JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/certbot/_internal/tests/__pycache__/main_test.cpython-39.opt-1.pyc
a
}|�g�� � @ s2 d Z ddlZddlZddlmZ ddlZddlZddlZddl Z ddl
Z
ddl Z ddl Z ddl
mZ ddlZddlmZ ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ dd lm Z dd
lm Z dd l m Z dd l m Z dd
l m!Z! ddl m"Z" ddl m#Z# ddl$m%Z% ddl$m&Z& ddl$m'Z' ddl$m(Z( ddl)m*Z* ddl)m+Z+ ddl,m-Z- ddl.m/ m Z0 e0�1d�Z2e0�1d�Z3e0�1d�Z4e0�1d�Z5ej6�7e0�8d��Z9e0�1d�Z:e0�1d �Z;G d d � d ej<�Z=G d d � d e0j>�Z?G d!d"� d"ej<�Z@G d#d$� d$ej<�ZAG d%d&� d&e0jB�ZCG d'd(� d(e0jB�ZDG d)d*� d*e0j>�ZEG d+d,� d,e0j>�ZFG d-d.� d.e0j>�ZGG d/d0� d0ej<�ZHG d1d2� d2e0j>�ZIG d3d4� d4e0j>�ZJG d5d6� d6e0j>�ZKG d7d8� d8ej<�ZLG d9d:� d:ej<�ZMG d;d<� d<e0j>�ZNG d=d>� d>e0j>�ZOG d?d@� d@�ZPeQdAk�r.e
�Re�"e
jSdBd� eTg �� dS )Cz!Tests for certbot._internal.main.� N)�reload)�List)�mock)�Error)� crypto_util��errors)�
interfaces)�util)�account)�cli)� constants)�main)�updater)�disco)�manual)�null)�
standalone)�
filesystem)�os)� enhancements� cert_512.pemz csr_512.derzrsa256_key.pemzrsa512_key.pemzrsa2048_key.pemz
cert_2048.pemc @ sl e Zd ZdZe�d�dd� �Ze�d�e�d�e�d�dd� ���Ze�d�d d
� �Ze�d �d d
� �Z dS )�TestHandleCertsz1Test for certbot._internal.main._handle_* methods�<certbot._internal.main._handle_unexpected_key_type_migrationc C s$ t �� }d|j_t�t �� |�}d S �NF)r �Mock�ensure_deployed� return_valuer � _handle_identical_cert_request)�self�mock_handle_migration� mock_lineage�ret� r# �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/main_test.py�*test_handle_identical_cert_request_pending5 s z:TestHandleCerts.test_handle_identical_cert_request_pending�&certbot._internal.renewal.should_renewzcertbot.display.util.menuc C s6 d|_ t�� }d|j_ d|_ t�tjddd�|�}d S )NTF�run)Zverb� reinstall)r r r r r r � MagicMock)r r Z mock_menuZmock_should_renewr! r" r# r# r$ �*test_handle_identical_cert_key_type_change> s �z:TestHandleCerts.test_handle_identical_cert_key_type_changec C s6 t �� }d|_t �� }ddg|j_t�|dg|�}d S )NTZdummy1Zdummy2)r r �expand�namesr r Z_handle_subset_cert_request)r r � mock_configr! r" r# r# r$ � test_handle_subset_cert_requestM s z/TestHandleCerts.test_handle_subset_cert_requestz)certbot._internal.main.display_util.yesnoc C s� t �� }t �� }||_t �� }d|_d|_t�||� |�� d|_d|_t�||� d|_d|_t�||� d|_t�||� d|_dd� |_ t
j t j
dd�� t�||� W d � n1 s�0 Y d d� |_ t�||� d S )
NZrsa�ecdsaTFc S s | dkS )N�certnamer# ��varr# r# r$ �<lambda>{ � zKTestHandleCerts.test_handle_unexpected_key_type_migration.<locals>.<lambda>z.Please provide both --cert-name and --key-type��matchc S s | dkS )N�key_typer# r1 r# r# r$ r3 � r4 )r r Z set_by_userr7 �private_key_typer Z%_handle_unexpected_key_type_migration�assert_not_calledr � side_effect�pytest�raisesr r )r Z
mock_yesno�configZmock_set�certr# r# r$ �)test_handle_unexpected_key_type_migrationW s.
*
z9TestHandleCerts.test_handle_unexpected_key_type_migrationN)
�__name__�
__module__� __qualname__�__doc__r �patchr% r* r. r? r# r# r# r$ r 3 s
r c sv e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd
d � Ze �
d �d
d� �Z e �
d�dd� �Z e �
d �dd� �Z
� ZS )�RunTestz%Tests for certbot._internal.main.run.c s� t � �� d| _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d �t�d
�g }|d �� | _|d �� | _|d
�� | _|d �� | _ |d �� | _
|d �� | _ |d �� | _ |d �� | _
|d �� | _|D ]}| �|j� q�d S )Nz example.org�)certbot._internal.main._get_and_save_certz7certbot._internal.main.display_ops.success_installationz2certbot._internal.main.display_ops.success_renewal�&certbot._internal.main._init_le_client�7certbot._internal.main._suggest_donation_if_appropriate�'certbot._internal.main._report_new_cert�!certbot._internal.main._find_cert�)certbot._internal.eff.handle_subscription�)certbot._internal.main._report_next_stepsr � � � � � � � � )�super�setUp�domainr rD �start� mock_auth�mock_success_installation�mock_success_renewal� mock_initZmock_suggest_donation�mock_report_cert�mock_find_cert�mock_subscription�mock_report_next_steps�
addCleanup�stop)r �patchesrD �� __class__r# r$ rV � s.
� z
RunTest.setUpc C s@ d� | j��� }tj�� }t�||�}ddlm } |||� d S )Nz-a webroot -i null -d {0}r )r' )
�formatrW �splitr �PluginsRegistry�find_allr �prepare_and_parse_args�certbot._internal.mainr' )r �args�pluginsr= r' r# r# r$ �_call� s
z
RunTest._callc C sH t �� | j_d| j_| �� | j�| jg� | j jt j
d t j
dd� d S )N�TNT�Znew_or_renewed_cert) r r rY r r^ rn rZ �assert_called_once_withrW r` �ANY�r r# r# r$ �test_newcert_success� s �z RunTest.test_newcert_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S r ) r r rY r r^ rn rZ rq rW rs r# r# r$ �test_reinstall_success� s z RunTest.test_reinstall_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S �NT) r r rY r r^ rn r[ rq rW rs r# r# r$ �test_renewal_success� s z RunTest.test_renewal_success�;certbot._internal.main.plug_sel.choose_configurator_pluginsc C sd t �| jd�d f|_tj�� }d| j_t� t
j �� t �
| j|� W d � n1 sV0 Y d S �Nr T)r � Installerr= r r rh ri � auto_hstsr; r< r �NotSupportedErrorr r' �r � mock_chooserm r# r# r$ �"test_run_enhancement_not_supported� s
z*RunTest.test_run_enhancement_not_supported�$certbot._internal.main._install_certc C s| t �d�|_t�� | j_d| j_t� t j�� | �
� W d � n1 sJ0 Y | j j tj
|jtj
dd� | j�� d S )NzFake installation errorro Trp )r Z PluginErrorr: r r rY r r^ r; r< rn r` rq rr rZ r9 )r Zmock_install_certr# r# r$ � test_cert_success_install_error� s &�z'RunTest.test_cert_success_install_errorc C sd t �| jd�d f|_tj�� }d| j_t� t
j �� t �
| j|� W d � n1 sV0 Y d S ry )r rz r= r r rh ri Z must_stapler; r< r r| r r' r} r# r# r$ �"test_run_must_staple_not_supported� s
z*RunTest.test_run_must_staple_not_supported)r@ rA rB rC rV rn rt ru rw r rD r r� r� �
__classcell__r# r# rd r$ rE � s
rE c @ s� e Zd ZdZdd� Zdd� Zdd� Ze�d�e�d �e�d
�d d � ���Z d
d� Z
e�d�e�d�e�d�e�d�e�d�e�d
�dd� ������Z e�d�e�d�e�d�e�d�e�d
�dd� �����Z e�d�e�d �e�d�e�d�dd� ����Z
e�d�e�d
�e�d�e�d �e�d �d d � �����Ze�d�e�d
�e�d�e�d �e�d �d d � �����Ze�d�e�d
�e�d�e�d �d!d"� ����Zd#S )$� CertonlyTestz*Tests for certbot._internal.main.certonly.c C s t �� | _| j�� | _d S �N)� test_util�patch_display_util�get_utility_patchrX �mock_get_utilityrs r# r# r$ rV � s
zCertonlyTest.setUpc C s | j �� d S r� �r� rb rs r# r# r$ �tearDown� s zCertonlyTest.tearDownc
C s� t j�� }t�||�}t�d��p}t�d��F t�d�� t�||� W d � n1 sZ0 Y W d � n1 sx0 Y W d � n1 s�0 Y |� S )NrG rH rK ) r rh ri r rj r rD r �certonly)r rl rm r= r\ r# r# r$ rn � s
fzCertonlyTest._callrJ rF rI c C s4 | � � j}| j|_t�� |_d|_| �d�� � d S )N)FNz!certonly --webroot -d example.com) r� � notification�_assert_no_pauser: r r r rn rg )r Z
unused_reportrY r^ Zmock_notificationr# r# r$ � test_no_reinstall_text_pause� s
z)CertonlyTest.test_no_reinstall_text_pausec O s d S r� r# )r rl �kwargsr# r# r$ r� � s z CertonlyTest._assert_no_pauserL �3certbot._internal.cert_manager.lineage_for_certname�3certbot._internal.cert_manager.domains_for_certnamez$certbot._internal.renewal.renew_certr c C s� ddg}||_ ||j_ | �d�� � |jtjd tjdd� | �d�� � d| �� j_ t �
t j �� | �d�� � W d � n1 s�0 Y d S )N� example.comztest.orgzEcertonly --webroot -d example.com -d test.org --cert-name example.comTrp �Ecertonly --webroot -d example.com -d test.com --cert-name example.comF)
r r, rn rg rq r rr r� �yesnor; r< r �ConfigurationError)r r] Zmock_handle_type�mock_renew_cert� mock_domainsr! r` �domainsr# r# r$ �*test_find_lineage_for_domains_and_certname� s � z7CertonlyTest.test_find_lineage_for_domains_and_certname� certbot.display.ops.choose_namesc C s4 d |_ | �d�� � dg|_ d |_ | �d�� � d S )Nr� Zsomenamez*certonly --webroot --cert-name example.com)r rn rg )r r] r! �mock_choose_namesZmock_domains_for_certnameZ unused_mock_report_next_stepsr# r# r$ �*test_find_lineage_for_domains_new_certname# s z7CertonlyTest.test_find_lineage_for_domains_new_certnamez-certbot._internal.main._csr_get_and_save_certc C sZ d|_ d|_ dt� �dfD ]:}| �d|� d��� � |jtjtjtjdd� |�� qdS ) zLcertonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.N)z/certz/chainz
/fullchainz--csr z-d example.comz certonly z, --webroot --cert-name example.com --dry-runFrp )r �CSRrn rg rq r rr Z
reset_mock)r r! Zmock_csr_get_certZunused_mock_get_certr` �flagr# r# r$ �$test_dryrun_next_steps_no_cert_saved8 s �z1CertonlyTest.test_dryrun_next_steps_no_cert_saved�?certbot._internal.plugins.selection.choose_configurator_pluginsc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nro z certonly --nginx -d example.com)r r) r rn rg �restartZassert_called_once�r �mock_sel�
mock_get_certr^ �unused_report_new�unused_report_nextZmock_installerr# r# r$ �test_installer_runs_restartG s
z(CertonlyTest.test_installer_runs_restartc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nro z)certonly --nginx -d example.com --dry-run)r r) r rn rg r� r9 r� r# r# r$ �$test_dryrun_installer_doesnt_restartV s
z1CertonlyTest.test_dryrun_installer_doesnt_restartc C s2 t �� |_d|_| �dt�� � d�d �� � d S )Nro zcertonly --webroot -w � z -i standalone -d example.com)r r) r rn �tempfile�
gettempdirrg )r r� r^ r� r� r# r# r$ �test_invalid_installere s
