JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/acme/_internal/tests/__pycache__/crypto_util_test.cpython-39.pyc
a
}|�g , � @ sf d Z ddlZddlZddlZddlZddlZddlZddlZddlm Z ddl
Z
ddl Z ddl
Z
ddlZddlmZ ddlmZ ddlmZmZ ddlmZ ddlmZ G d d
� d
e
j�ZG d d � d e
j�Z G d
d� de
j�Z G dd� de
j�Z G dd� de
j�Z G dd� de
j�Z G dd� de
j�Z!G dd� de
j�Z"e#dk�rbe�$e�%ej&dd� e'g �� dS )zTests for acme.crypto_util.� N)�List)�x509)�
serialization)�rsa�x25519)�errors)� test_utilc @ s e Zd Zdd� ZdS )�
FormatTestc C s< ddl m} |j�� tjjks"J �|j�� tjjks8J �d S )Nr )�Format)�acme.crypto_utilr
ZDERZto_cryptography_encodingr �Encoding�PEM)�selfr
� r �I/usr/lib/python3.9/site-packages/acme/_internal/tests/crypto_util_test.py� test_to_cryptography_encoding s z(FormatTest.test_to_cryptography_encodingN)�__name__�
__module__� __qualname__r r r r r r s r c @ sH e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dS )�SSLSocketAndProbeSNITestz/Tests for acme.crypto_util.SSLSocket/probe_sni.c s� t �d�| _t �d�}d|| jjfi�ddlm� G � �fdd�dtj�}|dtj �| _
| j
j � � d | _
tj| j
jd
�| _d S ) Nzrsa2048_cert.pemzrsa2048_key.pem� foor �� SSLSocketc s e Zd Z�� �fdd�Z� ZS )z3SSLSocketAndProbeSNITest.setUp.<locals>._TestServerc s$ t � j|i |�� � | j��| _d S �N)�super�__init__�socket)r �args�kwargs)r � __class__�certsr r r * s z<SSLSocketAndProbeSNITest.setUp.<locals>._TestServer.__init__)r r r r �
__classcell__r �r r )r r � _TestServer) s r# )� r � )�target)r Zload_comparable_cert�certZload_pyopenssl_private_key�wrappedr r � socketserverZ TCPServerZBaseRequestHandler�serverr Z getsockname�port� threading�ThreadZhandle_request�
server_thread)r �keyr# r r" r �setUp! s
�z SSLSocketAndProbeSNITest.setUpc C s" | j �� r| j �� | j�� d S r )r. �is_alive�joinr* � server_close�r r r r �tearDown3 s
z!SSLSocketAndProbeSNITest.tearDownc C s" ddl m} t�||d| jd��S )Nr )� probe_sni� 127.0.0.1)�hostr+ )r r6 �jose�ComparableX509r+ )r �namer6 r r r �_probe9 s �z SSLSocketAndProbeSNITest._probec C s | j �� t�d� d S )Nr% )r. �start�time�sleepr4 r r r �
_start_server> s
z&SSLSocketAndProbeSNITest._start_serverc C s | � � | j| �d�ks J �d S )Nr )r@ r' r< r4 r r r �
test_probe_okB s z&SSLSocketAndProbeSNITest.test_probe_okc C sB | � � t�tj�� | �d� W d � n1 s40 Y d S )N� bar)r@ �pytest�raisesr �Errorr< r4 r r r � test_probe_not_recognized_nameF s z7SSLSocketAndProbeSNITest.test_probe_not_recognized_namec C sr | j �� t�� }zNt�d� t�tj�� | � d� W d � n1 sJ0 Y W t�|� n t�|� 0 d S )Nr% rB )
r* r3 r ZgetdefaulttimeoutZsetdefaulttimeoutrC rD r rE r< )r Zoriginal_timeoutr r r �test_probe_connection_errorK s
*z4SSLSocketAndProbeSNITest.test_probe_connection_errorN) r r r �__doc__r0 r5 r< r@ rA rF rG r r r r r s r c @ s e Zd ZdZdd� ZdS )�
SSLSocketTestz%Tests for acme.crypto_util.SSLSocket.c C s� ddl m} t�t��& |d ddidd� d�}W d � n1 sB0 Y t�t�� |d �}W d � n1 st0 Y d S )Nr r Zsni)r/ r' c S s d S r r )�_r r r �<lambda>] � zASSLSocketTest.test_ssl_socket_invalid_arguments.<locals>.<lambda>)Zcert_selection)r r rC rD �
ValueError)r r rJ r r r �!test_ssl_socket_invalid_argumentsY s
�$ z/SSLSocketTest.test_ssl_socket_invalid_argumentsN)r r r rH rN r r r r rI V s rI c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd
d � Z d S )
� PyOpenSSLCertOrReqAllNamesTestz;Test for acme.crypto_util._pyopenssl_cert_or_req_all_names.c C s ddl m} |||��S )Nr )� _pyopenssl_cert_or_req_all_names)r rP )�cls�loaderr; rP r r r �_calle s z$PyOpenSSLCertOrReqAllNamesTest._callc C s | � tj|�S r �rS r � load_cert�r r; r r r �
_call_certk s z)PyOpenSSLCertOrReqAllNamesTest._call_certc C s | � d�dgksJ �d S )Nz
cert-nocn.derzno-common-name.badssl.com�rW r4 r r r �test_cert_one_san_no_commonn s �z:PyOpenSSLCertOrReqAllNamesTest.test_cert_one_san_no_commonc C s | � d�dgksJ �d S )N�cert.pem� example.comrX r4 r r r � test_cert_no_sans_yes_commonr s z;PyOpenSSLCertOrReqAllNamesTest.test_cert_no_sans_yes_commonc C s | � d�ddgksJ �d S �N� cert-san.pemr[ �www.example.comrX r4 r r r � test_cert_two_sans_yes_commonu s �z<PyOpenSSLCertOrReqAllNamesTest.test_cert_two_sans_yes_commonN)
r r r rH � classmethodrS rW rY r\ r` r r r r rO b s
rO c @ s� e Zd ZdZedd� �Zedd� �Zdd� Zdd � Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd S )!�PyOpenSSLCertOrReqSANTestz5Test for acme.crypto_util._pyopenssl_cert_or_req_san.c C s ddl m} |||��S )Nr )�_pyopenssl_cert_or_req_san)r rc )rQ rR r; rc r r r rS } s z PyOpenSSLCertOrReqSANTest._callc sH dd� t �tdd�tdd�tdd��D �� � fd d�td
t� �d �D �S ) z5Returns expected names from '{cert,csr}-idnsans.pem'.c S s g | ] }t |��qS r )�chr��.0�ir r r �
<listcomp>� rL z<PyOpenSSLCertOrReqSANTest._get_idn_names.<locals>.<listcomp>i� i iA i� i iw c s& g | ] }d � � ||d � �d �qS )r$ �- z.invalid)r2 re ��charsr r rh � s �r ri )� itertools�chain�range�len)rQ r rj r �_get_idn_names� s �
�z(PyOpenSSLCertOrReqSANTest._get_idn_namesc C s | � tj|�S r rT rV r r r rW � s z$PyOpenSSLCertOrReqSANTest._call_certc C s | � tj|�S r )rS r Zload_csrrV r r r � _call_csr� s z#PyOpenSSLCertOrReqSANTest._call_csrc C s | � d�g ksJ �d S )NrZ rX r4 r r r �test_cert_no_sans� s z+PyOpenSSLCertOrReqSANTest.test_cert_no_sansc C s | � d�ddgksJ �d S r] rX r4 r r r �test_cert_two_sans� s �z,PyOpenSSLCertOrReqSANTest.test_cert_two_sansc C s& | � d�dd� tdd�D �ks"J �d S )Nzcert-100sans.pemc S s g | ]}d � |��qS �zexample{0}.com��formatre r r r rh � rL zDPyOpenSSLCertOrReqSANTest.test_cert_hundred_sans.<locals>.