a
}|äg< ã @ s( d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl m
Z
ddl Z ddl
Z
ddlmZ ddlmZ ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd
lmZ e j e d ¡¡Z G d
d„ de j ƒZ!G dd„ de j ƒZ"e#dkr$e $e
%ej&dd… e'g ¡¡ dS )z,Tests for certbot._internal.plugins.webroot.é )Úprint_functionN)Úmock)Ú
challenges)Ú achallenges)Úerrors)Ú
filesystem)Úos)Úutil)Ú acme_utilzrsa512_key.pemc @ sN e Zd ZdZejejdedZ dd„ Z
dd„ Z dd „ Z d
d „ Z
d d
„ Ze ¡ dd„ ƒZejejdde ¡ dd„ ƒƒZejejdde ¡ dd„ ƒƒZejejdddd„ ƒZe ¡ dd„ ƒZe ¡ dd„ ƒZe ¡ d d „ ƒZd d „ Z d d!„ Z e d"¡d#d$„ ƒZ e ¡ d%d&„ ƒZ!d'd(„ Z"d)d*„ Z#d+d,„ Z$d-d.„ Z%d/d0„ Z&e d1¡d2d3„ ƒZ'd4S )5ÚAuthenticatorTestz:Tests for certbot._internal.plugins.webroot.Authenticator.ú thing.com©ZchallbÚdomainZ account_keyc C s– ddl m} t ¡ | _tj | jd¡| _t | j¡ tj | jd¡| _
tj | jdd¡| _ tj | j d¡| _ t
j| jd| jid| _|| jdƒ| _d S ) Nr ©Ú
AuthenticatorÚwebrootú .well-knownúacme-challengeZ:ZXZhR3hmQURzNnBTUmIyTEF2OUlaZjE3RHQzanV4R0orUEN0OTJ3citvQQr )Ú webroot_pathÚ webroot_map)Ú!certbot._internal.plugins.webrootr ÚtempfileÚmkdtempZ workspacer ÚpathÚjoinr ÚmkdirÚpartial_root_challenge_pathÚroot_challenge_pathÚvalidation_pathr Ú MagicMockÚconfigÚauth©Úselfr © r$ úP/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/webroot_test.pyÚsetUp# s$
ÿÿþÿzAuthenticatorTest.setUpc C s t | j¡ d S ©N)ÚshutilÚrmtreer ©r# r$ r$ r% ÚtearDown8 s zAuthenticatorTest.tearDownc C s* | j ¡ }t|tƒsJ ‚| j|v s&J ‚d S r' )r! Ú more_infoÚ
isinstanceÚstrr )r# r, r$ r$ r% Útest_more_info; s
z AuthenticatorTest.test_more_infoc C s& t ¡ }| j |¡ d|jks"J ‚d S )Né )r r r! Zadd_parser_argumentsZ
call_count)r# Úaddr$ r$ r% Útest_add_parser_arguments@ s z+AuthenticatorTest.test_add_parser_argumentsc C s | j ¡ d S r' )r! Úpreparer* r$ r$ r% Ú test_prepareE s z AuthenticatorTest.test_preparec s¬ g | j _d| ji| j _|ƒ }tjdf|j_| j | j
g¡ |jj sFJ ‚|jj D ]>‰ | j
j
ˆ d d v sjJ ‚t‡ fdd„| j j ¡ D ƒƒsNJ ‚qN| j j| j
j
| jks¨J ‚d S )Núotherthing.comé r c 3 s | ]}|ˆ d d v V qdS ©r r6 Nr$ ©Ú.0r ©Úcallr$ r% Ú S s ÿz;AuthenticatorTest.test_webroot_from_list..)r r r r Ú display_utilÚOKÚmenuÚ return_valuer! ÚperformÚachallÚcalledÚcall_args_listr ÚallÚvalues©r# Úmock_get_utilityÚ mock_displayr$ r: r% Útest_webroot_from_listH s
þÿz(AuthenticatorTest.test_webroot_from_listzTest specific to Windows)Úreasonc C sp |ƒ }t jdf|j_| j | jg¡ tj tj
| j d¡¡s@J ‚| j | jg¡ tj tj
| j d¡¡rlJ ‚d S )Nr6 ú
web.config)
r= r> r? r@ r! rA rB r r Úexistsr r ÚcleanuprG r$ r$ r% Ú(test_webconfig_file_generate_and_cleanupY s z:AuthenticatorTest.test_webconfig_file_generate_and_cleanupc C s´ |ƒ }t jdf|j_tj | jdd¡}t |¡ tj |d¡}t |dƒ}|
d¡ W d ƒ n1 sh0 Y | j | j
g¡ ddlm} | |¡}dd lm} ||vs°J ‚d S )
Nr6 r r rL ÚwÚ somethingr )Ú crypto_util)Ú_WEB_CONFIG_SHA256SUMS)r= r> r? r@ r r r r ÚmakedirsÚopenÚwriter! rA rB ÚcertbotrR Z sha256sumr rS ) r# rH rI Úchallenge_pathÚwebconfig_pathÚfilerR Zwebconfig_hashrS r$ r$ r% Ú$test_foreign_webconfig_file_handlingd s
(
z6AuthenticatorTest.test_foreign_webconfig_file_handlingc C s¢ t jt tjddd¡dtd}| j| jj d< t
j | jdd¡}t
|¡ t
j |d¡}t|d ƒ}| d
¡ W d ƒ n1 s‚0 Y | j | j|g¡ d S ) Nó bingo©ÚtokenÚpendingzsecond-thing.comr
r r rL rP rQ )r Ú"KeyAuthorizationAnnotatedChallenger
Úchall_to_challbr ÚHTTP01ÚKEYr r r r r r rT rU rV r! rA rB )r# Zachall_2rX rY rZ r$ r$ r% Ú'test_foreign_webconfig_multiple_domainsv s þ
(z9AuthenticatorTest.test_foreign_webconfig_multiple_domainsc sÀ g | j _d| ji| j _|ƒ }tjdff|j_t t
j ¡ | j
| jg¡ W d ƒ n1 s^0 Y |jjstJ ‚|jjD ]>‰ | jjˆ d d v s˜J ‚t‡ fdd„| j j ¡ D ƒƒs|J ‚q|d S )Nr5 éÿÿÿÿr c 3 s | ]}|ˆ d d v V qdS r7 r$ r8 r: r$ r% r< ’ s ÿzKAuthenticatorTest.test_webroot_from_list_help_and_cancel..)r r r r r= ÚCANCELr? Ú side_effectÚpytestÚraisesr Ú PluginErrorr! rA rB rC rD r rE rF rG r$ r: r% Ú&test_webroot_from_list_help_and_cancel† s .
