Your IP : 216.73.216.172
U
�]�p � @ sv d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlm Z ddl
m Z ddl
m Z ddl
mZ ddlmZ dd lmZ ddlmZ G d
d � d ej�ZG d d
� d
e�ZG dd� dej�ZG dd� de�ZG dd� de�ZG dd� de�Z G dd� de�Z G dd� de�Z G dd� dej�Z G d d � d ej�Z G d d � d ej�Z!G d d!� d!ej"�Z#e$d"k�rre�%� dS )#� Tests for certbot.cert_manager.� N)�
configuration)�errors)�os)�
filesystem)�util)�ALL_FOUR)� storage_testc s( e Zd ZdZ� fdd�Zdd� Z� ZS )�BaseCertManagerTestz2Base class for setting up Cert Manager tests.
c s� t t� ��� d� j_t�� jj� d tj �
� jj d�d�� _ t
� fdd�� j D ��� _ttj �
� jjd�d��}|�d� W 5 Q R X d S ) NFZspecialarchive)� example.org� other.comc 3 s$ | ] }|� � |� j| �fV qd S �N)�_set_up_config�domains)�.0�domain��self� �A/usr/lib/python3/dist-packages/certbot/tests/cert_manager_test.py� <genexpr># s �z,BaseCertManagerTest.setUp.<locals>.<genexpr>z IGNORE.THIS�wz This file should be ignored!)�superr
�setUp�config�quietr �makedirs�renewal_configs_dirr �path�join�
config_dirr �dict� config_files�open�write)r Zjunk�� __class__r r r s � �
zBaseCertManagerTest.setUpc C s� t �tj�| jj|�� t�� }|d k r<t �|� ||d< nt �tj�| jj |�� t
D ] }tj�| jj||d �||< qXtj�| jj |d �|_ |�
� |S )NZ archive_dirz.pemz.conf)r r r r r r Zlive_dir� configobjZ ConfigObj�default_archive_dirr r �filenamer$ )r r �custom_archive� config_file�kindr r r r , s
�
�z"BaseCertManagerTest._set_up_config)�__name__�
__module__� __qualname__�__doc__r r �
__classcell__r r r% r r
s r
c @ s e Zd ZdZdd� ZdS )�UpdateLiveSymlinksTestz8Tests for certbot.cert_manager.update_live_symlinks
c
s< ddl m} i }| jD ]�}| j| }|dk r2|� ntj�| jj|�� t� fdd�t D ��||< t D ]J}| j
| | }|| | }t |d�� � t�
tj�| jj|d �|� qbq|�| j� t�� }zf| jD ]Z}t D ]P}t�tj�| j
| | �� | �t�t�| j
| | ��t�|| | �� q�q�W 5 t�|� X dS )zTest update_live_symlinksr �� cert_managerNc 3 s$ | ] }|t j�� |d �fV qdS )�1.pemN)r r r )r r, �Zarchive_dir_pathr r r Q s ��zCUpdateLiveSymlinksTest.test_update_live_symlinks.<locals>.<genexpr>�ar5 )�certbotr4 r r r r r r( r! r r" r# �close�symlinkr Zupdate_live_symlinks�getcwd�chdir�dirname� assertEqualr �realpath�readlink) r r4 Z
archive_pathsr r* r, Z live_pathZ archive_pathZprev_dirr r6 r �test_update_live_symlinksE s4
� "
� z0UpdateLiveSymlinksTest.test_update_live_symlinksN)r- r. r/ r0 rA r r r r r2 B s r2 c @ s� e Zd ZdZdd� Ze�� e�d�e�d�dd� ���Z e�� e�d�e�d�dd � ���Z
e�� e�d�e�d�d
d � ���Z d S )
�
DeleteTestz*Tests for certbot.cert_manager.delete
