a
}|ägäâ ã @ s2 d Z ddlZddlZddlmZ ddlZddlZddlZddl Z ddl
Z
ddl Z ddl Z ddl
mZ ddlZddlmZ ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ dd lm Z dd
lm Z dd l m Z dd l m Z dd
l m!Z! ddl m"Z" ddl m#Z# ddl$m%Z% ddl$m&Z& ddl$m'Z' ddl$m(Z( ddl)m*Z* ddl)m+Z+ ddl,m-Z- ddl.m/ m Z0 e0 1d¡Z2e0 1d¡Z3e0 1d¡Z4e0 1d¡Z5ej6 7e0 8d¡¡Z9e0 1d¡Z:e0 1d ¡Z;G d d „ d ej<ƒZ=G d d „ d e0j>ƒZ?G d!d"„ d"ej<ƒZ@G d#d$„ d$ej<ƒZAG d%d&„ d&e0jBƒZCG d'd(„ d(e0jBƒZDG d)d*„ d*e0j>ƒZEG d+d,„ d,e0j>ƒZFG d-d.„ d.e0j>ƒZGG d/d0„ d0ej<ƒZHG d1d2„ d2e0j>ƒZIG d3d4„ d4e0j>ƒZJG d5d6„ d6e0j>ƒZKG d7d8„ d8ej<ƒZLG d9d:„ d:ej<ƒZMG d;d<„ dƒZNG d=d>„ d>e0j>ƒZOG d?d@„ d@ƒZPeQdAkr.e
Re "e
jSdBd… eTg ¡¡ dS )Cz!Tests for certbot._internal.main.é N)Úreload)ÚList)Úmock)ÚError)Ú crypto_util©Úerrors)Ú
interfaces)Úutil)Úaccount)Úcli)Ú constants)Úmain)Úupdater)Údisco)Úmanual)Únull)Ú
standalone)Ú
filesystem)Úos)Ú enhancementsú cert_512.pemz csr_512.derzrsa256_key.pemzrsa512_key.pemzrsa2048_key.pemz
cert_2048.pemc @ sl e Zd ZdZe d¡dd„ ƒZe d¡e d¡e d¡dd„ ƒƒƒZe d¡d d
„ ƒZe d ¡d d
„ ƒZ dS )ÚTestHandleCertsz1Test for certbot._internal.main._handle_* methodsú s ÿz:TestHandleCerts.test_handle_identical_cert_key_type_changec C s6 t ¡ }d|_t ¡ }ddg|j_t |dg|¡}d S )NTZdummy1Zdummy2)r r ÚexpandÚnamesr r Z_handle_subset_cert_request)r r Ú mock_configr! r" r# r# r$ Ú test_handle_subset_cert_requestM s z/TestHandleCerts.test_handle_subset_cert_requestz)certbot._internal.main.display_util.yesnoc C sæ t ¡ }t ¡ }||_t ¡ }d|_d|_t ||¡ | ¡ d|_d|_t ||¡ d|_d|_t ||¡ d|_t ||¡ d|_dd„ |_ t
j t j
dd t ||¡ W d ƒ n1 sÂ0 Y d d„ |_ t ||¡ d S )
NZrsaÚecdsaTFc S s | dkS )NÚcertnamer# ©Úvarr# r# r$ Ú{ ó zKTestHandleCerts.test_handle_unexpected_key_type_migration..z.Please provide both --cert-name and --key-type©Úmatchc S s | dkS )NÚkey_typer# r1 r# r# r$ r3 € r4 )r r Z set_by_userr7 Úprivate_key_typer Z%_handle_unexpected_key_type_migrationÚassert_not_calledr Ú side_effectÚpytestÚraisesr r )r Z
mock_yesnoÚconfigZmock_setÚcertr# r# r$ Ú)test_handle_unexpected_key_type_migrationW s.
*
z9TestHandleCerts.test_handle_unexpected_key_type_migrationN)
Ú__name__Ú
__module__Ú __qualname__Ú__doc__r Úpatchr% r* r. r? r# r# r# r$ r 3 s
r c sv e Zd ZdZ‡ fdd„Zdd„ Zdd„ Zdd „ Zd
d „ Ze
d ¡d
d„ ƒZ e
d¡dd„ ƒZ e
d ¡dd„ ƒZ
‡ ZS )ÚRunTestz%Tests for certbot._internal.main.run.c sô t ƒ ¡ d| _t d¡t d¡t d¡t d¡t d¡t d¡t d¡t d ¡t d
¡g }|d ¡ | _|d ¡ | _|d
¡ | _|d ¡ | _ |d ¡ | _
|d ¡ | _ |d ¡ | _ |d ¡ | _
|d ¡ | _|D ]}| |j¡ qÞd S )Nz example.orgú)certbot._internal.main._get_and_save_certz7certbot._internal.main.display_ops.success_installationz2certbot._internal.main.display_ops.success_renewalú&certbot._internal.main._init_le_clientú7certbot._internal.main._suggest_donation_if_appropriateú'certbot._internal.main._report_new_certú!certbot._internal.main._find_certú)certbot._internal.eff.handle_subscriptionú)certbot._internal.main._report_next_stepsr é é é é é é é é )ÚsuperÚsetUpÚdomainr rD ÚstartÚ mock_authÚmock_success_installationÚmock_success_renewalÚ mock_initZmock_suggest_donationÚmock_report_certÚmock_find_certÚmock_subscriptionÚmock_report_next_stepsÚ
addCleanupÚstop)r ÚpatchesrD ©Ú __class__r# r$ rV ˆ s.
÷ z
RunTest.setUpc C s@ d | j¡ ¡ }tj ¡ }t ||¡}ddlm } |||ƒ d S )Nz-a webroot -i null -d {0}r )r' )
ÚformatrW Úsplitr ÚPluginsRegistryÚfind_allr Úprepare_and_parse_argsÚcertbot._internal.mainr' )r ÚargsÚpluginsr= r' r# r# r$ Ú_call£ s
z
RunTest._callc C sH t ¡ | j_d| j_| ¡ | j | jg¡ | j jt j
d t j
dd d S )N©TNT©Znew_or_renewed_cert) r r rY r r^ rn rZ Úassert_called_once_withrW r` ÚANY©r r# r# r$ Útest_newcert_success« s ÿz RunTest.test_newcert_successc C s8 t ¡ | j_dt ¡ f| j_| ¡ | j | jg¡ d S r ) r r rY r r^ rn rZ rq rW rs r# r# r$ Útest_reinstall_success³ s z RunTest.test_reinstall_successc C s8 t ¡ | j_dt ¡ f| j_| ¡ | j | jg¡ d S ©NT) r r rY r r^ rn r[ rq rW rs r# r# r$ Útest_renewal_success¹ s z RunTest.test_renewal_successú;certbot._internal.main.plug_sel.choose_configurator_pluginsc C sd t | jd¡d f|_tj ¡ }d| j_t t
j ¡ t
| j|¡ W d ƒ n1 sV0 Y d S ©Nr T)r Ú Installerr= r r rh ri Ú auto_hstsr; r< r ÚNotSupportedErrorr r' ©r Ú mock_chooserm r# r# r$ Ú"test_run_enhancement_not_supported¿ s
z*RunTest.test_run_enhancement_not_supportedú$certbot._internal.main._install_certc C s| t d¡|_t ¡ | j_d| j_t t j¡ |
¡ W d ƒ n1 sJ0 Y | j j tj
|jtj
dd | j ¡ d S )NzFake installation errorro Trp )r Z PluginErrorr: r r rY r r^ r; r< rn r` rq rr rZ r9 )r Zmock_install_certr# r# r$ Ú test_cert_success_install_errorÇ s &ÿz'RunTest.test_cert_success_install_errorc C sd t | jd¡d f|_tj ¡ }d| j_t t
j ¡ t
| j|¡ W d ƒ n1 sV0 Y d S ry )r rz r= r r rh ri Z must_stapler; r< r r| r r' r} r# r# r$ Ú"test_run_must_staple_not_supportedÕ s
z*RunTest.test_run_must_staple_not_supported)r@ rA rB rC rV rn rt ru rw r rD r r r‚ Ú
__classcell__r# r# rd r$ rE … s
rE c @ s¨ e Zd ZdZdd„ Zdd„ Zdd„ Ze d¡e d ¡e d
¡d d „ ƒƒƒZ d
d„ Z
e d¡e d¡e d¡e d¡e d¡e d
¡dd„ ƒƒƒƒƒƒZ e d¡e d¡e d¡e d¡e d
¡dd„ ƒƒƒƒƒZ e d¡e d ¡e d¡e d¡dd„ ƒƒƒƒZ
e d¡e d
¡e d¡e d ¡e d ¡d d „ ƒƒƒƒƒZe d¡e d
¡e d¡e d ¡e d ¡d d „ ƒƒƒƒƒZe d¡e d
¡e d¡e d ¡d!d"„ ƒƒƒƒZd#S )$Ú CertonlyTestz*Tests for certbot._internal.main.certonly.c C s t ¡ | _| j ¡ | _d S ©N)Ú test_utilÚpatch_display_utilÚget_utility_patchrX Úmock_get_utilityrs r# r# r$ rV à s
zCertonlyTest.setUpc C s | j ¡ d S r… ©rˆ rb rs r# r# r$ ÚtearDownä s zCertonlyTest.tearDownc
C s¦ t j ¡ }t ||¡}t d¡p}t d¡F t d¡ t ||¡ W d ƒ n1 sZ0 Y W d ƒ n1 sx0 Y W d ƒ n1 s–0 Y |ƒ S )NrG rH rK ) r rh ri r rj r rD r Úcertonly)r rl rm r= r\ r# r# r$ rn ç s
fzCertonlyTest._callrJ rF rI c C s4 | ¡ j}| j|_t ¡ |_d|_| d ¡ ¡ d S )N)FNz!certonly --webroot -d example.com) r‰ Ú notificationÚ_assert_no_pauser: r r r rn rg )r Z
unused_reportrY r^ Zmock_notificationr# r# r$ Ú test_no_reinstall_text_pauseò s
z)CertonlyTest.test_no_reinstall_text_pausec O s d S r… r# )r rl Úkwargsr# r# r$ rŽ ü s z CertonlyTest._assert_no_pauserL ú3certbot._internal.cert_manager.lineage_for_certnameú3certbot._internal.cert_manager.domains_for_certnamez$certbot._internal.renewal.renew_certr c C s’ ddg}||_ ||j_ | d ¡ ¡ |jtjd tjdd | d ¡ ¡ d| ¡ j_ t
t j ¡ | d ¡ ¡ W d ƒ n1 s„0 Y d S )Nú example.comztest.orgzEcertonly --webroot -d example.com -d test.org --cert-name example.comTrp úEcertonly --webroot -d example.com -d test.com --cert-name example.comF)
r r, rn rg rq r rr r‰ Úyesnor; r< r ÚConfigurationError)r r] Zmock_handle_typeÚmock_renew_certÚ mock_domainsr! r` Údomainsr# r# r$ Ú*test_find_lineage_for_domains_and_certnameÿ s ÿ z7CertonlyTest.test_find_lineage_for_domains_and_certnameú certbot.display.ops.choose_namesc C s4 d |_ | d ¡ ¡ dg|_ d |_ | d ¡ ¡ d S )Nr” Zsomenamez*certonly --webroot --cert-name example.com)r rn rg )r r] r! Úmock_choose_namesZmock_domains_for_certnameZ unused_mock_report_next_stepsr# r# r$ Ú*test_find_lineage_for_domains_new_certname# s z7CertonlyTest.test_find_lineage_for_domains_new_certnamez-certbot._internal.main._csr_get_and_save_certc C sZ d|_ d|_ dt› dfD ]:}| d|› d ¡ ¡ |jtjtjtjdd | ¡ qdS ) zLcertonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.N)z/certz/chainz
/fullchainz--csr z-d example.comz certonly z, --webroot --cert-name example.com --dry-runFrp )r ÚCSRrn rg rq r rr Z