�z#CertonlyTest.test_invalid_installerN)r@ rA rB rC rV r� rn r rD r� r� r� r� r� r� r� r� r# r# r# r$ r� � sX
r� c @ sF e Zd ZdZe�d�dd� �Ze�d�dd� �Ze�d�dd � �Zd
S ) �FindDomainsOrCertnameTestz;Tests for certbot._internal.main._find_domains_or_certname.r� c C s t jd d d�}d|_d S )N�r� r0 Z
domainname�r r r �r r� r- r# r# r$ �test_display_opst s z*FindDomainsOrCertnameTest.test_display_opsc C sP t jd d d�}g |_t�tj�� t�|d � W d � n1 sB0 Y d S )Nr� ) r r r r; r< r r r Z_find_domains_or_certnamer� r# r# r$ �test_no_results{ s z)FindDomainsOrCertnameTest.test_no_resultsr� c C s t jd dd�}ddg|_d S )Nzone.comr� ztwo.comr� )r r� r- r# r# r$ �test_grab_domains� s
z+FindDomainsOrCertnameTest.test_grab_domainsN) r@ rA rB rC r rD r� r� r� r# r# r# r$ r� q s
r� c s e Zd ZdZ� fdd�Zddd�Ze�d�e�d�d d
� ��Ze�d�e�d �e�d �e�d
�dd� ����Z e�d�e�d �e�d �e�d
�dd� ����Z
e�d�e�d �e�d �e�d
�dd� ����Z e�d�dd� �Z dd� Z
e�d�e�d�e�� dd� ���Z� ZS ) �
RevokeTestz(Tests for certbot._internal.main.revoke.c s t � �� t�t| j� tj�tj� | jd��| _
t � d�t � d�t � d�t � d�g}|d �
� j| _|d �
� |d �
� | _|d �
� | _|D ]}| �|j� q�dd
lm} t �� | _|jd tjd d
ddddtjd�d�| _ || jt | j �| _ | j d f| j_ d S )Nr z$certbot._internal.client.acme_clientz certbot._internal.client.Client�)certbot._internal.main._determine_accountz5certbot._internal.main.display_ops.success_revocationr rM rN rO )�Accountztest.certbot.orgi� rS rP � �
)Ztzinfo)Z
creation_hostZ creation_dt) rU rV �shutil�copy� CERT_PATH�tempdirr �path�abspath�join�
tmp_cert_pathr rD rX �ClientV2�mock_acme_client�mock_determine_account�mock_success_revokera rb Zcertbot._internal.accountr� r) �regrZMeta�datetime�pytzZUTC�meta�JWK�accr )r rc rD r� rd r# r$ rV � s0
�
��zRevokeTest.setUpNc C sH |sd}|� | j��� }tj�� }t�||�}ddlm } |||� d S )Nzrevoke --cert-path={0} r )�revoke)
rf r� rg r rh ri r rj rk r� )r rl rm r= r� r# r# r$ rn � s
zRevokeTest._call�-certbot._internal.main._delete_if_appropriate�)certbot._internal.main.client.acme_clientc C s� d|_ |�� j}g }tj�� D ]l\}}d�| j|��� }| � |� |�
t � t j
|�� d�| j|�� ��� }| � |� |�
t � t j
|�� q d S )NFz#revoke --cert-path={0} --reason {1})r r� r� r
ZREVOCATION_REASONS�itemsrf r� rg rn �appendr �callrr �upper)r r� �mock_delete_if_appropriate� mock_revokeZexpected�reason�coderl r# r# r$ �test_revoke_with_reason� s
�
z"RevokeTest.test_revoke_with_reason�'certbot._internal.storage.RenewableCert�3certbot._internal.storage.renewal_file_for_certnamez-certbot._internal.client.acme_from_config_keyc C sD | j |_tj| jdd�|_d�� }d|_| �|� | j�| j� d S )N�https://acme.example�� cert_path�server� revoke --cert-name=example.comF) r� r r r) r� rg rn r� rq �r Zmock_acme_from_configZ%unused_mock_renewal_file_for_certnameZ mock_certr� rl r# r# r$ �test_revoke_by_certname� s �
z"RevokeTest.test_revoke_by_certnamec C s< t j| jdd�|_d�� }d|_| �|� | j�| j� dS )z9Revoking with --server should use the server from the CLIr� r� z=revoke --cert-name=example.com --server https://other.exampleFN�r r) r� r rg rn r� rq r� r# r# r$ �"test_revoke_by_certname_and_server� s �
z-RevokeTest.test_revoke_by_certname_and_serverc C s< t j| jdd�|_d�� }d|_| �|� | j�| j� dS )zLRevoking with --cert-name where the lineage server is empty shouldn't crash Nr� r� Fr� r� r# r# r$ �$test_revoke_by_certname_empty_server� s
z/RevokeTest.test_revoke_by_certname_empty_serverc C s | � � d|_| j�| j� d S r )rn r r� rq r� )r r� r# r# r$ �test_revocation_success� s z"RevokeTest.test_revocation_successc C sZ ddl m} |�� | j_t�|j�� | �� W d � n1 sB0 Y | j� � d S )Nr r )
�acmer Z ClientErrorr� r: r; r< rn r� r9 )r Z acme_errorsr# r# r$ �test_revocation_error s
&z RevokeTest.test_revocation_error�%certbot._internal.cert_manager.deletec C s d|� j _d|_| �� d S r )r� r rn )r r� � mock_deleter� r# r# r$ �test_revocation_with_prompt s
z&RevokeTest.test_revocation_with_prompt)N)r@ rA rB rC rV rn r rD r� r� r� r� r� r� r� r� r� r� r# r# rd r$ r� � s8
r� c s� e Zd ZdZ� fdd�Z� fdd�Zdd� Zdd � Ze� d
�d d � �Z
d
d� Z dd� Z e� d�dd� �Z
dd� Ze� d�dd� �Zdd� Ze� d�dd � �Z� ZS ) �ReconfigureTestz,Tests for certbot._internal.main.reconfigurec
sT t � �� t�� | _| j�� | _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d�d �| _ d
d � | j �
� D �| _ d g| j d
_ t
j�| jd�| _t
j�| jd�}t
j�|�s�t�|� t
j�|d�| _d}t| jd��}|�|� W d � n1 �s0 Y t| jd��"}tj|ddd�| _W d � n1 �sF0 Y d S )Nz7certbot._internal.storage.RenewableCert._check_symlinksz-certbot._internal.storage.RenewableCert.namesz2certbot._internal.plugins.selection.pick_installerz6certbot._internal.plugins.selection.pick_authenticatorz9certbot._internal.plugins.disco.PluginsRegistry.find_initrF rG z"certbot._internal.hooks.list_hooks)Zcheck_symlinks�
cert_names�pick_installer� pick_auth� find_init�_get_and_save_certZ_init_le_clientZ
list_hooksc S s i | ]\}}||� � �qS r# �rX ��.0�k�vr# r# r$ �
<dictcomp># r4 z)ReconfigureTest.setUp.<locals>.<dictcomp>r� r� r= �renewalzexample.com.confa�
version = 1.32.0
archive_dir = /etc/letsencrypt/archive/example.com
cert = /etc/letsencrypt/live/example.com/cert.pem
privkey = /etc/letsencrypt/live/example.com/privkey.pem
chain = /etc/letsencrypt/live/example.com/chain.pem
fullchain = /etc/letsencrypt/live/example.com/fullchain.pem
# Options used in the renewal process
[renewalparams]
account = ee43634db0aa4e6804f152be39990e6a
server = https://acme-v02.api.letsencrypt.org/directory
authenticator = nginx
installer = nginx
key_type = rsa
�w�r�utf-8��encodingZdefault_encoding)rU rV r� r� r� rX r� r rD �patchersr� �mocksr r r� r� r� �
config_dir�existsr �makedirs� renewal_file�open�write� configobj� ConfigObj�original_config)r Zrenewal_configs_dirr �frd r# r$ rV s4
�
*�zReconfigureTest.setUpc s0 t � �� | j�� | j�� D ] }|�� q d S r� )rU r� r� rb r� �values�r rD rd r# r$ r� B s
zReconfigureTest.tearDownc C sz |d| j g }tj�� }t�||�}ddlm} |||� t| j d�� }t
j |ddd�}W d � n1 sl0 Y |S )N� --config-dirr )� reconfigurer� r� r� ) r� r rh ri r rj rk r r r r r )r Z passed_argsZ full_argsrm r= r r Z updated_confr# r# r$ rn H s
.zReconfigureTest._callc C s> t �tj�� | �d�� � W d � n1 s00 Y d S )Nz!--cert-name cert1 -d one.cert.com)r; r< r r� rn rg rs r# r# r$ �test_domains_setU s z ReconfigureTest.test_domains_set�,certbot._internal.cert_manager.get_certnamesc C sL t �� }d|_|| jd _|| jd _|| jd _dg|_| �d�� � d S )N�nginxr� r� r� r� �--nginx�r r �namer� r rn rg )r �mock_cert_manager�
named_mockr# r# r$ �test_asks_for_certnameY s z&ReconfigureTest.test_asks_for_certnamec C sD t �� }d|_|| jd _|| jd _|| jd _| �d�� �}d S )N�apacher� r� r� � --cert-name example.com --apacher �r r �
new_configr# r# r$ �test_update_configuratore s z(ReconfigureTest.test_update_configuratorc C st t �� }d|_|| jd _|| jd _|| jd _| �d�� �}d|d d< d|d d < |d d
= | jd |d < d S )
zI Check that we don't accidentally modify anything that we didn't mean to r r� r� r� r r �
renewalparams�
authenticator� installerr� �versionN)r r r r� r rn rg r r r# r# r$ �test_only_intended_changesp s
z*ReconfigureTest.test_only_intended_changesz&certbot._internal.hooks.validate_hooksc C s | � d�� dg � dS )z6 Check that we use the staging server for the dry run �"--cert-name example.com --pre-hook�echo preN�rn rg )r �unused_validate_hooksr# r# r$ �test_staging_used� s z!ReconfigureTest.test_staging_usedc
C s6 | j d d }| j d d }z| �d�� � W n& tjyT } z W Y d}~n
d}~0 0 t| jd�� }tj|ddd�}W d � n1 s�0 Y | �d |� ��� �}z| �d
�� � W n& tjy� } z W Y d}~n
d}~0 0 t| jd�� }tj|ddd�}W d � n1 �s0 Y | �d |� ��� �}dS ) zx Check that we error when attempting to change the account id or server,
but not when it's the same
r r r� z.--cert-name example.com --account newaccountidNr� r� r� z"--cert-name example.com --account z&--cert-name example.com --server x.comz!--cert-name example.com --server ) r rn rg r r� r r r r )r Zorig_account_idZ orig_server�errr r r# r# r$ �!test_new_account_or_server_errors� s" .0z1ReconfigureTest.test_new_account_or_server_errorsc C s@ | � d�� dg �}| � d�� dg �}| � d�� dg �}d S )Nr r z echo pre2z%--cert-name example.com --deploy-hookz echo deployr! )r r" r r# r# r$ �test_update_hooks� s z!ReconfigureTest.test_update_hooksc C sv t j| jd _z| �d�� � W n t jy4 Y n0 t| jd�� }tj |ddd�}W d � n1 sh0 Y d S )Nr� r r� r� r� )
r r r� r: rn rg r r r r )r r r r# r# r$ �test_dry_run_fails� s .z"ReconfigureTest.test_dry_run_fails�*certbot._internal.main.display_util.notifyc C s� d}t | jd��}|�|� W d � n1 s00 Y t | jd��"}tj|ddd�| _W d � n1 sn0 Y t�� }d|_|| j d _
|| j d _
| � d � � �}|�
d
� d S ) Na
version = 2.0.0
archive_dir = /etc/letsencrypt/archive/example.com
cert = /etc/letsencrypt/live/example.com/cert.pem
privkey = /etc/letsencrypt/live/example.com/privkey.pem
chain = /etc/letsencrypt/live/example.com/chain.pem
fullchain = /etc/letsencrypt/live/example.com/fullchain.pem
# Options used in the renewal process
[renewalparams]
account = ee43634db0aa4e6804f152be39990e6a
server = https://acme-staging-v02.api.letsencrypt.org/directory
authenticator = webroot
installer = nginx
key_type = ecdsa
webroot_path = /var/www/html,
[[webroot_map]]
example.com = /var/www/html
r� r� r� r� r r� r� z --cert-name example.com --nginxzT
Successfully updated configuration.