c C s ddl m} |�| j� d S �Nr r3 )r8 r4 �deleter )r r4 r r r �_calln s zDeleteTest._call�)certbot.cert_manager.lineage_for_certnamez certbot.storage.delete_filesc C s* | j |_d| j_| �� |�| jd� dS �� Test deleter N)�test_rc� return_valuer �certnamerE �assert_called_once_with)r �mock_delete_files�mock_lineage_for_certname�unused_get_utilityr r r �test_delete_from_configr s z"DeleteTest.test_delete_from_configc C s4 | j |_tjdgf|� j_| �� |�| jd� dS rG )rI rJ � display_util�OK� checklistrE rL r �r rM rN Z mock_utilr r r � test_delete_interactive_single} s z)DeleteTest.test_delete_interactive_singlec C sR | j |_tjddgf|� j_| �� |�| jd� |�| jd� | �|j d� dS )rH r z other.org� N)
rI rJ rQ rR rS rE Zassert_any_callr r> Z
call_countrT r r r � test_delete_interactive_multiple� s z+DeleteTest.test_delete_interactive_multipleN) r- r. r/ r0 rE � test_util�patch_get_utility�mock�patchrP rU rW r r r r rB j s rB c @ s� e Zd ZdZdd� Ze�d�e�� dd� ��Z e�d�e�� dd� ��Z
e�d �e�d�e�� e�d
�e�d �d d
� �����Z e�d�e�� dd� ��Z e�d�dd� �Z
dS )�CertificatesTestz0Tests for certbot.cert_manager.certificates
c O s ddl m} |||�S )Nr )� certificates)�certbot.cert_managerr] )r �args�kwargsr] r r r �
_certificates� s z CertificatesTest._certificateszcertbot.cert_manager.loggerc C s* | � | j� | �|jj� | �|j� d S r
)ra r �
assertTrue�warning�called�r � mock_utility� mock_loggerr r r � test_certificates_parse_fail� s z-CertificatesTest.test_certificates_parse_failc C s4 d| j _| �| j � | �|jj� | �|jj� d S )NT)r r ra � assertFalseZ notificationrd rb rc re r r r �test_certificates_quiet� s z(CertificatesTest.test_certificates_quietz)certbot.crypto_util.verify_renewable_cert� certbot.storage.RenewableCertz+certbot.cert_manager._report_human_readablec C sN d |_ d|_ | �| j� | �|jj� | �|j� | �|j� | �|j� d S )N� )rJ ra r ri rc rd rb )r Z mock_report�mock_renewable_certrf rg Z
mock_verifierr r r � test_certificates_parse_success� s z0CertificatesTest.test_certificates_parse_successc C s| t �� }t�tjtj�|d�tj�|d�tj�|d�dd��}t �
|j � | � |� | �
|jj� | �|j� t�|� d S )Nr ZworkZlogsF)r Zwork_dirZlogs_dirr )�tempfileZmkdtempr ZNamespaceConfigrZ � MagicMockr r r r r r ra ri rc rd rb �shutilZrmtree)r rf rg Z
empty_tempdirZ empty_configr r r �test_certificates_no_files� s �
z+CertificatesTest.test_certificates_no_filesz8certbot.cert_manager.ocsp.RevocationChecker.ocsp_revokedc sn d |_ ddlm� dd l}dd l}|j�|j�� �}tj dd�}||_
ddg|j _ d|_ |g�tj d d d��� ��fdd �}|� }| �
d
|k� | j
|jd d �7 _
|� }| �
d
|kp�d|k� | �
d|ko�d|k� | j
|jdd�7 _
|� }| �
d|k� | �d|k� | �
d|k�o$d|k� | j
|jd d�7 _
|� }| �
d|k� | �
d|k�ofd|k� d|_ d|_ |� }| �
d|k� tj dd�}||_
ddg|j _ d|_ ��|� |� }| �tt�d|��d � dg�_|� }| �tt�d|��d� dg�_|� }| �tt�d|��d � d�_|� }| �tt�d|��d� d�_|� }| �tt�d|��d� d S ) Nr r3 Znameone�� lineagenameZnametwoF)rK rt c s � � ���S r
