj| jjj_| jdd | jjj
¡ d S )NT)Ú
enhance_error) r r re r| r r r r> Ú _test_errorr r^ r r r r Útest_enhance_failure• s z&EnhanceConfigTest.test_enhance_failurec C sF t ¡ | j_tj| jjj_| ¡ | jjj
¡ | jjj
t j ¡ d S rY ) r r re r| r r r r> r- r r^ r_ r r r r Útest_save_failure› s
z#EnhanceConfigTest.test_save_failurec C s* t ¡ | j_tjd g| jjj_| ¡ d S rY ) r r re r| r r r r> Ú_test_error_with_rollbackr r r r Útest_restart_failure¢ s z&EnhanceConfigTest.test_restart_failurec C s0 t ¡ }tj|j_tj|j_|| j_ |
¡ d S rY ) r r r r r r> r r
re r| r0 )r r| r r r Útest_restart_failure2§ s
z'EnhanceConfigTest.test_restart_failure2c C s | ¡ d S rY )r- r r r r r0 ® s z+EnhanceConfigTest._test_error_with_rollbackFc
C s¦ d| j _t d¡l}t ¡ D}t tj ¡ |
¡ W d ƒ n1 sH0 Y W d ƒ n1 sf0 Y W d ƒ n1 s„0 Y |r’|r¢|j d¡ d S )NTr[ z0Rolling back to previous server configuration...)
r r r r rw rx r@ rA r r r$ Zcriticalr¡ )r r, Z
restart_errorr` Zmock_gur r r r- ² s ÿbÿz EnhanceConfigTest._test_errorc C s> | j jd u rt ¡ | j _g d¢| j jj_| j | jgd ¡ d S ©N)r& r r) )re r| r r r r0 r rë r r r r r$ À s
z*EnhanceConfigTest._test_with_all_supportedc C sB t ¡ | j_g d¢| jjj_t ¡ | jjj_ | j
| j gd ¡ d S r3 ) r r re r| r r0 r Z PluginEnhancementAlreadyPresentr r> r rë r r r r r É s z-EnhanceConfigTest._test_with_already_existing)FF)r r r r r% r r r r r r" r# r% r' r( r* r+ r. r/ r1 r2 r0 r- r$ r ry r r r, r r F s0
r c @ s4 e Zd ZdZdd„ Zedd„ ƒZdd„ Zdd „ Zd
S ) Ú RollbackTestz,Tests for certbot._internal.client.rollback.c C s t ¡ | _d S rY )r r Ú m_installr r r r r% Ô s zRollbackTest.setUpc C sR ddl m} t d¡(}||_|d |i t ¡ ƒ W d ƒ n1 sD0 Y d S )Nr )Úrollbackz8certbot._internal.client.plugin_selection.pick_installer)r
r6 r r r> r )ÚclsZ checkpointsr> r6 Zmpir r r r × s zRollbackTest._callc C s | d| j¡ d S ©Nr )r r5 r r r r Útest_no_problemsÞ s z RollbackTest.test_no_problemsc C s | dd ¡ d S r8 )r r r r r r ã s z RollbackTest.test_no_installerN) r r r r r% Ú classmethodr r9 r r r r r r4 Ñ s
r4 Ú__main__r ),r ru r r r÷ Úsysrð Zunittestr Z
unittest.mockr Zjosepyr r@ Zcertbotr r Zcertbot._internalr r Zcertbot._internal.displayr r+ Zcertbot.compatr
Zcertbot.tests.utilZtestsrw rñ r~ r› ZConfigTestCaser r# rz r r ZTestCaser4 r ÚexitÚmainÚargvÚ__file__r r r r Ú sD
= >