Changes will apply when the certificate renews.)r r r r r r r r r r� r rn rg �assert_called_with)r � mock_notifyr r r r r# r# r$ �test_report_results� s (�& �z#ReconfigureTest.test_report_results)r@ rA rB rC rV r� rn r r rD r r r r# r% r& r' r+ r� r# r# rd r$ r� s" -
%
r� c @ sR e Zd ZdZdd� Zdd� Ze�� dd� �Ze�� dd � �Z e
� d
�e
� d �e
� d �e
� d
�e
� d�e
� d�e�� dd� �������Z e
� d �e
� d
�e
� d�e
� d �e
� d�e�� dd� ������Z
e
� d �e
� d
�e
� d�e
� d�e
� d �e�� dd� ������Ze
� d �e
� d
�e
� d�e
� d�e
� d �e�� dd� ������ZdS )�DeleteIfAppropriateTestz8Tests for certbot._internal.main._delete_if_appropriate c C s ddl m} ||� d S )Nr )�_delete_if_appropriate)rk r- )r r- r- r# r# r$ rn � s z DeleteIfAppropriateTest._callc C sB t �d�� }| �| j� W d � n1 s,0 Y |�� d S )Nr� )r rD rn r= r9 )r r� r# r# r$ �_test_delete_opt_out_common� s *z3DeleteIfAppropriateTest._test_delete_opt_out_commonc C s d| j _| �� d S r )r= �delete_after_revoker. )r Zunused_mock_get_utilityr# r# r$ �test_delete_flag_opt_out s z0DeleteIfAppropriateTest.test_delete_flag_opt_outc C s |� }d|j _| �� d S r )r� r r. )r r� � util_mockr# r# r$ �test_delete_prompt_opt_out s z2DeleteIfAppropriateTest.test_delete_prompt_opt_outz%certbot._internal.main.logger.warningr� r� z7certbot._internal.cert_manager.match_and_check_overlapsz+certbot._internal.storage.full_archive_pathz3certbot._internal.cert_manager.cert_path_to_lineagec C s8 | j }d|_d|_d|_t�� |_| �|� |�� d S )N�/some/reasonable/path� r� ) r= r� r0 r r ZOverlappingMatchFoundr: rn r9 ) r r� �mock_cert_path_to_lineage� mock_archive� mock_match_and_check_overlapsr� � mock_renewal_file_for_certnameZ mock_warningr= r# r# r$ � test_overlapping_archive_dirs s
z5DeleteIfAppropriateTest.test_overlapping_archive_dirsc C s, | j }d|_d|_d|_d|_| �|� d S )Nr3 r4 r� F)r= r� r0 r rn )r r� r5 r� r6 Z mock_overlapping_archive_dirsr8 r= r# r# r$ �test_cert_path_only$ s
z+DeleteIfAppropriateTest.test_cert_path_onlyc C s8 | j }d|_d|_d|_d|_d|_d|_| �|� d S �NTr3 r4 r� )r= Znoninteractive_moder� r0 r rn �r r� r� r5 Zmock_full_archive_dirr7 r8 r= r# r# r$ � test_noninteractive_deletion6 s
z4DeleteIfAppropriateTest.test_noninteractive_deletionc C s8 | j }d|_d|_d|_d|_d|_d|_| �|� d S r; )r= r/ r� r0 r rn r< r# r# r$ �test_opt_in_deletionJ s
z,DeleteIfAppropriateTest.test_opt_in_deletionN)r@ rA rB rC rn r. r� r� r0 r2 r rD r9 r: r= r> r# r# r# r$ r, � sH
r, c s� e Zd ZdZ� fdd�Zdd� Ze�d�e�d�dd � ��Zd
d � Z d d
� Z
e�d�dd� �Z e�d�dd� �Z e�d�e�d�dd� ��Z
dd� Zdd� Zdd� Zd d � Z� ZS ) �DetermineAccountTestz4Tests for certbot._internal.main._determine_account.c s^ t � �� d | j_d | j_d| j_tjdd�tjdd�g| _t� � | _
t�� | _ d| j j _
d S )NF�x)�id�y�hi)rU rV r= r �emailZ register_unsafely_without_emailr r) �accsZAccountMemoryStorage�account_storage� mock_client� directoryZ new_authzrs rd r# r$ rV b s
zDetermineAccountTest.setUpc C s� ddl m} t�d��X}t�� �0 | j|_|| j�W d � W d � S 1 sV0 Y W d � n1 st0 Y d S )Nr )�_determine_accountz1certbot._internal.main.account.AccountFileStorage) rk rI r rD r� r� rF r r= )r rI � mock_storager# r# r$ rn n s �zDetermineAccountTest._callz!certbot._internal.client.registerz.certbot._internal.client.display_ops.get_emailc
C sD d|_ ||_z | �� W n& tjy> } z W Y d }~n
d }~0 0 d S )N� foo@bar.baz)r r: rn r r )r �err_msg� exception�mock_get_email�
mock_registerr$ r# r# r$ �_register_error_commonv s z+DetermineAccountTest._register_error_commonc C s* | j �| jd | j� | jd j| j_d S �NrM )rF �saverE rG rA r= r rs r# r# r$ �test_args_account_set� s z*DetermineAccountTest.test_args_account_setc C s | j �| jd | j� d S )Nr )rF rR rE rG rs r# r# r$ �test_single_account� s z(DetermineAccountTest.test_single_accountz3certbot._internal.client.display_ops.choose_accountc C s, | j D ]}| j�|| j� q| j d |_d S rQ )rE rF rR rG r )r �mock_choose_accountsr� r# r# r$ �test_multiple_accounts� s
z+DetermineAccountTest.test_multiple_accountsc
C sZ | j D ]}| j�|| j� qd |_z | �� W n& tjyT } z W Y d }~n
d }~0 0 d S r� )rE rF rR rG r rn r r )r rU r� r$ r# r# r$ � test_multiple_accounts_canceled� s
z4DetermineAccountTest.test_multiple_accounts_canceledr( c C sl d|_ t�d��&}| jd tjjf|j_ W d � n1 s<0 Y |jj| j| j tj
d� |�d� d S )NrK � certbot._internal.main.clientr )Ztos_cbzAccount registered.) r r rD rE �sentinelr� �registerrq r= rF rr )r r* rN �clientr# r# r$ �test_no_accounts_no_email� s � �z.DetermineAccountTest.test_no_accounts_no_emailc C sT d| j _t�d��.}| jd tjjf|j_| � � W d � n1 sF0 Y d S )Nz other emailrX rM )
r= rD r rD rE rY r� rZ r rn )r r[ r# r# r$ �test_no_accounts_email� s
&z+DetermineAccountTest.test_no_accounts_emailc C s d}| � |t�|�� d S )Nz$Some error message raised by Certbot)rP r r )r rL r# r# r$ �test_register_error_certbot� s z0DetermineAccountTest.test_register_error_certbotc C s d}t ddd�}| �||� d S )NzAError returned by the ACME server: must agree to terms of servicez$urn:ietf:params:acme:error:malformedz must agree to terms of service)�typZdetail��
acme_errorrP �r rL rM r# r# r$ �(test_register_error_acme_type_and_detail� s
�z=DetermineAccountTest.test_register_error_acme_type_and_detailc C s d}t dd�}| �||� d S )NzKError returned by the ACME server: The server experienced an internal errorz)urn:ietf:params:acme:error:serverInternal)r_ r` rb r# r# r$ �"test_register_error_acme_type_only� s
z7DetermineAccountTest.test_register_error_acme_type_only)r@ rA rB rC rV rn r rD rP rS rT rV rW r\ r] r^ rc rd r� r# r# rd r$ r? _ s&
r? c s� e Zd ZdZ� fdd�Z� fdd�Zd�dd �Zd�d
d �Zd d
� Zdd� Z dd� Z
e � d�dd� �Z
e � d�e � d�e � d�e � d�e � d�e � d�dd� ������Ze � d �e � d �d d � ��Ze � d �e � d �e � d �d!d"� ���Ze � d�e � d �e � d �e � d �d#d$� ����Ze � d �e � d �d%d&� ��Ze � d �e � d �e � d'�e � d �d(d)� ����Ze � d�e � d�e � d�e � d*�d+d,� ����Ze � d�d-d.� �Ze � d/�d0d1� �Ze � d2�d3d4� �Ze � d5�e � d6�e � d�d7d8� ���Ze � d5�e � d6�d9d:� ��Ze � d5�e � d6�d;d<� ��Ze � d5�e � d6�d=d>� ��Ze � d5�e � d6�d?d@� ��Z dAdB� Z dCdD� Z dEdF� Z dGdH� Z dIdJ� Z!dKdL� Z"dMdN� Z#d�dOdP�Z$e � d�dQdR� �Z%e � d�e � dS�e � d�e � dT�dUdV� ����Z&e � d�dWdX� �Z'dddYdde(j(�)� ddfdZd[�Z*e � d�e � dS�e � dT�d\d]� ���Z+e � d^�e � d_�e � dT�d`da� ���Z,dbdc� Z-ddde� Z.dfdg� Z/e � dh�didj� �Z0e � dh�dkdl� �Z1e � dm�dndo� �Z2e � dm�dpdq� �Z3e � dr�dsdt� �Z4e � d�dudv� �Z5dwdx� Z6dydz� Z7d{d|� Z8d}d~� Z9dd�� Z:d�d�� Z;d�d�d��Z<d�d�� Z=d�d�� Z>d�d�� Z?d�d�� Z@d�d�� ZAe � d��d�d�� �ZBd�d�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHeI�J� e � d��e � d��e � d�d�d�� ����ZKd�d�d��ZLe � d��e � dS�e � d�d�d�� ���ZMe � d��d�d�� �ZNe � d��e � d��d�d�� ��ZOd�d�� ZPe � d��e � d�d�d�� ��ZQe � d�d�d�� �ZRe � d��e � d��d�d�� ��ZSe � d��e � d��e � d��e � d�d�d�� ����ZT� ZUS )��MainTestz Tests for different commands.c sL t � �� t�| jj� d| jjd| jjd| jjdg| _t �
d�� � | _ d S )Nr
�
--work-dir�
--logs-dir�--textz
time.sleep)
rU rV r �mkdirr= �logs_dirr� �work_dir�
standard_argsr rD rX �
mock_sleeprs rd r# r$ rV � s
�zMainTest.setUpc s t t� t� �� d S r� )�
reload_moduler rU r� rs rd r# r$ r� � s zMainTest.tearDownNFc s� |r�t jj� � fdd�}t�d��l}||_t�d��<}| �||�\}}}||||fW d � W d � S 1 sv0 Y W d � n1 s�0 Y nHt�d��.}| �||�\}}}||||fW d � S 1 s�0 Y dS )zaRun the cli with output streams, actual client and optionally
os.path.isfile() mocked outc s* | � d�s | � d�s | � d�r"dS � | �S )zMock os.path.isfile()r> �chain�privkeyT)�endswith)�fnrl r� �Z orig_openr# r$ � mock_isfile� s
��z#MainTest._call.<locals>.mock_isfilez certbot.compat.os.path.isfilerX N)r r� �isfiler rD r: �_call_no_clientmock) r rl �stdout�
mockisfilert Zmock_ifr[ r" �stderrr# rs r$ rn � s X zMainTest._callc
C s� | j | }|r|nt�� }tjd|d��v t�d��L}t�d��" t�|dd� �}W d � n1 sh0 Y W d � n1 s�0 Y W d � n1 s�0 Y |||fS )z-Run the client with output streams mocked out�!certbot._internal.main.sys.stdout��new�!certbot._internal.main.sys.stderr�certbot.util.atexitN)rl �io�StringIOr rD r )r rl rw Z
toy_stdoutry r" r# r# r$ rv � s
lz MainTest._call_no_clientmockc C s8 t �d��}| �g � W d � n1 s*0 Y d S )Nzcertbot._internal.main.run)r rD rn )r �mock_runr# r# r$ �
test_no_flags s
zMainTest.test_no_flagsc
C s� t �� }t �� }tjd|d��� tjd|d��\ z8zt�dg� W n tyT Y n0 W |�� pf|�� }n|�� px|�� }0 W d � n1 s�0 Y W d � n1 s�0 Y d S )Nrz r{ r} z --version)r r� r rD r �
SystemExit�getvalue)r Ztoy_outZtoy_err�outputr# r# r$ � test_version_string_program_name s �z)MainTest.test_version_string_program_namec
C sz d}zFt �d��( t�| j|dd� � W d � n1 s>0 Y W n* tjyt } z|}W Y d}~n
d}~0 0 dS )zQEnsure that a particular error raises a missing cli flag error containing messageNr} )r rD r rl r ZMissingCommandlineFlag)r rl �message�excZexc_r# r# r$ �_cli_missing_flag s :zMainTest._cli_missing_flagz*certbot._internal.log.post_arg_parse_setupc C s2 ddg}| � |d� |�g d�� | � |d� d S )Nz-nr� zspecify a plugin)� --standalone�-dzeg.iszregister before running)r� �extend)r �_rl r# r# r$ �test_noninteractive s z MainTest.test_noninteractiverK rI r� zBcertbot._internal.main.client.Client.obtain_and_enroll_certificaterF c C s� g d�| j }t�� d f|_t�� |_t�d��R}|j} | �|� t�� }
| j d d } dd l
} | �
� }
d|
� � v rtW d � n1 s�0 Y t�d��J}|j} d} |d| g7 }| �|� | j tj
tj
d | tjd
� W d � n1 s�0 Y d S ) N)r� r� �-mz
none@none.comr� r� z --agree-tosr� rM �
user_agentr ZlinuxZ bandersnatchz --user-agentT)r Z
verify_sslr� Zalg)rl r r) r rD Z
ClientNetworkrv r
Zget_os_info_ua� call_args�platform�lowerrq rr �joseZRS256)r ZgscZ_obtZdetr� �__�___rl Z acme_clientZacme_netZos_verZuar� Zplatr# r# r$ �test_user_agent% s, �
�zMainTest.test_user_agent�5certbot._internal.main.plug_sel.record_chosen_plugins�.certbot._internal.main.plug_sel.pick_installerc C s | j g d�dd� d S )N) �installz --domains�foo.bar� --cert-pathr> �
--key-pathrp � --chain-pathro T�rx )rn )r Zmock_pick_installer�_recr# r# r$ �test_installer_selectionF s
�z!MainTest.test_installer_selectionr� c C s~ t jt�d�t�d�t�d�t�d�d�}t �d��6}||_| jg d�dd� |jd d }W d � n1 sp0 Y d S )
Nr> ro rp �r� �
chain_path�fullchain_path�key_pathr� )r� � --cert-name�whateverTr� r )r r) r� � temp_joinrD r rn r� )r �_instr� � mock_installr! � mock_getlin� call_configr# r# r$ �test_installer_certnameM s � z MainTest.test_installer_certnamec C s� t jt�d�t�d�t�d�t�d�d�}t �d��v}||_| jdddd t�d
�gd d � |jd
d
}|�� | jddddt�d�gd d � |jd
d
}W d � n1 s�0 Y d S )Nr> ro rp r� r� r� r� r� r� Zoverriding_privkeyTr� r r� Zoverriding_cert) r r) r� r� rD r rn r� �reset)r r� r� r� r� r! r� r� r# r# r$ � test_installer_param_override^ s* �
��
��z&MainTest.test_installer_param_overridec C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� Znotfoundr� Zinvalid�r; r< r r� rn )r r� r� r# r# r$ �test_installer_param_errorz s z#MainTest.test_installer_param_errorr
c C sn t jt�d�t�d�t�d�t�d�d�}t �d��&}||_| jdgdd� W d � n1 s`0 Y d S ) Nr> ro rp r� r� r� Tr� )r r) r� r� rD r rn )r � mock_instZ mock_getcertr� r� r! r� r# r# r$ �test_installer_select_cert� s � .z#MainTest.test_installer_select_certzcertbot.util.exe_existsc C s d|_ tj�� }g d�}dddt�d�dt�d�dd d
d d g }d
|v rX| �|�\}}}}| �dgd� t� d��b}t� d��8} t�
� | _ | �g d�� |j d \}
} } W d � n1 s�0 Y W d � n1 s�0 Y t� d�� }
| �ddg� W d � n1 �s0 Y d S )NT)z--apachez--authenticatorr r� r r� Zblahr� z--nginx-server-rootz/nonexistent/thingr� r� �--debugr r� z(With the standalone plugin, you probablyrG rF )r� z--manualr� r� r � certbot._internal.main.certonly�auth) r r rh ri r� r� rn r� r rD r) r� )r Zmock_exe_existsr� r� r� Z real_pluginsrl r" r\ Zmock_gscZ
unused_configr� Zunused_installer�
mock_certonlyr# r# r$ �test_configurator_selection� s(
�
< z$MainTest.test_configurator_selectionc C sF | � dg�\}}}}| � g d��\}}}}|j�tjdtjtj� d S )N�rollback)r� z
--checkpointsZ123�{ )rn r� rq r rr )r r� r[ r# r# r$ �
test_rollback� s
�zMainTest.test_rollbackz+certbot._internal.cert_manager.certificatesc C s | � dg� d S )NZ certificates�rv �r r r# r# r$ �test_certificates� s zMainTest.test_certificatesr� c C s | � dg� d S )N�deleter� r� r# r# r$ � test_delete� s zMainTest.test_deletez$certbot._internal.main.plugins_discozFcertbot._internal.main.cli.HelpfulArgumentParser.determine_help_topicsc sF g d�� t j� fdd�tt� ��D �� D ]}| �dgt|� � q(d S )N)�--init� --preparez--authenticatorsz --installersc 3 s | ]}t �� |�V qd S r� )� itertools� combinations)r� r� ��flagsr# r$ � <genexpr>� s �z(MainTest.test_plugins.<locals>.<genexpr>rm )r� ro �range�lenrn �list)r r� �_det�
mock_discorl r# r� r$ � test_plugins� s
��zMainTest.test_pluginsc C s� g }|j �� }t�� }tj|d��& | �dg|�\}}}}W d � n1 sN0 Y |j�� |�� j �|� |�� � � }d S )N�rw rm �
rh ri r r� r� � patch_display_util_with_stdoutrn �visiblerq �ifaces�r r� r� r� rm rw r� �filteredr# r# r$ �test_plugins_no_args� s
4
z MainTest.test_plugins_no_argsc
C s� g }|j �� }dd� }t�� }t�d��X}tj|d��, ||_| � dg|�\}}}}W d � n1 sh0 Y W d � n1 s�0 Y |j
� � |�
� j � |� |�
� � � } d S )Nc S s | || }}}t �� �dS )zRaises error.Error.N)r r )rH �mode�strictr� r# r# r$ � throw_error� s z?MainTest.test_plugins_no_args_unprivileged.<locals>.throw_errorz certbot.util.set_up_core_dirr� rm )
rh ri r r� r rD r� r� r: rn r� rq r� )
r r� r� r� rm r� rw Zmock_set_up_core_dirr� r� r# r# r$ �!test_plugins_no_args_unprivileged� s
R
z*MainTest.test_plugins_no_args_unprivilegedc C s� g }|j �� }t�� }tj|d��( | �ddg|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }d S )Nr� rm r� r� r� r# r# r$ �test_plugins_init� s
6
zMainTest.test_plugins_initc C s� g }|j �� }t�� }tj|d��( | �g d�|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }|j
�� |j �� |� � }d S )Nr� )rm r� r� ) rh ri r r� r� r� rn r� rq r� �prepare� available) r r� r� r� rm rw r� r� r� r# r# r$ �test_plugins_prepare s
6
z MainTest.test_plugins_preparec C sh d}d}d}d}t �d��,}| �dd|ddd dd
dg � W d � n1 sL0 Y |jd \}}d S ) Nr> �keyro � fullchainr� r� r� r� r� z--fullchain-pathr )r rD rn r� )r r> r� ro r� r� r= �unused_pluginsr# r# r$ �test_certonly_abspath s �$z MainTest.test_certonly_abspathc
C sH z | � g d�� t�d� W n& tjyB } z W Y d }~n
d }~0 0 d S )N)�-aZbad_authr� z!Exception should have been raised)rn r; �failr �PluginSelectionError�r �er# r# r$ �test_certonly_bad_args/ s
z MainTest.test_certonly_bad_argsc C s� t �tj�� | �ddg� W d � n1 s00 Y t �tj�� | �ddg� W d � n1 sj0 Y t �tj�� | �ddg� W d � n1 s�0 Y t �tj�� | �ddg� W d � n1 s�0 Y d S )Nr� Z@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa� aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.z
204.11.231.35z%2001:db8:ac69:3ff:b1cb:c8c6:5a84:a31br� rs r# r# r$ � test_check_config_sanity_domain6 s ,,,z(MainTest.test_check_config_sanity_domainc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz*certonly --csr {0} --allow-subset-of-names�r; r< r r rn rf r� rg rs r# r# r$ �test_csr_with_besteffortD s z!MainTest.test_csr_with_besteffortc
C sJ z| � dtg� W n( tjy: } zW Y d }~d S d }~0 0 t�d� d S )Nz--csrz2Expected supplying --csr to fail with default verb)rn r� r r r; r� r� r# r# r$ �test_run_with_csrH s
zMainTest.test_run_with_csrc C sJ t �tj��* | �d�t�d���� � W d � n1 s<0 Y d S )Nzcertonly --csr {0}zcsr-nonames_512.pem) r; r< r r rn rf r� � vector_pathrg rs r# r# r$ �test_csr_with_no_domainsQ s �z!MainTest.test_csr_with_no_domainsc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz!certonly -d example.org --csr {0}r� rs r# r# r$ �"test_csr_with_inconsistent_domainsV s z+MainTest.test_csr_with_inconsistent_domainsc C s� t �d��h}d|_t �d��8}||_|d u r0g }|d�� 7 }| �|� W d � n1 sZ0 Y W d � n1 sx0 Y d S )N�=certbot._internal.main._find_lineage_for_domains_and_certname)ZnewcertNrG z!-d foo.bar -a standalone certonly)r rD r rg rn )r rG rl � mock_renewalr\ r# r# r$ � _certonly_new_request_commonZ s
z%MainTest._certonly_new_request_commonc C s" t �� }d |j_| �|dg� d S �N� --dry-run)r r) � obtain_and_enroll_certificater r� )r � mock_reportrG r# r# r$ �)test_certonly_dry_run_new_request_successe s z2MainTest.test_certonly_dry_run_new_request_successz+certbot._internal.main.util.atexit_registerz certbot.crypto_util.notAfterc
C sr t j�t j�| jjd��}t j�t j�| jjd��}d}||� j_tj ||||d�}t� � } || j
_| � | � d S )Nz live/foo.barz live/baz.quxz
1970-01-01)r> r� r� r� ) r r� �normpathr� r= r� �dater r r) r� r� )
r Z
mock_notAfterr_ rO r� r� r� r� r! rG r# r# r$ �!test_certonly_new_request_successn s
�
z*MainTest.test_certonly_new_request_successc C sJ t �� }d|j_t�tj�� | �|� W d � n1 s<0 Y d S r ) r r) r� r r; r< r r r� )r r_ rG r# r# r$ �!test_certonly_new_request_failure� s
(z*MainTest.test_certonly_new_request_failureTc s t �d�} tj�tj�| jjd��} tj | | | | d�}
||
j
_ d|
j _ dg|
j
_ d|
_d|
_| |
_t� � }tj dd �}t� � }t�� � |d
|d f|j_ � fd d
�}�z&�z�t�d���X}|
d f|_ t�d��� }||_ t�d���}|s�||� j_t�d���}||j_ t�d��� |�s g d�}|�r,||7 }z0| �|� �\}� }}|�rZtd|� t|��W n" |�sztdt� � ��Y n0 W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s0 Y |�rp| �r\|
�s\|j� tj gtj�tj�| jjd��� n|j� tj gd � n W n | � � � Y n0 W |�r t tj�| jj!d���}W d � n1 �s�0 Y n@|�r
t tj�| jj!d���}W d � n1 �s 0 Y 0 |
|� fS )Nr zlive/foo.bar/fullchain.pem)r> r� r� r� F� isnot.orgr/ Z secp256r1Zpem_key)Zpemro �csrc s � � | � dS )zWrite message to stdout.N)r )r� rl r� r� r# r$ � write_msg� s z0MainTest._test_renewal_common.<locals>.write_msgz5certbot._internal.cert_manager.find_duplicative_certsrG z)certbot._internal.display.obj.get_displayz*certbot._internal.main.renewal.crypto_utilrK )r� r� r� r r� ZReturnedzUnexpected renewal error:
z live/sample-renewal/privkey.pem�letsencrypt.log)"r� r� r r� r� r� r= r� r r) Zshould_autorenewr Zhas_pending_deploymentr, r8 Zelliptic_curve� reuse_keyr r� Zobtain_certificaterD r� r: ZnotAfterrn �print�AssertionError� traceback�
format_excrq rr � _dump_logr rj )r �due_for_renewal�
extra_args�log_outrl � should_renew�error_expected�
quiet_mode� expiry_dater� �new_keyr� r� r! Z
mock_certrZmock_keyrG r� Zmock_fdcr\ Z mock_displayZmock_crypto_utilr" r� �lfr# r� r$ �_test_renewal_common� s�
��
�
��� ��
"�"z MainTest._test_renewal_commonc C s& | � dg �\}}}|j�|�� � d S rv )r Zupdate_all_links_torq Zlatest_common_version)r r� rO r� Zlineager# r# r$ �test_certonly_renewal� s
�z MainTest.test_certonly_renewalr( zEcertbot._internal.log.logging.handlers.RotatingFileHandler.doRolloverc C sV | j dddgdd�\}}}|�d� | j dg d�dd� | j dg d �dd
�\}}}d S ) NFr� �--keepzsimulating renewal)r �The dry run was successful.)z--renew-by-default�-tvvr� zAuto-renewal forced)r r� r )r )r �assert_any_call)r r� r� r* Zmock_displayerr# r# r$ � test_certonly_renewal_triggers� s �
� � z'MainTest.test_certonly_renewal_triggersc C s^ t d� tj�| jjd�}tj�|�rZt|�� }t |�� � W d � n1 sP0 Y d S )NzLogs:r� ) r r r� r� r= rj r� r �read)r Zlog_pathr
r# r# r$ r � s
zMainTest._dump_logc C s. t �| jjd� g d�}| jdg |dd� d S )N�sample-renewal.conf��renewr� r T�rl r �r� � make_lineager= r� r �r rl r# r# r$ �test_renew_verb� s zMainTest.test_renew_verbc C s4 t j| jjddd� g d�}| jdg |ddd� d S )Nr F�Zec)r r� � --reuse-keyT�rl r r� r r r# r# r$ �test_reuse_key s zMainTest.test_reuse_keyz6certbot._internal.storage.RenewableCert.save_successorc C s4 t j| jjddd� ddg}| jdg |ddd� d S )Nr Fr r r Tr r �r Zunused_save_successorrl r# r# r$ �test_reuse_key_no_dry_run s z"MainTest.test_reuse_key_no_dry_runc C s2 t �| jjd� g d�}| jdg |dddd� d S )Nr )r r z --new-keyT)rl r r� r r r" r# r# r$ � test_new_key s
�zMainTest.test_new_keyz sys.stdinc C sF d|j _t�| jjd� g d�}| jdg |dd� | jjd d }d S )NFr r Tr r ) �isattyr r� r r= r� r rm r� )r �stdinrl Zsleep_call_argr# r# r$ �!test_noninteractive_renewal_delay s z*MainTest.test_noninteractive_renewal_delayc C s6 d|j _t�| jjd� g d�}| jdg |dd� d S )NTr r r )r% r r� r r= r� r )r r& rl r# r# r$ �!test_interactive_no_renewal_delay s
z*MainTest.test_interactive_no_renewal_delayr& c C sL d|_ t�| jjd� tj�� tjdd� }| jdd ddg|d�\}}}d S )NFr �Z )Zdaysr )r r rl r ) r r� r r= r� r� �nowZ timedeltar )r r Zexpiryr� rw r# r# r$ � test_renew_skips_recent_certs& s
� z&MainTest.test_renew_skips_recent_certsc C sf t �| jjd� ddg}| jdg |dd�\}}}|�� }g d�}| jdg |ddd�\}}}|�� }d S )Nr r r� Tr )r r� z-q)rl r r
)r� r r= r� r r� )r r� rl rw �outr# r# r$ �test_quiet_renew0 s
� zMainTest.test_quiet_renewc C s0 t �| jjd� g d�}| jdg |ddd� d S )Nr )r r� �--post-hook=no-such-commandTF�rl r r r r r# r# r$ �test_renew_hook_validation> s
�z#MainTest.test_renew_hook_validationc C sZ t �| jjd� g d�}t�d��$ | jdg |ddd� W d � n1 sL0 Y d S )Nr )r r� r. z--disable-hook-validationz!certbot._internal.hooks.post_hookTFr/ )r� r r= r� r rD r r r# r# r$ � test_renew_no_hook_validationD s �z&MainTest.test_renew_no_hook_validationc C s| t j�| jjd�}t j�|�s(t�|� tt j�|d�d�� W d � n1 sR0 Y g d�}| j dg |ddd� d S )Nr� z
empty.confr� r FTr/ )
r r� r� r= r� r� r r r r )r Zrdrl r# r# r$ � test_renew_verb_empty_configL s
z%MainTest.test_renew_verb_empty_configc C s* t �| jjd� | jdg dg d�d� d S )Nr T�r r� r� zsample-renewal)r rl r rs r# r# r$ �test_renew_with_certnameU s