<listcomp>r% �e )rW rn r4 r r r �test_cert_hundred_sans� s �z0PyOpenSSLCertOrReqSANTest.test_cert_hundred_sansc C s | � d�| �� ksJ �d S )N�cert-idnsans.pem)rW rp r4 r r r �test_cert_idn_sans� s �z,PyOpenSSLCertOrReqSANTest.test_cert_idn_sansc C s | � d�g ksJ �d S )Nzcsr-nosans.pem�rq r4 r r r �test_csr_no_sans� s z*PyOpenSSLCertOrReqSANTest.test_csr_no_sansc C s | � d�dgksJ �d S )Nzcsr.pemr[ r{ r4 r r r �test_csr_one_san� s z*PyOpenSSLCertOrReqSANTest.test_csr_one_sanc C s | � d�ddgksJ �d S )Nz csr-san.pemr[ r_ r{ r4 r r r �test_csr_two_sans� s �z+PyOpenSSLCertOrReqSANTest.test_csr_two_sansc C s | � d�g d�ksJ �d S )Nz
csr-6sans.pem)r[ z example.orgz example.netz example.infozsubdomain.example.comzother.subdomain.example.comr{ r4 r r r �test_csr_six_sans� s �z+PyOpenSSLCertOrReqSANTest.test_csr_six_sansc C s& | � d�dd� tdd�D �ks"J �d S )Nzcsr-100sans.pemc S s g | ]}d � |��qS rt ru re r r r rh � rL zCPyOpenSSLCertOrReqSANTest.test_csr_hundred_sans.<locals>.<listcomp>r% rw )rq rn r4 r r r �test_csr_hundred_sans� s �z/PyOpenSSLCertOrReqSANTest.test_csr_hundred_sansc C s | � d�| �� ksJ �d S )Nzcsr-idnsans.pem)rq rp r4 r r r �test_csr_idn_sans� s �z+PyOpenSSLCertOrReqSANTest.test_csr_idn_sansc C s | � d�ddgksJ �d S )Nzcritical-san.pemzchicago-cubs.venafi.examplezcubs.venafi.examplerX r4 r r r �test_critical_san� s �z+PyOpenSSLCertOrReqSANTest.test_critical_sanN)r r r rH ra rS rp rW rq rr rs rx rz r| r} r~ r r� r� r� r r r r rb z s$
rb c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �
GenSsCertTestz6Test for gen_ss_cert (generation of self-signed cert).c C s. d| _ g | _tj�� | _| j�tjjd� d S )N� � )�
cert_count�
serial_num�OpenSSL�cryptoZPKeyr/ Z generate_keyZTYPE_RSAr4 r r r r0 � s zGenSsCertTest.setUpc C sd ddl m} t| j�D ]0}|| jdgdt�d�gd�}| j�|� � � qt
t | j��| jks`J �d S )Nr �� gen_ss_certZdummyTz 10.10.10.10)Z force_san�ips) r r� rn r� r/ � ipaddress�
ip_addressr� �appendZget_serial_numberro �set)r r� rJ r' r r r �test_sn_collisions� s
�z GenSsCertTest.test_sn_collisionsc C sZ ddl m} t�t��0 || jt�d�gd� || j� W d � n1 sL0 Y d S )Nr r� z1.1.1.1)r� )r r� rC rD �AssertionErrorr/ r� r� )r r� r r r � test_no_name� s zGenSsCertTest.test_no_nameN)r r r rH r0 r� r� r r r r r� � s r� c @ sD e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd
d � Z d d
� Z
dS )� MakeCSRTestz Test for standalone functions.c O sJ t jddd�}|�tjjtjjt�� �}ddl m
} ||g|�R i |��S )Ni r� )Zpublic_exponentZkey_sizer ��make_csr) r Zgenerate_private_key�
private_bytesr r r
�
PrivateFormat�PKCS8� NoEncryptionr r� )rQ r r �privkey� privkey_pemr� r r r �_call_with_key� s � zMakeCSRTest._call_with_keyc C sr | � ddg�}d|v sJ �d|v s&J �t�|�}t|j�dksBJ �t|j�tj�j�t� d�t� d�gksnJ �d S )N� a.examplez b.example� --BEGIN CERTIFICATE REQUEST--� --END CERTIFICATE REQUEST--r% )