reset_mock)r r! Zmock_csr_get_certZunused_mock_get_certr` Úflagr# r# r$ Ú$test_dryrun_next_steps_no_cert_saved8 s ÿz1CertonlyTest.test_dryrun_next_steps_no_cert_savedú?certbot._internal.plugins.selection.choose_configurator_pluginsc C s> t ¡ }|d f|_t ¡ |_d|_| d ¡ ¡ |j ¡ d S )Nro z certonly --nginx -d example.com)r r) r rn rg ÚrestartZassert_called_once©r Úmock_selÚ
mock_get_certr^ Úunused_report_newÚunused_report_nextZmock_installerr# r# r$ Útest_installer_runs_restartG s
z(CertonlyTest.test_installer_runs_restartc C s> t ¡ }|d f|_t ¡ |_d|_| d ¡ ¡ |j ¡ d S )Nro z)certonly --nginx -d example.com --dry-run)r r) r rn rg r¢ r9 r£ r# r# r$ Ú$test_dryrun_installer_doesnt_restartV s
z1CertonlyTest.test_dryrun_installer_doesnt_restartc C s2 t ¡ |_d|_| dt ¡ › dd ¡ ¡ d S )Nro zcertonly --webroot -w ú z -i standalone -d example.com)r r) r rn ÚtempfileÚ
gettempdirrg )r r¥ r^ r¦ r§ r# r# r$ Útest_invalid_installere s
ÿz#CertonlyTest.test_invalid_installerN)r@ rA rB rC rV r‹ rn r rD r rŽ rš r r r¨ r© r r# r# r# r$ r„ Ý sX
r„ c @ sF e Zd ZdZe d¡dd„ ƒZe d¡dd„ ƒZe d¡dd „ ƒZd
S ) ÚFindDomainsOrCertnameTestz;Tests for certbot._internal.main._find_domains_or_certname.r› c C s t jd d d}d|_d S )N©r™ r0 Z
domainname©r r r ©r rœ r- r# r# r$ Útest_display_opst s z*FindDomainsOrCertnameTest.test_display_opsc C sP t jd d d}g |_t tj¡ t |d ¡ W d ƒ n1 sB0 Y d S )Nr¯ ) r r r r; r< r r r Z_find_domains_or_certnamer± r# r# r$ Útest_no_results{ s z)FindDomainsOrCertnameTest.test_no_resultsr’ c C s t jd dd}ddg|_d S )Nzone.comr¯ ztwo.comr° )r r˜ r- r# r# r$ Útest_grab_domainsƒ s
z+FindDomainsOrCertnameTest.test_grab_domainsN) r@ rA rB rC r rD r² r³ r´ r# r# r# r$ r® q s
r® c s e Zd ZdZ‡ fdd„Zddd„Ze d¡e d¡d d
„ ƒƒZe d¡e d ¡e d ¡e d
¡dd„ ƒƒƒƒZ e d¡e d ¡e d ¡e d
¡dd„ ƒƒƒƒZ
e d¡e d ¡e d ¡e d
¡dd„ ƒƒƒƒZ e d¡dd„ ƒZ dd„ Z
e d¡e d¡e ¡ dd„ ƒƒƒZ‡ ZS ) Ú
RevokeTestz(Tests for certbot._internal.main.revoke.c s t ƒ ¡ t t| j¡ tj tj | jd¡¡| _
t d¡t d¡t d¡t d¡g}|d
¡ j| _|d
¡ |d
¡ | _|d
¡ | _|D ]}| |j¡ q’dd
lm} t ¡ | _|jd tjd d
ddddtjdd| _ || jt | j ƒ| _ | j d f| j_ d S )Nr z$certbot._internal.client.acme_clientz certbot._internal.client.Clientú)certbot._internal.main._determine_accountz5certbot._internal.main.display_ops.success_revocationr rM rN rO )ÚAccountztest.certbot.orgiß rS rP é é
)Ztzinfo)Z
creation_hostZ creation_dt) rU rV ÚshutilÚcopyÚ CERT_PATHÚtempdirr ÚpathÚabspathÚjoinÚ
tmp_cert_pathr rD rX ÚClientV2Úmock_acme_clientÚmock_determine_accountÚmock_success_revokera rb Zcertbot._internal.accountr· r) ÚregrZMetaÚdatetimeÚpytzZUTCÚmetaÚJWKÚaccr )r rc rD r· rd r# r$ rV s0
ü
ÿþzRevokeTest.setUpNc C sH |sd}| | j¡ ¡ }tj ¡ }t ||¡}ddlm } |||ƒ d S )Nzrevoke --cert-path={0} r )Úrevoke)
rf rÁ rg r rh ri r rj rk rÌ )r rl rm r= rÌ r# r# r$ rn s
zRevokeTest._callú-certbot._internal.main._delete_if_appropriateú)certbot._internal.main.client.acme_clientc C s d|_ | ¡ j}g }tj ¡ D ]l\}}d | j|¡ ¡ }| |¡ |
t t j
|¡¡ d | j| ¡ ¡ ¡ }| |¡ |
t t j
|¡¡ q d S )NFz#revoke --cert-path={0} --reason {1})r r rÌ r
ZREVOCATION_REASONSÚitemsrf rÁ rg rn Úappendr Úcallrr Úupper)r rà Úmock_delete_if_appropriateÚ mock_revokeZexpectedÚreasonÚcoderl r# r# r$ Útest_revoke_with_reason· s
ÿ
z"RevokeTest.test_revoke_with_reasonú'certbot._internal.storage.RenewableCertú3certbot._internal.storage.renewal_file_for_certnamez-certbot._internal.client.acme_from_config_keyc C sD | j |_tj| jdd|_d ¡ }d|_| |¡ | j | j¡ d S )Núhttps://acme.example©Ú cert_pathÚserverú revoke --cert-name=example.comF) rà r r r) rÁ rg rn rÅ rq ©r Zmock_acme_from_configZ%unused_mock_renewal_file_for_certnameZ mock_certrÓ rl r# r# r$ Útest_revoke_by_certnameÈ s ÿ
z"RevokeTest.test_revoke_by_certnamec C s< t j| jdd|_d ¡ }d|_| |¡ | j | j¡ dS )z9Revoking with --server should use the server from the CLIrÚ rÛ z=revoke --cert-name=example.com --server https://other.exampleFN©r r) rÁ r rg rn rÅ rq rß r# r# r$ Ú"test_revoke_by_certname_and_serverÙ s ÿ
z-RevokeTest.test_revoke_by_certname_and_serverc C s< t j| jdd|_d ¡ }d|_| |¡ | j | j¡ dS )zLRevoking with --cert-name where the lineage server is empty shouldn't crash NrÛ rÞ Frá rß r# r# r$ Ú$test_revoke_by_certname_empty_serverê s
z/RevokeTest.test_revoke_by_certname_empty_serverc C s | ¡ d|_| j | j¡ d S r )rn r rÅ rq rÁ )r rÓ r# r# r$ Útest_revocation_successú s z"RevokeTest.test_revocation_successc C sZ ddl m} | ¡ | j_t |j¡ | ¡ W d ƒ n1 sB0 Y | j ¡ d S )Nr r )
Úacmer Z ClientErrorrà r: r; r< rn rÅ r9 )r Z acme_errorsr# r# r$ Útest_revocation_error s
&z RevokeTest.test_revocation_errorú%certbot._internal.cert_manager.deletec C s d|ƒ j _d|_| ¡ d S r )r• r rn )r r‰ Ú mock_deleterÓ r# r# r$ Útest_revocation_with_prompt s
z&RevokeTest.test_revocation_with_prompt)N)r@ rA rB rC rV rn r rD r× rà râ rã rä ræ r† r‡ ré rƒ r# r# rd r$ rµ Œ s8
rµ c s¤ e Zd ZdZ‡ fdd„Z‡ fdd„Zdd„ Zdd „ Ze d
¡d d „ ƒZ
d
d„ Z dd„ Z e d¡dd„ ƒZ
dd„ Ze d¡dd„ ƒZdd„ Ze d¡dd „ ƒZ‡ ZS ) ÚReconfigureTestz,Tests for certbot._internal.main.reconfigurec
sT t ƒ ¡ t ¡ | _| j ¡ | _t d¡t d¡t d¡t d¡t d¡t d¡t d¡t d¡d œ| _ d
d „ | j
¡ D ƒ| _ d g| j d
_ t
j | jd¡| _t
j | jd¡}t
j |¡sÄt |¡ t
j |d¡| _d}t| jdƒ}| |¡ W d ƒ n1 s0 Y t| jdƒ"}tj|ddd| _W d ƒ n1 sF0 Y d S )Nz7certbot._internal.storage.RenewableCert._check_symlinksz-certbot._internal.storage.RenewableCert.namesz2certbot._internal.plugins.selection.pick_installerz6certbot._internal.plugins.selection.pick_authenticatorz9certbot._internal.plugins.disco.PluginsRegistry.find_initrF rG z"certbot._internal.hooks.list_hooks)Zcheck_symlinksÚ
cert_namesÚpick_installerÚ pick_authÚ find_initÚ_get_and_save_certZ_init_le_clientZ
list_hooksc S s i | ]\}}|| ¡ “qS r# ©rX ©Ú.0ÚkÚvr# r# r$ Ú
# r4 z)ReconfigureTest.setUp..r“ rë r= Úrenewalzexample.com.confa”
version = 1.32.0
archive_dir = /etc/letsencrypt/archive/example.com
cert = /etc/letsencrypt/live/example.com/cert.pem
privkey = /etc/letsencrypt/live/example.com/privkey.pem
chain = /etc/letsencrypt/live/example.com/chain.pem
fullchain = /etc/letsencrypt/live/example.com/fullchain.pem
# Options used in the renewal process
[renewalparams]
account = ee43634db0aa4e6804f152be39990e6a
server = https://acme-v02.api.letsencrypt.org/directory
authenticator = nginx
installer = nginx
key_type = rsa
ÚwÚrúutf-8©ÚencodingZdefault_encoding)rU rV r† r‡ rˆ rX r‰ r rD ÚpatchersrÏ Úmocksr r r¾ rÀ r½ Ú
config_dirÚexistsr ÚmakedirsÚ renewal_fileÚopenÚwriteÚ configobjÚ ConfigObjÚoriginal_config)r Zrenewal_configs_dirr Úfrd r# r$ rV s4
ø
*ÿzReconfigureTest.setUpc s0 t ƒ ¡ | j ¡ | j ¡ D ] }| ¡ q d S r… )rU r‹ rˆ rb rü Úvalues©r rD rd r# r$ r‹ B s
zReconfigureTest.tearDownc C sz |d| j g }tj ¡ }t ||¡}ddlm} |||ƒ t| j dƒ }t
j |ddd}W d ƒ n1 sl0 Y |S )Nú --config-dirr )Ú reconfigurerø rù rú ) rþ r rh ri r rj rk r r r r r )r Z passed_argsZ full_argsrm r= r r Z updated_confr# r# r$ rn H s
.zReconfigureTest._callc C s> t tj¡ | d ¡ ¡ W d ƒ n1 s00 Y d S )Nz!--cert-name cert1 -d one.cert.com)r; r< r r– rn rg rs r# r# r$ Útest_domains_setU s z ReconfigureTest.test_domains_setú,certbot._internal.cert_manager.get_certnamesc C sL t ¡ }d|_|| jd _|| jd _|| jd _dg|_| d ¡ ¡ d S )NÚnginxrì rí rî r“ ú--nginx©r r Únamerý r rn rg )r Úmock_cert_managerÚ
named_mockr# r# r$ Útest_asks_for_certnameY s z&ReconfigureTest.test_asks_for_certnamec C sD t ¡ }d|_|| jd _|| jd _|| jd _| d ¡ ¡}d S )NÚapacherì rí rî ú --cert-name example.com --apacher ©r r Ú