�z!MainTest.test_renew_with_certnamec C s | j dg dg d�dd� d S )NTFr3 )r rl r )r rs r# r# r$ � test_renew_with_bad_certnameZ s
�z%MainTest.test_renew_with_bad_certnamec C s^ t j�| jjd�}t�|� tt j�|d�d��}|�d� W d � n1 sP0 Y d S )Nr� z test.confr� zMy contents don't matter) r r� r� r= r� r r r r )r Zrenewer_configs_dirr r# r# r$ �_make_dummy_renewal_config_ s
z#MainTest._make_dummy_renewal_configc K s� | � � t�d���}t�� }d|_|d ur4d|i|_|d urD||j_||_t�d��2}|�ddg� | j d
dd i|�� W d � n1 s�0 Y |d ur�|r�n W d � n1 s�0 Y d S ) Nr� zsomepath/fullchain.pemr �!certbot._internal.main.renew_certrl r Tr F)TN)
r6 r rD r) r� �
configurationr, r �
setdefaultr )r r r, �assert_oc_calledr� �mock_rcr! r� r# r# r$ �_test_renew_commone s
2zMainTest._test_renew_commonc C s | j ddd� d S )NFT�r: r �r< rs r# r# r$ �test_renew_no_renewalparamsz s z$MainTest.test_renew_no_renewalparamsc C s | j i ddd� d S )NFT)r r: r r> rs r# r# r$ �test_renew_no_authenticator} s �z$MainTest.test_renew_no_authenticatorc C s ddd�}| j |ddd� d S )N�webrootz over 9000)r Z rsa_key_sizeTF)r r r: r> �r r r# r# r$ �test_renew_with_bad_int� s ��z MainTest.test_renew_with_bad_intc C s ddd�}| j |dd� d S )NrA �None)r Z http01_portT�r r: r> rB r# r# r$ � test_renew_with_nonetype_http01� s ��z(MainTest.test_renew_with_nonetype_http01c C s$ ddi}dg}| j |d|dd� d S )Nr rA u
uniçodé.comTF)r r r, r: r> )r r r, r# r# r$ �test_renew_with_bad_domain� s
�z#MainTest.test_renew_with_bad_domainr� c C s2 t �� t �� f|_ddi}| j|dd�� d� d S )Nr rA Tzrenew --configurator apache�r r: rl )r r) r r< rg )r r� r r# r# r$ � test_renew_with_configurator� s �z%MainTest.test_renew_with_configuratorc C s dddd�}| j |dd� d S )NrA rD Z42)r Z webroot_pathZwebroot_imaginary_flagTrE r> rB r# r# r$ �$test_renew_plugin_config_restoration� s ��z-MainTest.test_renew_plugin_config_restorationc
C s0 ddi}| j |dddt�dt�� i�gd� d S )Nr rA Tr z
--webroot-mapr� rH )r< �json�dumpsr� r� rB r# r# r$ �test_renew_with_webroot_map� s
�z$MainTest.test_renew_with_webroot_mapc C sB t �d��$}t|_| jddd� W d � n1 s40 Y d S )Nz+certbot._internal.main.renewal.reconstituteFTr= )r rD � Exceptionr: r< )r Zmock_reconstituter# r# r$ � test_renew_reconstitute_error� s z&MainTest.test_renew_reconstitute_errorc C s� | � � t�d��x}t�� }d|_||_dddii|_t�d��,}t|_| j dd ddgd d
� W d � n1 sr0 Y W d � n1 s�0 Y d S ) Nr� zsomewhere/fullchain.pemr r rA r7 Tr F)r rl r )
r6 r rD r) r� r r8 rN r: r )r r; r! r� r# r# r$ � test_renew_obtain_cert_error� s �
�z%MainTest.test_renew_obtain_cert_errorc C s: | j dd d�� ddd� | j dd d�t��� ddd� d S )NTzrenew -d example.comFr/ zrenew --csr {0})r rg rf r� rs r# r# r$ � test_renew_with_bad_cli_args� s ��z%MainTest.test_renew_with_bad_cli_argsc C s* | j dd dddd�tj�gd�\}}}d S )NFr z --post-hookz {0} -c "print('hello world');")r r r rl )r rf �sys�
executable)r r� rw r# r# r$ �test_no_renewal_with_hooks� s ��� z#MainTest.test_no_renewal_with_hooksr� rG c C s6 dt �� f|_t �� |_}| �g d�� |�� d S )Nr( )r� r� r� r r� )r r) r rn r9 )r Zmock_report_new_certr\ r� r� rG r# r# r$ �test_certonly_reinstall� s z MainTest.test_certonly_reinstallc
C s d}d}t �� }||f|j_tj�tj�| jj d��}tj�tj�| jj d��}|d |f|j
_t � d���}||_tj�tj�| jj d��}d� t
|||��� } |r�| |7 } t � d�� | �| � W d � n1 s�0 Y W d � n1 s�0 Y d | v �rn|j
�|||||� d S )
N�certrro z live/example.com/cert_512.pemz live/example.com/fullchain.pemrG zlive/example.com/chain.pemzV-a standalone certonly --csr {0} --cert-path {1} --chain-path {2} --fullchain-path {3}z"certbot._internal.main.crypto_utilr� )r r) Zobtain_certificate_from_csrr r r� r� r� r= r� Zsave_certificaterD rf r� rg rn rq )
r r rV ro rG r� � full_pathr\ r� rl r# r# r$ �_test_certonly_csr_common� s> � � �� F
�z"MainTest._test_certonly_csr_commonz+certbot._internal.main._csr_report_new_certc C s | � � d S r� �rX )r r_ rO �mock_csr_reportr# r# r$ �test_certonly_csr� s zMainTest.test_certonly_csrc C s | � dg� d S r� rY )r rZ r# r# r$ �test_certonly_csr_dry_run s z"MainTest.test_certonly_csr_dry_runr� r� c C s� d|_ d}| �dtdtd|dg� ttd��}W d � n1 sB0 Y ttd��@}t�|�� �d }|�� j }|�
t � |�t
j� W d � n1 s�0 Y d S ) NFr� r� r� �--serverr� �rbr )r rv � SS_CERT_PATH�RSA2048_KEY_PATHr r �pyopenssl_load_certificater r� r� rq r� �ComparableX509r rr )r r� r� r� r r> r� r# r# r$ �test_revoke_with_key s �
�z MainTest.test_revoke_with_keyc
C sL d}t �tj��( | �dtdtd|dg� W d � n1 s>0 Y d S )Nr� r� r� r] r� )r; r< r r rv �CERT�KEY)r r� r# r# r$ � test_revoke_with_key_mismatch s
�z&MainTest.test_revoke_with_key_mismatchc C s� d|_ t�� d f|_ | �dtdg�\}}}}tt��@}t�|�� �d }|� � j
}|� t �
|�tj� W d � n1 sz0 Y d S )NFr� r� r )r r r) rn rd r r ra r Zacme_from_config_keyr� rq r� rb rr )r r� r� r� r[ r r> r� r# r# r$ �test_revoke_without_key" s
�z MainTest.test_revoke_without_keyc C s� t �d���}t �� }d|_|df|j_| �g d�� t �d��8}t �� }||j_dg|j_| �g d��}W d � n1 s|0 Y W d � n1 s�0 Y d S )NrX Zimaginary_accountZworked)rZ z--emailzuser@example.org� certbot._internal.main.account�
an account) r rD r) rA rZ r rv �AccountFileStorageri )r r� Z
mocked_clientr� Zmocked_account�mocked_storager@ r# r# r$ �
test_register0 s
zMainTest.test_registerz'certbot._internal.updater._run_updatersc C s^ t j|_t�t j�� t�d d d � W d � n1 s80 Y d| j_t �
| jd d � d S r ) r r� r: r; r< r �
renew_certr= �dry_runr Zrun_generic_updaters)r r� r~ r# r# r$ �test_plugin_selection_errorA s ,z$MainTest.test_plugin_selection_errorz3certbot._internal.main.updater.run_renewal_deployerc C sD d| j _t�� }|t�� f|_t�| j dd� |j�� |�� dS )z8A dry-run renewal shouldn't try to restart the installerTN) r= rn r r) r r rm r� r9 )r r� r\ r~ Zmock_run_renewal_deployerr r# r# r$ �#test_renew_doesnt_restart_on_dryrunN s
z,MainTest.test_renew_doesnt_restart_on_dryrun)NF)N)N)NNN)N)Vr@ rA rB rC rV r� rn rv r� r� r� r rD r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r* r r r r r r! r# r$ r' r( r+ r- r0 r1 r2 r4 r5 r6 r< r? r@ rC rF rG rI rJ rM rO rP rQ rT r� r� rU rX r[ r\ rc rf rg rl ro rp r� r# r# rd r$ re � s@
%
�
K
�
re c @ s> e Zd Zdd� Zdd� Zdd� Ze�d�dd � �Zd
d � Z d S )
�UnregisterTestc C s@ t �d�t �d�t �d�t�� d�| _dd� | j�� D �| _d S )Nr� rh rX )rI r r[ � get_utilityc S s i | ]\}}||� � �qS r# r� r� r# r# r$ r� h r4 z(UnregisterTest.setUp.<locals>.<dictcomp>)r rD r� r� r� r� r� rs r# r# r$ rV b s �zUnregisterTest.setUpc C s | j �� D ] }|�� q
d S r� )r� r rb r r# r# r$ r� j s zUnregisterTest.tearDownc C sF t �� | jd j_| jd � }d|j_t �� }t �� }t�||�}d S )Nr rr F)r r r� rj r r� r �
unregister)r r1 r= r� �resr# r# r$ �test_abort_unregistern s z$UnregisterTest.test_abort_unregisterr( c C st t �� }dg|j_|| jd j_t �� df| jd _t �� }|| jd j_t �� }t �� }t�||�}|� d� d S )Nri r ZfoorI r[ zAccount deactivated.)
r r) ri r r� rj �Clientr rs rq )r r* rk � cb_clientr= r� rt r# r# r$ �test_unregisterz s
z UnregisterTest.test_unregisterc C s^ t �� }g |j_|| jd j_t �� }|| jd j_t �� }d|_t �� }t� ||�}d}d S )Nr r[ z"https://acme.example.com/directoryzNCould not find existing account for server https://acme.example.com/directory.)