þz8AuthenticatorTest.test_webroot_from_list_help_and_cancelc C sš g | j _d| ji| j _|ƒ }tjdf|j_t d¡8}tj
dftj| jff|_ | j
| jg¡ W d ƒ n1 sr0 Y | j j| jj | jks–J ‚d S )Nú
something.comr ú'certbot.display.ops.validated_directoryre )r r r r r= r> r? r@ r Úpatchrf rg r! rA rB r ©r# rH rI Úmr$ r$ r% Útest_new_webroot– s
ÿ.z"AuthenticatorTest.test_new_webrootc C sš g | j _i | j _|ƒ }tjdf|j_t d¡X}tj df|_t
t j
¡ | j | jg¡ W d ƒ n1 sn0 Y W d ƒ n1 sŒ0 Y d S )Nr rm re )r r r r= r> r? r@ r rn rf rh ri r rj r! rA rB ro r$ r$ r% Ú!test_new_webroot_empty_map_cancel¥ s z3AuthenticatorTest.test_new_webroot_empty_map_cancelc C sL d | j _i | j _t tj¡ | j g ¡ W d ƒ n1 s>0 Y d S r' ) r r r rh ri r rj r! rA r* r$ r$ r% Útest_perform_missing_root± s z+AuthenticatorTest.test_perform_missing_rootc C sú t j | jd¡| j_t j | jd¡}t|dƒ}| d¡ W d ƒ n1 sN0 Y t | jd¡ z6t|dƒ W d ƒ n1 sˆ0 Y t dƒ W nJ t
yæ t t
j¡ | j g ¡ W d ƒ n1 sØ0 Y Y n0 t | jd¡ d S ) NZnullZrndrP Zthingimyr Úrz9Warning, running tests as root skips permissions tests...iÀ )r r r r! Ú full_pathrU rV r ÚchmodÚprintÚOSErrorrh ri r rj rA )r# Zpermission_canaryÚfr$ r$ r% Ú"test_perform_reraises_other_errors· s ( 0z4AuthenticatorTest.test_perform_reraises_other_errorszJcertbot._internal.plugins.webroot.filesystem.copy_ownership_and_apply_modec C s" t tjdƒ|_| j | jg¡ d S )NÚmsg)rx ÚerrnoÚEACCESrg r! rA rB )r# Zmock_ownershipr$ r$ r% Útest_failed_chownÇ s z#AuthenticatorTest.test_failed_chownc C s¬ t ¡ }g | j_d| ji| j_|ƒ }tjdftj|ff|j_ t
j t j
dtd}t d¡*}tj|f|_| j |g¡ W d ƒ n1 sˆ0 Y | jj|j |ks¨J ‚d S )Nz whatever.comr rl r
rm )r r r r r r r= r> r? rg r r` r
ÚHTTP01_Prc r rn r@ r! rA r )r# rH Z new_webrootrI rB rp r$ r$ r% Ú#test_perform_new_webroot_not_in_mapÌ s ÿÿ ,z5AuthenticatorTest.test_perform_new_webroot_not_in_mapc C s„ | j ¡ | j | jg¡ t | jd¡s,J ‚t | j ¡D ]2\}}}|D ]"}tj
||¡}t |d¡sFJ ‚qFq8t | j| j ¡s€J ‚d S )Ni¤ ií ) r! r3 rA rB r Z
check_moder r Úwalkr r Zhas_same_ownership)r# ÚdirpathÚdirnamesÚ_Z directoryru r$ r$ r% Útest_perform_permissionsÛ s
z*AuthenticatorTest.test_perform_permissionsc C sØ | j ¡ | j | jg¡}dt|ƒks*J ‚tj | j¡s s4 :