Your IP : 216.73.216.172
U
�]�5 � @ sL d Z ddlZddlZddlZddlZddlZddlm m Z
ddl m Z ddl m
Z
ddl m Z ddlmZ ddlmZ e
�d�Ze
�d�Ze
�d �Ze
�d
�Ze
�d �Ze
�d �Ze
�d �Ze
�d �Ze
�d
�Ze
�d�Z e
�d�Z G dd� de
j �Z G dd� de
j �Z G dd� dej!�Z"G dd� dej!�Z#G dd� dej!�Z$G dd� dej!�Z%G dd � d ej!�Z&G d d � d e&�Z'G d d � d e&�Z(G d!d"� d"e&�Z)G d#d$� d$e&�Z*G d%d&� d&ej!�Z+G d'd(� d(ej!�Z,G d)d*� d*ej!�Z-G d+d,� d,ej!�Z.G d-d.� d.ej!�Z/G d/d0� d0ej!�Z0G d1d2� d2ej!�Z1G d3d4� d4ej!�Z2e3d5k�rHe�4� dS )6z Tests for certbot.crypto_util.� N)�errors)�
interfaces)�util)�os)�
filesystemzrsa256_key.pemzrsa512_key.pemzrsa2048_key.pem� cert_512.pemz
cert_2048.pemznistp256_key.pemzcert-nosans_nistp256.pemc s\ e Zd ZdZ� fdd�Z� fdd�Zedd� �Ze� d�d d
� �Z
e� d�d d � �Z � Z S )
�InitSaveKeyTestz,Tests for certbot.crypto_util.init_save_key.c sX t t| ��� tj�| jd�| _tj | jdd� t
� t
j � t
j�tjdd�tj� d S )N�workdiri� )�modeT�Zstrict_permissions)�superr �setUpr �path�join�tempdirr r �mkdir�logging�disableZCRITICAL�zope� component�provideUtility�mock�Mockr �IConfig��self�� __class__� �@/usr/lib/python3/dist-packages/certbot/tests/crypto_util_test.pyr
s
�zInitSaveKeyTest.setUpc s t t| ��� t�tj� d S �N)r r �tearDownr r ZNOTSETr r r r r! ( s zInitSaveKeyTest.tearDownc C s ddl m} |||d�S )Nr )�
init_save_key�key-certbot.pem)�certbot.crypto_utilr" )�clsZkey_sizeZkey_dirr" r r r �_call- s zInitSaveKeyTest._callz certbot.crypto_util.make_keyc C sV d|_ | �d| j�}| �|jd� | �d|jk� | �tj� tj�
| j|j��� d S )Ns key_pem� r# ) � return_valuer& r � assertEqual�pem�
assertTrue�filer r �existsr )r � mock_make�keyr r r � test_success2 s
z InitSaveKeyTest.test_successc C s t |_| �t | jd| j� d S )Ni� )�
ValueError� side_effect� assertRaisesr& r )r r. r r r �test_key_failure: s z InitSaveKeyTest.test_key_failure)
�__name__�
__module__� __qualname__�__doc__r
r! � classmethodr& r �patchr0 r4 �
__classcell__r r r r r s
r c s< e Zd ZdZ� fdd�Ze�d�e�d�dd� ��Z� ZS )�InitSaveCSRTestz,Tests for certbot.crypto_util.init_save_csr.c s* t t| ��� tj�tjdd�tj � d S )NTr )
r r< r
r r r r r r r r r r r r
C s
�zInitSaveCSRTest.setUpzacme.crypto_util.make_csrz+certbot.crypto_util.util.make_or_verify_dirc C sJ ddl m} d|_|tjdd�d| j�}| �|jd� | �d|j k� d S )Nr )�
init_save_csrs csr_pemZ dummy_key)r* � example.comzcsr-certbot.pem)
r$ r= r( r r r r) �datar+ r, )r Zunused_mock_verifyZmock_csrr= �csrr r r �test_itI s
�zInitSaveCSRTest.test_it) r5 r6 r7 r8 r
r r: rA r; r r r r r< @ s
r< c @ sD e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd
d � Z d d
� Z
dS )� ValidCSRTestz(Tests for certbot.crypto_util.valid_csr.c C s ddl m} ||�S )Nr )� valid_csr)r$ rC )r% r@ rC r r r r& Z s zValidCSRTest._callc C s | � | �t�d��� d S �N� csr_512.pem�r+ r& � test_util� load_vectorr r r r �test_valid_pem_true_ s z ValidCSRTest.test_valid_pem_truec C s | � | �t�d��� d S )Nzcsr-san_512.pemrF r r r r �test_valid_pem_san_trueb s z$ValidCSRTest.test_valid_pem_san_truec C s | � | �t�d��� d S )N� csr_512.der)� assertFalser& rG rH r r r r �test_valid_der_falsee s z!ValidCSRTest.test_valid_der_falsec C s | � | �d�� d S �N� �rL r& r r r r �test_empty_falseh s z ValidCSRTest.test_empty_falsec C s | � | �d�� d S �Nzfoo barrP r r r r �test_random_falsek s z ValidCSRTest.test_random_falseN) r5 r6 r7 r8 r9 r& rI rJ rM rQ rS r r r r rB W s
rB c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �CSRMatchesPubkeyTestz1Tests for certbot.crypto_util.csr_matches_pubkey.c O s ddl m} |||�S )Nr )�csr_matches_pubkey)r$ rU )r% �args�kwargsrU r r r r& r s zCSRMatchesPubkeyTest._callc C s | � | �t�d�t�� d S rD )r+ r& rG rH �
RSA512_KEYr r r r �test_valid_truew s �z$CSRMatchesPubkeyTest.test_valid_truec C s | � | �t�d�t�� d S rD )rL r& rG rH �
RSA256_KEYr r r r �test_invalid_false{ s �z'CSRMatchesPubkeyTest.test_invalid_falseN)r5 r6 r7 r8 r9 r& rY r[ r r r r rT o s
rT c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd
S ) �ImportCSRFileTestz/Tests for certbot.certbot_util.import_csr_file.c O s ddl m} |||�S )Nr )�import_csr_file)r$ r] )r% rV rW r] r r r r& � s zImportCSRFileTest._callc C sN t �d�}t �d�}t �d�}| �tjjtj||dd�dgf| � ||�� d S )NrK rE r* �r, r? Zform� Example.com�
rG � vector_pathrH r) �OpenSSL�crypto� FILETYPE_PEMr ZCSRr& )r �csrfiler? Zdata_pemr r r � test_der_csr� s
��
�z ImportCSRFileTest.test_der_csrc C sD t �d�}t �d�}| �tjjtj||dd�dgf| � ||�� d S )NrE r* r^ r_ r` )r re r? r r r � test_pem_csr� s
��
�z ImportCSRFileTest.test_pem_csrc C s$ | � tj| jt�d�t�d�� d S �Nr )r3 r �Errorr& rG ra rH r r r r � test_bad_csr� s �z ImportCSRFileTest.test_bad_csrN) r5 r6 r7 r8 r9 r& rf rg rj r r r r r\ � s
r\ c @ s e Zd ZdZdd� ZdS )� MakeKeyTestz'Tests for certbot.crypto_util.make_key.c C s& ddl m} tj�tjj|d�� d S )Nr )�make_keyr' )r$ rl rb rc Zload_privatekeyrd )r rl r r r rA � s
�zMakeKeyTest.test_itN)r5 r6 r7 r8 rA r r r r rk � s rk c s e Zd ZdZ� fdd�Z� ZS )�VerifyCertSetupz#Refactoring for verification tests.c sd t t| ��� t�� | _t| j_t| j_t | j_
t � d�| j_
t�� | _t| j_t| j_t| j_
d S )Nzcert_fullchain_2048.pem)r rm r
r � MagicMock�renewable_cert� SS_CERT_PATH�cert�chain�RSA2048_KEY_PATH�privkeyrG ra � fullchain�bad_renewable_certr r r r r
� s
zVerifyCertSetup.setUp)r5 r6 r7 r8 r
r; r r r r rm � s rm c @ s< e Zd ZdZdd� Zdd� Zejde� d�d�d d
� �Z
d S ) �VerifyRenewableCertTest�4Tests for certbot.crypto_util.verify_renewable_cert.c C s ddl m} ||�S )Nr )�verify_renewable_cert)r$ ry )r ro ry r r r r& � s z VerifyRenewableCertTest._callc C s | � d | �| j�� d S r �r) r& ro r r r r �test_verify_renewable_cert� s z2VerifyRenewableCertTest.test_verify_renewable_certz-certbot.crypto_util.verify_renewable_cert_sigrO )r2 c C s | � tj| j| j� d S r �r3 r ri r& rv )r Z!unused_verify_renewable_cert_signr r r �"test_verify_renewable_cert_failure� s z:VerifyRenewableCertTest.test_verify_renewable_cert_failureN) r5 r6 r7 r8 r& r{ r r: r ri r} r r r r rw � s
rw c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
S ) �VerifyRenewableCertSigTestrx c C s ddl m} ||�S )Nr )�verify_renewable_cert_sig)r$ r )r ro r r r r r& � s z VerifyRenewableCertSigTest._callc C s | � d | �| j�� d S r rz r r r r �test_cert_sig_match� s z.VerifyRenewableCertSigTest.test_cert_sig_matchc C s0 t �� }t|_t|_t|_| �d | �|�� d S r ) r rn �P256_CERT_PATHrq rr �P256_KEYrt r) r& )r ro r r r �test_cert_sig_match_ec� s
z1VerifyRenewableCertSigTest.test_cert_sig_match_ecc C s& t �d�| j_| �tj| j| j� d S )Nzcert_512_bad.pem)rG ra rv rq r3 r ri r& r r r r �test_cert_sig_mismatch� s z1VerifyRenewableCertSigTest.test_cert_sig_mismatchN)r5 r6 r7 r8 r& r� r� r� r r r r r~ � s
r~ c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
S ) �VerifyFullchainTestz/Tests for certbot.crypto_util.verify_fullchain.c C s ddl m} ||�S )Nr )�verify_fullchain)r$ r� )r ro r� r r r r& � s zVerifyFullchainTest._callc C s | � d | �| j�� d S r rz r r r r �test_fullchain_matches� s z*VerifyFullchainTest.test_fullchain_matchesc C s | � tj| j| j� d S r r| r r r r �test_fullchain_mismatch� s z+VerifyFullchainTest.test_fullchain_mismatchc C s d| j _| �tj| j| j � d S )NZdog)rv rr r3 r ri r& r r r r �test_fullchain_ioerror� s z*VerifyFullchainTest.test_fullchain_ioerrorN)r5 r6 r7 r8 r& r� r� r� r r r r r� � s
r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � VerifyCertMatchesPrivKeyTestz;Tests for certbot.crypto_util.verify_cert_matches_priv_key.c C s ddl m} ||j|j�S )Nr )� verify_cert_matches_priv_key)r$ r� rq rt )r ro r� r r r r& � s z"VerifyCertMatchesPrivKeyTest._callc C s( t | j_t| j_| �d | �| j�� d S r )rp ro rq rs rt r) r& r r r r �test_cert_priv_key_match s z5VerifyCertMatchesPrivKeyTest.test_cert_priv_key_matchc C s( t | j_t| j_| �tj| j| j� d S r ) �RSA256_KEY_PATHrv rt rp rq r3 r ri r& r r r r �test_cert_priv_key_mismatch s z8VerifyCertMatchesPrivKeyTest.test_cert_priv_key_mismatchN)r5 r6 r7 r8 r& r� r� r r r r r� � s r� c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd
S ) �ValidPrivkeyTestz,Tests for certbot.crypto_util.valid_privkey.c C s ddl m} ||�S )Nr )�
valid_privkey)r$ r� )r% rt r� r r r r& s zValidPrivkeyTest._callc C s | � | �t�� d S r )r+ r& rX r r r r rY s z ValidPrivkeyTest.test_valid_truec C s | � | �d�� d S rN rP r r r r rQ s z!ValidPrivkeyTest.test_empty_falsec C s | � | �d�� d S rR rP r r r r rS s z"ValidPrivkeyTest.test_random_falseN) r5 r6 r7 r8 r9 r& rY rQ rS r r r r r�
s
r� c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �GetSANsFromCertTestz1Tests for certbot.crypto_util.get_sans_from_cert.c O s ddl m} |||�S )Nr )�get_sans_from_cert)r$ r� )r% rV rW r� r r r r& " s zGetSANsFromCertTest._callc C s | � g | �t�d��� d S rh �r) r& rG rH r r r r � test_single' s z GetSANsFromCertTest.test_singlec C s | � ddg| �t�d��� d S �Nr> zwww.example.comzcert-san_512.pemr� r r r r �test_san* s �z GetSANsFromCertTest.test_sanN)r5 r6 r7 r8 r9 r& r� r� r r r r r� s
r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd
d � Z d S )
�GetNamesFromCertTestz2Tests for certbot.crypto_util.get_names_from_cert.c O s ddl m} |||�S )Nr )�get_names_from_cert)r$ r� )r% rV rW r� r r r r& 3 s zGetNamesFromCertTest._callc C s | � dg| �t�d��� d S )Nr> r r� r r r r r� 8 s �z GetNamesFromCertTest.test_singlec C s | � ddg| �t�d��� d S r� r� r r r r r� = s �z GetNamesFromCertTest.test_sanc C s, | � dgdd� dD � | �t�d��� d S )Nr> c S s g | ]}d � |��qS )z{0}.example.com)�format)�.0�cr r r �
<listcomp>F s zDGetNamesFromCertTest.test_common_name_sans_order.<locals>.<listcomp>Zabcdzcert-5sans_512.pemr� r r r r �test_common_name_sans_orderB s �z0GetNamesFromCertTest.test_common_name_sans_orderc C s | � tjj| jd� d S )Nz hello there)r3 rb rc ri r& r r r r �test_parse_non_certI s z(GetNamesFromCertTest.test_parse_non_certN)
r5 r6 r7 r8 r9 r& r� r� r� r� r r r r r� 0 s
r� c @ s e Zd ZdZdd� Zdd� ZdS )�CertLoaderTestz8Tests for certbot.crypto_util.pyopenssl_load_certificatec C s> ddl m} |t�\}}| �|�d�tj�|t��d�� d S )Nr ��pyopenssl_load_certificateZsha256)r$ r� �CERTr) Zdigestrb rc Zload_certificate)r r� rq Z file_typer r r �test_load_valid_certP s
�z#CertLoaderTest.test_load_valid_certc C s, ddl m} t�dd�}| �tj||� d S )Nr r� s BEGIN CERTIFICATEs ASDFASDFASDF!!!)r$ r� r� �replacer3 r ri )r r� Z
bad_cert_datar r r �test_load_invalid_certW s �z%CertLoaderTest.test_load_invalid_certN)r5 r6 r7 r8 r� r� r r r r r� M s r� c @ s e Zd ZdZdd� ZdS )�
NotBeforeTestz'Tests for certbot.crypto_util.notBeforec C s$ ddl m} | �|t��� d� d S )Nr )� notBeforez2014-12-11T22:34:45+00:00)r$ r� r) � CERT_PATH� isoformat)r r� r r r �test_notBeforea s �z NotBeforeTest.test_notBeforeN)r5 r6 r7 r8 r� r r r r r� ^ s r� c @ s e Zd ZdZdd� ZdS )� NotAfterTest�&Tests for certbot.crypto_util.notAfterc C s$ ddl m} | �|t��� d� d S )Nr )�notAfterz2014-12-18T22:34:45+00:00)r$ r� r) r� r� )r r� r r r �
test_notAfterj s �zNotAfterTest.test_notAfterN)r5 r6 r7 r8 r� r r r r r� g s r� c @ s e Zd ZdZdd� ZdS )�
Sha256sumTestr� c C s ddl m} | �|t�d� d S )Nr )� sha256sumZ@914ffed8daf9e2c99d90ac95c77d54f32cbd556672facac380f0c063498df84e)r$ r� r) r� )r r� r r r �test_sha256sumr s
�z Sha256sumTest.test_sha256sumN)r5 r6 r7 r8 r� r r r r r� p s r� c @ s e Zd ZdZdd� ZdS )� CertAndChainFromFullchainTestz;Tests for certbot.crypto_util.cert_and_chain_from_fullchainc C sj t �� }|t�� }|| }|d | }ddlm} ||fD ](}||�\}}| �||� | �||� q<d S )N�
r )� cert_and_chain_from_fullchain)r� �decode�SS_CERTr$ r� r) ) r Zcert_pemZ chain_pemZ
fullchain_pemZspacey_fullchain_pemr� ru Zcert_outZ chain_outr r r �"test_cert_and_chain_from_fullchain{ s z@CertAndChainFromFullchainTest.test_cert_and_chain_from_fullchainN)r5 r6 r7 r8 r� r r r r r� x s r� �__main__)5r8 r Zunittestrb r Zzope.componentr Zcertbot.tests.utilZtestsr rG Zcertbotr r Zcertbot.compatr r rH rZ ra r� rX rs r� r� rp r� r� r� Z P256_CERTZTempDirTestCaser r< ZTestCaserB rT r\ rk rm rw r~ r� r� r� r� r� r� r� r� r� r� r5 �mainr r r r �<module> sV
$'