r r) ri r r� rj rv r� r rs )r rk rw r= r� rt �mr# r# r$ �test_unregister_no_account� s z)UnregisterTest.test_unregister_no_accountN)
r@ rA rB rV r� ru r rD rx rz r# r# r# r$ rq a s
rq c @ s" e Zd ZdZe�d�dd� �ZdS )�MakeOrVerifyNeededDirsz<Tests for certbot._internal.main.make_or_verify_needed_dirs.zcertbot._internal.main.utilc C sp t �| j� | jj| jjfD ]}|j�|tj| jj � q | jj
| jj | jj f}|D ]}|j
j|| jj d� qRd S )N)r� )r Zmake_or_verify_needed_dirsr= r� rk Zset_up_core_dirr r
ZCONFIG_DIRS_MODEZstrict_permissionsZrenewal_pre_hooks_dirZrenewal_deploy_hooks_dirZrenewal_post_hooks_dirZmake_or_verify_dir)r Z mock_utilZcore_dirZ hook_dirsZhook_dirr# r# r$ �test_it� s ���z MakeOrVerifyNeededDirs.test_itN)r@ rA rB rC r rD r| r# r# r# r$ r{ � s r{ c s� e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�e�d �e�d
�e�d �d d
� ����Z e�d�e�d �e�d
�e�d �dd� ����Z
e�d �e�d
�e�d�dd� ���Z e�d �e�d
�e�d�dd� ���Z e�d
�e�d�dd� ��Z
dd� Ze�d�e�d
�e�d�dd� ���Ze�d �e�d
�e�d�e�d�e�� d d � �����Ze�d �e�d
�e�d�e�d�e�� d d � �����Zd d!� Z� ZS )"� EnhanceTestz)Tests for certbot._internal.main.enhance.c s4 t � �� t�� | _| j�� | _tjt j
d�| _ d S �N)�spec) rU rV r� r� r� rX r� r r) r �AutoHSTSEnhancement�
mockinstallerrs rd r# r$ rV � s
zEnhanceTest.setUpc C s | j �� d S r� r� rs r# r# r$ r� � s zEnhanceTest.tearDownc
C s� t j�� }t�||�}t�d���}dg|_t�d���}dg|_t�d��P}t�� }||_ ||_t
� ||� |W d � W d � W d � S 1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr
r� r� rG ) r rh ri r rj r rD r r) r= r �enhance)r rl rm r= Z
mock_certsZmock_domr\ rG r# r# r$ rn � s
zEnhanceTest._callr� r� z0certbot._internal.main.display_ops.choose_valuesz0certbot._internal.main._find_domains_or_certnamec C sX t jdd�|_dg|_d|_t �d�� }| �ddg� W d � n1 sJ0 Y d S )N�/tmp/nonexistent�r� r� �NNr� r� �
--redirect�r r) r rD rn )r � mock_findr~ r! r� � mock_pickr# r# r$ �test_selection_question� s z#EnhanceTest.test_selection_questionc C s� t jdd�|_dg|_d|_t �d��H t �d�� }| �g d��}W d � n1 sV0 Y W d � n1 st0 Y d S )Nr� r� r� r� r� z.certbot._internal.main.plug_sel.logger.warning)r� r� rA r� r� )r r� r~ r! r� Zmock_logrG r# r# r$ �test_selection_auth_warning� s z'EnhanceTest.test_selection_auth_warningc s` t jdd�|_dg|_t �d��, | �g d��� ddg}dg}W d � n1 sR0 Y d S ) Nr� r� r� r� �r� r� �--hstsZredirectZhstsZuirr� )r r� r~ r! Zreq_enhZ not_req_enhr# )rG r$ �test_enhance_config_call� s z$EnhanceTest.test_enhance_config_callc C sR t jdd�|_dg|_t �d�� | �g d��}W d � n1 sD0 Y d S )Nr� r� r� r� )r� r� r� z--non-interactiver� )r r� r~ r! rG r# r# r$ �test_enhance_noninteractive� s � z'EnhanceTest.test_enhance_noninteractivec C sn g |_ t�d��J t�tj�� | �g d�� W d � n1 sB0 Y W d � n1 s`0 Y d S )Nr� r� )r r rD r; r< r r rn )r r� r~ r# r# r$ �test_user_abort_domains s z#EnhanceTest.test_user_abort_domainsc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r )r; r< r ZMisconfigurationErrorrn rs r# r# r$ � test_no_enhancements_defined s z(EnhanceTest.test_no_enhancements_definedrx c C s* dg|_ d|_ t�� |_| �ddg�}d S )Nr� r� r� r� )r r r� r: rn )r r� r~ r� rG r# r# r$ ro s
z'EnhanceTest.test_plugin_selection_errorr� c C s2 | j |_ddg|_tjdd�|_| �ddg� d S )Nr� � another.tldr� r� r� � --auto-hsts)r� r r r) rn �r r� r� r� r~ r! r# r# r$ �test_enhancement_enable s
z#EnhanceTest.test_enhancement_enablec C sf t �| jd�|_ddg|_tjdd�|_t�tj �� | �
ddg� W d � n1 sX0 Y d S )Nr r� r� r� r� r� r� ) r rz r= r r r) r; r< r r| rn r� r# r# r$ �%test_enhancement_enable_not_supported, s
z1EnhanceTest.test_enhancement_enable_not_supportedc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r� )r; r< r r rn rs r# r# r$ � test_enhancement_enable_conflict8 s z,EnhanceTest.test_enhancement_enable_conflict)r@ rA rB rC rV r� rn r rD r� r� r� r� r� r� ro r� r� r� r� r� r� r# r# rd r$ r} � sV
r} c sX e Zd ZdZ� fdd�Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Z� Z S )
� InstallTestz)Tests for certbot._internal.main.install.c s t � �� tjtjd�| _d S r~ )rU rV r r) r r� r� rs rd r# r$ rV @ s
zInstallTest.setUpr� r� c C sh t �| jd�|_tj�� }d| j_d| j_t �
t j �� t
�| j|� W d � n1 sZ0 Y d S )Nr TZ nonexistent)r rz r= r r rh ri r{ r0 r; r< r r| r r� �r r� r� rm r# r# r$ �&test_install_enhancement_not_supportedD s
z2InstallTest.test_install_enhancement_not_supportedc C sp | j |_tj�� }d| j_d | j_d| j_d| j_ t
� t j
�� t�| j|� W d � n1 sb0 Y d S )NTr� )r� r r rh ri r= r{ r0 r� r� r; r< r r� r r� r� r# r# r$ �$test_install_enhancement_no_certnameN s
z0InstallTest.test_install_enhancement_no_certname)
r@ rA rB rC rV r rD r� r� r� r# r# rd r$ r� = s r� c @ sx e Zd ZdZdd� Zdd� Zedd� �Zedd � �Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� ZdS )�ReportNewCertTestznTests for certbot._internal.main._report_new_cert and
certbot._internal.main._csr_report_new_cert.
c C sJ t �d�| _| j�� | _t �d�| _| j�� | _t�ddddd�| j_d S )Nr( z+certbot._internal.main.crypto_util.notAfteri� rM r ) r rD � notify_patchrX r* �notafter_patchZ
mock_notafterr� r rs r# r# r$ rV ` s
zReportNewCertTest.setUpc C s | j �� | j�� d S r� )r� rb r� rs r# r# r$ r� h s
zReportNewCertTest.tearDownc O s ddl m} ||i |��S )Nr )�_report_new_cert)rk r� )�clsrl r� r� r# r# r$ rn l s zReportNewCertTest._callc O s ddl m} ||i |��S )Nr )�_csr_report_new_cert)rk r� )r� rl r� r� r# r# r$ � _call_csrq s zReportNewCertTest._call_csrc C s( | � tjdd�d d d � | j�d� d S �NT�rn r �rn r r r* r) rs r# r# r$ �test_report_dry_runv s z%ReportNewCertTest.test_report_dry_runc C s( | � tjdd�d d d � | j�d� d S r� �r� r r r* r) rs r# r# r$ �test_csr_report_dry_runz s z)ReportNewCertTest.test_csr_report_dry_runc C s� t �t��( | �tjdd�d d d � W d � n1 s80 Y t �t��( | �tjdd�d d d � W d � n1 sz0 Y d S )NFr� )r; r< r rn r r r� rs r# r# r$ �test_report_no_paths~ s 6 z&ReportNewCertTest.test_report_no_pathsc C s( | � tjdd�ddd� | j�d� d S )NFr� �/path/to/cert.pem�/path/to/fullchain.pem�/path/to/privkey.pemaA
Successfully received certificate.
Certificate is saved at: /path/to/fullchain.pem
Key is saved at: /path/to/privkey.pem
This certificate expires on 1970-01-01.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.r� rs r# r# r$ � test_report� s ��z ReportNewCertTest.test_reportc C s( | � tjdd�ddd � | j�d� d S )NFr� r� r� a
Successfully received certificate.
Certificate is saved at: /path/to/fullchain.pem
This certificate expires on 1970-01-01.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.r� rs r# r# r$ �test_report_no_key� s ��z$ReportNewCertTest.test_report_no_keyc C s* | � tjddd�ddd� | j�d� d S )NF)rn �preconfigured_renewalr� r� r� ��
Successfully received certificate.
Certificate is saved at: /path/to/fullchain.pem
Key is saved at: /path/to/privkey.pem
This certificate expires on 1970-01-01.
These files will be updated when the certificate renews.r� rs r# r# r$ �$test_report_no_preconfigured_renewal� s ��z6ReportNewCertTest.test_report_no_preconfigured_renewalc C s( | � tjdd�ddd� | j�d� d S )NFr� r� z/path/to/chain.pemr� z�
Successfully received certificate.
