/usr/lib/python3.9/site-packages/acme/_internal/tests/__pycache__
a }|�gJ � @ s� d Z ddlZddlZddlmZ ddlmZ ddlZddl m Z ddl Z ddl Z ddl Z ddlmZ ddlmZ e�d�Zeje�d�d �ZG d d � d ej�ZG d d � d ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G d d � d ej�Z!G d d � d ej�Z"G d d!� d!ej�Z#e$d"k�r�e�%e �&ej'd#d� e(g �� dS )$zTests for acme.challenges.� N)�mock)�JWKEC)�errors)� test_util�cert.pem�rsa512_key.pem��keyc @ s e Zd Zdd� ZdS )� ChallengeTestc C s< ddl m} ddl m} |ddi�}||�|j�ks8J �d S )Nr )� Challenge��UnrecognizedChallenge�type�foo)�acme.challengesr r � from_json�jobj)�selfr r �chall� r �H/usr/lib/python3.9/site-packages/acme/_internal/tests/challenges_test.py�test_from_json_unrecognized s z)ChallengeTest.test_from_json_unrecognizedN)�__name__� __module__� __qualname__r r r r r r s r c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�UnrecognizedChallengeTestc C s& ddl m} ddi| _|| j�| _d S )Nr r r r )r r r r �r r r r r �setUp s z UnrecognizedChallengeTest.setUpc C s | j | j�� ksJ �d S �N)r r �to_partial_json�r r r r �test_to_partial_json$ s z.UnrecognizedChallengeTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S )Nr r )r r r r r r r r r �test_from_json' s z(UnrecognizedChallengeTest.test_from_jsonN)r r r r r! r" r r r r r s r c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd S ) �%KeyAuthorizationChallengeResponseTestc C s dd� }t �� | _|| jj_d S )Nc S s | dks J �dS )N�tokenr r )�namer r r �_encode/ s z<KeyAuthorizationChallengeResponseTest.setUp.<locals>._encode)r ZMockr �encode� side_effect)r r& r r r r . s z+KeyAuthorizationChallengeResponseTest.setUpc C s0 ddl m} |dd�}|�| jt�� �s,J �d S )Nr ��!KeyAuthorizationChallengeResponsez/foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WY��key_authorization�r r* �verifyr �KEY� public_key�r r* �responser r r �test_verify_ok5 s �z4KeyAuthorizationChallengeResponseTest.test_verify_okc C s0 ddl m} |dd�}|�| jt�� �r,J �d S )Nr r) z/bar.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr+ r- r1 r r r �test_verify_wrong_token; s �z=KeyAuthorizationChallengeResponseTest.test_verify_wrong_tokenc C s0 ddl m} |dd�}|�| jt�� �r,J �d S )Nr r) z foo.oKGqedy-b-acd5eoybm2f-NVFxvr+ r- r1 r r r � test_verify_wrong_thumbprintA s �zBKeyAuthorizationChallengeResponseTest.test_verify_wrong_thumbprintc C s0 ddl m} |dd�}|�| jt�� �r,J �d S )Nr r) z0.foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr+ r- r1 r r r �test_verify_wrong_formG s �z<KeyAuthorizationChallengeResponseTest.test_verify_wrong_formN)r r r r r3 r4 r5 r6 r r r r r# , s r# c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd S )�DNS01ResponseTestc C sP ddl m} |dd�| _dddd�| _ddl m} |d d �| _| j�t�| _d S ) Nr �� DNS01Responser r+ � challenge�dns-01��resourcer ZkeyAuthorization��DNS01� xxxxxxxxxxxxxxxx�r$ )r r9 �msg�jmsgr? r r2 r/ )r r9 r? r r r r Q s � zDNS01ResponseTest.setUpc C s i | j �� ksJ �d S r �rB r r r r r r! ^ s z&DNS01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r8 )r r9 rB r rC �r r9 r r r r" a s z DNS01ResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S rE )r r9 �hashr rC rF r r r �test_from_json_hashablee s z)DNS01ResponseTest.test_from_json_hashablec C s8 t j�t�d��}|�� }| j�| jd|�}|r4J �d S �Nzrsa256_key.pem�local) �jose�JWKRSA�loadr � load_vectorr0 r2 � simple_verifyr )r �key2r0 �verifiedr r r �test_simple_verify_failurei s z,DNS01ResponseTest.test_simple_verify_failurec C s& t �� }| j�| jd|�}|s"J �d S �NrJ )r/ r0 r2 rO r )r r0 rQ r r r �test_simple_verify_successo s z,DNS01ResponseTest.test_simple_verify_successN) r r r r r! r" rH rR rT r r r r r7 O s r7 c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd S )� DNS01Testc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr r> �+evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ+PCt92wr+oArA r; �+evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA�r r$ )r r? rK �decode_b64joserB rC �r r? r r r r w s � �zDNS01Test.setUpc C s d| j �d�ksJ �d S )Nz _acme-challenge.www.example.comzwww.example.com�rB Zvalidation_domain_namer r r r �test_validation_domain_name� s �z%DNS01Test.test_validation_domain_namec C s d| j �t�ksJ �d S )NZ+rAa7iIg4K2y63fvUhCfy8dP1Xl7wEhmQq0oChTcE3Zk)rB � validationr/ r r r r �test_validation� s �zDNS01Test.test_validationc C s | j | j�� ksJ �d S r �rC rB r r r r r r! � s z DNS01Test.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r> )r r? rB r rC rZ r r r r" � s zDNS01Test.test_from_jsonc C s ddl m} t|�| j�� d S r` )r r? rG r rC rZ r r r rH � s z!DNS01Test.test_from_json_hashableN) r r r r r\ r^ r! r" rH r r r r rU u s rU c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Ze� d �d d � �Z e� d �dd� �Z e� d �dd� �Z e� d �dd� �Z e� d �dd� �Ze� d �dd� �ZdS )�HTTP01ResponseTestc C sP ddl m} |dd�| _dddd�| _ddl m} |d d �| _| j�t�| _d S ) Nr ��HTTP01Responser r+ r: �http-01r< ��HTTP01r@ rA )r rc rB rC rf r r2 r/ )r rc rf r r r r � s � zHTTP01ResponseTest.setUpc C s i | j �� ksJ �d S r rD r r r r r! � s z'HTTP01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr rb )r rc rB r rC �r rc r r r r" � s z!HTTP01ResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S rg )r rc rG r rC rh r r r rH � s z*HTTP01ResponseTest.test_from_json_hashablec C s, t j�t�d��}| j�| jd|�� � d S rI � rK rL rM r rN r2 rO r r0 �r rP r r r �(test_simple_verify_bad_key_authorization� s z;HTTP01ResponseTest.test_simple_verify_bad_key_authorizationz acme.challenges.requests.getc C sR | j �t�}tj|d�|_| j�| j dt�� �s4J �|j | j � d�dtj d� d S )N��textrJ F�r. �timeout) r r] r/ r � MagicMock� return_valuer2 rO r0 �assert_called_once_with�uri�ANY)r �mock_getr] r r r �"test_simple_verify_good_validation� s ��z5HTTP01ResponseTest.test_simple_verify_good_validationc C s, t jdd�|_| j�| jdt�� �r(J �d S )N�!rl rJ )r rp rq r2 rO r r/ r0 �r ru r r r �!test_simple_verify_bad_validation� s �z4HTTP01ResponseTest.test_simple_verify_bad_validationc C s` ddl m} tj| j�t�|j d�|_| j � | jdt� � �sBJ �|j | j� d�dtjd� d S )Nr rb rl rJ Frn )r rc r rp r r] r/ ZWHITESPACE_CUTSETrq r2 rO r0 rr rs rt )r ru rc r r r �(test_simple_verify_whitespace_validation� s �� ��z;HTTP01ResponseTest.test_simple_verify_whitespace_validationc C s( t jj|_| j�| jdt�� �r$J �d S rS ) �requests� exceptionsZRequestExceptionr( r2 rO r r/ r0 rx r r r �#test_simple_verify_connection_error� s �z6HTTP01ResponseTest.test_simple_verify_connection_errorc C s@ | j j| jdt�� dd� dt�|jd d d �jks<J �d S )NrJ i� )�domainZaccount_public_key�portz local:8080r � ) r2 rO r r/ r0 � urllib_parse�urlparseZ mock_calls�netlocrx r r r �test_simple_verify_port� s ��z*HTTP01ResponseTest.test_simple_verify_portc C sl | j �| jdt�� � |j| j�d�ddd� |�� | j j| jdt�� dd� |j| j�d�ddd� d S )NrJ F� rn i� )ro )r2 rO r r/ r0 rr rs Z reset_mockrx r r r �test_simple_verify_timeout� s ��z-HTTP01ResponseTest.test_simple_verify_timeoutN)r r r r r! r" rH rk r �patchrv ry rz r} r� r� r r r r ra � s" ra c @ sD e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dS )� HTTP01Testc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr re rV rA rd rW rX )r rf rK rY rB rC �r rf r r r r � s ���zHTTP01Test.setUpc C s | j jdksJ �d S )NzG/.well-known/acme-challenge/evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA)rB �pathr r r r � test_path� s zHTTP01Test.test_pathc C s d| j �d�ksJ �d S )NzYhttp://example.com/.well-known/acme-challenge/evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA� example.com)rB rs r r r r �test_uri� s �zHTTP01Test.test_uric C s | j | j�� ksJ �d S r r_ r r r r r! � s z HTTP01Test.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr re )r rf rB r rC r� r r r r" � s zHTTP01Test.test_from_jsonc C s ddl m} t|�| j�� d S r� )r rf rG r rC r� r r r rH s z"HTTP01Test.test_from_json_hashablec C s$ | j js J �| j jdd�jr J �d S )Ns ..rA )rB Z good_token�updater r r r �test_good_token s zHTTP01Test.test_good_tokenN) r r r r r� r� r! r" rH r� r r r r r� � s r� c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z e j ddd�dd� �Ze � d�e � d�dd� ��Ze � d �d d � �Zd S ) �TLSALPN01ResponseTestc C sN ddl m} |t�d�d�| _d| _d| _| j�t�| _dd| jj d �| _ d S ) Nr �� TLSALPN01s a82d5ff8ef740d12881f6d3c2277ab2erA r� z example2.comr: � tls-alpn-01r< ) r r� rK � b64decoder r~ �domain2r2 r/ r, rC �r r� r r r r s ��zTLSALPN01ResponseTest.setUpc C s i | j �� ksJ �d S r )r2 r r r r r r! s z*TLSALPN01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr )�TLSALPN01Response)r r� r2 r rC �r r� r r r r" s z$TLSALPN01ResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r rC r� r r r rH ! s z-TLSALPN01ResponseTest.test_from_json_hashablec C sB t �d�}| j�| j|�\}}||ks*J �| j�| j|�s>J �d S �Nr )r �load_pyopenssl_private_keyr2 �gen_certr~ � verify_cert�r Zkey1�certrP r r r �test_gen_verify_cert% s z*TLSALPN01ResponseTest.test_gen_verify_certc C s< | j �| j�\}}t|tjj�s$J �| j �| j|�s8J �d S r )r2 r� r~ � isinstance�OpenSSLZcryptoZPKeyr� )r r� r r r r � test_gen_verify_cert_gen_key+ s z2TLSALPN01ResponseTest.test_gen_verify_cert_gen_keyc C s | j �| jt�d��rJ �d S )Nr )r2 r� r~ r Z load_certr r r r �test_verify_bad_cert0 s �z*TLSALPN01ResponseTest.test_verify_bad_certc C sB t �d�}| j�| j|�\}}||ks*J �| j�| j|�r>J �d S r� )r r� r2 r� r~ r� r� r� r r r �test_verify_bad_domain4 s z,TLSALPN01ResponseTest.test_verify_bad_domainc C s, t j�t�d��}| j�| jd|�� � d S rI ri rj r r r rk : s z>TLSALPN01ResponseTest.test_simple_verify_bad_key_authorizationz-acme.challenges.TLSALPN01Response.verify_certT)Zautospecc C sP t jj|_t jj| jj| j| jt� � t jj d�ks6J �|� | j| jt jj � d S )N)r� ) r �sentinelZ verificationrq r2 rO r r~ r/ r0 r� rr )r Zmock_verify_certr r r �test_simple_verify> s � �z(TLSALPN01ResponseTest.test_simple_verifyz$acme.challenges.socket.gethostbynamez%acme.challenges.crypto_util.probe_snic C s^ d|_ | j�d� |�d� |jd| jjddgd� | jjddd� |jd tjddgd� d S ) Nz 127.0.0.1zfoo.coms 127.0.0.1s foo.coms acme-tls/1)�hostr r% Zalpn_protocolsz8.8.8.8)r� s 8.8.8.8)rq r2 Z probe_certrr ZPORTZassert_called_withr rt )r Zmock_probe_sniZmock_gethostbynamer r r �test_probe_certG s ��z%TLSALPN01ResponseTest.test_probe_certz,acme.challenges.TLSALPN01Response.probe_certc C s( t j|_| j�| j| jt�� �r$J �d S r ) r �Errorr( r2 rO r r~ r/ r0 )r Zmock_probe_certr r r �'test_simple_verify_false_on_probe_errorV s �z=TLSALPN01ResponseTest.test_simple_verify_false_on_probe_errorN)r r r r r! r" rH r� r� r� r� rk r r� r� r� r� r r r r r� s r� c @ sF e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Ze� d �d d � �Z dS )� TLSALPN01Testc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr r� Z a82d5ff8ef740d12881f6d3c2277ab2erA r� rX )r r� rK r� rB rC r� r r r r _ s ��zTLSALPN01Test.setUpc C s | j | j�� ksJ �d S r r_ r r r r r! h s z"TLSALPN01Test.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r� )r r� rB r rC r� r r r r" k s z TLSALPN01Test.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r rC r� r r r rH o s z%TLSALPN01Test.test_from_json_hashablec C sX ddl m} t�d�| jd< t�tj�� |�| j� W d � n1 sJ0 Y d S )Nr r� s abcdr$ ) r r� rK Zencode_b64joserC �pytestZraisesZDeserializationErrorr r� r r r �#test_from_json_invalid_token_lengths s z1TLSALPN01Test.test_from_json_invalid_token_lengthz*acme.challenges.TLSALPN01Response.gen_certc C sB d|_ d| jjttjjtjjd�ks(J �|jtjjtjjd� d S )N)r� r )�cert_keyr~ )r r~ ) rq rB r] r/ r r� r� r~ rr )r Z mock_gen_certr r r r^ y s � �z TLSALPN01Test.test_validationN) r r r r r! r" rH r� r r� r^ r r r r r� ] s r� c @ sd e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dS )�DNSTestc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr ��DNS�+ evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oArA �dnsrW rX )r r� rK r� rB rC �r r� r r r r � s � �z DNSTest.setUpc C s | j | j�� ksJ �d S r r_ r r r r r! � s z DNSTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r� )r r� rB r rC r� r r r r" � s zDNSTest.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r rC r� r r r rH � s z DNSTest.test_from_json_hashablec C s� t t�d�d�}ttjf|tjffD ]X\}}| j||d��2 | j� | jj ||d�|� � �s^J �W d � q$1 sr0 Y q$d S )N�ec_secp384r1_key.pemr )r �alg�r� ) r r �load_ecdsa_private_keyr/ rK �RS256�ES384ZsubTestrB �check_validation�gen_validationr0 )r �ec_key_secp384r1r r� r r r �test_gen_check_validation� s �z!DNSTest.test_gen_check_validationc C s4 t j�t�d��}| j�| j�t�|� � �r0J �d S )Nzrsa1024_key.pem) rK rL rM r rN rB r� r� r/ r0 rj r r r �#test_gen_check_validation_wrong_key� s �z+DNSTest.test_gen_check_validation_wrong_keyc C s6 t dd� dD ��}|D ]}| j�|t�� �rJ �qd S )Nc s s" | ]}t jj|t jtd �V qdS )��payloadr� r N)rK �JWS�signr� r/ )�.0r� r r r � <genexpr>� s �z>DNSTest.test_check_validation_wrong_payload.<locals>.<genexpr>)� � {})�tuplerB r� r/ r0 )r Z validationsr] r r r �#test_check_validation_wrong_payload� s ��z+DNSTest.test_check_validation_wrong_payloadc C sB t jj| jjdd��� �d�t jtd�}| j� |t� � �r>J �d S )Ns xxxxxxxxxxxxxxxxxxxxrA zutf-8r� ) rK r� r� rB r� � json_dumpsr' r� r/ r� r0 )r Zbad_validationr r r �"test_check_validation_wrong_fields� s � ��z*DNSTest.test_check_validation_wrong_fieldsc C sp t �d��&}t jj|_| j�t�}W d � n1 s60 Y ddlm } t ||�sZJ �|jt jjkslJ �d S )Nz"acme.challenges.DNS.gen_validationr �� DNSResponse) r r� r� r] rq rB Z gen_responser/ r r� r� )r Zmock_genr2 r� r r r �test_gen_response� s * zDNSTest.test_gen_responsec C s d| j �d�ksJ �d S )Nz_acme-challenge.le.wtfzle.wtfr[ r r r r r\ � s z#DNSTest.test_validation_domain_namec C s< t t�d�d�}| j�| jj|tjd�|�� �du s8J �d S )Nr� r r� T) r r r� rB r� r� rK r� r0 )r r� r r r �!test_validation_domain_name_ecdsa� s ��z)DNSTest.test_validation_domain_name_ecdsaN)r r r r r! r" rH r� r� r� r� r� r\ r� r r r r r� � s r� c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd S ) �DNSResponseTestc C s� ddl m} |t�d�d�| _tjj| jjdd��� t tj d�| _ ddl m } || j d �| _ d | j i| _d d | j �� d �| _d S )Nr r� r� rA T)Z sort_keys)r� r r� r� )r] r] r: r� )r= r r] )r r� rK r� r r� r� r� r' r/ r� r] r� rB �jmsg_toZto_json� jmsg_from)r r� r� r r r r � s � � ��zDNSResponseTest.setUpc C s | j | j�� ksJ �d S r )r� rB r r r r r r! � s z$DNSResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r� )r r� rB r r� �r r� r r r r" � s z DNSResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r r� r� r r r rH � s z'DNSResponseTest.test_from_json_hashablec C s | j �| jt�� �sJ �d S r )rB r� r r/ r0 r r r r �test_check_validation� s z%DNSResponseTest.test_check_validationN)r r r r r! r" rH r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )�JWSPayloadRFC8555CompliantzFTest for RFC8555 compliance of JWS generated from resources/challengesc C s2 ddl m} |� }|jdd��� }|dks.J �d S )Nr rb � )�indentr� )r rc r� r' )r rc Zchallenge_bodyr r r r �test_challenge_payload� s z1JWSPayloadRFC8555Compliant.test_challenge_payloadN)r r r �__doc__r� r r r r r� � s r� �__main__r� ))r� �sysZunittestr � urllib.parse�parser� ZjosepyrK Z josepy.jwkr r� r� r{ Zacmer Zacme._internal.testsr Zload_comparable_certZCERTrL Zload_rsa_private_keyr/ ZTestCaser r r# r7 rU ra r� r� r� r� r� r� r �exit�main�argv�__file__r r r r �<module> s6 #& Q%S%D$
.
Edit
..
Edit
__init__.cpython-39.opt-1.pyc
Edit
__init__.cpython-39.pyc
Edit
challenges_test.cpython-39.opt-1.pyc
Edit
challenges_test.cpython-39.pyc
Edit
client_test.cpython-39.opt-1.pyc
Edit
client_test.cpython-39.pyc
Edit
crypto_util_test.cpython-39.opt-1.pyc
Edit
crypto_util_test.cpython-39.pyc
Edit
errors_test.cpython-39.opt-1.pyc
Edit
errors_test.cpython-39.pyc
Edit
fields_test.cpython-39.opt-1.pyc
Edit
fields_test.cpython-39.pyc
Edit
jose_test.cpython-39.opt-1.pyc
Edit
jose_test.cpython-39.pyc
Edit
jws_test.cpython-39.opt-1.pyc
Edit
jws_test.cpython-39.pyc
Edit
messages_test.cpython-39.opt-1.pyc
Edit
messages_test.cpython-39.pyc
Edit
standalone_test.cpython-39.opt-1.pyc
Edit
standalone_test.cpython-39.pyc
Edit
test_util.cpython-39.opt-1.pyc
Edit
test_util.cpython-39.pyc
Edit
util_test.cpython-39.opt-1.pyc
Edit
util_test.cpython-39.pyc
Edit