new_configr# r# r$ Útest_update_configuratore s z(ReconfigureTest.test_update_configuratorc C st t ¡ }d|_|| jd _|| jd _|| jd _| d ¡ ¡}d|d d< d|d d < |d d
= | jd |d < d S )
zI Check that we don't accidentally modify anything that we didn't mean to r rì rí rî r r Ú
renewalparamsÚ
authenticatorÚ installerrþ ÚversionN)r r r rý r rn rg r r r# r# r$ Útest_only_intended_changesp s
z*ReconfigureTest.test_only_intended_changesz&certbot._internal.hooks.validate_hooksc C s | d ¡ dg ¡ dS )z6 Check that we use the staging server for the dry run ú"--cert-name example.com --pre-hookúecho preN©rn rg )r Úunused_validate_hooksr# r# r$ Útest_staging_used‚ s z!ReconfigureTest.test_staging_usedc
C s6 | j d d }| j d d }z| d ¡ ¡ W n& tjyT } z W Y d}~n
d}~0 0 t| jdƒ }tj|ddd}W d ƒ n1 sˆ0 Y | d |› ¡ ¡}z| d
¡ ¡ W n& tjyÞ } z W Y d}~n
d}~0 0 t| jdƒ }tj|ddd}W d ƒ n1 s0 Y | d |› ¡ ¡}dS ) zx Check that we error when attempting to change the account id or server,
but not when it's the same
r r rÝ z.--cert-name example.com --account newaccountidNrø rù rú z"--cert-name example.com --account z&--cert-name example.com --server x.comz!--cert-name example.com --server ) r rn rg r r– r r r r )r Zorig_account_idZ orig_serverÚerrr r r# r# r$ Ú!test_new_account_or_server_errors s" .0z1ReconfigureTest.test_new_account_or_server_errorsc C s@ | d ¡ dg ¡}| d ¡ dg ¡}| d ¡ dg ¡}d S )Nr r z echo pre2z%--cert-name example.com --deploy-hookz echo deployr! )r r" r r# r# r$ Útest_update_hooks² s z!ReconfigureTest.test_update_hooksc C sv t j| jd _z| d ¡ ¡ W n t jy4 Y n0 t| jdƒ }tj |ddd}W d ƒ n1 sh0 Y d S )Nrï r rø rù rú )
r r rý r: rn rg r r r r )r r r r# r# r$ Útest_dry_run_failsÁ s .z"ReconfigureTest.test_dry_run_failsú*certbot._internal.main.display_util.notifyc C sº d}t | jdƒ}| |¡ W d ƒ n1 s00 Y t | jdƒ"}tj|ddd| _W d ƒ n1 sn0 Y t ¡ }d|_|| j d _
|| j d _
| d ¡ ¡}|
d
¡ d S ) Na
version = 2.0.0
archive_dir = /etc/letsencrypt/archive/example.com
cert = /etc/letsencrypt/live/example.com/cert.pem
privkey = /etc/letsencrypt/live/example.com/privkey.pem
chain = /etc/letsencrypt/live/example.com/chain.pem
fullchain = /etc/letsencrypt/live/example.com/fullchain.pem
# Options used in the renewal process
[renewalparams]
account = ee43634db0aa4e6804f152be39990e6a
server = https://acme-staging-v02.api.letsencrypt.org/directory
authenticator = webroot
installer = nginx
key_type = ecdsa
webroot_path = /var/www/html,
[[webroot_map]]
example.com = /var/www/html
r÷ rø rù rú r rí rî z --cert-name example.com --nginxzT
Successfully updated configuration.
Changes will apply when the certificate renews.)r r r r r r r r r rý r rn rg Úassert_called_with)r Ú mock_notifyr r r r r# r# r$ Útest_report_resultsÏ s (ÿ& ÿz#ReconfigureTest.test_report_results)r@ rA rB rC rV r‹ rn r r rD r r r r# r% r& r' r+ rƒ r# r# rd r$ rê s" -
%
rê c @ sR e Zd ZdZdd„ Zdd„ Ze ¡ dd„ ƒZe ¡ dd „ ƒZ e
d
¡e
d ¡e
d ¡e
d
¡e
d¡e
d¡e ¡ dd„ ƒƒƒƒƒƒƒZ e
d ¡e
d
¡e
d¡e
d ¡e
d¡e ¡ dd„ ƒƒƒƒƒƒZ
e
d ¡e
d
¡e
d¡e
d¡e
d ¡e ¡ dd„ ƒƒƒƒƒƒZe
d ¡e
d
¡e
d¡e
d¡e
d ¡e ¡ dd„ ƒƒƒƒƒƒZdS )ÚDeleteIfAppropriateTestz8Tests for certbot._internal.main._delete_if_appropriate c C s ddl m} ||ƒ d S )Nr )Ú_delete_if_appropriate)rk r- )r r- r- r# r# r$ rn û s z DeleteIfAppropriateTest._callc C sB t d¡ }| | j¡ W d ƒ n1 s,0 Y | ¡ d S )Nrç )r rD rn r= r9 )r rè r# r# r$ Ú_test_delete_opt_out_commonÿ s *z3DeleteIfAppropriateTest._test_delete_opt_out_commonc C s d| j _| ¡ d S r )r= Údelete_after_revoker. )r Zunused_mock_get_utilityr# r# r$ Útest_delete_flag_opt_out s z0DeleteIfAppropriateTest.test_delete_flag_opt_outc C s |ƒ }d|j _| ¡ d S r )r• r r. )r r‰ Ú util_mockr# r# r$ Útest_delete_prompt_opt_out s z2DeleteIfAppropriateTest.test_delete_prompt_opt_outz%certbot._internal.main.logger.warningrÙ rç z7certbot._internal.cert_manager.match_and_check_overlapsz+certbot._internal.storage.full_archive_pathz3certbot._internal.cert_manager.cert_path_to_lineagec C s8 | j }d|_d|_d|_t ¡ |_| |¡ | ¡ d S )Nú/some/reasonable/pathÚ r“ ) r= rÜ r0 r r ZOverlappingMatchFoundr: rn r9 ) r r‰ Úmock_cert_path_to_lineageÚ mock_archiveÚ mock_match_and_check_overlapsrè Ú mock_renewal_file_for_certnameZ mock_warningr= r# r# r$ Ú test_overlapping_archive_dirs s
z5DeleteIfAppropriateTest.test_overlapping_archive_dirsc C s, | j }d|_d|_d|_d|_| |¡ d S )Nr3 r4 r“ F)r= rÜ r0 r rn )r r‰ r5 rè r6 Z mock_overlapping_archive_dirsr8 r= r# r# r$ Útest_cert_path_only$ s
z+DeleteIfAppropriateTest.test_cert_path_onlyc C s8 | j }d|_d|_d|_d|_d|_d|_| |¡ d S ©NTr3 r4 r“ )r= Znoninteractive_moderÜ r0 r rn ©r r‰ rè r5 Zmock_full_archive_dirr7 r8 r= r# r# r$ Ú test_noninteractive_deletion6 s
z4DeleteIfAppropriateTest.test_noninteractive_deletionc C s8 | j }d|_d|_d|_d|_d|_d|_| |¡ d S r; )r= r/ rÜ r0 r rn r< r# r# r$ Útest_opt_in_deletionJ s
z,DeleteIfAppropriateTest.test_opt_in_deletionN)r@ rA rB rC rn r. r† r‡ r0 r2 r rD r9 r: r= r> r# r# r# r$ r, ø sH
r, c s´ e Zd ZdZ‡ fdd„Zdd„ Ze d¡e d¡dd „ ƒƒZd
d „ Z d d
„ Z
e d¡dd„ ƒZ e d¡dd„ ƒZ e d¡e d¡dd„ ƒƒZ
dd„ Zdd„ Zdd„ Zd d „ Z‡ ZS ) ÚDetermineAccountTestz4Tests for certbot._internal.main._determine_account.c s^ t ƒ ¡ d | j_d | j_d| j_tjddtjddg| _t ¡ | _
t ¡ | _ d| j j _
d S )NFÚx)ÚidÚyÚhi)rU rV r= r ÚemailZ register_unsafely_without_emailr r) ÚaccsZAccountMemoryStorageÚaccount_storageÚ mock_clientÚ directoryZ new_authzrs rd r# r$ rV b s
zDetermineAccountTest.setUpc C s‚ ddl m} t d¡X}t ¡ 0 | j|_|| jƒW d ƒ W d ƒ S 1 sV0 Y W d ƒ n1 st0 Y d S )Nr )Ú_determine_accountz1certbot._internal.main.account.AccountFileStorage) rk rI r rD r† r‡ rF r r= )r rI Ú mock_storager# r# r$ rn n s ÿzDetermineAccountTest._callz!certbot._internal.client.registerz.certbot._internal.client.display_ops.get_emailc
C sD d|_ ||_z | ¡ W n& tjy> } z W Y d }~n
d }~0 0 d S )Nú foo@bar.baz)r r: rn r r )r Úerr_msgÚ exceptionÚmock_get_emailÚ
mock_registerr$ r# r# r$ Ú_register_error_commonv s z+DetermineAccountTest._register_error_commonc C s* | j | jd | j¡ | jd j| j_d S ©NrM )rF ÚsaverE rG rA r= r rs r# r# r$ Útest_args_account_set s z*DetermineAccountTest.test_args_account_setc C s | j | jd | j¡ d S )Nr )rF rR rE rG rs r# r# r$ Útest_single_accountˆ s z(DetermineAccountTest.test_single_accountz3certbot._internal.client.display_ops.choose_accountc C s, | j D ]}| j || j¡ q| j d |_d S rQ )rE rF rR rG r )r Úmock_choose_accountsrË r# r# r$ Útest_multiple_accountsŽ s
z+DetermineAccountTest.test_multiple_accountsc
C sZ | j D ]}| j || j¡ qd |_z | ¡ W n& tjyT } z W Y d }~n
d }~0 0 d S r… )rE rF rR rG r rn r r )r rU rË r$ r# r# r$ Ú test_multiple_accounts_canceled˜ s
z4DetermineAccountTest.test_multiple_accounts_canceledr( c C sl d|_ t d¡&}| jd tjjf|j_ W d ƒ n1 s<0 Y |jj| j| j tj
d | d¡ d S )NrK ú certbot._internal.main.clientr )Ztos_cbzAccount registered.) r r rD rE Úsentinelrå Úregisterrq r= rF rr )r r* rN Úclientr# r# r$ Útest_no_accounts_no_email¢ s ÿ ÿz.DetermineAccountTest.test_no_accounts_no_emailc C sT d| j _t d¡.}| jd tjjf|j_| ¡ W d ƒ n1 sF0 Y d S )Nz other emailrX rM )
r= rD r rD rE rY rå rZ r rn )r r[ r# r# r$ Útest_no_accounts_email² s
&z+DetermineAccountTest.test_no_accounts_emailc C s d}| |t |¡¡ d S )Nz$Some error message raised by Certbot)rP r r )r rL r# r# r$ Útest_register_error_certbotº s z0DetermineAccountTest.test_register_error_certbotc C s d}t ddd}| ||¡ d S )NzAError returned by the ACME server: must agree to terms of servicez$urn:ietf:params:acme:error:malformedz must agree to terms of service)ÚtypZdetail©Ú
acme_errorrP ©r rL rM r# r# r$ Ú(test_register_error_acme_type_and_detail¾ s
ÿz=DetermineAccountTest.test_register_error_acme_type_and_detailc C s d}t dd}| ||¡ d S )NzKError returned by the ACME server: The server experienced an internal errorz)urn:ietf:params:acme:error:serverInternal)r_ r` rb r# r# r$ Ú"test_register_error_acme_type_onlyÄ s
z7DetermineAccountTest.test_register_error_acme_type_only)r@ rA rB rC rV rn r rD rP rS rT rV rW r\ r] r^ rc rd rƒ r# r# rd r$ r? _ s&
r? c s e Zd ZdZ‡ fdd„Z‡ fdd„Zd¹dd „Zdºd
d „Zd d
„ Zdd„ Z dd„ Z
e d¡dd„ ƒZ
e d¡e d¡e d¡e d¡e d¡e d¡dd„ ƒƒƒƒƒƒZe d ¡e d ¡d d „ ƒƒZe d ¡e d ¡e d ¡d!d"„ ƒƒƒZe d¡e d ¡e d ¡e d ¡d#d$„ ƒƒƒƒZe d ¡e d ¡d%d&„ ƒƒZe d ¡e d ¡e d'¡e d ¡d(d)„ ƒƒƒƒZe d¡e d¡e d¡e d*¡d+d,„ ƒƒƒƒZe d¡d-d.„ ƒZe d/¡d0d1„ ƒZe d2¡d3d4„ ƒZe d5¡e d6¡e d¡d7d8„ ƒƒƒZe d5¡e d6¡d9d:„ ƒƒZe d5¡e d6¡d;d<„ ƒƒZe d5¡e d6¡d=d>„ ƒƒZe d5¡e d6¡d?d@„ ƒƒZ dAdB„ Z dCdD„ Z dEdF„ Z dGdH„ Z dIdJ„ Z!dKdL„ Z"dMdN„ Z#d»dOdP„Z$e d¡dQdR„ ƒZ%e d¡e dS¡e d¡e dT¡dUdV„ ƒƒƒƒZ&e d¡dWdX„ ƒZ'dddYdde(j( )¡ ddfdZd[„Z*e d¡e dS¡e dT¡d\d]„ ƒƒƒZ+e d^¡e d_¡e dT¡d`da„ ƒƒƒZ,dbdc„ Z-ddde„ Z.dfdg„ Z/e dh¡didj„ ƒZ0e dh¡dkdl„ ƒZ1e dm¡dndo„ ƒZ2e dm¡dpdq„ ƒZ3e dr¡dsdt„ ƒZ4e d¡dudv„ ƒZ5dwdx„ Z6dydz„ Z7d{d|„ Z8d}d~„ Z9dd€„ Z:dd‚„ Z;d¼dƒd„„Zd‰dŠ„ Z?d‹dŒ„ Z@ddŽ„ ZAe d¡dd‘„ ƒZBd’d“„ ZCd”d•„ ZDd–d—„ ZEd˜d™„ ZFdšd›„ ZGdœd„ ZHeI J¡ e dž¡e dŸ¡e d¡d d¡„ ƒƒƒƒZKd½d¢d£„ZLe d¤¡e dS¡e d¡d¥d¦„ ƒƒƒZMe d¤¡d§d¨„ ƒZNe d©¡e dª¡d«d¬„ ƒƒZOdd®„ ZPe d©¡e d¡d¯d°„ ƒƒZQe d¡d±d²„ ƒZRe d¡e d³¡d´dµ„ ƒƒZSe d¶¡e d¡e dŸ¡e d¡d·d¸„ ƒƒƒƒZT‡ ZUS )¾ÚMainTestz Tests for different commands.c sL t ƒ ¡ t | jj¡ d| jjd| jjd| jjdg| _t
d¡ ¡ | _ d S )Nr
ú
--work-dirú
--logs-dirú--textz
time.sleep)
rU rV r Úmkdirr= Úlogs_dirrþ Úwork_dirÚ
standard_argsr rD rX Ú
mock_sleeprs rd r# r$ rV Í s
þzMainTest.setUpc s t tƒ tƒ ¡ d S r… )Ú
reload_moduler rU r‹ rs rd r# r$ r‹ × s zMainTest.tearDownNFc sì |r t jj‰ ‡ fdd„}t d¡l}||_t d¡<}| ||¡\}}}||||fW d ƒ W d ƒ S 1 sv0 Y W d ƒ n1 s”0 Y nHt d¡.}| ||¡\}}}||||fW d ƒ S 1 sÞ0 Y dS )zaRun the cli with output streams, actual client and optionally
os.path.isfile() mocked outc s* | d¡s | d¡s | d¡r"dS ˆ | ƒS )zMock os.path.isfile()r> ÚchainÚprivkeyT)Úendswith)Úfnrl r ©Z orig_openr# r$ Ú mock_isfileä s
ÿþz#MainTest._call..mock_isfilez certbot.compat.os.path.isfilerX N)r r¾ Úisfiler rD r: Ú_call_no_clientmock) r rl ÚstdoutÚ
mockisfilert Zmock_ifr[ r" Ústderrr# rs r$ rn Ý s X zMainTest._callc
C s¸ | j | }|r|nt ¡ }tjd|dv t d¡L}t d¡" t |dd… ¡}W d ƒ n1 sh0 Y W d ƒ n1 s†0 Y W d ƒ n1 s¤0 Y |||fS )z-Run the client with output streams mocked outú!certbot._internal.main.sys.stdout©Únewú!certbot._internal.main.sys.stderrúcertbot.util.atexitN)rl ÚioÚStringIOr rD r )r rl rw Z
toy_stdoutry r" r# r# r$ rv ö s
lz MainTest._call_no_clientmockc C s8 t d¡}| g ¡ W d ƒ n1 s*0 Y d S )Nzcertbot._internal.main.run)r rD rn )r Úmock_runr# r# r$ Ú
test_no_flags s
zMainTest.test_no_flagsc
C s¼ t ¡ }t ¡ }tjd|dŠ tjd|d\ z8zt dg¡ W n tyT Y n0 W | ¡ pf| ¡ }n| ¡ px| ¡ }0 W d ƒ n1 s0 Y W d ƒ n1 s®0 Y d S )Nrz r{ r} z --version)r r€ r rD r Ú
SystemExitÚgetvalue)r Ztoy_outZtoy_errÚoutputr# r# r$ Ú test_version_string_program_name s ÿz)MainTest.test_version_string_program_namec
C sz d}zFt d¡( t | j|dd… ¡ W d ƒ n1 s>0 Y W n* tjyt } z|}W Y d}~n
d}~0 0 dS )zQEnsure that a particular error raises a missing cli flag error containing messageNr} )r rD r rl r ZMissingCommandlineFlag)r rl ÚmessageÚexcZexc_r# r# r$ Ú_cli_missing_flag s :zMainTest._cli_missing_flagz*certbot._internal.log.post_arg_parse_setupc C s2 ddg}| |d¡ | g d¢¡ | |d¡ d S )Nz-nrŒ zspecify a plugin)ú --standaloneú-dzeg.iszregister before running)r‰ Úextend)r Ú_rl r# r# r$ Útest_noninteractive s z MainTest.test_noninteractiverK rI r¶ zBcertbot._internal.main.client.Client.obtain_and_enroll_certificaterF c C sú g d¢| j }t ¡ d f|_t ¡ |_t d¡R}|j} | |¡ t ¡ }
| j d d } dd l
} |
¡ }
d|
¡ v rtW d ƒ n1 sˆ0 Y t d¡J}|j} d} |d| g7 }| |¡ | j tj
tj
d | tjd
W d ƒ n1 sì0 Y d S ) N)rŠ rŒ ú-mz
none@none.comr‹ r“ z --agree-tosrÎ rM Ú
user_agentr ZlinuxZ bandersnatchz --user-agentT)r Z
verify_sslr Zalg)rl r r) r rD Z
ClientNetworkrv r
Zget_os_info_uaÚ call_argsÚplatformÚlowerrq rr ÚjoseZRS256)r ZgscZ_obtZdetr Ú__Ú___rl Z acme_clientZacme_netZos_verZuar’ Zplatr# r# r$ Útest_user_agent% s, ÿ
ÿzMainTest.test_user_agentú5certbot._internal.main.plug_sel.record_chosen_pluginsú.certbot._internal.main.plug_sel.pick_installerc C s | j g d¢dd d S )N) Úinstallz --domainsúfoo.barú --cert-pathr> ú
--key-pathrp ú --chain-pathro T©rx )rn )r Zmock_pick_installerÚ_recr# r# r$ Útest_installer_selectionF s
ÿz!MainTest.test_installer_selectionr€ c C s~ t jt d¡t d¡t d¡t d¡d}t d¡6}||_| jg d¢dd |jd d }W d ƒ n1 sp0 Y d S )
Nr> ro rp ©rÜ Ú
chain_pathÚfullchain_pathÚkey_pathr‘ )rš ú --cert-nameÚwhateverTrŸ r )r r) r† Ú temp_joinrD r rn r‘ )r Ú_instr Ú mock_installr! Ú mock_getlinÚ call_configr# r# r$ Útest_installer_certnameM s ý z MainTest.test_installer_certnamec C s¾ t jt d¡t d¡t d¡t d¡d}t d¡v}||_| jdddd t d
¡gd d |jd
d
}| ¡ | jddddt d¡gd d |jd
d
}W d ƒ n1 s°0 Y d S )Nr> ro rp r¢ r‘ rš r¦ r§ r Zoverriding_privkeyTrŸ r rœ Zoverriding_cert) r r) r† r¨ rD r rn r‘ Úreset)r r© r rª r r! r« r¬ r# r# r$ Ú test_installer_param_override^ s* ý
ÿÿ
ÿÿz&MainTest.test_installer_param_overridec C s> t tj¡ | g d¢¡ W d ƒ n1 s00 Y d S )N)rš r¦ Znotfoundr Zinvalid©r; r< r r– rn )r r© r r# r# r$ Útest_installer_param_errorz s z#MainTest.test_installer_param_errorr
c C sn t jt d¡t d¡t d¡t d¡d}t d¡&}||_| jdgdd W d ƒ n1 s`0 Y d S ) Nr> ro rp r¢ r‘ rš TrŸ )r r) r† r¨ rD r rn )r Ú mock_instZ mock_getcertr© r r! r« r# r# r$ Útest_installer_select_cert s ý .z#MainTest.test_installer_select_certzcertbot.util.exe_existsc C s d|_ tj ¡ }g d¢}dddt d¡dt d¡dd d
d d g }d
|v rX| |¡\}}}}| dgd¡ t d¡b}t d¡8} t
¡ | _ | g d¢¡ |j d \}
} } W d ƒ n1 sº0 Y W d ƒ n1 sØ0 Y t d¡ }
| ddg¡ W d ƒ n1 s0 Y d S )NT)z--apachez--authenticatorr rš r rœ Zblahr z--nginx-server-rootz/nonexistent/thingr‹ r“ ú--debugr rŠ z(With the standalone plugin, you probablyrG rF )rŒ z--manualr‹ r› r ú certbot._internal.main.certonlyÚauth) r r rh ri r† r¨ rn r‰ r rD r) r‘ )r Zmock_exe_existsr r• r– Z real_pluginsrl r" r\ Zmock_gscZ
unused_configr¶ Zunused_installerÚ
mock_certonlyr# r# r$ Útest_configurator_selection s(
ý
< z$MainTest.test_configurator_selectionc C sF | dg¡\}}}}| g d¢¡\}}}}|j tjdtjtj¡ d S )NÚrollback)r¹ z
--checkpointsZ123é{ )rn r¹ rq r rr )r r r[ r# r# r$ Ú
test_rollback¹ s
ÿzMainTest.test_rollbackz+certbot._internal.cert_manager.certificatesc C s | dg¡ d S )NZ certificates©rv ©r r r# r# r$ Útest_certificates s zMainTest.test_certificatesrç c C s | dg¡ d S )NÚdeleter¼ r½ r# r# r$ Ú test_deleteÇ s zMainTest.test_deletez$certbot._internal.main.plugins_discozFcertbot._internal.main.cli.HelpfulArgumentParser.determine_help_topicsc sF g d¢‰ t j‡ fdd„ttˆ ƒƒD ƒŽ D ]}| dgt|ƒ ¡ q(d S )N)ú--initú --preparez--authenticatorsz --installersc 3 s | ]}t ˆ |¡V qd S r… )Ú itertoolsÚ combinations)rò rø ©Úflagsr# r$ Ú Ò s ÿz(MainTest.test_plugins..rm )rà ro ÚrangeÚlenrn Úlist)r r Ú_detÚ
mock_discorl r# rÅ r$ Ú test_pluginsÌ s
ÿÿzMainTest.test_pluginsc C s‚ g }|j ¡ }t ¡ }tj|d& | dg|¡\}}}}W d ƒ n1 sN0 Y |j ¡ | ¡ j |¡ | ¡ ¡ }d S )N©rw rm ©
rh ri r r€ r† Ú patch_display_util_with_stdoutrn Úvisiblerq Úifaces©r rË rÌ rÒ rm rw r Úfilteredr# r# r$ Útest_plugins_no_argsÖ s
4
z MainTest.test_plugins_no_argsc
C sº g }|j ¡ }dd„ }t ¡ }t d¡X}tj|d, ||_| dg|¡\}}}}W d ƒ n1 sh0 Y W d ƒ n1 s†0 Y |j
¡ |
¡ j |¡ |
¡ ¡ } d S )Nc S s | || }}}t ¡ ‚dS )zRaises error.Error.N)r r )rH ÚmodeÚstrictr r# r# r$ Ú throw_errorë s z?MainTest.test_plugins_no_args_unprivileged..throw_errorz certbot.util.set_up_core_dirrÎ rm )
rh ri r r€ r rD r† rÐ r: rn rÑ rq rÒ )
r rË rÌ rÒ rm rØ rw Zmock_set_up_core_dirr rÔ r# r# r$ Ú!test_plugins_no_args_unprivilegedå s
R
z*MainTest.test_plugins_no_args_unprivilegedc C s„ g }|j ¡ }t ¡ }tj|d( | ddg|¡\}}}}W d ƒ n1 sP0 Y |j ¡ | ¡ j |¡ | ¡ ¡ }d S )NrÎ rm rÁ rÏ rÓ r# r# r$ Útest_plugins_initû s
6
zMainTest.test_plugins_initc C s g }|j ¡ }t ¡ }tj|d( | g d¢|¡\}}}}W d ƒ n1 sP0 Y |j ¡ | ¡ j |¡ | ¡ ¡ }|j
¡ |j ¡ | ¡ }d S )NrÎ )rm rÁ r ) rh ri r r€ r† rÐ rn rÑ rq rÒ ÚprepareÚ available) r rË rÌ rÒ rm rw r rÔ rÜ r# r# r$ Útest_plugins_prepare s
6
z MainTest.test_plugins_preparec C sh d}d}d}d}t d¡,}| dd|ddd dd
dg ¡ W d ƒ n1 sL0 Y |jd \}}d S ) Nr> Úkeyro Ú fullchainrµ rŒ rœ r rž z--fullchain-pathr )r rD rn r‘ )r r> rÞ ro rß r· r= Úunused_pluginsr# r# r$ Útest_certonly_abspath s þ$z MainTest.test_certonly_abspathc
C sH z | g d¢¡ t d¡ W n& tjyB } z W Y d }~n
d }~0 0 d S )N)ú-aZbad_authrŒ z!Exception should have been raised)rn r; Úfailr ÚPluginSelectionError©r Úer# r# r$ Útest_certonly_bad_args/ s
z MainTest.test_certonly_bad_argsc C sì t tj¡ | ddg¡ W d ƒ n1 s00 Y t tj¡ | ddg¡ W d ƒ n1 sj0 Y t tj¡ | ddg¡ W d ƒ n1 s¤0 Y t tj¡ | ddg¡ W d ƒ n1 sÞ0 Y d S )Nr‹ Z@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaþ aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.z
204.11.231.35z%2001:db8:ac69:3ff:b1cb:c8c6:5a84:a31br° rs r# r# r$ Ú test_check_config_sanity_domain6 s ,,,z(MainTest.test_check_config_sanity_domainc C sD t tj¡$ | d t¡ ¡ ¡ W d ƒ n1 s60 Y d S )Nz*certonly --csr {0} --allow-subset-of-names©r; r< r r rn rf rž rg rs r# r# r$ Útest_csr_with_besteffortD s z!MainTest.test_csr_with_besteffortc
C sJ z| dtg¡ W n( tjy: } zW Y d }~d S d }~0 0 t d¡ d S )Nz--csrz2Expected supplying --csr to fail with default verb)rn rž r r r; rã rå r# r# r$ Útest_run_with_csrH s
zMainTest.test_run_with_csrc C sJ t tj¡* | d t d¡¡ ¡ ¡ W d ƒ n1 s<0 Y d S )Nzcertonly --csr {0}zcsr-nonames_512.pem) r; r< r r rn rf r† Ú vector_pathrg rs r# r# r$ Útest_csr_with_no_domainsQ s ÿz!MainTest.test_csr_with_no_domainsc C sD t tj¡$ | d t¡ ¡ ¡ W d ƒ n1 s60 Y d S )Nz!certonly -d example.org --csr {0}ré rs r# r# r$ Ú"test_csr_with_inconsistent_domainsV s z+MainTest.test_csr_with_inconsistent_domainsc C s† t d¡h}d|_t d¡8}||_|d u r0g }|d ¡ 7 }| |¡ W d ƒ n1 sZ0 Y W d ƒ n1 sx0 Y d S )Nú=certbot._internal.main._find_lineage_for_domains_and_certname)ZnewcertNrG z!-d foo.bar -a standalone certonly)r rD r rg rn )r rG rl Ú mock_renewalr\ r# r# r$ Ú _certonly_new_request_commonZ s
z%MainTest._certonly_new_request_commonc C s" t ¡ }d |j_| |dg¡ d S ©Nú --dry-run)r r) Ú obtain_and_enroll_certificater rñ )r Ú mock_reportrG r# r# r$ Ú)test_certonly_dry_run_new_request_successe s z2MainTest.test_certonly_dry_run_new_request_successz+certbot._internal.main.util.atexit_registerz certbot.crypto_util.notAfterc
C sr t j t j | jjd¡¡}t j t j | jjd¡¡}d}||ƒ j_tj ||||d}t ¡ } || j
_| | ¡ d S )Nz live/foo.barz live/baz.quxz
1970-01-01)r> rß r¤ r¥ ) r r¾ ÚnormpathrÀ r= rþ Údater r r) rô rñ )
r Z
mock_notAfterr_ rO rõ rÜ r¥ rø r! rG r# r# r$ Ú!test_certonly_new_request_successn s
ÿ
z*MainTest.test_certonly_new_request_successc C sJ t ¡ }d|j_t tj¡ | |¡ W d ƒ n1 s<0 Y d S r ) r r) rô r r; r< r r rñ )r r_ rG r# r# r$ Ú!test_certonly_new_request_failure… s
(z*MainTest.test_certonly_new_request_failureTc s t d¡} tj tj | jjd¡¡} tj | | | | d}
||
j
_ d|
j _ dg|
j
_ d|
_d|
_| |
_t ¡ }tj dd }t ¡ }t ¡ ‰ |d
|d f|j_ ‡ fd d
„}z&zÊt d¡X}|
d f|_ t d¡ }||_ t d¡î}|sð||ƒ j_t d¡´}||j_ t d¡€ |s g d¢}|r,||7 }z0| |ˆ ¡\}‰ }}|rZtd|ƒ t|ƒ‚W n" |sztdt ¡ ƒ‚Y n0 W d ƒ n1 s–0 Y W d ƒ n1 s¶0 Y W d ƒ n1 sÖ0 Y W d ƒ n1 sö0 Y W d ƒ n1 s0 Y |rp| r\|
s\|j tj gtj tj | jjd¡¡¡ n|j tj gd ¡ n W n | ¡ ‚ Y n0 W |r t tj | jj!d¡ƒ}W d ƒ n1 sÀ0 Y n@|r
t tj | jj!d¡ƒ}W d ƒ n1 s 0 Y 0 |
|ˆ fS )Nr zlive/foo.bar/fullchain.pem)r> rß rÜ r¤ Fú isnot.orgr/ Z secp256r1Zpem_key)Zpemro Úcsrc s ˆ | ¡ dS )zWrite message to stdout.N)r )r‡ rl r rÎ r# r$ Ú write_msg£ s z0MainTest._test_renewal_common..write_msgz5certbot._internal.cert_manager.find_duplicative_certsrG z)certbot._internal.display.obj.get_displayz*certbot._internal.main.renewal.crypto_utilrK )r‹ rû râ r rŒ ZReturnedzUnexpected renewal error:
z live/sample-renewal/privkey.pemúletsencrypt.log)"r† rì r r¾ r÷ rÀ r= rþ r r) Zshould_autorenewr Zhas_pending_deploymentr, r8 Zelliptic_curveÚ reuse_keyr r€ Zobtain_certificaterD r r: ZnotAfterrn ÚprintÚAssertionErrorÚ tracebackÚ
format_excrq rr Ú _dump_logr rj )r Údue_for_renewalÚ
extra_argsÚlog_outrl Ú should_renewÚerror_expectedÚ
quiet_modeÚ expiry_daterÿ Únew_keyrÜ r£ r! Z
mock_certrZmock_keyrG rý Zmock_fdcr\ Z mock_displayZmock_crypto_utilr" r Úlfr# rÎ r$ Ú_test_renewal_common sŠ
ÿÿ
ÿ
ÿÿª ÿÿ
"þ"z MainTest._test_renewal_commonc C s& | dg ¡\}}}|j | ¡ ¡ d S rv )r Zupdate_all_links_torq Zlatest_common_version)r r rO rõ Zlineager# r# r$ Útest_certonly_renewalØ s
ÿz MainTest.test_certonly_renewalr( zEcertbot._internal.log.logging.handlers.RotatingFileHandler.doRolloverc C sV | j dddgdd\}}}| d¡ | j dg d¢dd | j dg d ¢dd
\}}}d S ) NFró ú--keepzsimulating renewal)r úThe dry run was successful.)z--renew-by-defaultú-tvvr´ zAuto-renewal forced)r r´ r )r )r Úassert_any_call)r r r• r* Zmock_displayerr# r# r$ Ú test_certonly_renewal_triggersä s ÿ
ÿ ÿ z'MainTest.test_certonly_renewal_triggersc C s^ t dƒ tj | jjd¡}tj |¡rZt|ƒ }t | ¡ ƒ W d ƒ n1 sP0 Y d S )NzLogs:rþ ) r r r¾ rÀ r= rj rÿ r Úread)r Zlog_pathr
r# r# r$ r ô s
zMainTest._dump_logc C s. t | jjd¡ g d¢}| jdg |dd d S )Núsample-renewal.conf©Úrenewró r T©rl r ©r† Ú make_lineager= rþ r ©r rl r# r# r$ Útest_renew_verbû s zMainTest.test_renew_verbc C s4 t j| jjddd g d¢}| jdg |ddd d S )Nr F©Zec)r ró ú --reuse-keyT©rl r rÿ r r r# r# r$ Útest_reuse_key s zMainTest.test_reuse_keyz6certbot._internal.storage.RenewableCert.save_successorc C s4 t j| jjddd ddg}| jdg |ddd d S )Nr Fr r r Tr r ©r Zunused_save_successorrl r# r# r$ Útest_reuse_key_no_dry_run s z"MainTest.test_reuse_key_no_dry_runc C s2 t | jjd¡ g d¢}| jdg |dddd d S )Nr )r r z --new-keyT)rl r rÿ r r r" r# r# r$ Ú test_new_key s
ÿzMainTest.test_new_keyz sys.stdinc C sF d|j _t | jjd¡ g d¢}| jdg |dd | jjd d }d S )NFr r Tr r ) Úisattyr r† r r= rþ r rm r‘ )r Ústdinrl Zsleep_call_argr# r# r$ Ú!test_noninteractive_renewal_delay s z*MainTest.test_noninteractive_renewal_delayc C s6 d|j _t | jjd¡ g d¢}| jdg |dd d S )NTr r r )r% r r† r r= rþ r )r r& rl r# r# r$ Ú!test_interactive_no_renewal_delay s
z*MainTest.test_interactive_no_renewal_delayr& c C sL d|_ t | jjd¡ tj ¡ tjdd }| jdd ddg|d\}}}d S )NFr éZ )Zdaysr )r r rl r ) r r† r r= rþ rÇ ÚnowZ timedeltar )r r Zexpiryr rw r# r# r$ Ú test_renew_skips_recent_certs& s
ÿ z&MainTest.test_renew_skips_recent_certsc C sf t | jjd¡ ddg}| jdg |dd\}}}| ¡ }g d¢}| jdg |ddd\}}}| ¡ }d S )Nr r ró Tr )r ró z-q)rl r r
)r† r r= rþ r r„ )r r rl rw Úoutr# r# r$ Útest_quiet_renew0 s
ÿ zMainTest.test_quiet_renewc C s0 t | jjd¡ g d¢}| jdg |ddd d S )Nr )r ró ú--post-hook=no-such-commandTF©rl r r r r r# r# r$ Útest_renew_hook_validation> s
ÿz#MainTest.test_renew_hook_validationc C sZ t | jjd¡ g d¢}t d¡$ | jdg |ddd W d ƒ n1 sL0 Y d S )Nr )r ró r. z--disable-hook-validationz!certbot._internal.hooks.post_hookTFr/ )r† r r= rþ r rD r r r# r# r$ Ú test_renew_no_hook_validationD s ÿz&MainTest.test_renew_no_hook_validationc C s| t j | jjd¡}t j |¡s(t |¡ tt j |d¡dƒ W d ƒ n1 sR0 Y g d¢}| j dg |ddd d S )Nrö z
empty.confr÷ r FTr/ )
r r¾ rÀ r= rþ rÿ r r r r )r Zrdrl r# r# r$ Ú test_renew_verb_empty_configL s
z%MainTest.test_renew_verb_empty_configc C s* t | jjd¡ | jdg dg d¢d d S )Nr T©r ró r¦ zsample-renewal)r rl r rs r# r# r$ Útest_renew_with_certnameU s
ÿz!MainTest.test_renew_with_certnamec C s | j dg dg d¢dd d S )NTFr3 )r rl r )r rs r# r# r$ Ú test_renew_with_bad_certnameZ s
þz%MainTest.test_renew_with_bad_certnamec C s^ t j | jjd¡}t |¡ tt j |d¡dƒ}| d¡ W d ƒ n1 sP0 Y d S )Nrö z test.confr÷ zMy contents don't matter) r r¾ rÀ r= rþ r r r r )r Zrenewer_configs_dirr r# r# r$ Ú_make_dummy_renewal_config_ s
z#MainTest._make_dummy_renewal_configc K sÆ | ¡ t d¡ }t ¡ }d|_|d ur4d|i|_|d urD||j_||_t d¡2}| ddg¡ | j d
dd i|¤Ž W d ƒ n1 sŒ0 Y |d ur¤|r¤n W d ƒ n1 s¸0 Y d S ) NrØ zsomepath/fullchain.pemr ú!certbot._internal.main.renew_certrl r Tr F)TN)
r6 r rD r) rß Ú
configurationr, r Ú
setdefaultr )r r r, Úassert_oc_calledr Úmock_rcr! r— r# r# r$ Ú_test_renew_commone s
2zMainTest._test_renew_commonc C s | j ddd d S )NFT©r: r ©r< rs r# r# r$ Útest_renew_no_renewalparamsz s z$MainTest.test_renew_no_renewalparamsc C s | j i ddd d S )NFT)r r: r r> rs r# r# r$ Útest_renew_no_authenticator} s ÿz$MainTest.test_renew_no_authenticatorc C s dddœ}| j |ddd d S )NÚwebrootz over 9000)r Z rsa_key_sizeTF)r r r: r> ©r r r# r# r$ Útest_renew_with_bad_int s ÿÿz MainTest.test_renew_with_bad_intc C s dddœ}| j |dd d S )NrA ÚNone)r Z http01_portT©r r: r> rB r# r# r$ Ú test_renew_with_nonetype_http01‡ s ÿÿz(MainTest.test_renew_with_nonetype_http01c C s$ ddi}dg}| j |d|dd d S )Nr rA u
uniçodé.comTF)r r r, r: r> )r r r, r# r# r$ Útest_renew_with_bad_domain s
ÿz#MainTest.test_renew_with_bad_domainr¡ c C s2 t ¡ t ¡ f|_ddi}| j|dd ¡ d d S )Nr rA Tzrenew --configurator apache©r r: rl )r r) r r< rg )r r¤ r r# r# r$ Ú test_renew_with_configurator“ s þz%MainTest.test_renew_with_configuratorc C s ddddœ}| j |dd d S )NrA rD Z42)r Z webroot_pathZwebroot_imaginary_flagTrE r> rB r# r# r$ Ú$test_renew_plugin_config_restoration› s þÿz-MainTest.test_renew_plugin_config_restorationc
C s0 ddi}| j |dddt dt ¡ i¡gd d S )Nr rA Tr z
--webroot-mapr“ rH )r< ÚjsonÚdumpsr« r¬ rB r# r# r$ Útest_renew_with_webroot_map¢ s
þz$MainTest.test_renew_with_webroot_mapc C sB t d¡$}t|_| jddd W d ƒ n1 s40 Y d S )Nz+certbot._internal.main.renewal.reconstituteFTr= )r rD Ú Exceptionr: r< )r Zmock_reconstituter# r# r$ Ú test_renew_reconstitute_error¨ s z&MainTest.test_renew_reconstitute_errorc C sž | ¡ t d¡x}t ¡ }d|_||_dddii|_t d¡,}t|_| j dd ddgd d
W d ƒ n1 sr0 Y W d ƒ n1 s0 Y d S ) NrØ zsomewhere/fullchain.pemr r rA r7 Tr F)r rl r )
r6 r rD r) rß r r8 rN r: r )r r; r! r— r# r# r$ Ú test_renew_obtain_cert_error® s ÿ
ÿz%MainTest.test_renew_obtain_cert_errorc C s: | j dd d ¡ ddd | j dd d t¡ ¡ ddd d S )NTzrenew -d example.comFr/ zrenew --csr {0})r rg rf rž rs r# r# r$ Ú test_renew_with_bad_cli_args» s ÿÿz%MainTest.test_renew_with_bad_cli_argsc C s* | j dd dddd tj¡gd\}}}d S )NFr z --post-hookz {0} -c "print('hello world');")r r r rl )r rf ÚsysÚ
executable)r r rw r# r# r$ Útest_no_renewal_with_hooksÁ s ÿÿþ z#MainTest.test_no_renewal_with_hooksrï rG c C s6 dt ¡ f|_t ¡ |_}| g d¢¡ | ¡ d S )Nr( )r‹ r› râ r rŒ )r r) r rn r9 )r Zmock_report_new_certr\ rð r‰ rG r# r# r$ Útest_certonly_reinstallÉ s z MainTest.test_certonly_reinstallc
C s d}d}t ¡ }||f|j_tj tj | jj d¡¡}tj tj | jj d¡¡}|d |f|j
_t d¡„}||_tj tj | jj d¡¡}d t
|||¡ ¡ } |rª| |7 } t d¡ | | ¡ W d ƒ n1 sÔ0 Y W d ƒ n1 sò0 Y d | v rn|j
|||||¡ d S )
NÚcertrro z live/example.com/cert_512.pemz live/example.com/fullchain.pemrG zlive/example.com/chain.pemzV-a standalone certonly --csr {0} --cert-path {1} --chain-path {2} --fullchain-path {3}z"certbot._internal.main.crypto_utilró )r r) Zobtain_certificate_from_csrr r r¾ r÷ rÀ r= rþ Zsave_certificaterD rf rž rg rn rq )
r r rV ro rG rÜ Ú full_pathr\ r£ rl r# r# r$ Ú_test_certonly_csr_commonØ s> þ þ þþ F
ÿz"MainTest._test_certonly_csr_commonz+certbot._internal.main._csr_report_new_certc C s | ¡ d S r… ©rX )r r_ rO Úmock_csr_reportr# r# r$ Útest_certonly_csr÷ s zMainTest.test_certonly_csrc C s | dg¡ d S rò rY )r rZ r# r# r$ Útest_certonly_csr_dry_run s z"MainTest.test_certonly_csr_dry_runrÍ rÎ c C sª d|_ d}| dtdtd|dg¡ ttdƒ}W d ƒ n1 sB0 Y ttdƒ@}t | ¡ ¡d }| ¡ j }|
t |¡t
j¡ W d ƒ n1 sœ0 Y d S ) NFr› rœ r ú--serverrÌ Úrbr )r rv Ú SS_CERT_PATHÚRSA2048_KEY_PATHr r Úpyopenssl_load_certificater r rÌ rq r” ÚComparableX509r rr )r rà rÓ rÝ r r> rÔ r# r# r$ Útest_revoke_with_key s ÿ
þz MainTest.test_revoke_with_keyc
C sL d}t tj¡( | dtdtd|dg¡ W d ƒ n1 s>0 Y d S )Nr› rœ r r] rÌ )r; r< r r rv ÚCERTÚKEY)r rÝ r# r# r$ Ú test_revoke_with_key_mismatch s
ÿz&MainTest.test_revoke_with_key_mismatchc C sˆ d|_ t ¡ d f|_ | dtdg¡\}}}}ttƒ@}t | ¡ ¡d }| ¡ j
}| t
|¡tj¡ W d ƒ n1 sz0 Y d S )NFrœ rÌ r )r r r) rn rd r r ra r Zacme_from_config_keyrÌ rq r” rb rr )r rÄ rÓ r r[ r r> rÔ r# r# r$ Útest_revoke_without_key" s
þz MainTest.test_revoke_without_keyc C s¨ t d¡Š}t ¡ }d|_|df|j_| g d¢¡ t d¡8}t ¡ }||j_dg|j_| g d¢¡}W d ƒ n1 s|0 Y W d ƒ n1 sš0 Y d S )NrX Zimaginary_accountZworked)rZ z--emailzuser@example.orgú certbot._internal.main.accountú
an account) r rD r) rA rZ r rv ÚAccountFileStorageri )r r Z
mocked_clientrË Zmocked_accountÚmocked_storager@ r# r# r$ Ú
test_register0 s
zMainTest.test_registerz'certbot._internal.updater._run_updatersc C s^ t j|_t t j¡ t d d d ¡ W d ƒ n1 s80 Y d| j_t
| jd d ¡ d S r ) r rä r: r; r< r Ú
renew_certr= Údry_runr Zrun_generic_updaters)r r r~ r# r# r$ Útest_plugin_selection_errorA s ,z$MainTest.test_plugin_selection_errorz3certbot._internal.main.updater.run_renewal_deployerc C sD d| j _t ¡ }|t ¡ f|_t | j dd¡ |j ¡ | ¡ dS )z8A dry-run renewal shouldn't try to restart the installerTN) r= rn r r) r r rm r¢ r9 )r r¥ r\ r~ Zmock_run_renewal_deployerr r# r# r$ Ú#test_renew_doesnt_restart_on_dryrunN s
z,MainTest.test_renew_doesnt_restart_on_dryrun)NF)N)N)NNN)N)Vr@ rA rB rC rV r‹ rn rv r‚ r† r‰ r rD rŽ r— r¡ r r¯ r± r³ r¸ r» r¾ rÀ rÍ rÕ rÙ rÚ rÝ rá rç rè rê rë rí rî rñ rö rù rú rÇ r* r r r r r r! r# r$ r' r( r+ r- r0 r1 r2 r4 r5 r6 r< r? r@ rC rF rG rI rJ rM rO rP rQ rT r† r‡ rU rX r[ r\ rc rf rg rl ro rp rƒ r# r# rd r$ re Ê s@
%
ý
K
ÿ
re c @ s> e Zd Zdd„ Zdd„ Zdd„ Ze d¡dd „ ƒZd
d „ Z d S )
ÚUnregisterTestc C s@ t d¡t d¡t d¡t ¡ dœ| _dd„ | j ¡ D ƒ| _d S )Nr¶ rh rX )rI r r[ Ú get_utilityc S s i | ]\}}|| ¡ “qS r# rð rñ r# r# r$ rõ h r4 z(UnregisterTest.setUp..)r rD r† r‡ rü rÏ rý rs r# r# r$ rV b s üzUnregisterTest.setUpc C s | j ¡ D ] }| ¡ q
d S r… )rü r rb r r# r# r$ r‹ j s zUnregisterTest.tearDownc C sF t ¡ | jd j_| jd ƒ }d|j_t ¡ }t ¡ }t ||¡}d S )Nr rr F)r r rý rj r r• r Ú
unregister)r r1 r= rà Úresr# r# r$ Útest_abort_unregistern s z$UnregisterTest.test_abort_unregisterr( c C st t ¡ }dg|j_|| jd j_t ¡ df| jd _t ¡ }|| jd j_t ¡ }t ¡ }t ||¡}| d¡ d S )Nri r ZfoorI r[ zAccount deactivated.)