Certificate is saved at: /path/to/cert.pem
Intermediate CA chain is saved at: /path/to/chain.pem
Full certificate chain is saved at: /path/to/fullchain.pem
This certificate expires on 1970-01-01.r� rs r# r# r$ �test_csr_report� s ��z!ReportNewCertTest.test_csr_reportc C s, | � tjdddd�ddd� | j�d� dS ) zBShouldn't get a message about autorenewal if no --manual-auth-hookFr N)rn r �manual_auth_hookr� r� r� r� r� rs r# r# r$ �test_manual_no_hooks_report� s ��z-ReportNewCertTest.test_manual_no_hooks_reportN)r@ rA rB rC rV r� � classmethodrn r� r� r� r� r� r� r� r� r� r# r# r# r$ r� [ s
r� c @ sZ e Zd ZdZdd� Zdd� Zedd� �Zed�d d
�Z d d � Z
d
d� Z dd� Z dd� Z
dS )�ReportNextStepsTestz3Tests for certbot._internal.main._report_next_stepsc C sL t jddd dd d�| _t �d�}|�� | _| �|j� tj | _
t � � t_ d S )Nr� Tr )Z cert_namer� r� r r� r( )
r r) r= rD rX r* ra rb rR rw �
old_stdoutr r� )r r� r# r# r$ rV � s �
zReportNextStepsTest.setUpc C s | j t_d S r� )r� rR rw rs r# r# r$ r� � s z ReportNextStepsTest.tearDownc O s ddl m} ||i |�� d S )Nr )�_report_next_steps)rk r� )r� rl r� r� r# r# r$ rn � s zReportNextStepsTest._call)�returnc C s | j jd d d S )NrM r )r* �call_args_listrs r# r# r$ �_output� s zReportNextStepsTest._outputc C s. d| j _d| j _| �| j dd� | j�� dS )z No steps for a normal renewalr z /bin/trueN)r= r r� rn r* r9 rs r# r# r$ r� � s z ReportNextStepsTest.test_reportc C s d| j _| �| j dd� dS )z --csr requires manual renewalzfoo.csrN)r= r� rn rs r# r# r$ r� � s z#ReportNextStepsTest.test_csr_reportc C s d| j _| �| j dd� dS )z/--manual without a hook requires manual renewalr N)r= r rn rs r# r# r$ �test_manual_no_hook_renewal� s z/ReportNextStepsTest.test_manual_no_hook_renewalc C s d| j _| �| j dd� dS )z2No --preconfigured-renewal needs manual cron setupFN)r= r� rn rs r# r# r$ � test_no_preconfigured_renewal� s z1ReportNextStepsTest.test_no_preconfigured_renewalN)r@ rA rB rC rV r� r� rn �strr� r� r� r� r� r# r# r# r$ r� � s
r� c sj e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
e � d�dd� �Z
dd� Z� ZS )�UpdateAccountTestz/Tests for certbot._internal.main.update_accountc st t �d�t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd �� D �| _� �� D ]}| �|j� qXt� � � S )
Nrh r~ rX r� r( z*certbot._internal.eff.prepare_subscription)r �atexitr[ �determine_account�notify� prepare_subr
c s i | ]}|� | � � �qS r# r� �r� r� �rc r# r$ r� r4 z+UpdateAccountTest.setUp.<locals>.<dictcomp>�
r rD r� r� r� r ra rb rU rV r rd r� r$ rV s � zUpdateAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S �Nrz r} r
rf rg rh �r rD r= r� rk rj r r r# r# r$ rn s �
��zUpdateAccountTest._callc C sX t �� }t �� }t �� }|g|j_|| jd j_|j|j_|t �� f| jd _|||fS )Nr r� )r r) ri r r� rj �bodyr� �r rJ Z mock_account� mock_regrr# r# r$ �_prepare_mock_account s
z'UpdateAccountTest._prepare_mock_accountc C sJ | � � \}}}| �|�}|jjjdd� | jd �d� | jd �� dS )z9Utility to assert that email removal is handled correctlyr# ��contactr� zFAny contact information associated with this account has been removed.r� N)r� rn r� �updater) r� r9 )r rl r� rJ r� �resultr# r# r$ �_test_update_no_contact# s
�z)UpdateAccountTest._test_update_no_contactc C s" t �� }g |j_|| jd j_dS �z2Test that no existing account is handled correctlyr N�r r) ri r r� rj �r rJ r# r# r$ �test_no_existing_accounts5 s z+UpdateAccountTest.test_no_existing_accountsc C s | � ddg� dS )zBTest that --register-unsafely-without-email is handled as no email�update_accountz!--register-unsafely-without-emailN�r� rs r# r# r$ � test_update_account_remove_email> s z2UpdateAccountTest.test_update_account_remove_emailc C s | � g d�� dS )z9Test that providing an empty email is handled as no email)r� r� r4 Nr� rs r# r# r$ � test_update_account_empty_emailB s z1UpdateAccountTest.test_update_account_empty_emailz,certbot._internal.main.display_ops.get_emailc C sJ d|_ | �� \}}}t�� }|| jd j_ | �dg�}| jd �d� dS )z=Test that updating with a singular email is handled correctlyzuser@example.comr[ r� r� z4Your e-mail address was updated to user@example.com.N)r r� r r) r� rv rn r) )r Z
mock_emailr� rJ rG r� r# r# r$ � test_update_account_with_emailF s
�z0UpdateAccountTest.test_update_account_with_emailc C s6 | � � \}}}|jjjddgd� | jd �d� dS )z8Test that multiple email addresses are handled correctlyzmailto:user@example.comzmailto:user@example.orgr� r� zEYour e-mail address was updated to user@example.com,user@example.org.N)r� r� r� r) r� )r r� rJ r� r# r# r$ �(test_update_account_with_multiple_emails[ s �
�z:UpdateAccountTest.test_update_account_with_multiple_emails)r@ rA rB rC rV rn r� r� r� r� r� r rD r� r� r� r# r# rd r$ r� � s
r� c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z � Z
S )�ShowAccountTestz-Tests for certbot._internal.main.show_accountc sl t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd�� D �| _� �� D ]}| �|j� qPt� � � S ) Nrh r~ rX r� r( )r r� r[ r� r� r
c s i | ]}|� | � � �qS r# r� r� r� r# r$ r� s r4 z)ShowAccountTest.setUp.<locals>.<dictcomp>r� r rd r� r$ rV j s � zShowAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S r� r� r r# r# r$ rn y s �
��zShowAccountTest._callc C s\ t �� }t �� }t �� }|g|j_|| jd j_|j|j_d|jj _|t �� f| jd _d S )Nr s foobarbazr� )
r r) ri r r� rj r� r� r� Z
thumbprintr� r# r# r$ r� � s
z%ShowAccountTest._prepare_mock_accountc C sR | � � t�� }t�� }||j_d|_||jj_|| j d j
_dg}| � |� d S )Nz+https://www.letsencrypt-demo.org/acme/reg/1r[ � show_account) r� r r) r� r� Zurir� Zquery_registrationr r� rv rn )r r� rG r� rl r# r# r$ �_test_show_account� s
z"ShowAccountTest._test_show_accountc C s" t �� }g |j_|| jd j_dS r� r� r� r# r# r$ r� � s z)ShowAccountTest.test_no_existing_accountsc
C s` | � � t�� }d|_|| jd j_z| �dg� W n& tj yZ } z W Y d}~n
d}~0 0 dS )z;Test that issues with the ACME client are handled correctlyNr[ r� )
r� r r) r� r� rv r rn r r )r rG r� r# r# r$ �test_no_existing_client� s z'ShowAccountTest.test_no_existing_clientc C s& | � d� | jd �t�d�g� d S )Nr# r� z�Account details for server https://acme-v02.api.letsencrypt.org/directory:
Account URL: https://www.letsencrypt-demo.org/acme/reg/1
Account Thumbprint: Zm9vYmFyYmF6
Email contact: none�r� r� Zassert_has_callsr r� rs r# r# r$ �test_no_contacts� s
�z ShowAccountTest.test_no_contactsc C s* d}| � |� | jd �t�d�g� d S )N)�mailto:foo@example.comr� z�Account details for server https://acme-v02.api.letsencrypt.org/directory:
Account URL: https://www.letsencrypt-demo.org/acme/reg/1
Account Thumbprint: Zm9vYmFyYmF6
Email contact: foo@example.comr� �r r� r# r# r$ �test_single_email� s
�z!ShowAccountTest.test_single_emailc C s* d}| � |� | jd �t�d�g� d S )N)r� zmailto:bar@example.comr� z�Account details for server https://acme-v02.api.letsencrypt.org/directory:
Account URL: https://www.letsencrypt-demo.org/acme/reg/1
Account Thumbprint: Zm9vYmFyYmF6
Email contacts: foo@example.com, bar@example.comr� r� r# r# r$ �test_double_email� s
�z!ShowAccountTest.test_double_email)r@ rA rB rC rV rn r� r� r� r� r� r� r� r� r# r# rd r$ r� g s
r� c @ s` e Zd ZdZejZdZe� d�Ze j
dd� �Z e j
dd� �Ze j
d�� d �d
d � �Zd d
� ZdS )�
TestLockOrderzFTests that Certbot's directory locks were acquired in the right order.z Expected TestLockOrder errorz|1 renew failurec c s4 t �d��}|V W d � n1 s&0 Y d S )Nz certbot._internal.lock.lock_dir)r rD )r �
mock_lock_dirr# r# r$ r� � s zTestLockOrder.mock_lock_dirc # s� � ��fdd�}����fdd�}t j�tjd|��H t j�tjd|�� dV W d � n1 sd0 Y W d � n1 s�0 Y dS )zJPatches plugin prepare to call mock_lock_dir and raise the expected error.c s �� � �� �j��d S r� ��EXPECTED_ERROR_TYPE�EXPECTED_ERROR_STR�Z unused_self)�authenticator_dirr� r r# r$ �authenticator_lock� s z=TestLockOrder.mock_plugin_prepare.<locals>.authenticator_lockc s �� � �dkr �� �j��d S )Nr� r� r� )�
installer_dirr� r �
subcommandr# r$ �installer_lock� s z9TestLockOrder.mock_plugin_prepare.<locals>.installer_lockr� N)r rD �objectr Z
Authenticatorr rz )r r� r� r� r� r� r� r# )r� r� r� r r� r$ �mock_plugin_prepare� s
z!TestLockOrder.mock_plugin_preparezcertonly install renew run)�paramsc c s� t |d �}t |d �}t |d �}t |d �}t |d �}|j} | dddd d
d |d |d
|g }
t�|d� | �|||| ��@ ||||g} | dkr�|
| fV n|
| |g fV W d � n1 s�0 Y dS )aR Sets up Certbot with args and mocks to error after acquiring the last lock.
This fixture yields the CLI arguments that should be given to Certbot
and the expected order of directories to be locked. An error is raised
after acquiring the last lock just as a means of stopping Certbot's
execution.
r r= r ZlogsZworkr� r z-ir z--no-random-sleep-on-renewr
rg rf r r� N)r� Zparamr� r r� ) r r� ZrequestZtmp_pathr� r� r� rj rk r� rl �
lock_orderr# r# r$ �args_and_lock_order� s
� z!TestLockOrder.args_and_lock_orderc C s^ |\}}t j| j| jd�� t�|� W d � n1 s:0 Y t|j|�D ]\}}qPd S )Nr5 )r; r< r� �EXPECTED_ERROR_STR_REGEXr �zipr� )r r� r� rl r� r� Z
locked_dirr# r# r$ �test_lock_order
s
(z TestLockOrder.test_lock_orderN)r@ rA rB rC r r r� r� r� r; Zfixturer� �
contextlib�contextmanagerr� rg r� r� r# r# r# r$ r� � s
r� �__main__rM )UrC r� r� � importlibr rn r r� rK r� rR r� r �typingr Zunittestr r Zjosepyr� r; r� Z
acme.messagesr ra Zcertbotr r r r
Zcertbot._internalr r r
r r Zcertbot._internal.pluginsr r r r Zcertbot.compatr r Zcertbot.pluginsr Zcertbot.tests.utilZtestsr� r� r� rd r� re ZJWKRSA�loadZ load_vectorr� r` r_ ZTestCaser ZConfigTestCaserE r� r� ZTempDirTestCaser� r� r, r? re rq r{ r} r� r� r� r� r� r� r@ �exit�argv�__file__r# r# r# r$ �<module> s�
RX ggk >
o4ihK
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg