Your IP : 216.73.216.172
U
�]%W � @ s8 d Z ddlZddlZddlZddlZddlZddlmZ ddlm Z
ddlm Z ddlm Z
ddlmZ ddlm Z ddlmZ dd lmZ dd
lmZ dd lmZ G d d � d ej�ZG d
d� dej�Ze jddfdd�ZG dd� dej�ZG dd� dej�ZG dd� dej�Z dd� Z d dd �Z e d k�r4e� � dS ) z Tests for certbot.auth_handler.� N)�
challenges)�client)�messages)�errors)� achallenges)�
interfaces)�util)� acme_utilc @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�ChallengeFactoryTestc C sH ddl m} |d d tjdd�g �| _t�tjdtj tjgd d�| _
d S )Nr �� AuthHandlerZmock_key��key�test� F) �certbot.auth_handlerr �mock�Mock�handlerr �
gen_authzrr �STATUS_PENDING�
CHALLENGES�authzr��selfr � r �A/usr/lib/python3/dist-packages/certbot/tests/auth_handler_test.py�setUp s
�zChallengeFactoryTest.setUpc C s8 | j �| jtdttj���}| �dd� |D �tj� d S )Nr c S s g | ]
}|j �qS r ��chall��.0�achallr r r �
<listcomp>) s z1ChallengeFactoryTest.test_all.<locals>.<listcomp>)r �_challenge_factoryr �range�lenr r � assertEqual�r Zachallsr r r �test_all$ s � �z ChallengeFactoryTest.test_allc C s0 | j �| jdg�}| �dd� |D �tjg� d S )Nr c S s g | ]
}|j �qS r r r r r r r# / s z6ChallengeFactoryTest.test_one_http.<locals>.<listcomp>)r r$ r r' r �HTTP01r( r r r �
test_one_http+ s
�z"ChallengeFactoryTest.test_one_httpc C s> t �tjdtjddd�gtjg�}| �tj| j j
|dg� d S )Nr r Z unrecognized)r �typr ) r r r r r r � assertRaisesr �Errorr r$ )r r r r r �test_unrecognized1 s � �z&ChallengeFactoryTest.test_unrecognizedN)�__name__�
__module__� __qualname__r r) r+ r/ r r r r r
s
r
c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Z d4d5� Z d6d7� Z d8S )9�HandleAuthorizationsTestzmhandle_authorizations test.
This tests everything except for all functions under _poll_challenges.
c C s� ddl m} t�� | _tj�| jtj � tj�tjdd�tj
� tj dd�| _ t
jg| j j_t| j j_tjt�dd�d �| _tj tjd
�| _d | j_tjj| jj_|| j | j| jg �| _ t � t j � d S ) Nr r F�Zdebug_challengesZApacheConfigurator)�nameZ file_pathZPEMr
)�spec� ) r r r r � mock_display�zope� component�provideUtilityr ZIDisplay�IConfig� MagicMock� mock_authr r* �get_chall_pref� return_value�
gen_auth_resp�perform� side_effectr ZKeyZ mock_account� acme_clientZClient�mock_net� acme_versionZ retry_afterr �logging�disableZCRITICALr r r r r B s0
�
�
�z HandleAuthorizationsTest.setUpc C s t �t j� d S �N�rG rH ZNOTSET�r r r r �tearDown[ s z!HandleAuthorizationsTest.tearDownc C s t dtj|d�}tj|gd�}tddd�| jj_t� d���}| j
� |�}| � | jj
jd� | � | jjjd� | � |jjd� | �|jjd d d dk� | �|jjd d d d
k� | � | jjjd� | � | jjjd d d jd � | � t|�d� W 5 Q R X d S ) N�0��domain�challs�combos�Zauthorizationsr7 � )�retry�
wait_valuezcertbot.auth_handler.time� r � �http-01)�gen_dom_authzrr r r r= �_gen_mock_on_pollrE �pollrC �patchr �handle_authorizationsr' �answer_challenge�
call_count�sleep�
assertTrue�call_args_listr> �cleanup� call_argsr, r& )r rQ r �
mock_orderZ mock_timer r r � _test_name1_http_01_1_common^ s �z5HandleAuthorizationsTest._test_name1_http_01_1_commonc C s | j dd� d S �NT�rQ )rf rK r r r �test_name1_http_01_1_acme_1w s z4HandleAuthorizationsTest.test_name1_http_01_1_acme_1c C s d| j _| jdd� d S �NrV Frh )rE rF rf rK r r r �test_name1_http_01_1_acme_2z s z4HandleAuthorizationsTest.test_name1_http_01_1_acme_2c C s� t � | jj_| jjj�tj � t
dt j dd�}t
j|gd�}| j�|�}| �| jjjd� | �| jjjd� | �| jjjd� | jjjd d D ]}| �|jdk� q�| �t|�d� d S ) NrM FrN rR rV r7 r )rX zdns-01)rZ rE r[ rC r> r? r@ �appendr �DNS01rY r r r r= r r] r' r^ r_ rc rd ra r, r& )r r re r" r r r �!test_name1_http_01_1_dns_1_acme_1~ s z:HandleAuthorizationsTest.test_name1_http_01_1_dns_1_acme_1c C s� d| j _t� | j j_| jjj�t j
� t dt j
dd�}tj|gd�}| j�|�}| �| j jjd� | �| j jjd� | �| jjjd� | jjjd d }| �t|�d� | �|d jd� | �t|�d� d S ) NrV rM FrN rR r7 r rX )rE rF rZ r[ rC r> r? r@ rl r rm rY r r r r= r r] r' r^ r_ rc rd r& r, )r r re Zcleaned_up_achallsr r r �!test_name1_http_01_1_dns_1_acme_2� s z:HandleAuthorizationsTest.test_name1_http_01_1_dns_1_acme_2c C s� t jttj|d�| jj_tdtjd�tdtjd�tdtjd�g}tj |d�}t
� | jj _| j �
|�}| �| jjjd� | �| jj jd� | �| jjjd� | �t|�d� d S ) N)rP rQ rM �rO rP �1�2rR rW r7 )� functools�partialrY r r rE Zrequest_domain_challengesrC r r= rZ r[ r r] r' r^ r_ r> rc r& )r rQ �authzrsre r r r r � _test_name3_http_01_3_common� s � � z5HandleAuthorizationsTest._test_name3_http_01_3_commonc C s | j dd� d S rg )rv rK r r r �"test_name3_http_01_3_common_acme_1� s z;HandleAuthorizationsTest.test_name3_http_01_3_common_acme_1c C s d| j _| jdd� d S rj )rE rF rv rK r r r �"test_name3_http_01_3_common_acme_2� s z;HandleAuthorizationsTest.test_name3_http_01_3_common_acme_2c C st t j�tjdd�tj� tdtj d�g}tj
|d�}t � | j j
_| j�|� | �| j jjd� | �| jjjd� d S )NTr4 rM rp rR r7 )r9 r: r; r r r r< rY r r r= rZ rE r[ rC r r] r' r^ r_ r8 Z notification�r ru re r r r �test_debug_challenges� s
� z.HandleAuthorizationsTest.test_debug_challengesc C s@ t dtjd�g}tj|d�}tj| jj_ | �
tj| j j |� d S �NrM rp rR )
rY r r r r= r �AuthorizationErrorr> rB rC r- r r] ry r r r �test_perform_failure� s �z-HandleAuthorizationsTest.test_perform_failurec C sl t dtjd�g}tj|d�}tdd�| jj_| � t
j ��}| j �
|dd� W 5 Q R X | �dt|j�k� d S ) NrM rp rR rV )rT Fr7 z0All authorizations were not finalized by the CA.)rY r r r r= rZ rE r[ rC r- r r| r r] ra �str� exception�r ru re �errorr r r �test_max_retries_exceeded� s z2HandleAuthorizationsTest.test_max_retries_exceededc C s$ t jg d�}| �tj| jj|� d S )NrR )r r= r- r r| r r] )r re r r r �test_no_domains� s z(HandleAuthorizationsTest.test_no_domainsc C s� t dtj|d�g}tj|d�}| jjj�t j
� | j j �
t j
jt jjf� t� | jj_| j �|� | �| jjjd� | �| jjjd d d jd� d S )NrM rN rR r7 r rX )rY r r r r= r> r? r@ rl r r* r � pref_challs�extendr, rm rZ rE r[ rC r] r' rc r_ rd �r rQ ru re r r r �'_test_preferred_challenge_choice_common� s � �z@HandleAuthorizationsTest._test_preferred_challenge_choice_commonc C s | j dd� d S rg )r� rK r r r �-test_preferred_challenge_choice_common_acme_1� s zFHandleAuthorizationsTest.test_preferred_challenge_choice_common_acme_1c C s d| j _| jdd� d S rj )rE rF r� rK r r r �-test_preferred_challenge_choice_common_acme_2� s zFHandleAuthorizationsTest.test_preferred_challenge_choice_common_acme_2c C sH t dtj|d�g}tj|d�}| jj�tj j
� | � t j
| jj|� d S )NrM rN rR )rY r r r r= r r� rl r rm r, r- r r| r] r� r r r �/_test_preferred_challenges_not_supported_common s �zHHandleAuthorizationsTest._test_preferred_challenges_not_supported_commonc C s | j dd� d S rg )r� rK r r r �.test_preferred_challenges_not_supported_acme_1 s zGHandleAuthorizationsTest.test_preferred_challenges_not_supported_acme_1c C s d| j _| jdd� d S rj )rE rF r� rK r r r �.test_preferred_challenges_not_supported_acme_2
s zGHandleAuthorizationsTest.test_preferred_challenges_not_supported_acme_2c C s6 t dtjgd�g}tj|d�}| �tj| jj |� d S r{ )
rY r rm r r= r- r r| r r] ry r r r �%test_dns_only_challenge_not_supported s �z>HandleAuthorizationsTest.test_dns_only_challenge_not_supportedc C st t j| jj_tdtjdd�}tj |gd�}| �
t j| j j |� | �
| jjjd� | �
| jjjd d d jd� d S )NrM TrN rR r7 r rX )r r| r> rB rC rY r r r r= r- r r] r' rc r_ rd r, �r r re r r r �test_perform_error s �z+HandleAuthorizationsTest.test_perform_errorc C sr t j| jj_tdtjd�g}tj |d�}| �
t j| j j |� | �
| jjjd� | �
| jjjd d d jd� d S )NrM rp rR r7 r rX )r r| rE r^ rC rY r r r r= r- r r] r' r> rc r_ rd r, ry r r r �test_answer_error s � �z*HandleAuthorizationsTest.test_answer_errorc
C s� t dtjd�g}tj|d�}ttjd�| jj _
t � � �, | �
tj��}| j�|d� W 5 Q R X W 5 Q R X | �dt|j�k� | �| jjjd� | �| jjjd d d jd � d S )
NrM rp rR ��statusFz Some challenges have failed.r7 r rX )rY r r r r= rZ r �STATUS_INVALIDrE r[ rC � test_util�patch_get_utilityr- r r| r r] ra r~ r r' r> rc r_ rd r, r� r r r � test_incomplete_authzr_error+ s
" �z5HandleAuthorizationsTest.test_incomplete_authzr_errorc
C s� dd� }t dtjd�t dtjd�g}|| jj_tj|d�}t�d��}| j �
|d�}W 5 Q R X | � t |�d � | � |j
d � ttjd
�| jj_t�� �, | �tj��}| j �
|d� W 5 Q R X W 5 Q R X | �d t|j�k� d S ) Nc S s2 t tj�}t tj�}| jjjdkr*|| �S || �S )zBThis mock will invalidate one authzr, and invalidate the other one�will-be-invalid)rZ r � STATUS_VALIDr� �body�
identifier�value)r Z
valid_mockZ invalid_mockr r r �_conditional_mock_on_poll9 s
zLHandleAuthorizationsTest.test_best_effort.<locals>._conditional_mock_on_pollz
will-be-validrp r� rR z+certbot.auth_handler._report_failed_authzrsTr7 r� zAll challenges have failed.)rY r r rE r[ rC r r= r\ r r] r' r& r_ rZ r r� r� r� r- r r| ra r~ r )r r� ru re Z mock_reportZ valid_authzrr� r r r �test_best_effort8 s
�
"z)HandleAuthorizationsTest.test_best_effortc C sx t �tjdt jgtjgd�}tj|gd�}| �tj | j
j |� t �tj dt jgtj gd�}tj|gd�}| j
� |� d S )NrM FrR )
r r r r rm r r= r- r r| r r] r� r� r r r �"test_validated_challenge_not_rerunY s, � � �z;HandleAuthorizationsTest.test_validated_challenge_not_rerunc C s� dd� }dt jfdt jfdt jfg}dd� |D �}tj|d�}|| jj_| j� |�\}}| �
| jjj d � | �
t |�d
� | �
t |�d
� | �
|d j
jjd� | �
|d j
jt j� | �
|d j
jjd� | �
|d j
jt j� d S )
z�When we deactivate valid authzrs in an orderr, we expect them to become deactivated
and to receive a list of deactivated authzrs in return.c S sR | j jtjkrD| j jjdkr&t�d��| j jtj d�}tj
|d�} n
t �d��| S )N�is_valid_but_will_failz Mock deactivation ACME errorr� )r� z Can't deactivate non-valid authz) r� r� r r� r� r� � acme_errorsr. �update�STATUS_DEACTIVATEDZAuthorizationResourcer )r Zauthzbr r r �_mock_deactivateq s
zQHandleAuthorizationsTest.test_valid_authzrs_deactivated.<locals>._mock_deactivateZis_validZ
is_pendingr� c S s0 g | ](}t �|d |d t jg|d dg��qS )r7 r F)r r r* )r! �ar r r r# s �
�zKHandleAuthorizationsTest.test_valid_authzrs_deactivated.<locals>.<listcomp>rR rV r7 r N)r r� r r r= rE Zdeactivate_authorizationrC r Z deactivate_valid_authorizationsr' r_ r& r� r� r� r� r� )r r� Z
to_deactivateZorderrru Zfailedr r r � test_valid_authzrs_deactivatedn s$
��
z7HandleAuthorizationsTest.test_valid_authzrs_deactivatedN) r0 r1 r2 �__doc__r rL rf ri rk rn ro rv rw rx rz r} r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r3 ; s8
!r3 r7 c s d|i� � ��fdd�}|S )N�countc sv � d d � d< � d dk r �nt j}t�|| jjjdd� | jjD �|gt| jj� | jj �}|t
j dt ��id�fS )Nr� r7 r c S s g | ]
}|j �qS r r )r! �challbr r r r# � s z4_gen_mock_on_poll.<locals>._mock.<locals>.<listcomp>z Retry-After)Zheaders)
r r r r r� r� r� r r& � combinationsr r= r~ )r Zeffective_statusZ updated_azr��stater� rU r r �_mock� s �z _gen_mock_on_poll.<locals>._mockr )r� rT rU r� r r� r rZ � s
rZ c @ s e Zd ZdZdd� Zdd� ZdS )�ChallbToAchallTestz0Tests for certbot.auth_handler.challb_to_achall.c C s ddl m} ||dd�S )Nr )�challb_to_achall� account_keyrO )r r� )r r� r� r r r �_call� s zChallbToAchallTest._callc C s& | � | �tj�tjtjddd�� d S )Nr� rO )r� r� rO )r' r� r �HTTP01_Pr Z"KeyAuthorizationAnnotatedChallengerK r r r �test_it� s
��zChallbToAchallTest.test_itN)r0 r1 r2 r� r� r� r r r r r� � s r� c @ s< e Zd ZdZdd� Zdd� Zedd� �Zdd � Zd
d � Z d S )
�GenChallengePathTestz�Tests for certbot.auth_handler.gen_challenge_path.