)Z_report_human_readabler �r4 Z mock_configZ parsed_certsr r �<lambda>� � z=CertificatesTest.test_report_human_readable.<locals>.<lambda>zINVALID: EXPIREDrV )Zhoursz 1 hour(s)z 2 hour(s)ZVALIDZINVALID� )Zdaysz1 dayZunderz3 daysTzINVALID: TEST_CERT, REVOKEDZ
indescribablez thrice.namedzINVALID:Zhorror)rJ r8 r4 �datetime�pytzZUTCZfromutcZutcnowrZ rp Z
target_expiry�namesZ is_test_certrb Z timedeltari �appendr> �len�re�findallr rK )r Z mock_revokedry rz Zexpiry�certZ
get_report�outr ru r �test_report_human_readable� sd
z+CertificatesTest.test_report_human_readableN)r- r. r/ r0 ra rZ r[ rX rY rh rj rn rr r� r r r r r\ � s&
r\ c @ s6 e Zd ZdZe�d�e�d�e�d�dd� ���ZdS )�SearchLineagesTestz0Tests for certbot.cert_manager._search_lineages.� certbot.util.make_or_verify_dir�"certbot.storage.renewal_conf_filesrk c C sH dg|_ tj|_ddlm} | �|�| jdd� d�d� | � |j
� d S )NZbadfiler r3 c S s | S r
r ��xr r r rv rw z<SearchLineagesTest.test_cert_storage_error.<locals>.<lambda>Zcheck) rJ r �CertStorageError� side_effectr8 r4 r> Z_search_lineagesr rb rd )r rm �mock_renewal_conf_files�mock_make_or_verify_dirr4 r r r �test_cert_storage_error s
z*SearchLineagesTest.test_cert_storage_errorN)r- r. r/ r0 rZ r[ r� r r r r r� s
r� c @ sn e Zd ZdZe�d�e�d�e�d�dd� ���Ze�d�e�d�dd� ��Ze�d�e�d�d d
� ��Zd S ) �LineageForCertnameTestz3Tests for certbot.cert_manager.lineage_for_certnamer� �)certbot.storage.renewal_file_for_certnamerk c C sJ d|_ tjdd�}||_ ddlm} | �|�| jd�|� | �|j � d S )N�
somefile.conf� example.comrs r r3 )
rJ rZ �Mockr8 r4 r> �lineage_for_certnamer rb rd )r rm �mock_renewal_conf_filer� �
mock_matchr4 r r r �test_found_match$ s z'LineageForCertnameTest.test_found_matchc C s8 d|_ ddlm} | �|�| jd�d � | �|j� d S )Nzother.com.confr r3 r� )rJ r8 r4 r> r� r rb rd �r r� r� r4 r r r �
test_no_match0 s z$LineageForCertnameTest.test_no_matchc C s< t �� |_ddlm} | �|�| jd�d � | �|j � d S )Nr r3 r� )
r r� r� r8 r4 r> r� r rb rd r� r r r �test_no_renewal_file8 s
z+LineageForCertnameTest.test_no_renewal_fileN) r- r. r/ r0 rZ r[ r� r� r� r r r r r� ! s r� c @ sR e Zd ZdZe�d�e�d�e�d�dd� ���Ze�d�e�d�dd� ��Zd S )
�DomainsForCertnameTestz3Tests for certbot.cert_manager.domains_for_certnamer� r� rk c C sZ d|_ tjdd�}ddg}||j_ ||_ ddlm} | �|�| jd�|� | � |j
� d S )Nr� r� rs r r r3 ) rJ rZ r� r{ r8 r4 r> �domains_for_certnamer rb rd )r rm r� r� r� r r4 r r r r� D s �z'DomainsForCertnameTest.test_found_matchc C s8 d|_ ddlm} | �|�| jd�d � | �|j� d S )Nr� r r3 r )rJ r8 r4 r> r� r rb rd r� r r r r� S s z$DomainsForCertnameTest.test_no_matchN)r- r. r/ r0 rZ r[ r� r� r r r r r� A s r� c s� e Zd ZdZ� fdd�Zdd� Ze�d�e� � dd� ��Z
e� � d d
� �Z e� � e�d �d d
� ��Z e� � e�d�dd� ��Z
e� � e�d�dd� ��Ze� � e�d�dd� ��Z� ZS )�RenameLineageTestz-Tests for certbot.cert_manager.rename_lineagec s" t t| ��� d| j_d| j_d S )Nr Zafter)r r� r r rK � new_certnamer r% r r r _ s zRenameLineageTest.setUpc O s ddl m} |j||�S rC )r8 r4 Zrename_lineage)r r_ r` r4 r r r rE d s zRenameLineageTest._callr� c C s� d | j _d| j _g |_| �tj| j| j � dg|_|� }tj df|j
_| �tj| j| j � tj df|j
_| �tj| j| j � d S )N�twozone.confr ���) r rK r� rJ � assertRaisesr �ErrorrE rQ �CANCEL�menurR )r �mock_get_utilityr� � util_mockr r r �test_no_certnameh s z"RenameLineageTest.test_no_certnamec C s^ d| j _d | j _|� }tjdf|j_| �tj | j
| j � tj d f|j_| �tj | j
| j � d S )N�one�name) r rK r� rQ r� �inputrJ r� r r� rE rR )r r� r� r r r �test_no_new_certnamez s z&RenameLineageTest.test_no_new_certnamerF c C s. d| j _d| j _d |_| �tj| j| j � d S )Nr� r� )r rK r� rJ r� r �ConfigurationErrorrE )r rN rO r r r �test_no_existing_certname� s �z+RenameLineageTest.test_no_existing_certnamez-certbot.storage.RenewableCert._check_symlinksc C sT d|_ | �| j� ddlm} |�| j| jj�}| �|d k � | �|j | jj� d S �NTr r3 )
rJ rE r r8 r4 r� r� rb r> rt )r �
mock_checkrO r4 �updated_lineager r r �test_rename_cert� s z"RenameLineageTest.test_rename_certc C sp d|_ d | j_|� }tjdf|j_ | �| j� ddlm} |� | j| jj
�}| � |d k � | � |j
| jj
� d S r� )rJ r rK rQ rR r� rE r8 r4 r� r� rb r> rt )r r� r� r� r4 r� r r r �%test_rename_cert_interactive_certname� s z7RenameLineageTest.test_rename_cert_interactive_certnamec C sL d|_ d| j_| �tj| j| j� d�tj j
�| j_| �tj| j| j� d S )NTr z one{0}two) rJ r r� r� r r� rE �formatr r �sep)r r� rO r r r �!test_rename_cert_bad_new_certname� s
z3RenameLineageTest.test_rename_cert_bad_new_certname)r- r. r/ r0 r rE rZ r[ rX rY r� r� r� r� r� r� r1 r r r% r r� \ s(
r� c s2 e Zd ZdZ� fdd�Ze�d�dd� �Z� ZS )�DuplicativeCertsTestz!Test to avoid duplicate lineages.c s$ t t| ��� | j�� | �� d S r
)r r� r r+ r$ �_write_out_ex_kindsr r% r r r � s
zDuplicativeCertsTest.setUpr� c C s� ddl m} t�d�}t| jjd��}|�|� W 5 Q R X || jddg�}| � |d� || jdd g�}| �
|d j j �
d
�� | � |d d � || jdd d g�}| � |d d � | �
|d j j �
d
�� || jdd g�}| � |d� d S )
Nr )�find_duplicative_certszcert-san_512.pem�wbzwow.netz
hooray.org)NNr� zwww.example.comzexample.org.confrx z
something.new)r^ r� rX Z load_vectorr# rI r� r$ r r> rb Z
configfiler) �endswith)r Zunused_makedirr� Z test_cert�f�resultr r r �test_find_duplicative_names� s4
� � � �z0DuplicativeCertsTest.test_find_duplicative_names) r- r. r/ r0 r rZ r[ r� r1 r r r% r r� � s r� c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd
d � Ze �
d �d
d� �Z e �
d �dd� �Z e �
d �dd� �Z
e �
d �dd� �Z� ZS )�CertPathToLineageTestz3Tests for certbot.cert_manager.cert_path_to_lineagec sJ t t| ��� | j�� | �� tj�| j j
ddd�| _ | j df| j _ d S �N�liver �
fullchain.pemrl )
r r� r r+ r$ r� r r r r r � fullchain� cert_pathr r% r r r � s
�zCertPathToLineageTest.setUpc C s ddl m} ||�S )Nr )�cert_path_to_lineage)r^ r� )r �
cli_configr� r r r rE � s zCertPathToLineageTest._callc C s ddl m} |||�S )Nr ��_archive_files)r^ r� )r r� Zfiletyper� r r r r� � s z$CertPathToLineageTest._archive_filesc C s | � d| �| j�� d S )Nr )r> rE r r r r r �test_basic_match� s z&CertPathToLineageTest.test_basic_matchc C s4 | j }tj�| j jddd�|_| �tj| j |� d S )Nr� Z
SailorMoonr� )
r r r r r r� r� r r� rE )r Zbad_test_configr r r �test_no_match_exists� s �z*CertPathToLineageTest.test_no_match_existsz(certbot.cert_manager._acceptable_matchesc C s. dd� g|_ | j| j_| �d| �| j�� d S )Nc S s | j S r
)�fullchain_pathr� r r r rv � rw z>CertPathToLineageTest.test_options_fullchain.<locals>.<lambda>r )rJ r� r r� r> rE �r �mock_acceptable_matchesr r r �test_options_fullchain� s
z,CertPathToLineageTest.test_options_fullchainc C sF dd� g|_ tj�| jjddd�}|df| j_| �d| �| j�� d S )Nc S s | j S r
)r� r� r r r rv � rw z>CertPathToLineageTest.test_options_cert_path.<locals>.<lambda>r� r zcert.pemrl ) rJ r r r r r r� r> rE )r r� Ztest_cert_pathr r r �test_options_cert_path� s � z,CertPathToLineageTest.test_options_cert_pathc sF t j�� jjddd�df� j_� fdd�g|_� �d� �� j�� d S )N�archiver z
cert11.pemrl c s � � | d�S )Nr� r� r� r r r rv rw zACertPathToLineageTest.test_options_archive_cert.<locals>.<lambda>� r r r r r r� rJ r> rE r� r r r �test_options_archive_cert s ��z/CertPathToLineageTest.test_options_archive_certc sF t j�� jjddd�df� j_� fdd�g|_� �d� �� j�� d S )Nr� r zfullchain11.pemrl c s � � | d�S )Nr� r� r� r r r rv s zFCertPathToLineageTest.test_options_archive_fullchain.<locals>.<lambda>r� r� r r r � test_options_archive_fullchain s ��z4CertPathToLineageTest.test_options_archive_fullchain)r- r. r/ r0 r rE r� r� r� rZ r[ r� r� r� r� r1 r r r% r r� � s
r� c sT e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�d d
� �Z e�d�d d � �Z
� Z S )
�MatchAndCheckOverlapszUTests for certbot.cert_manager.match_and_check_overlaps w/o overlapping archive dirs.c sJ t t| ��� | j�� | �� tj�| j j
ddd�| _ | j df| j _ d S r� )
r r� r r+ r$ r� r r r r r r� r� r r% r r r s
�zMatchAndCheckOverlaps.setUpc C s ddl m} |||||�S )Nr )�match_and_check_overlaps)r^ r� )r r� Zacceptable_matchesZ
match_funcZrv_funcr� r r r rE s zMatchAndCheckOverlaps._callc
s: ddl m} � �dg� �� j|� � fdd�dd� �� d S )Nr )�_acceptable_matchesr c s � j jd S )Nr )r r� r� r r r rv & rw z8MatchAndCheckOverlaps.test_basic_match.<locals>.<lambda>c S s | j S r
rs r� r r r rv & rw )r^ r� r> rE r )r r� r r r r� # s
�z&MatchAndCheckOverlaps.test_basic_matchz%certbot.cert_manager._search_lineagesc C s$ g |_ | �tj| j| jd d d � d S r
)rJ r� r r� rE r �r Zmock_search_lineagesr r r �test_no_matches( s z%MatchAndCheckOverlaps.test_no_matchesc C s( ddg|_ | �tj| j| jd d d � d S )NZspiderZdance)rJ r� r ZOverlappingMatchFoundrE r r� r r r �test_too_many_matches- s
z+MatchAndCheckOverlaps.test_too_many_matches) r- r. r/ r0 r rE r� rZ r[ r� r� r1 r r r% r r� s
r� c @ s� e Zd ZdZdd� Zdd� Ze�d�e�d�dd � ��Ze�d�e�d�d
d � ��Z e�d�e�d�d d
� ��Z
e�d�e�d�dd� ��Z e�d�e�d�dd� ��Z e�d�e�d�dd� ��Z
dS )�GetCertnameTestr c C s, t �� | _| j�� | _t�� | _d | j_d S r
) rX rY �get_utility_patch�startr� rZ rp r rK r r r r r 6 s
zGetCertnameTest.setUpc C s | j �� d S r
)r� �stopr r r r �tearDown< s zGetCertnameTest.tearDownr� z(certbot.storage.lineagename_for_filenamec C sn dg|_ d|_ ddlm} d}tjdf| �� j_ | �|j| j ddd�dg� | �
|| �� jj d d k� d S ) N�example.com.confr� r r3 zWhich certificate would you�verbF��allow_multiple) rJ r8 r4 rQ rR r� r� r> �
get_certnamesr rb � call_args�r � mock_name�
mock_filesr4 �promptr r r �test_get_certnames? s ���z"GetCertnameTest.test_get_certnamesc C sn dg|_ d|_ ddlm} d}tjdf| �� j_ | �|j| j dd|d�dg� | �| �� jj
d d |� d S ) Nr� r� r r3 �
custom promptr� F�r� Z
custom_prompt) rJ r8 r4 rQ rR r� r� r> r� r r� r� r r r � test_get_certnames_custom_promptM s" ���z0GetCertnameTest.test_get_certnames_custom_promptc C sJ dg|_ d|_ ddlm} tjdf| �� j_ | jtj |j
| j ddd� d S )Nr� r� r r3 �erroring_anywayFr� ) rJ r8 r4 rQ r� r� r� r� r r� r� r �r r� r� r4 r r r � test_get_certnames_user_abort\ s �z-GetCertnameTest.test_get_certnames_user_abortc C sp dg|_ d|_ ddlm} d}tjdgf| �� j_ | �|j| j ddd�dg� | �
|| �� jj d d k� d S ) Nr� r� r r3 z Which certificate(s) would your� Tr� ) rJ r8 r4 rQ rR r� rS r> r� r rb r� r� r r r �!test_get_certnames_allow_multipleh s$ � ���z1GetCertnameTest.test_get_certnames_allow_multiplec C sp dg|_ d|_ ddlm} d}tjdgf| �� j_ | �|j| j dd|d�dg� | �| �� jj
d d |� d S ) Nr� r� r r3 r� r� Tr� ) rJ r8 r4 rQ rR r� rS r> r� r r� r� r r r �/test_get_certnames_allow_multiple_custom_promptw s( � ���z?GetCertnameTest.test_get_certnames_allow_multiple_custom_promptc C sJ dg|_ d|_ ddlm} tjg f| �� j_ | jtj |j
| j ddd� d S )Nr� r� r r3 r� Tr� ) rJ r8 r4 rQ r� r� rS r� r r� r� r r� r r r �,test_get_certnames_allow_multiple_user_abort� s �z<GetCertnameTest.test_get_certnames_allow_multiple_user_abortN)r- r. r/ r0 r r� rZ r[ r� r� r� r� r� r� r r r r r� 3 s*
r� �__main__)&r0 r~ rq ro Zunittestr' rZ r8 r r Zcertbot.compatr r Zcertbot.displayr rQ Zcertbot.storager Z
certbot.testsr rX ZConfigTestCaser
r2 ZBaseRenewableCertTestrB r\ r� r� r� r� r� r� r� ZTestCaser� r- �mainr r r r �<module> s8 ,(,{ W&; b