r r) ri r rý rj ÚClientr rs rq )r r* rk Ú cb_clientr= rà rt r# r# r$ Útest_unregisterz s
z UnregisterTest.test_unregisterc C s^ t ¡ }g |j_|| jd j_t ¡ }|| jd j_t ¡ }d|_t ¡ }t ||¡}d}d S )Nr r[ z"https://acme.example.com/directoryzNCould not find existing account for server https://acme.example.com/directory.)
r r) ri r rý rj rv rÝ r rs )r rk rw r= rà rt Úmr# r# r$ Útest_unregister_no_account s z)UnregisterTest.test_unregister_no_accountN)
r@ rA rB rV r‹ ru r rD rx rz r# r# r# r$ rq a s
rq c @ s" e Zd ZdZe d¡dd„ ƒZdS )ÚMakeOrVerifyNeededDirsz t tj¡ | g d¢¡ W d ƒ n1 s00 Y d S )N)r‚ râ r )r; r< r ZMisconfigurationErrorrn rs r# r# r$ Ú test_no_enhancements_defined s z(EnhanceTest.test_no_enhancements_definedrx c C s* dg|_ d|_ t ¡ |_| ddg¡}d S )Nr“ r… r‚ r )r r rä r: rn )r r r~ r‰ rG r# r# r$ ro s
z'EnhanceTest.test_plugin_selection_errorr™ c C s2 | j |_ddg|_tjdd|_| ddg¡ d S )Nr“ ú another.tldrƒ r„ r‚ ú --auto-hsts)r r r r) rn ©r r r r² r~ r! r# r# r$ Útest_enhancement_enable s
z#EnhanceTest.test_enhancement_enablec C sf t | jd¡|_ddg|_tjdd|_t tj ¡ |
ddg¡ W d ƒ n1 sX0 Y d S )Nr r“ r’ rƒ r„ r‚ r“ ) r rz r= r r r) r; r< r r| rn r” r# r# r$ Ú%test_enhancement_enable_not_supported, s
z1EnhanceTest.test_enhancement_enable_not_supportedc C s> t tj¡ | g d¢¡ W d ƒ n1 s00 Y d S )N)r‚ r“ r )r; r< r r rn rs r# r# r$ Ú test_enhancement_enable_conflict8 s z,EnhanceTest.test_enhancement_enable_conflict)r@ rA rB rC rV r‹ rn r rD rŠ r‹ rŽ r r r‘ ro r† r‡ r• r– r— rƒ r# r# rd r$ r} ´ sV
r} c sX e Zd ZdZ‡ fdd„Ze d¡e d¡dd„ ƒƒZe d¡e d¡dd „ ƒƒZ‡ Z S )
Ú InstallTestz)Tests for certbot._internal.main.install.c s t ƒ ¡ tjtjd| _d S r~ )rU rV r r) r r€ r rs rd r# r$ rV @ s
zInstallTest.setUpr˜ r™ c C sh t | jd¡|_tj ¡ }d| j_d| j_t
t j ¡ t
| j|¡ W d ƒ n1 sZ0 Y d S )Nr TZ nonexistent)r rz r= r r rh ri r{ r0 r; r< r r| r rš ©r r² r rm r# r# r$ Ú&test_install_enhancement_not_supportedD s
z2InstallTest.test_install_enhancement_not_supportedc C sp | j |_tj ¡ }d| j_d | j_d| j_d| j_ t
t j
¡ t | j|¡ W d ƒ n1 sb0 Y d S )NTrƒ )r r r rh ri r= r{ r0 r¥ rÜ r; r< r r– r rš r™ r# r# r$ Ú$test_install_enhancement_no_certnameN s
z0InstallTest.test_install_enhancement_no_certname)
r@ rA rB rC rV r rD rš r› rƒ r# r# rd r$ r˜ = s r˜ c @ sx e Zd ZdZdd„ Zdd„ Zedd„ ƒZedd „ ƒZd
d „ Z d d
„ Z
dd„ Z dd„ Z dd„ Z
dd„ Zdd„ Zdd„ ZdS )ÚReportNewCertTestznTests for certbot._internal.main._report_new_cert and
certbot._internal.main._csr_report_new_cert.
c C sJ t d¡| _| j ¡ | _t d¡| _| j ¡ | _t ddddd¡| j_d S )Nr( z+certbot._internal.main.crypto_util.notAfteri² rM r ) r rD Ú notify_patchrX r* Únotafter_patchZ
mock_notafterrÇ r rs r# r# r$ rV ` s
zReportNewCertTest.setUpc C s | j ¡ | j ¡ d S r… )r rb rž rs r# r# r$ r‹ h s
zReportNewCertTest.tearDownc O s ddl m} ||i |¤ŽS )Nr )Ú_report_new_cert)rk rŸ )Úclsrl r rŸ r# r# r$ rn l s zReportNewCertTest._callc O s ddl m} ||i |¤ŽS )Nr )Ú_csr_report_new_cert)rk r¡ )r rl r r¡ r# r# r$ Ú _call_csrq s zReportNewCertTest._call_csrc C s( | tjddd d d ¡ | j d¡ d S ©NT©rn r ©rn r r r* r) rs r# r# r$ Útest_report_dry_runv s z%ReportNewCertTest.test_report_dry_runc C s( | tjddd d d ¡ | j d¡ d S r£ ©r¢ r r r* r) rs r# r# r$ Útest_csr_report_dry_runz s z)ReportNewCertTest.test_csr_report_dry_runc C sˆ t t¡( | tjddd d d ¡ W d ƒ n1 s80 Y t t¡( | tjddd d d ¡ W d ƒ n1 sz0 Y d S )NFr¤ )r; r< r rn r r r¢ rs r# r# r$ Útest_report_no_paths~ s 6 z&ReportNewCertTest.test_report_no_pathsc C s( | tjddddd¡ | j d¡ d S )NFr¤ ú/path/to/cert.pemú/path/to/fullchain.pemú/path/to/privkey.pemaA
Successfully received certificate.
Certificate is saved at: /path/to/fullchain.pem
Key is saved at: /path/to/privkey.pem
This certificate expires on 1970-01-01.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.r¥ rs r# r# r$ Ú test_report… s þÿz ReportNewCertTest.test_reportc C s( | tjddddd ¡ | j d¡ d S )NFr¤ rª r« a
Successfully received certificate.
Certificate is saved at: /path/to/fullchain.pem
This certificate expires on 1970-01-01.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.r¥ rs r# r# r$ Útest_report_no_key” s þÿz$ReportNewCertTest.test_report_no_keyc C s* | tjdddddd¡ | j d¡ d S )NF)rn Úpreconfigured_renewalrª r« r¬ úâ
Successfully received certificate.
Certificate is saved at: /path/to/fullchain.pem
Key is saved at: /path/to/privkey.pem
This certificate expires on 1970-01-01.
These files will be updated when the certificate renews.r¥ rs r# r# r$ Ú$test_report_no_preconfigured_renewal¢ s þÿz6ReportNewCertTest.test_report_no_preconfigured_renewalc C s( | tjddddd¡ | j d¡ d S )NFr¤ rª z/path/to/chain.pemr« zó
Successfully received certificate.
Certificate is saved at: /path/to/cert.pem
Intermediate CA chain is saved at: /path/to/chain.pem
Full certificate chain is saved at: /path/to/fullchain.pem
This certificate expires on 1970-01-01.r§ rs r# r# r$ Útest_csr_report¯ s ÿÿz!ReportNewCertTest.test_csr_reportc C s, | tjddddddd¡ | j d¡ dS ) zBShouldn't get a message about autorenewal if no --manual-auth-hookFr N)rn r Úmanual_auth_hookrª r« r¬ r° r¥ rs r# r# r$ Útest_manual_no_hooks_report» s þÿz-ReportNewCertTest.test_manual_no_hooks_reportN)r@ rA rB rC rV r‹ Ú classmethodrn r¢ r¦ r¨ r© r r® r± r² r´ r# r# r# r$ rœ [ s
rœ c @ sZ e Zd ZdZdd„ Zdd„ Zedd„ ƒZedœd d
„Z d d „ Z
d
d„ Z dd„ Z dd„ Z
dS )ÚReportNextStepsTestz3Tests for certbot._internal.main._report_next_stepsc C sL t jddd dd d| _t d¡}| ¡ | _| |j¡ tj | _
t ¡ t_ d S )Nr“ Tr )Z cert_namer¯ rü r r³ r( )
r r) r= rD rX r* ra rb rR rw Ú
old_stdoutr r€ )r r r# r# r$ rV Í s þ
zReportNextStepsTest.setUpc C s | j t_d S r… )r· rR rw rs r# r# r$ r‹ × s z ReportNextStepsTest.tearDownc O s ddl m} ||i |¤Ž d S )Nr )Ú_report_next_steps)rk r¸ )r rl r r¸ r# r# r$ rn Ú s zReportNextStepsTest._call)Úreturnc C s | j jd d d S )NrM r )r* Úcall_args_listrs r# r# r$ Ú_outputß s zReportNextStepsTest._outputc C s. d| j _d| j _| | j dd¡ | j ¡ dS )z No steps for a normal renewalr z /bin/trueN)r= r r³ rn r* r9 rs r# r# r$ r ä s z ReportNextStepsTest.test_reportc C s d| j _| | j dd¡ dS )z --csr requires manual renewalzfoo.csrN)r= rü rn rs r# r# r$ r² ë s z#ReportNextStepsTest.test_csr_reportc C s d| j _| | j dd¡ dS )z/--manual without a hook requires manual renewalr N)r= r rn rs r# r# r$ Útest_manual_no_hook_renewalñ s z/ReportNextStepsTest.test_manual_no_hook_renewalc C s d| j _| | j dd¡ dS )z2No --preconfigured-renewal needs manual cron setupFN)r= r¯ rn rs r# r# r$ Ú test_no_preconfigured_renewal÷ s z1ReportNextStepsTest.test_no_preconfigured_renewalN)r@ rA rB rC rV r‹ rµ rn Ústrr» r r² r¼ r½ r# r# r# r$ r¶ Ê s
r¶ c sj e Zd ZdZ‡ fdd„Zdd„ Zdd„ Zdd „ Zd
d „ Zd d
„ Z dd„ Z
e d¡dd„ ƒZ
dd„ Z‡ ZS )ÚUpdateAccountTestz/Tests for certbot._internal.main.update_accountc st t d¡t d¡t d¡t d¡t d¡t d¡t ¡ dœ‰ ‡ fdd „ˆ D ƒ| _ˆ ¡ D ]}| |j¡ qXtƒ ¡ S )
Nrh r~ rX r¶ r( z*certbot._internal.eff.prepare_subscription)r Úatexitr[ Údetermine_accountÚnotifyÚ prepare_subr
c s i | ]}|ˆ | ¡ “qS r# rð ©rò ró ©rc r# r$ rõ r4 z+UpdateAccountTest.setUp..©
r rD r† r‡ rý r ra rb rU rV r rd rÅ r$ rV s ù zUpdateAccountTest.setUpc C sš t d¡| t d¡R d| jjd| jjd| jjdg| }t |d d … ¡W d ƒ W d ƒ S 1 sn0 Y W d ƒ n1 sŒ0 Y d S ©Nrz r} r
rf rg rh ©r rD r= rþ rk rj r r r# r# r$ rn s ÿ
þþzUpdateAccountTest._callc C sX t ¡ }t ¡ }t ¡ }|g|j_|| jd j_|j|j_|t ¡ f| jd _|||fS )Nr rÁ )r r) ri r rý rj ÚbodyrÆ ©r rJ Z mock_accountÚ mock_regrr# r# r$ Ú_prepare_mock_account s
z'UpdateAccountTest._prepare_mock_accountc C sJ | ¡ \}}}| |¡}|jjjdd | jd d¡ | jd ¡ dS )z9Utility to assert that email removal is handled correctlyr# ©Úcontactr zFAny contact information associated with this account has been removed.rà N)rÌ rn rÉ Úupdater) rý r9 )r rl r rJ rË Úresultr# r# r$ Ú_test_update_no_contact# s
ÿz)UpdateAccountTest._test_update_no_contactc C s" t ¡ }g |j_|| jd j_dS ©z2Test that no existing account is handled correctlyr N©r r) ri r rý rj ©r rJ r# r# r$ Útest_no_existing_accounts5 s z+UpdateAccountTest.test_no_existing_accountsc C s | ddg¡ dS )zBTest that --register-unsafely-without-email is handled as no emailÚupdate_accountz!--register-unsafely-without-emailN©rÑ rs r# r# r$ Ú test_update_account_remove_email> s z2UpdateAccountTest.test_update_account_remove_emailc C s | g d¢¡ dS )z9Test that providing an empty email is handled as no email)rÖ r r4 Nr× rs r# r# r$ Ú test_update_account_empty_emailB s z1UpdateAccountTest.test_update_account_empty_emailz,certbot._internal.main.display_ops.get_emailc C sJ d|_ | ¡ \}}}t ¡ }|| jd j_ | dg¡}| jd d¡ dS )z=Test that updating with a singular email is handled correctlyzuser@example.comr[ rÖ r z4Your e-mail address was updated to user@example.com.N)r rÌ r r) rý rv rn r) )r Z
mock_emailr rJ rG rÐ r# r# r$ Ú test_update_account_with_emailF s
ÿz0UpdateAccountTest.test_update_account_with_emailc C s6 | ¡ \}}}|jjjddgd | jd d¡ dS )z8Test that multiple email addresses are handled correctlyzmailto:user@example.comzmailto:user@example.orgrÍ r zEYour e-mail address was updated to user@example.com,user@example.org.N)rÌ rÉ rÏ r) rý )r r rJ rË r# r# r$ Ú(test_update_account_with_multiple_emails[ s ÿ
ÿz:UpdateAccountTest.test_update_account_with_multiple_emails)r@ rA rB rC rV rn rÌ rÑ rÕ rØ rÙ r rD rÚ rÛ rƒ r# r# rd r$ r¿ þ s
r¿ c s` e Zd ZdZ‡ fdd„Zdd„ Zdd„ Zdd „ Zd
d „ Zd d
„ Z dd„ Z
dd„ Z dd„ Z ‡ Z
S )ÚShowAccountTestz-Tests for certbot._internal.main.show_accountc sl t d¡t d¡t d¡t d¡t d¡t ¡ dœ‰ ‡ fdd„ˆ D ƒ| _ˆ ¡ D ]}| |j¡ qPtƒ ¡ S ) Nrh r~ rX r¶ r( )r rÀ r[ rÁ r r
c s i | ]}|ˆ | ¡ “qS r# rð rÄ rÅ r# r$ rõ s r4 z)ShowAccountTest.setUp..rÆ r rd rÅ r$ rV j s ú zShowAccountTest.setUpc C sš t d¡| t d¡R d| jjd| jjd| jjdg| }t |d d … ¡W d ƒ W d ƒ S 1 sn0 Y W d ƒ n1 sŒ0 Y d S rÇ rÈ r r# r# r$ rn y s ÿ
þþzShowAccountTest._callc C s\ t ¡ }t ¡ }t ¡ }|g|j_|| jd j_|j|j_d|jj _|t ¡ f| jd _d S )Nr s foobarbazrÁ )
r r) ri r rý rj rÉ rÆ rÞ Z
thumbprintrÊ r# r# r$ rÌ s
z%ShowAccountTest._prepare_mock_accountc C sR | ¡ t ¡ }t ¡ }||j_d|_||jj_|| j d j
_dg}| |¡ d S )Nz+https://www.letsencrypt-demo.org/acme/reg/1r[ Ú show_account) rÌ r r) rÉ rÎ Zurirå Zquery_registrationr rý rv rn )r rÎ rG rË rl r# r# r$ Ú_test_show_account‹ s
z"ShowAccountTest._test_show_accountc C s" t ¡ }g |j_|| jd j_dS rÒ rÓ rÔ r# r# r$ rÕ š s z)ShowAccountTest.test_no_existing_accountsc
C s` | ¡ t ¡ }d|_|| jd j_z| dg¡ W n& tj yZ } z W Y d}~n
d}~0 0 dS )z;Test that issues with the ACME client are handled correctlyNr[ rÝ )
rÌ r r) rå rý rv r rn r r )r rG ræ r# r# r$ Útest_no_existing_client£ s z'ShowAccountTest.test_no_existing_clientc C s& | d¡ | jd t d¡g¡ d S )Nr# r z¾Account details for server https://acme-v02.api.letsencrypt.org/directory:
Account URL: https://www.letsencrypt-demo.org/acme/reg/1
Account Thumbprint: Zm9vYmFyYmF6
Email contact: none©rÞ rý Zassert_has_callsr rÑ rs r# r# r$ Útest_no_contacts® s
ÿz ShowAccountTest.test_no_contactsc C s* d}| |¡ | jd t d¡g¡ d S )N)úmailto:foo@example.comr zÉAccount details for server https://acme-v02.api.letsencrypt.org/directory:
Account URL: https://www.letsencrypt-demo.org/acme/reg/1
Account Thumbprint: Zm9vYmFyYmF6
Email contact: foo@example.comrà ©r rÎ r# r# r$ Útest_single_email¸ s
ÿz!ShowAccountTest.test_single_emailc C s* d}| |¡ | jd t d¡g¡ d S )N)râ zmailto:bar@example.comr zÛAccount details for server https://acme-v02.api.letsencrypt.org/directory:
Account URL: https://www.letsencrypt-demo.org/acme/reg/1
Account Thumbprint: Zm9vYmFyYmF6
Email contacts: foo@example.com, bar@example.comrà rã r# r# r$ Útest_double_emailà s
ÿz!ShowAccountTest.test_double_email)r@ rA rB rC rV rn rÌ rÞ rÕ rß rá rä rå rƒ r# r# rd r$ rÜ g s
rÜ c @ s` e Zd ZdZejZdZe› dZe j
dd„ ƒZ e j
dd„ ƒZe j
d ¡ d d
d „ ƒZd d
„ ZdS )Ú
TestLockOrderzFTests that Certbot's directory locks were acquired in the right order.z Expected TestLockOrder errorz|1 renew failurec c s4 t d¡}|V W d ƒ n1 s&0 Y d S )Nz certbot._internal.lock.lock_dir)r rD )r Ú
mock_lock_dirr# r# r$ rç × s zTestLockOrder.mock_lock_dirc # s ‡ ‡‡fdd„}‡‡‡‡fdd„}t j tjd|¡H t j tjd|¡ dV W d ƒ n1 sd0 Y W d ƒ n1 s‚0 Y dS )zJPatches plugin prepare to call mock_lock_dir and raise the expected error.c s ˆˆ ƒ ˆ ˆj¡‚d S r… ©ÚEXPECTED_ERROR_TYPEÚEXPECTED_ERROR_STR©Z unused_self)Úauthenticator_dirrç r r# r$ Úauthenticator_lockß s z=TestLockOrder.mock_plugin_prepare..authenticator_lockc s ˆˆ ƒ ˆdkr ˆ ˆj¡‚d S )Nrš rè rë )Ú
installer_dirrç r Ú
subcommandr# r$ Úinstaller_lockã s z9TestLockOrder.mock_plugin_prepare..installer_lockrÛ N)r rD Úobjectr Z
Authenticatorr rz )r rì rî rç rï rí rð r# )rì rî rç r rï r$ Úmock_plugin_prepareÜ s
z!TestLockOrder.mock_plugin_preparezcertonly install renew run)Úparamsc c sÎ t |d ƒ}t |d ƒ}t |d ƒ}t |d ƒ}t |d ƒ}|j} | dddd d
d |d |d
|g }
t |d¡ | |||| ¡@ ||||g} | dkrœ|
| fV n|
| |g fV W d ƒ n1 sÀ0 Y dS )aR Sets up Certbot with args and mocks to error after acquiring the last lock.
This fixture yields the CLI arguments that should be given to Certbot
and the expected order of directories to be locked. An error is raised
after acquiring the last lock just as a means of stopping Certbot's
execution.
r r= r ZlogsZworkrâ r z-ir z--no-random-sleep-on-renewr
rg rf r rš N)r¾ Zparamr† r rò ) r rç ZrequestZtmp_pathrì rþ rî rj rk rï rl Ú
lock_orderr# r# r$ Úargs_and_lock_orderð s
þ z!TestLockOrder.args_and_lock_orderc C s^ |\}}t j| j| jd t |¡ W d ƒ n1 s:0 Y t|j|ƒD ]\}}qPd S )Nr5 )r; r< ré ÚEXPECTED_ERROR_STR_REGEXr Úziprº )r rõ rç rl rô rÑ Z
locked_dirr# r# r$ Útest_lock_order
s
(z TestLockOrder.test_lock_orderN)r@ rA rB rC r r ré rê rö r; Zfixturerç Ú
contextlibÚcontextmanagerrò rg rõ rø r# r# r# r$ ræ Ï s
ræ Ú__main__rM )UrC rù rÇ Ú importlibr rn r rà rK rº rR r« r Útypingr Zunittestr r Zjosepyr” r; rÈ Z
acme.messagesr ra Zcertbotr r r r
Zcertbot._internalr r r
r r Zcertbot._internal.pluginsr r r r Zcertbot.compatr r Zcertbot.pluginsr Zcertbot.tests.utilZtestsr† rì r¼ rd rž re ZJWKRSAÚloadZ load_vectorrÊ r` r_ ZTestCaser ZConfigTestCaserE r„ r® ZTempDirTestCaserµ rê r, r? re rq r{ r} r˜ rœ r¶ r¿ rÜ ræ r@ ÚexitÚargvÚ__file__r# r# r# r$ Ú s’
RX ggk >
o4ihK