.. todo:: Add more tests for dumb_path... depending on what we want to do.
c C s t �t j� d S rI )rG rH ZFATALrK r r r r � s zGenChallengePathTest.setUpc C s t �t j� d S rI rJ rK r r r rL � s z GenChallengePathTest.tearDownc C s ddl m} ||||�S )Nr )�gen_challenge_path)r r� )�cls�challbsZ preferencesr� r� r r r r� � s zGenChallengePathTest._callc C s� t jt jf}tjtjg}d}| �| �|||�d� | �| �||d�� | �| �|ddd� ||�d� | �| �|ddd� |d�� dS )z/Given DNS01 and HTTP01 with appropriate combos.)�r �r7 r� N���r� ) r �DNS01_Pr� r rm r* r' r� ra �r r� ZprefsrQ r r r �test_common_case� s z%GenChallengePathTest.test_common_casec C sH t jt jf}tjg}d}| �tj| j|||� | �tj| j||d � d S )N))r r7 ) r r� r� r r* r- r r| r� r� r r r �test_not_supported� s" � �z'GenChallengePathTest.test_not_supportedN)
r0 r1 r2 r� r rL � classmethodr� r� r� r r r r r� � s
r� c @ s8 e Zd ZdZdd� Ze�� dd� �Ze�� dd� �ZdS ) �ReportFailedAuthzrsTestz6Tests for certbot.auth_handler._report_failed_authzrs.c C s� t jdtjtjjddd�d�}| �|d jd k � tjf |�}t j|d< tjf |�}t �
� | _ d| j j j
_||g| j j _tjd dd
�|d< tjf |�}t �
� | _d | jj j
_|g| jj _d S ) N�uriZtls�detail)r� )r r� r� r� r� r z example.comZdnssec)r, r� zfoo.bar)r r* r r� r. Z with_codera Z descriptionZ
ChallengeBodyr r= �authzr1r� r� r� r �authzr2)r �kwargsZhttp_01Z http_01_diffr r r r � s" �
z ReportFailedAuthzrsTest.setUpc C sV ddl m} |�| jgd� |� jj}| �t|�dk� | �d|d d d k� d S )Nr �� auth_handlerr r7 z.Domain: example.com
Type: tls
Detail: detail)�certbotr� �_report_failed_authzrsr� � add_messagerb ra r& )r � mock_zoper� Z call_listr r r �test_same_error_and_domain� s
z2ReportFailedAuthzrsTest.test_same_error_and_domainc C s8 ddl m} |�| j| jgd� | �|� jjdk� d S )Nr r� r rV )r� r� r� r� r� ra r� r_ )r r� r� r r r �!test_different_errors_and_domains s z9ReportFailedAuthzrsTest.test_different_errors_and_domainsN) r0 r1 r2 r� r r� r� r� r� r r r r r� � s
r� c C s dd� | D �S )z(Generate a dummy authorization response.c S s g | ]}d |j j|jf �qS )z%s%s)� __class__r0 rO )r! r r r r r#
s �z!gen_auth_resp.<locals>.<listcomp>r )Z
chall_listr r r rA s �rA Tc C s t �tj| |tjgt|� |�S )z!Generates new authzr for domains.)r r r r r& rN r r r rY s �rY �__main__)T)!r� rs rG Zunittestr Zzope.componentr9 Zacmer r rD r r r� r� r r r Z
certbot.testsr r� ZTestCaser
r3 r� rZ r� r� r� rA rY r0 �mainr r r r �<module> s6 $ W+0