r� r �load_pem_x509_csrro �
extensions�list�get_extension_for_class�SubjectAlternativeName�value�DNSName�r Zcsr_pemZcsrr r r �
test_make_csr� s
���zMakeCSRTest.test_make_csrc C s� | � dgdt�d�t�d�g�}d|v s,J �d|v s8J �t�|�}t|j�dksTJ �t|j�tj �j
�t� d�t� t�d��t� t�d��gks�J �d S )Nr� Fr7 z::1r� r� r% )
r� r� r� r r� ro r� r� r� r� r� r� Z IPAddressr� r r r �test_make_csr_ip� s" �
���z MakeCSRTest.test_make_csr_ipc C sR | j dgdd�}t�|�}t|j�dks,J �t|j�tj�j�tj j
gksNJ �d S )Nr� T)Z must_staple� ) r� r r� ro r� r� r� Z
TLSFeaturer� ZTLSFeatureTypeZstatus_requestr� r r r �test_make_csr_must_staple s
�z%MakeCSRTest.test_make_csr_must_staplec C s6 t �t�� | �� W d � n1 s(0 Y d S r )rC rD rM r� r4 r r r � test_make_csr_without_hostname s z*MakeCSRTest.test_make_csr_without_hostnamec C sj t j�� }|�tjjtjjt� � �}ddl
m } t �
t�� ||dg� W d � n1 s\0 Y d S )Nr r� r� )r ZX25519PrivateKeyZgenerater� r r r
r� r� r� r r� rC rD rM )r r� r� r� r r r � test_make_csr_invalid_key_type s
� z*MakeCSRTest.test_make_csr_invalid_key_typeN) r r r rH ra r� r� r� r� r� r� r r r r r� � s
r� c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �DumpPyopensslChainTestz Test for dump_pyopenssl_chain.c C s ddl m} ||�S )Nr )�dump_pyopenssl_chain)r r� )rQ �loadedr� r r r rS & s z DumpPyopensslChainTest._callc C sB g d�}dd� |D �}t dd� |D ��}t| �|��|ks>J �d S )N�rZ r^ ry c S s g | ]}t �|��qS r �r rU �rf r; r r r rh . rL zDDumpPyopensslChainTest.test_dump_pyopenssl_chain.<locals>.<listcomp>c s s$ | ] }t tj�tjj|��V qd S r )ro r� r� �dump_certificate� FILETYPE_PEM�rf r' r r r � <genexpr>/ s �zCDumpPyopensslChainTest.test_dump_pyopenssl_chain.<locals>.<genexpr>)�sumro rS )r �namesr� �lengthr r r �test_dump_pyopenssl_chain, s �z0DumpPyopensslChainTest.test_dump_pyopenssl_chainc sf g d�}dd� |D �}t j��fdd�|D �}tjj� t� fdd�|D ��}t| �|��|ksbJ �d S )Nr� c S s g | ]}t �|��qS r r� r� r r r rh 6 rL zLDumpPyopensslChainTest.test_dump_pyopenssl_chain_wrapped.<locals>.<listcomp>c s g | ] }� |��qS r r r� )� wrap_funcr r rh 8 rL c 3 s | ]}t � tjj|��V qd S r )ro r� r� r� r� )� dump_funcr r r� : rL zKDumpPyopensslChainTest.test_dump_pyopenssl_chain_wrapped.<locals>.<genexpr>)r9 r: r� r� r� r� ro rS )r r� r� r( r� r )r� r� r �!test_dump_pyopenssl_chain_wrapped4 s z8DumpPyopensslChainTest.test_dump_pyopenssl_chain_wrappedN)r r r rH ra rS r� r� r r r r r� # s
r� �__main__r% )(rH r� rl r r) �sysr, r> �typingr ZunittestZjosepyr9 r� rC Z cryptographyr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zacmer Zacme._internal.testsr ZTestCaser r rI rO rb r� r� r� r �exit�main�argv�__file__r r r r �<module> s6 8 DK
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg