/usr/share/cagefs-skeleton/usr/lib/python3.9/site-packages/certbot/_internal/tests/__pycache__
a }|�g�� � @ s2 d Z ddlZddlZddlmZ ddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl mZ ddlZddlmZ ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ dd lm Z dd lm Z dd l m Z dd l m Z dd l m!Z! ddl m"Z" ddl m#Z# ddl$m%Z% ddl$m&Z& ddl$m'Z' ddl$m(Z( ddl)m*Z* ddl)m+Z+ ddl,m-Z- ddl.m/ m Z0 e0�1d�Z2e0�1d�Z3e0�1d�Z4e0�1d�Z5ej6�7e0�8d��Z9e0�1d�Z:e0�1d �Z;G d d � d ej<�Z=G d d � d e0j>�Z?G d!d"� d"ej<�Z@G d#d$� d$ej<�ZAG d%d&� d&e0jB�ZCG d'd(� d(e0jB�ZDG d)d*� d*e0j>�ZEG d+d,� d,e0j>�ZFG d-d.� d.e0j>�ZGG d/d0� d0ej<�ZHG d1d2� d2e0j>�ZIG d3d4� d4e0j>�ZJG d5d6� d6e0j>�ZKG d7d8� d8ej<�ZLG d9d:� d:ej<�ZMG d;d<� d<e0j>�ZNG d=d>� d>e0j>�ZOG d?d@� d@�ZPeQdAk�r.e �Re�"e jSdBd� eTg �� dS )Cz!Tests for certbot._internal.main.� N)�reload)�List)�mock)�Error)� crypto_util��errors)� interfaces)�util)�account)�cli)� constants)�main)�updater)�disco)�manual)�null)� standalone)� filesystem)�os)� enhancements� cert_512.pemz csr_512.derzrsa256_key.pemzrsa512_key.pemzrsa2048_key.pemz cert_2048.pemc @ sl e Zd ZdZe�d�dd� �Ze�d�e�d�e�d�dd� ���Ze�d�d d � �Ze�d �d d � �Z dS )�TestHandleCertsz1Test for certbot._internal.main._handle_* methods�<certbot._internal.main._handle_unexpected_key_type_migrationc C s> t �� }d|j_t�t �� |�}|d|fks0J �|js:J �d S )NF� reinstall)r �Mock�ensure_deployed� return_valuer � _handle_identical_cert_request�called)�self�mock_handle_migration� mock_lineage�ret� r$ �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/main_test.py�*test_handle_identical_cert_request_pending5 s z:TestHandleCerts.test_handle_identical_cert_request_pending�&certbot._internal.renewal.should_renewzcertbot.display.util.menuc C sZ d|_ t�� }d|j_ d|_ t�tjddd�|�}|js<J �|jrFJ �|d|fksVJ �d S )NTF�run)Zverbr �renew)r r r r r r � MagicMockr )r r! Z mock_menuZmock_should_renewr" r# r$ r$ r% �*test_handle_identical_cert_key_type_change> s � z:TestHandleCerts.test_handle_identical_cert_key_type_changec C sP t �� }d|_t �� }ddg|j_t�|dg|�}|d|fksBJ �|jsLJ �d S )NTZdummy1Zdummy2r) )r r �expand�namesr r Z_handle_subset_cert_requestr )r r! � mock_configr" r# r$ r$ r% � test_handle_subset_cert_requestM s z/TestHandleCerts.test_handle_subset_cert_requestz)certbot._internal.main.display_util.yesnoc C s@ t �� }t �� }||_t �� }d|_d|_t�||� |�� |j|jksNJ �d|_d|_t�||� |j dkstJ �|jdks�J �d|_d|_t�||� |jdks�J �d|_t�||� |jdks�J �d|_dd� |_ t j t jdd �� t�||� W d � n1 �s 0 Y d d� |_ t�||� |jdk�s<J �d S ) NZrsa�ecdsaT� Fc S s | dkS )N�certnamer$ ��varr$ r$ r% �<lambda>{ � zKTestHandleCerts.test_handle_unexpected_key_type_migration.<locals>.<lambda>z.Please provide both --cert-name and --key-type��matchc S s | dkS )N�key_typer$ r3 r$ r$ r% r5 � r6 )r r Z set_by_userr9 �private_key_typer Z%_handle_unexpected_key_type_migration�assert_not_calledr � call_count� side_effect�pytest�raisesr r )r Z mock_yesno�configZmock_set�certr$ r$ r% �)test_handle_unexpected_key_type_migrationW s8 , z9TestHandleCerts.test_handle_unexpected_key_type_migrationN) �__name__� __module__� __qualname__�__doc__r �patchr& r+ r/ rB r$ r$ r$ r% r 3 s r c sv e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d�dd� �Z e � d �dd� �Z � ZS )�RunTestz%Tests for certbot._internal.main.run.c s� t � �� d| _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d �t�d �g }|d �� | _|d �� | _|d �� | _|d �� | _ |d �� | _ |d �� | _ |d �� | _ |d �� | _ |d �� | _|D ]}| �|j� q�d S )Nz example.org�)certbot._internal.main._get_and_save_certz7certbot._internal.main.display_ops.success_installationz2certbot._internal.main.display_ops.success_renewal�&certbot._internal.main._init_le_client�7certbot._internal.main._suggest_donation_if_appropriate�'certbot._internal.main._report_new_cert�!certbot._internal.main._find_cert�)certbot._internal.eff.handle_subscription�)certbot._internal.main._report_next_stepsr � r1 � � � � � � )�super�setUp�domainr rG �start� mock_auth�mock_success_installation�mock_success_renewal� mock_initZmock_suggest_donation�mock_report_cert�mock_find_cert�mock_subscription�mock_report_next_steps� addCleanup�stop)r �patchesrG �� __class__r$ r% rX � s. � z RunTest.setUpc C s@ d� | j��� }tj�� }t�||�}ddlm } |||� d S )Nz-a webroot -i null -d {0}r )r( ) �formatrY �splitr �PluginsRegistry�find_allr �prepare_and_parse_args�certbot._internal.mainr( )r �args�pluginsr@ r( r$ r$ r% �_call� s z RunTest._callc C sH t �� | j_d| j_| �� | j�| jg� | j jt j d t j dd� d S )N�TNT�Znew_or_renewed_cert) r r r[ r r` rp r\ �assert_called_once_withrY rb �ANY�r r$ r$ r% �test_newcert_success� s �z RunTest.test_newcert_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S �NF) r r r[ r r` rp r\ rs rY ru r$ r$ r% �test_reinstall_success� s z RunTest.test_reinstall_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S )NT) r r r[ r r` rp r] rs rY ru r$ r$ r% �test_renewal_success� s z RunTest.test_renewal_success�;certbot._internal.main.plug_sel.choose_configurator_pluginsc C sd t �| jd�d f|_tj�� }d| j_t� t j �� t � | j|� W d � n1 sV0 Y d S �Nr T)r � Installerr@ r r rj rk � auto_hstsr> r? r �NotSupportedErrorr r( �r � mock_choosero r$ r$ r% �"test_run_enhancement_not_supported� s z*RunTest.test_run_enhancement_not_supported�$certbot._internal.main._install_certc C s| t �d�|_t�� | j_d| j_t� t j�� | � � W d � n1 sJ0 Y | j j tj |jtj dd� | j�� d S )NzFake installation errorrq Trr )r Z PluginErrorr= r r r[ r r` r> r? rp rb rs rt r\ r; )r Zmock_install_certr$ r$ r% � test_cert_success_install_error� s &�z'RunTest.test_cert_success_install_errorc C sd t �| jd�d f|_tj�� }d| j_t� t j �� t � | j|� W d � n1 sV0 Y d S r{ )r r| r@ r r rj rk Z must_stapler> r? r r~ r r( r r$ r$ r% �"test_run_must_staple_not_supported� s z*RunTest.test_run_must_staple_not_supported)rC rD rE rF rX rp rv rx ry r rG r� r� r� � __classcell__r$ r$ rf r% rH � s rH c @ s� e Zd ZdZdd� Zdd� Zdd� Ze�d�e�d �e�d �d d � ���Z d d� Z e�d�e�d�e�d�e�d�e�d�e�d �dd� ������Z e�d�e�d�e�d�e�d�e�d �dd� �����Z e�d�e�d �e�d�e�d�dd� ����Z e�d�e�d �e�d�e�d �e�d �d d � �����Ze�d�e�d �e�d�e�d �e�d �d d � �����Ze�d�e�d �e�d�e�d �d!d"� ����Zd#S )$� CertonlyTestz*Tests for certbot._internal.main.certonly.c C s t �� | _| j�� | _d S �N)� test_util�patch_display_util�get_utility_patchrZ �mock_get_utilityru r$ r$ r% rX � s zCertonlyTest.setUpc C s | j �� d S r� �r� rd ru r$ r$ r% �tearDown� s zCertonlyTest.tearDownc C s� t j�� }t�||�}t�d��p}t�d��F t�d�� t�||� W d � n1 sZ0 Y W d � n1 sx0 Y W d � n1 s�0 Y |� S )NrJ rK rN ) r rj rk r rl r rG r �certonly)r rn ro r@ r^ r$ r$ r% rp � s fzCertonlyTest._callrM rI rL c C s4 | � � j}| j|_t�� |_d|_| �d�� � d S )N)FNz!certonly --webroot -d example.com) r� � notification�_assert_no_pauser= r r r rp ri )r Z unused_reportr[ r` Zmock_notificationr$ r$ r% � test_no_reinstall_text_pause� s z)CertonlyTest.test_no_reinstall_text_pausec O s |� d�du sJ �d S )N�pauseF)�get)r rn �kwargsr$ r$ r% r� � s z CertonlyTest._assert_no_pauserO �3certbot._internal.cert_manager.lineage_for_certname�3certbot._internal.cert_manager.domains_for_certnamez$certbot._internal.renewal.renew_certr c C s ddg}||_ ||j_ | �d�� � |jdks2J �|jdks@J �|jdksNJ �|jdks\J �|jdksjJ �|jtjd tjdd� | �d�� � |jdks�J �|jdks�J �|jdks�J �|jdks�J �|jdks�J �d | �� j _ t � t j �� | �d�� � W d � n1 �s0 Y d S ) N� example.comztest.orgzEcertonly --webroot -d example.com -d test.org --cert-name example.comrP Trr �Ecertonly --webroot -d example.com -d test.com --cert-name example.comr1 F)r r- rp ri r< rs r rt r� �yesnor> r? r �ConfigurationError)r r_ Zmock_handle_type�mock_renew_cert� mock_domainsr" rb �domainsr$ r$ r% �*test_find_lineage_for_domains_and_certname� s* � z7CertonlyTest.test_find_lineage_for_domains_and_certname� certbot.display.ops.choose_namesc C s^ d |_ | �d�� � |jdks"J �|jdks0J �dg|_ d |_ | �d�� � |jdu sZJ �d S )Nr� rP Zsomenamez*certonly --webroot --cert-name example.comT)r rp ri r< r )r r_ r" �mock_choose_namesZmock_domains_for_certnameZ unused_mock_report_next_stepsr$ r$ r% �*test_find_lineage_for_domains_new_certname# s z7CertonlyTest.test_find_lineage_for_domains_new_certnamez-certbot._internal.main._csr_get_and_save_certc C sZ d|_ d|_ dt� �dfD ]:}| �d|� d��� � |jtjtjtjdd� |�� qdS ) zLcertonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.N)z/certz/chainz /fullchainz--csr z-d example.comz certonly z, --webroot --cert-name example.com --dry-runFrr )r �CSRrp ri rs r rt Z reset_mock)r r" Zmock_csr_get_certZunused_mock_get_certrb �flagr$ r$ r% �$test_dryrun_next_steps_no_cert_saved8 s �z1CertonlyTest.test_dryrun_next_steps_no_cert_saved�?certbot._internal.plugins.selection.choose_configurator_pluginsc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nrq z certonly --nginx -d example.com)r r* r rp ri �restartZassert_called_once�r �mock_sel� mock_get_certr` �unused_report_new�unused_report_nextZmock_installerr$ r$ r% �test_installer_runs_restartG s z(CertonlyTest.test_installer_runs_restartc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nrq z)certonly --nginx -d example.com --dry-run)r r* r rp ri r� r; r� r$ r$ r% �$test_dryrun_installer_doesnt_restartV s z1CertonlyTest.test_dryrun_installer_doesnt_restartc C s2 t �� |_d|_| �dt�� � d�d �� � d S )Nrq zcertonly --webroot -w � z -i standalone -d example.com)r r* r rp �tempfile� gettempdirri )r r� r` r� r� r$ r$ r% �test_invalid_installere s �z#CertonlyTest.test_invalid_installerN)rC rD rE rF rX r� rp r rG r� r� r� r� r� r� r� r� r$ r$ r$ r% r� � sX r� c @ sF e Zd ZdZe�d�dd� �Ze�d�dd� �Ze�d�dd � �Zd S ) �FindDomainsOrCertnameTestz;Tests for certbot._internal.main._find_domains_or_certname.r� c C s, t jd d d�}d|_t�|d �dks(J �d S )N�r� r2 � domainname)r� N�r r r r �_find_domains_or_certname�r r� r. r$ r$ r% �test_display_opst s z*FindDomainsOrCertnameTest.test_display_opsc C sP t jd d d�}g |_t�tj�� t�|d � W d � n1 sB0 Y d S )Nr� ) r r r r> r? r r r r� r� r$ r$ r% �test_no_results{ s z)FindDomainsOrCertnameTest.test_no_resultsr� c C s8 t jd dd�}ddg|_t�|d �ddgdfks4J �d S )Nzone.comr� ztwo.comr� )r r� r. r$ r$ r% �test_grab_domains� s �z+FindDomainsOrCertnameTest.test_grab_domainsN) rC rD rE rF r rG r� r� r� r$ r$ r$ r% r� q s r� c s e Zd ZdZ� fdd�Zddd�Ze�d�e�d�d d � ��Ze�d�e�d �e�d �e�d �dd� ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d�dd� �Z dd� Z e�d�e�d�e�� dd� ���Z� ZS ) � RevokeTestz(Tests for certbot._internal.main.revoke.c s t � �� t�t| j� tj�tj� | jd��| _ t � d�t � d�t � d�t � d�g}|d � � j| _|d � � |d � � | _|d � � | _|D ]}| �|j� q�dd lm} t �� | _|jd tjd d ddddtjd�d�| _ || jt | j �| _ | j d f| j_ d S )Nr z$certbot._internal.client.acme_clientz certbot._internal.client.Client�)certbot._internal.main._determine_accountz5certbot._internal.main.display_ops.success_revocationr rP r1 rQ )�Accountztest.certbot.orgi� rU rR � � )Ztzinfo)Z creation_hostZ creation_dt) rW rX �shutil�copy� CERT_PATH�tempdirr �path�abspath�join� tmp_cert_pathr rG rZ �ClientV2�mock_acme_client�mock_determine_account�mock_success_revokerc rd Zcertbot._internal.accountr� r* �regrZMeta�datetime�pytzZUTC�meta�JWK�accr )r re rG r� rf r$ r% rX � s0 � ��zRevokeTest.setUpNc C sH |sd}|� | j��� }tj�� }t�||�}ddlm } |||� d S )Nzrevoke --cert-path={0} r )�revoke) rh r� ri r rj rk r rl rm r� )r rn ro r@ r� r$ r$ r% rp � s zRevokeTest._call�-certbot._internal.main._delete_if_appropriate�)certbot._internal.main.client.acme_clientc C s� d|_ |�� j}g }tj�� D ]l\}}d�| j|��� }| � |� |� t � t j |�� d�| j|�� ��� }| � |� |� t � t j |�� q ||jks�J �d S )NFz#revoke --cert-path={0} --reason {1})r r� r� r ZREVOCATION_REASONS�itemsrh r� ri rp �appendr �callrt �upper�call_args_list)r r� �mock_delete_if_appropriate� mock_revokeZexpected�reason�codern r$ r$ r% �test_revoke_with_reason� s � z"RevokeTest.test_revoke_with_reason�'certbot._internal.storage.RenewableCert�3certbot._internal.storage.renewal_file_for_certnamez-certbot._internal.client.acme_from_config_keyc C s` | j |_tj| jdd�|_d�� }d|_| �|� |jd d d jdksNJ �| j � | j� d S )N�https://acme.example�� cert_path�server� revoke --cert-name=example.comFr ) r� r r r* r� ri rp r� r� r� rs �r Zmock_acme_from_configZ%unused_mock_renewal_file_for_certnameZ mock_certr� rn r$ r$ r% �test_revoke_by_certname� s � �z"RevokeTest.test_revoke_by_certnamec C sX t j| jdd�|_d�� }d|_| �|� |jd d d jdksFJ �| j� | j� dS )z9Revoking with --server should use the server from the CLIr� r� z=revoke --cert-name=example.com --server https://other.exampleFr zhttps://other.exampleN) r r* r� r ri rp r� r� r� rs r� r$ r$ r% �"test_revoke_by_certname_and_server� s � �z-RevokeTest.test_revoke_by_certname_and_serverc C s^ t j| jdd�|_d�� }d|_| �|� |jd d d jtj d ksLJ �| j � | j� dS )zLRevoking with --cert-name where the lineage server is empty shouldn't crash Nr� r� Fr r� ) r r* r� r ri rp r� r� r Z CLI_DEFAULTSr� rs r� r$ r$ r% �$test_revoke_by_certname_empty_server� s �z/RevokeTest.test_revoke_by_certname_empty_serverc C s | � � d|_| j�| j� d S rw )rp r r� rs r� )r r� r$ r$ r% �test_revocation_success� s z"RevokeTest.test_revocation_successc C sZ ddl m} |�� | j_t�|j�� | �� W d � n1 sB0 Y | j� � d S )Nr r ) �acmer Z ClientErrorr� r= r> r? rp r� r; )r Z acme_errorsr$ r$ r% �test_revocation_error s &z RevokeTest.test_revocation_error�%certbot._internal.cert_manager.deletec C s* d|� j _d|_| �� |jdu s&J �d S rw )r� r rp r )r r� � mock_deleter� r$ r$ r% �test_revocation_with_prompt s z&RevokeTest.test_revocation_with_prompt)N)rC rD rE rF rX rp r rG r� r� r� r� r� r� r� r� r� r� r$ r$ rf r% r� � s8 r� c s� e Zd ZdZ� fdd�Z� fdd�Zdd� Zdd � Ze� d �d d � �Z d d� Z dd� Z e� d�dd� �Z dd� Ze� d�dd� �Zdd� Ze� d�dd � �Z� ZS ) �ReconfigureTestz,Tests for certbot._internal.main.reconfigurec sT t � �� t�� | _| j�� | _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d�d �| _ d d � | j � � D �| _ d g| j d _ t j�| jd�| _t j�| jd�}t j�|�s�t�|� t j�|d�| _d}t| jd��}|�|� W d � n1 �s0 Y t| jd��"}tj|ddd�| _W d � n1 �sF0 Y d S )Nz7certbot._internal.storage.RenewableCert._check_symlinksz-certbot._internal.storage.RenewableCert.namesz2certbot._internal.plugins.selection.pick_installerz6certbot._internal.plugins.selection.pick_authenticatorz9certbot._internal.plugins.disco.PluginsRegistry.find_initrI rJ z"certbot._internal.hooks.list_hooks)Zcheck_symlinks� cert_names�pick_installer� pick_auth� find_init�_get_and_save_cert�_init_le_clientZ list_hooksc S s i | ]\}}||� � �qS r$ �rZ ��.0�k�vr$ r$ r% � <dictcomp># r6 z)ReconfigureTest.setUp.<locals>.<dictcomp>r� r� r@ �renewalzexample.com.confa� version = 1.32.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-v02.api.letsencrypt.org/directory authenticator = nginx installer = nginx key_type = rsa �w�r�utf-8��encodingZdefault_encoding)rW rX r� r� r� rZ r� r rG �patchersr� �mocksr r r� r� r� � config_dir�existsr �makedirs� renewal_file�open�write� configobj� ConfigObj�original_config)r Zrenewal_configs_dirr �frf r$ r% rX s4 � *�zReconfigureTest.setUpc s0 t � �� | j�� | j�� D ] }|�� q d S r� )rW r� r� rd r �values�r rG rf r$ r% r� B s zReconfigureTest.tearDownc C sz |d| j g }tj�� }t�||�}ddlm} |||� t| j d�� }t j |ddd�}W d � n1 sl0 Y |S )N� --config-dirr )� reconfigurer� r r ) r r rj rk r rl rm r r r r r )r Z passed_argsZ full_argsro r@ r r Z updated_confr$ r$ r% rp H s .zReconfigureTest._callc C s> t �tj�� | �d�� � W d � n1 s00 Y d S )Nz!--cert-name cert1 -d one.cert.com)r> r? r r� rp ri ru r$ r$ r% �test_domains_setU s z ReconfigureTest.test_domains_set�,certbot._internal.cert_manager.get_certnamesc C sZ t �� }d|_|| jd _|| jd _|| jd _dg|_| �d�� � |jdksVJ �d S )N�nginxr� r� r� r� �--nginxrP )r r �namer r rp ri r< )r �mock_cert_manager� named_mockr$ r$ r% �test_asks_for_certnameY s z&ReconfigureTest.test_asks_for_certnamec C sX t �� }d|_|| jd _|| jd _|| jd _| �d�� �}|d d dksTJ �d S )N�apacher� r� r� � --cert-name example.com --apache� renewalparams� authenticator)r r r r r rp ri �r r � new_configr$ r$ r% �test_update_configuratore s z(ReconfigureTest.test_update_configuratorc C s� t �� }d|_|| jd _|| jd _|| jd _| �d�� �}d|d d< d|d d < |d d = | jd |d < || jks~J �d S ) zI Check that we don't accidentally modify anything that we didn't mean to r r� r� r� r r r r � installerr �versionN)r r r r r rp ri r r r$ r$ r% �test_only_intended_changesp s z*ReconfigureTest.test_only_intended_changesz&certbot._internal.hooks.validate_hooksc C sf | j d d dksJ �| �d�� dg � d| jd jjd jv sFJ �d| jd jjd jv sbJ �d S ) z6 Check that we use the staging server for the dry run r r� z.https://acme-v02.api.letsencrypt.org/directory�"--cert-name example.com --pre-hook�echo preZstagingr� r r� rP N)r rp ri r � call_argsrn r� )r �unused_validate_hooksr$ r$ r% �test_staging_used� s � z!ReconfigureTest.test_staging_usedc C s� | j d d }| j d d }z| �d�� � W n6 tjyd } z dt|�v sPJ �W Y d}~n d}~0 0 t| jd�� }tj |ddd �}W d � n1 s�0 Y |d d |ks�J �| �d |� ��� �}|d d |ks�J �z| �d �� � W n: tj�y* } z dt|�v �sJ �W Y d}~n d}~0 0 t| jd�� }tj |ddd �}W d � n1 �s`0 Y |d d |k�s�J �| �d |� ��� �}|d d |k�s�J �dS ) zx Check that we error when attempting to change the account id or server, but not when it's the same r r r� z.--cert-name example.com --account newaccountidz,Using reconfigure to change the ACME accountNr� r r z"--cert-name example.com --account z&--cert-name example.com --server x.comz!--cert-name example.com --server ) r rp ri r r� �strr r r r )r Zorig_account_idZ orig_server�errr r r$ r$ r% �!test_new_account_or_server_errors� s( &.(0z1ReconfigureTest.test_new_account_or_server_errorsc C s� d| j vsJ �| �d�� dg �}|d d dks6J �| �d�� dg �}|d d dks^J �d| j vslJ �| �d�� dg �}|d d dks�J �d S ) NZpre_hookr% r& r z echo pre2Z renew_hookz%--cert-name example.com --deploy-hookz echo deploy)r rp ri )r r( r r$ r$ r% �test_update_hooks� s z!ReconfigureTest.test_update_hooksc C s� t j| jd _z| �d�� � W n t jy4 Y n0 t| jd�� }tj |ddd�}W d � n1 sh0 Y |d d dks�J �d S ) Nr� r r� r r r r r ) r r r r= rp ri r r r r )r r r r$ r$ r% �test_dry_run_fails� s .z"ReconfigureTest.test_dry_run_fails�*certbot._internal.main.display_util.notifyc C s� d}t | jd��}|�|� W d � n1 s00 Y t | jd��"}tj|ddd�| _W d � n1 sn0 Y t�� }d|_|| j d _ || j d _ | � d � � �}|d d dks�J �|� d � d S ) Na version = 2.0.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-staging-v02.api.letsencrypt.org/directory authenticator = webroot installer = nginx key_type = ecdsa webroot_path = /var/www/html, [[webroot_map]] example.com = /var/www/html r� r� r r r r� r� z --cert-name example.com --nginxr r zT Successfully updated configuration. Changes will apply when the certificate renews.)r r r r r r r r r r r rp ri �assert_called_with)r � mock_notifyr r r r r$ r$ r% �test_report_results� s (�& �z#ReconfigureTest.test_report_results)rC rD rE rF rX r� rp r r rG r r! r$ r) r, r- r. r2 r� r$ r$ rf r% r� s" - % r� c @ sR e Zd ZdZdd� Zdd� Ze�� dd� �Ze�� dd � �Z e � d �e � d �e � d �e � d �e � d�e � d�e�� dd� �������Z e � d �e � d �e � d�e � d �e � d�e�� dd� ������Z e � d �e � d �e � d�e � d�e � d �e�� dd� ������Ze � d �e � d �e � d�e � d�e � d �e�� dd� ������ZdS )�DeleteIfAppropriateTestz8Tests for certbot._internal.main._delete_if_appropriate c C s ddl m} ||� d S )Nr )�_delete_if_appropriate)rm r4 )r r. r4 r$ r$ r% rp � s z DeleteIfAppropriateTest._callc C sB t �d�� }| �| j� W d � n1 s,0 Y |�� d S )Nr� )r rG rp r@ r; )r r� r$ r$ r% �_test_delete_opt_out_common� s *z3DeleteIfAppropriateTest._test_delete_opt_out_commonc C s d| j _| �� d S rw )r@ �delete_after_revoker5 )r Zunused_mock_get_utilityr$ r$ r% �test_delete_flag_opt_out s z0DeleteIfAppropriateTest.test_delete_flag_opt_outc C s |� }d|j _| �� d S rw )r� r r5 )r r� � util_mockr$ r$ r% �test_delete_prompt_opt_out s z2DeleteIfAppropriateTest.test_delete_prompt_opt_outz%certbot._internal.main.logger.warningr� r� z7certbot._internal.cert_manager.match_and_check_overlapsz+certbot._internal.storage.full_archive_pathz3certbot._internal.cert_manager.cert_path_to_lineagec C sF | j }d|_d|_d|_t�� |_| �|� |�� |j dksBJ �d S )N�/some/reasonable/path� r� rP ) r@ r� r2 r r ZOverlappingMatchFoundr= rp r; r< ) r r� �mock_cert_path_to_lineage� mock_archive� mock_match_and_check_overlapsr� � mock_renewal_file_for_certnameZ mock_warningr@ r$ r$ r% � test_overlapping_archive_dirs s z5DeleteIfAppropriateTest.test_overlapping_archive_dirsc C s: | j }d|_d|_d|_d|_| �|� |jdks6J �d S )Nr: r; r� FrP )r@ r� r2 r rp r< )r r� r< r� r= Z mock_overlapping_archive_dirsr? r@ r$ r$ r% �test_cert_path_only$ s z+DeleteIfAppropriateTest.test_cert_path_onlyc C sF | j }d|_d|_d|_d|_d|_d|_| �|� |jdksBJ �d S �NTr: r; r� rP )r@ Znoninteractive_moder� r2 r rp r< �r r� r� r< Zmock_full_archive_dirr> r? r@ r$ r$ r% � test_noninteractive_deletion6 s z4DeleteIfAppropriateTest.test_noninteractive_deletionc C sT | j }d|_d|_d|_d|_d|_d|_| �|� |jdksBJ �|� jjrPJ �d S rB ) r@ r6 r� r2 r rp r< r� r rC r$ r$ r% �test_opt_in_deletionJ s z,DeleteIfAppropriateTest.test_opt_in_deletionN)rC rD rE rF rp r5 r� r� r7 r9 r rG r@ rA rD rE r$ r$ r$ r% r3 � sH r3 c s� e Zd ZdZ� fdd�Zdd� Ze�d�e�d�dd � ��Zd d � Z d d � Z e�d�dd� �Z e�d�dd� �Z e�d�e�d�dd� ��Z dd� Zdd� Zdd� Zd d � Z� ZS ) �DetermineAccountTestz4Tests for certbot._internal.main._determine_account.c s^ t � �� d | j_d | j_d| j_tjdd�tjdd�g| _t� � | _ t�� | _ d| j j _ d S )NF�x)�id�y�hi)rW rX r@ r �emailZ register_unsafely_without_emailr r* �accsZAccountMemoryStorage�account_storage� mock_client� directoryZ new_authzru rf r$ r% rX b s zDetermineAccountTest.setUpc C s� ddl m} t�d��X}t�� �0 | j|_|| j�W d � W d � S 1 sV0 Y W d � n1 st0 Y d S )Nr )�_determine_accountz1certbot._internal.main.account.AccountFileStorage) rm rP r rG r� r� rM r r@ )r rP � mock_storager$ r$ r% rp n s �zDetermineAccountTest._callz!certbot._internal.client.registerz.certbot._internal.client.display_ops.get_emailc C sZ d|_ ||_z | �� W n< tjyT } z"d|� �t|�ks@J �W Y d }~n d }~0 0 d S )N� foo@bar.bazz0Unable to register an account with ACME server. )r r= rp r r r* )r �err_msg� exception�mock_get_email� mock_registerr+ r$ r$ r% �_register_error_commonv s �z+DetermineAccountTest._register_error_commonc C sl | j �| jd | j� | jd j| j_| jd d f| �� ks@J �| jd j| jjksXJ �| jjd u shJ �d S )NrP ) rM �saverL rN rH r@ r rp rK ru r$ r$ r% �test_args_account_set� s z*DetermineAccountTest.test_args_account_setc C s\ | j �| jd | j� | jd d f| �� ks0J �| jd j| jjksHJ �| jjd u sXJ �d S )Nr ) rM rX rL rN rp rH r@ r rK ru r$ r$ r% �test_single_account� s z(DetermineAccountTest.test_single_accountz3certbot._internal.client.display_ops.choose_accountc C s� | j D ]}| j�|| j� q| j d |_| j d d f| �� ksBJ �t|jd d �t| j �ksbJ �| j d j| j j kszJ �| j j d u s�J �d S )NrP r ) rL rM rX rN r rp �setr' rH r@ r rK )r �mock_choose_accountsr� r$ r$ r% �test_multiple_accounts� s z+DetermineAccountTest.test_multiple_accountsc C sj | j D ]}| j�|| j� qd |_z | �� W n6 tjyd } z dt|�v sPJ �W Y d }~n d }~0 0 d S )NzNo account has been chosen) rL rM rX rN r rp r r r* )r r\ r� r+ r$ r$ r% � test_multiple_accounts_canceled� s z4DetermineAccountTest.test_multiple_accounts_canceledr/ c C s� d|_ t�d��D}| jd tjjf|j_ | jd tjjf| �� ksFJ �W d � n1 sZ0 Y |jj| j | j tj d� | jd j | j j ks�J �d| j jks�J �|�d� d S )NrR � certbot._internal.main.clientr )Ztos_cbzAccount registered.)r r rG rL �sentinelr� �registerrp rs r@ rM rt rH r rK )r r1 rU �clientr$ r$ r% �test_no_accounts_no_email� s �< �z.DetermineAccountTest.test_no_accounts_no_emailc C s| d| j _t�d��.}| jd tjjf|j_| � � W d � n1 sF0 Y | jd j | j j kshJ �d| j jksxJ �d S )Nz other emailr_ rP ) r@ rK r rG rL r` r� ra r rp rH r )r rb r$ r$ r% �test_no_accounts_email� s &z+DetermineAccountTest.test_no_accounts_emailc C s d}| � |t�|�� d S )Nz$Some error message raised by Certbot)rW r r )r rS r$ r$ r% �test_register_error_certbot� s z0DetermineAccountTest.test_register_error_certbotc C s d}t ddd�}| �||� d S )NzAError returned by the ACME server: must agree to terms of servicez$urn:ietf:params:acme:error:malformedz must agree to terms of service)�typZdetail�� acme_errorrW �r rS rT r$ r$ r% �(test_register_error_acme_type_and_detail� s �z=DetermineAccountTest.test_register_error_acme_type_and_detailc C s d}t dd�}| �||� d S )NzKError returned by the ACME server: The server experienced an internal errorz)urn:ietf:params:acme:error:serverInternal)rf rg ri r$ r$ r% �"test_register_error_acme_type_only� s z7DetermineAccountTest.test_register_error_acme_type_only)rC rD rE rF rX rp r rG rW rY rZ r] r^ rc rd re rj rk r� r$ r$ rf r% rF _ s& rF c s� e Zd ZdZ� fdd�Z� fdd�Zd�dd �Zd�d d �Zd d � Zdd� Z dd� Z e � d�dd� �Z e � d�e � d�e � d�e � d�e � d�e � d�dd� ������Ze � d �e � d �d d � ��Ze � d �e � d �e � d �d!d"� ���Ze � d�e � d �e � d �e � d �d#d$� ����Ze � d �e � d �d%d&� ��Ze � d �e � d �e � d'�e � d �d(d)� ����Ze � d�e � d�e � d�e � d*�d+d,� ����Ze � d�d-d.� �Ze � d/�d0d1� �Ze � d2�d3d4� �Ze � d5�e � d6�e � d�d7d8� ���Ze � d5�e � d6�d9d:� ��Ze � d5�e � d6�d;d<� ��Ze � d5�e � d6�d=d>� ��Ze � d5�e � d6�d?d@� ��Z dAdB� Z dCdD� Z dEdF� Z dGdH� Z dIdJ� Z!dKdL� Z"dMdN� Z#d�dOdP�Z$e � d�dQdR� �Z%e � d�e � dS�e � d�e � dT�dUdV� ����Z&e � d�dWdX� �Z'dddYdde(j(�)� ddfdZd[�Z*e � d�e � dS�e � dT�d\d]� ���Z+e � d^�e � d_�e � dT�d`da� ���Z,dbdc� Z-ddde� Z.dfdg� Z/e � dh�didj� �Z0e � dh�dkdl� �Z1e � dm�dndo� �Z2e � dm�dpdq� �Z3e � dr�dsdt� �Z4e � d�dudv� �Z5dwdx� Z6dydz� Z7d{d|� Z8d}d~� Z9dd�� Z:d�d�� Z;d�d�d��Z<d�d�� Z=d�d�� Z>d�d�� Z?d�d�� Z@d�d�� ZAe � d��d�d�� �ZBd�d�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHeI�J� e � d��e � d��e � d�d�d�� ����ZKd�d�d��ZLe � d��e � dS�e � d�d�d�� ���ZMe � d��d�d�� �ZNe � d��e � d��d�d�� ��ZOd�d�� ZPe � d��e � d�d�d�� ��ZQe � d�d�d�� �ZRe � d��e � d��d�d�� ��ZSe � d��e � d��e � d��e � d�d�d�� ����ZT� ZUS )��MainTestz Tests for different commands.c sL t � �� t�| jj� d| jjd| jjd| jjdg| _t � d�� � | _ d S )Nr � --work-dir� --logs-dir�--textz time.sleep) rW rX r �mkdirr@ �logs_dirr �work_dir� standard_argsr rG rZ � mock_sleepru rf r$ r% rX � s �zMainTest.setUpc s t t� t� �� d S r� )� reload_moduler rW r� ru rf r$ r% r� � s zMainTest.tearDownNFc s� |r�t jj� � fdd�}t�d��l}||_t�d��<}| �||�\}}}||||fW d � W d � S 1 sv0 Y W d � n1 s�0 Y nHt�d��.}| �||�\}}}||||fW d � S 1 s�0 Y dS )zaRun the cli with output streams, actual client and optionally os.path.isfile() mocked outc s* | � d�s | � d�s | � d�r"dS � | �S )zMock os.path.isfile()rA �chain�privkeyT)�endswith)�fnrn r� �Z orig_openr$ r% � mock_isfile� s ��z#MainTest._call.<locals>.mock_isfilez certbot.compat.os.path.isfiler_ N)r r� �isfiler rG r= �_call_no_clientmock) r rn �stdout� mockisfiler{ Zmock_ifrb r# �stderrr$ rz r% rp � s X zMainTest._callc C s� | j | }|r|nt�� }tjd|d��v t�d��L}t�d��" t�|dd� �}W d � n1 sh0 Y W d � n1 s�0 Y W d � n1 s�0 Y |||fS )z-Run the client with output streams mocked out�!certbot._internal.main.sys.stdout��new�!certbot._internal.main.sys.stderr�certbot.util.atexitN)rs �io�StringIOr rG r )r rn r~ Z toy_stdoutr� r# r$ r$ r% r} � s lz MainTest._call_no_clientmockc C sF t �d��(}| �g � d|jks$J �W d � n1 s80 Y d S )Nzcertbot._internal.main.runrP )r rG rp r< )r �mock_runr$ r$ r% � test_no_flags s zMainTest.test_no_flagsc C s� t �� }t �� }tjd|d��� tjd|d��� zNzt�dg� W n tyT Y n0 W |�� pf|�� }d|v s�J d�|���n(|�� p�|�� }d|v s�J d�|���0 W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr� r� r� z --version�certbotz Output is {0})r� r� r rG r � SystemExit�getvaluerh )r Ztoy_outZtoy_err�outputr$ r$ r% � test_version_string_program_name s �z)MainTest.test_version_string_program_namec C s� d}zFt �d��( t�| j|dd� � W d � n1 s>0 Y W n: tjy� } z |}|t|�v spJ �W Y d}~n d}~0 0 |dus�J �dS )zQEnsure that a particular error raises a missing cli flag error containing messageNr� )r rG r rs r ZMissingCommandlineFlagr* )r rn �message�excZexc_r$ r$ r% �_cli_missing_flag s :&zMainTest._cli_missing_flagz*certbot._internal.log.post_arg_parse_setupc C s2 ddg}| � |d� |�g d�� | � |d� d S )Nz-nr� zspecify a plugin)� --standalone�-dzeg.iszregister before running)r� �extend)r �_rn r$ r$ r% �test_noninteractive s z MainTest.test_noninteractiverN rL r� zBcertbot._internal.main.client.Client.obtain_and_enroll_certificaterI c C s g d�| j }t�� d f|_t�� |_t�d��n}|j} | �|� t�� } | j d d } | | v sdJ �dd l } | � � } d| � � v r�t�� | v s�J �W d � n1 s�0 Y t�d��J}|j} d} |d| g7 }| �|� | j tj tj d | tjd � W d � n1 �s 0 Y d S ) N)r� r� �-mz none@none.comr� r� z --agree-tosr� rP � user_agentr ZlinuxZ bandersnatchz --user-agentT)r Z verify_sslr� Zalg)rs r r* r rG � ClientNetworkr} r Zget_os_info_uar' �platform�lowerrs rt �joseZRS256)r ZgscZ_obtZdetr� �__�___rn Z acme_clientZacme_netZos_verZuar� Zplatr$ r$ r% �test_user_agent% s. � . �zMainTest.test_user_agent�5certbot._internal.main.plug_sel.record_chosen_plugins�.certbot._internal.main.plug_sel.pick_installerc C s$ | j g d�dd� |jdks J �d S )N) �installz --domains�foo.bar� --cert-pathrA � --key-pathrw � --chain-pathrv T�r rP )rp r< )r Zmock_pick_installer�_recr$ r$ r% �test_installer_selectionF s �z!MainTest.test_installer_selectionr� c C s� t jt�d�t�d�t�d�t�d�d�}t �d��r}||_| jg d�dd� |jd d }|jt�d�kspJ �|j t�d�ks�J �|j t�d�ks�J �W d � n1 s�0 Y d S ) NrA rv rw �r� � chain_path�fullchain_path�key_pathr� )r� � --cert-name�whateverTr� r ) r r* r� � temp_joinrG r rp r' r� r� r� )r �_instr� � mock_installr" � mock_getlin� call_configr$ r$ r% �test_installer_certnameM s � z MainTest.test_installer_certnamec C sT t jt�d�t�d�t�d�t�d�d�}t �d���}||_| jdddd t�d �gd d � |jd d }|jt�d�ks~J �|j t�d�ks�J �|j t�d�ks�J �|j t�d �ks�J �|� � | jddddt�d�gd d � |jd d }|jt�d�k�sJ �|j t�d�k�sJ �|j t�d�k�s0J �W d � n1 �sF0 Y d S )NrA rv rw r� r� r� r� r� r� Zoverriding_privkeyTr� r r� Zoverriding_cert) r r* r� r� rG r rp r' r� r� r� r� �reset)r r� r� r� r� r" r� r� r$ r$ r% � test_installer_param_override^ s6 � �� ��z&MainTest.test_installer_param_overridec C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� Znotfoundr� Zinvalid�r> r? r r� rp )r r� r� r$ r$ r% �test_installer_param_errorz s z#MainTest.test_installer_param_errorr c C s� t jt�d�t�d�t�d�t�d�d�}t �d��&}||_| jdgdd� W d � n1 s`0 Y |jstJ �|js~J �d S ) NrA rv rw r� r� r� Tr� )r r* r� r� rG r rp r )r � mock_instZ mock_getcertr� r� r" r� r$ r$ r% �test_installer_select_cert� s � . z#MainTest.test_installer_select_certzcertbot.util.exe_existsc C sZ d|_ tj�� }g d�}dddt�d�dt�d�dd d d d g }d |v rp| �|�\}}}}d|v sdJ �d|v spJ �| �dgd� t� d��r}t� d��H} t� � | _ | �g d�� |j d \} } } t | t j�s�J �W d � n1 s�0 Y W d � n1 �s0 Y t� d��.} | �ddg� d| jk�s6J �W d � n1 �sL0 Y d S )NT)z--apachez--authenticatorr r� r r� Zblahr� z--nginx-server-rootz/nonexistent/thingr� r� �--debugr z The nginx plugin is not working�MisconfigurationErrorr� z(With the standalone plugin, you probablyrJ rI )r� z--manualr� r� r � certbot._internal.main.certonly�authrP )r r rj rk r� r� rp r� r rG r* r' � isinstancer � Authenticatorr< )r Zmock_exe_existsr� r� r� Z real_pluginsrn r# r^ Zmock_gscZ unused_configr� Zunused_installer� mock_certonlyr$ r$ r% �test_configurator_selection� s, � N z$MainTest.test_configurator_selectionc C sV | � dg�\}}}}d|jjks$J �| � g d��\}}}}|j�tjdtjtj� d S )N�rollbackrP )r� z --checkpointsZ123�{ )rp r� r< rs r rt )r r� rb r$ r$ r% � test_rollback� s �zMainTest.test_rollbackz+certbot._internal.cert_manager.certificatesc C s | � dg� d|jksJ �d S )NZ certificatesrP �r} r< �r r r$ r$ r% �test_certificates� s zMainTest.test_certificatesr� c C s | � dg� d|jksJ �d S )N�deleterP r� r� r$ r$ r% � test_delete� s zMainTest.test_deletez$certbot._internal.main.plugins_discozFcertbot._internal.main.cli.HelpfulArgumentParser.determine_help_topicsc sF g d�� t j� fdd�tt� ��D �� D ]}| �dgt|� � q(d S )N)�--init� --preparez--authenticatorsz --installersc 3 s | ]}t �� |�V qd S r� )� itertools� combinations)r� r� ��flagsr$ r% � <genexpr>� s �z(MainTest.test_plugins.<locals>.<genexpr>ro )r� rv �range�lenrp �list)r r� �_det� mock_discorn r$ r� r% � test_plugins� s ��zMainTest.test_pluginsc C s� g }|j �� }t�� }tj|d��& | �dg|�\}}}}W d � n1 sN0 Y |j�� |�� j �|� |�� � � }|� � � � t |�ks�J �d S )N�r~ ro ) rj rk r� r� r� � patch_display_util_with_stdoutrp �visiblers �ifacesr� �stripr* �r r� r� r� ro r~ r� �filteredr$ r$ r% �test_plugins_no_args� s 4 z MainTest.test_plugins_no_argsc C s� g }|j �� }dd� }t�� }t�d��X}tj|d��, ||_| � dg|�\}}}}W d � n1 sh0 Y W d � n1 s�0 Y |j � � |� � j � |� |� � � � } |� � �� t| �ks�J �d S )Nc S s | || }}}t �� �dS )zRaises error.Error.N)r r )rO �mode�strictr� r$ r$ r% � throw_error� s z?MainTest.test_plugins_no_args_unprivileged.<locals>.throw_errorz certbot.util.set_up_core_dirr� ro )rj rk r� r� r rG r� r� r= rp r� rs r� r� r� r* ) r r� r� r� ro r� r~ Zmock_set_up_core_dirr� r� r$ r$ r% �!test_plugins_no_args_unprivileged� s R z*MainTest.test_plugins_no_args_unprivilegedc C s� g }|j �� }t�� }tj|d��( | �ddg|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }|j j dks�J �|� � � � t|�ks�J �d S )Nr� ro r� rP )rj rk r� r� r� r� rp r� rs r� �initr< r� r� r* r� r$ r$ r% �test_plugins_init� s 6 zMainTest.test_plugins_initc C s� g }|j �� }t�� }tj|d��( | �g d�|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }|j j dks�J �|j �� |j �� |� � }|�� �� t|�ks�J �d S )Nr� )ro r� r� rP )rj rk r� r� r� r� rp r� rs r� r� r< �prepare� availabler� r� r* ) r r� r� r� ro r~ r� r� r� r$ r$ r% �test_plugins_prepare s 6 z MainTest.test_plugins_preparec C s� d}d}d}d}t �d��,}| �dd|ddd dd dg � W d � n1 sL0 Y |jd \}}|jtj�|�kszJ �|jtj�|�ks�J �|j tj�|�ks�J �|j tj�|�ks�J �d S ) NrA �keyrv � fullchainr� r� r� r� r� z--fullchain-pathr ) r rG rp r' r� r r� r� r� r� r� )r rA r� rv r� r� r@ �unused_pluginsr$ r$ r% �test_certonly_abspath s �$z MainTest.test_certonly_abspathc C sX z | � g d�� t�d� W n6 tjyR } z dt|�v s>J �W Y d }~n d }~0 0 d S )N)�-aZbad_authr� z!Exception should have been raisedz-The requested bad_auth plugin does not appear)rp r> �failr �PluginSelectionErrorr* �r �er$ r$ r% �test_certonly_bad_args/ s z MainTest.test_certonly_bad_argsc C s� t �tj�� | �ddg� W d � n1 s00 Y t �tj�� | �ddg� W d � n1 sj0 Y t �tj�� | �ddg� W d � n1 s�0 Y t �tj�� | �ddg� W d � n1 s�0 Y d S )Nr� Z@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa� aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.z 204.11.231.35z%2001:db8:ac69:3ff:b1cb:c8c6:5a84:a31br� ru r$ r$ r% � test_check_config_sanity_domain6 s ,,,z(MainTest.test_check_config_sanity_domainc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz*certonly --csr {0} --allow-subset-of-names�r> r? r r rp rh r� ri ru r$ r$ r% �test_csr_with_besteffortD s z!MainTest.test_csr_with_besteffortc C sZ z| � dtg� W n8 tjyJ } z dt|�v s4J �W Y d }~d S d }~0 0 t�d� d S )Nz--csrzPlease try the certonlyz2Expected supplying --csr to fail with default verb)rp r� r r �reprr> r� r� r$ r$ r% �test_run_with_csrH s zMainTest.test_run_with_csrc C sJ t �tj��* | �d�t�d���� � W d � n1 s<0 Y d S )Nzcertonly --csr {0}zcsr-nonames_512.pem) r> r? r r rp rh r� � vector_pathri ru r$ r$ r% �test_csr_with_no_domainsQ s �z!MainTest.test_csr_with_no_domainsc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz!certonly -d example.org --csr {0}r� ru r$ r$ r% �"test_csr_with_inconsistent_domainsV s z+MainTest.test_csr_with_inconsistent_domainsc C s� t �d��h}d|_t �d��8}||_|d u r0g }|d�� 7 }| �|� W d � n1 sZ0 Y W d � n1 sx0 Y d S )N�=certbot._internal.main._find_lineage_for_domains_and_certname)ZnewcertNrJ z!-d foo.bar -a standalone certonly)r rG r ri rp )r rN rn � mock_renewalr^ r$ r$ r% � _certonly_new_request_commonZ s z%MainTest._certonly_new_request_commonc C sX t �� }d |j_| �|dg� |jjdks.J �|jdks<J �|jd d jdu sTJ �d S �N� --dry-runrP r T)r r* � obtain_and_enroll_certificater r� r< r' �dry_run)r � mock_reportrN r$ r$ r% �)test_certonly_dry_run_new_request_successe s z2MainTest.test_certonly_dry_run_new_request_successz+certbot._internal.main.util.atexit_registerz certbot.crypto_util.notAfterc C s� t j�t j�| jjd��}t j�t j�| jjd��}d}||� j_tj ||||d�}t� � } || j _| � | � | j j dks~J �|j dks�J �||j d d v s�J �||j d d v s�J �d |j d d v s�J �|jd u s�J �d S ) Nz live/foo.barz live/baz.quxz 1970-01-01)rA r� r� r� rP r r1 rQ �donateT)r r� �normpathr� r@ r �dater r r* r r� r< r' r ) r Z mock_notAfterra rV r r� r� r r" rN r$ r$ r% �!test_certonly_new_request_successn s � z*MainTest.test_certonly_new_request_successc C sX t �� }d|j_t�tj�� | �|� W d � n1 s<0 Y |j du sTJ �d S rw ) r r* r r r> r? r r r� r )r ra rN r$ r$ r% �!test_certonly_new_request_failure� s (z*MainTest.test_certonly_new_request_failureTc sZ t �d�} tj�tj�| jjd��} tj | | | | d�} || j _ d| j _ dg| j _ d| _d| _| | _t� � }tj dd �}t� � }t�� � |d |d f|j_ � fd d �}�zX�z�t�d���f}| d f|_ t�d���.}||_ t�d���}|s�||� j_t�d���}||j_ t�d��� |�s g d�}|�r,||7 }z>| �|� �\}� }}|�rZtd|� t|��|�rhJ d��W n" |�s�tdt� � ��Y n0 W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s0 Y W d � n1 �s$0 Y |�r~| �rj| �sj|j� tj gtj�tj�| jjd��� n|j� tj gd � n|jj dk�s�J �W n | � � � Y n0 W |�rPt!tj�| jj"d���"}||�#� v �s�J �W d � n1 �s�0 Y nR|�rNt!tj�| jj"d���"}||�#� v �s.J �W d � n1 �sD0 Y 0 | |� fS )Nr zlive/foo.bar/fullchain.pem)rA r� r� r� F� isnot.orgr0 Z secp256r1Zpem_key)Zpemrv �csrc s � � | � dS )zWrite message to stdout.N)r )r� rn r� r� r$ r% � write_msg� s z0MainTest._test_renewal_common.<locals>.write_msgz5certbot._internal.cert_manager.find_duplicative_certsrJ z)certbot._internal.display.obj.get_displayz*certbot._internal.main.renewal.crypto_utilrN )r� r r� r r� ZReturnedzrenewal should have erroredzUnexpected renewal error: z live/sample-renewal/privkey.pemr �letsencrypt.log)$r� r� r r� r r� r@ r r r* Zshould_autorenewr Zhas_pending_deploymentr- r: Zelliptic_curve� reuse_keyr� r� �obtain_certificaterG r� r= ZnotAfterrp �print�AssertionError� traceback� format_excrs rt r< � _dump_logr rq �read)r �due_for_renewal� extra_args�log_outrn � should_renew�error_expected� quiet_mode� expiry_dater �new_keyr� r� r" Z mock_certrZmock_keyrN r Zmock_fdcr^ Z mock_displayZmock_crypto_utilr# r� �lfr$ r� r% �_test_renewal_common� s� �� � ��� �� 4�4z MainTest._test_renewal_commonc C sp | � dg �\}}}|jjdks"J �|j�|�� � |jdks@J �d|jd d v sVJ �d|jd d v slJ �d S )NTrP � fullchain.pemr r1 r )r Zsave_successorr< Zupdate_all_links_tors Zlatest_common_versionr' )r r� rV r Zlineager$ r$ r% �test_certonly_renewal� s �z MainTest.test_certonly_renewalr/ zEcertbot._internal.log.logging.handlers.RotatingFileHandler.doRolloverc C sp | j dddgdd�\}}}|�d� | j dg d�dd� | j dg d �dd �\}}}d |� jjd d v slJ �d S ) NFr �--keepzsimulating renewal)r �The dry run was successful.)z--renew-by-default�-tvvr� zAuto-renewal forced)r$ r� r" )r z not yet duer )r �assert_any_callr� r' )r r� r� r1 Zmock_displayerr$ r$ r% � test_certonly_renewal_triggers� s � � � z'MainTest.test_certonly_renewal_triggersc C s^ t d� tj�| jjd�}tj�|�rZt|�� }t |�� � W d � n1 sP0 Y d S )NzLogs:r ) r r r� r� r@ rq r r r )r Zlog_pathr r$ r$ r% r � s zMainTest._dump_logc C s. t �| jjd� g d�}| jdg |dd� d S )N�sample-renewal.conf�r) r r$ T�rn r �r� � make_lineager@ r r �r rn r$ r$ r% �test_renew_verb� s zMainTest.test_renew_verbc C s4 t j| jjddd� g d�}| jdg |ddd� d S )Nr' F�Zec)r) r � --reuse-keyT�rn r r r* r, r$ r$ r% �test_reuse_key s zMainTest.test_reuse_keyz6certbot._internal.storage.RenewableCert.save_successorc C s4 t j| jjddd� ddg}| jdg |ddd� d S )Nr' Fr. r) r/ Tr0 r* �r Zunused_save_successorrn r$ r$ r% �test_reuse_key_no_dry_run s z"MainTest.test_reuse_key_no_dry_runc C s2 t �| jjd� g d�}| jdg |dddd� d S )Nr' )r) r/ z --new-keyT)rn r r r r* r2 r$ r$ r% � test_new_key s �zMainTest.test_new_keyz sys.stdinc C sp d|j _t�| jjd� g d�}| jdg |dd� | jjdksBJ �| jj d d }d| krfdksln J �d S ) NFr' r( Tr) rP r i� ) �isattyr r� r+ r@ r r rt r< r' )r �stdinrn Zsleep_call_argr$ r$ r% �!test_noninteractive_renewal_delay s z*MainTest.test_noninteractive_renewal_delayc C sF d|j _t�| jjd� g d�}| jdg |dd� | jjdksBJ �d S )NTr' r( r) r ) r5 r r� r+ r@ r r rt r< )r r6 rn r$ r$ r% �!test_interactive_no_renewal_delay s z*MainTest.test_interactive_no_renewal_delayr' c C sl d|_ t�| jjd� tj�� tjdd� }| jdd ddg|d�\}}}d|� � v sXJ �d|� � v shJ �d S ) NFr' �Z )Zdaysr) )r r rn r zNo renewals were attempted.z7The following certificates are not due for renewal yet:) r r� r+ r@ r r� �nowZ timedeltar r� )r r Zexpiryr� r~ r$ r$ r% � test_renew_skips_recent_certs& s � z&MainTest.test_renew_skips_recent_certsc C s~ t �| jjd� ddg}| jdg |dd�\}}}|�� }d|v sDJ �g d�}| jdg |ddd�\}}}|�� }d|kszJ �d S ) Nr' r) r Tr) )r) r z-q)rn r r r; )r� r+ r@ r r r� )r r� rn r~ �outr$ r$ r% �test_quiet_renew0 s � zMainTest.test_quiet_renewc C s0 t �| jjd� g d�}| jdg |ddd� d S )Nr' )r) r �--post-hook=no-such-commandTF�rn r r r* r, r$ r$ r% �test_renew_hook_validation> s �z#MainTest.test_renew_hook_validationc C sZ t �| jjd� g d�}t�d��$ | jdg |ddd� W d � n1 sL0 Y d S )Nr' )r) r r> z--disable-hook-validationz!certbot._internal.hooks.post_hookTFr? )r� r+ r@ r r rG r r, r$ r$ r% � test_renew_no_hook_validationD s �z&MainTest.test_renew_no_hook_validationc C s| t j�| jjd�}t j�|�s(t�|� tt j�|d�d�� W d � n1 sR0 Y g d�}| j dg |ddd� d S )Nr� z empty.confr� r( FTr? ) r r� r� r@ r r r r r r )r Zrdrn r$ r$ r% � test_renew_verb_empty_configL s z%MainTest.test_renew_verb_empty_configc C s* t �| jjd� | jdg dg d�d� d S )Nr' T�r) r r� zsample-renewal)r rn r* ru r$ r$ r% �test_renew_with_certnameU s �z!MainTest.test_renew_with_certnamec C s | j dg dg d�dd� d S )NTFrC )r rn r )r ru r$ r$ r% � test_renew_with_bad_certnameZ s �z%MainTest.test_renew_with_bad_certnamec C s^ t j�| jjd�}t�|� tt j�|d�d��}|�d� W d � n1 sP0 Y d S )Nr� z test.confr� zMy contents don't matter) r r� r� r@ r r r r r )r Zrenewer_configs_dirr r$ r$ r% �_make_dummy_renewal_config_ s z#MainTest._make_dummy_renewal_configc K s� | � � t�d���}t�� }d|_|d ur4d|i|_|d urD||j_||_t�d��2}|�ddg� | j d dd i|�� W d � n1 s�0 Y |d ur�|r�|j s�J �n|j d u s�J �W d � n1 s�0 Y d S ) Nr� zsomepath/fullchain.pemr �!certbot._internal.main.renew_certrn r) Tr F)TN) rF r rG r* r� � configurationr- r � setdefaultr r )r r r- �assert_oc_calledr� �mock_rcr" r� r$ r$ r% �_test_renew_commone s 2 zMainTest._test_renew_commonc C s | j ddd� d S )NFT�rJ r �rL ru r$ r$ r% �test_renew_no_renewalparamsz s z$MainTest.test_renew_no_renewalparamsc C s | j i ddd� d S )NFT)r rJ r rN ru r$ r$ r% �test_renew_no_authenticator} s �z$MainTest.test_renew_no_authenticatorc C s ddd�}| j |ddd� d S )N�webrootz over 9000)r Z rsa_key_sizeTF)r r rJ rN �r r r$ r$ r% �test_renew_with_bad_int� s ��z MainTest.test_renew_with_bad_intc C s ddd�}| j |dd� d S )NrQ �None)r Z http01_portT�r rJ rN rR r$ r$ r% � test_renew_with_nonetype_http01� s ��z(MainTest.test_renew_with_nonetype_http01c C s$ ddi}dg}| j |d|dd� d S )Nr rQ u uniçodé.comTF)r r r- rJ rN )r r r- r$ r$ r% �test_renew_with_bad_domain� s �z#MainTest.test_renew_with_bad_domainr� c C s2 t �� t �� f|_ddi}| j|dd�� d� d S )Nr rQ Tzrenew --configurator apache�r rJ rn )r r* r rL ri )r r� r r$ r$ r% � test_renew_with_configurator� s �z%MainTest.test_renew_with_configuratorc C s dddd�}| j |dd� d S )NrQ rT Z42)r Z webroot_pathZwebroot_imaginary_flagTrU rN rR r$ r$ r% �$test_renew_plugin_config_restoration� s ��z-MainTest.test_renew_plugin_config_restorationc C s0 ddi}| j |dddt�dt�� i�gd� d S )Nr rQ Tr) z --webroot-mapr� rX )rL �json�dumpsr� r� rR r$ r$ r% �test_renew_with_webroot_map� s �z$MainTest.test_renew_with_webroot_mapc C sB t �d��$}t|_| jddd� W d � n1 s40 Y d S )Nz+certbot._internal.main.renewal.reconstituteFTrM )r rG � Exceptionr= rL )r Zmock_reconstituter$ r$ r% � test_renew_reconstitute_error� s z&MainTest.test_renew_reconstitute_errorc C s� | � � t�d��x}t�� }d|_||_dddii|_t�d��,}t|_| j dd ddgd d � W d � n1 sr0 Y W d � n1 s�0 Y d S ) Nr� zsomewhere/fullchain.pemr r rQ rG Tr) F)r rn r ) rF r rG r* r� r rH r^ r= r )r rK r" r� r$ r$ r% � test_renew_obtain_cert_error� s � �z%MainTest.test_renew_obtain_cert_errorc C s: | j dd d�� ddd� | j dd d�t��� ddd� d S )NTzrenew -d example.comFr? zrenew --csr {0})r ri rh r� ru r$ r$ r% � test_renew_with_bad_cli_args� s ��z%MainTest.test_renew_with_bad_cli_argsc C s: | j dd dddd�tj�gd�\}}}d|�� v s6J �d S )NFr) z --post-hookz {0} -c "print('hello world');")r r r rn zNo hooks were run.)r rh �sys� executabler� )r r� r~ r$ r$ r% �test_no_renewal_with_hooks� s ��� z#MainTest.test_no_renewal_with_hooksr� rJ c C sh dt �� f|_t �� |_}| �g d�� |jjdu s:J �|jjdu sJJ �|� jjdks\J �|� � d S )Nr )r� r� r� r r� Fr ) r r* r rp r r r Z add_messager< r; )r Zmock_report_new_certr^ r� r� rN r$ r$ r% �test_certonly_reinstall� s z MainTest.test_certonly_reinstallc C s2 d}d}t �� }||f|j_tj�tj�| jj d��}tj�tj�| jj d��}|d |f|j _t � d���}||_tj�tj�| jj d��}d� t |||��� } |r�| |7 } t � d�� | �| � W d � n1 s�0 Y W d � n1 s�0 Y d | v �r|j jd u �s.J �n|j �|||||� d S ) N�certrrv z live/example.com/cert_512.pemz live/example.com/fullchain.pemrJ zlive/example.com/chain.pemzV-a standalone certonly --csr {0} --cert-path {1} --chain-path {2} --fullchain-path {3}z"certbot._internal.main.crypto_utilr F)r r* Zobtain_certificate_from_csrr r r� r r� r@ r Zsave_certificaterG rh r� ri rp r rs ) r r rf rv rN r� � full_pathr^ r� rn r$ r$ r% �_test_certonly_csr_common� s> � � �� F �z"MainTest._test_certonly_csr_commonz+certbot._internal.main._csr_report_new_certc C s� | � � |jdksJ �d|jd d v s,J �|jd d d u sBJ �d|jd d v sXJ �d|jd d v snJ �|jdu s|J �d S ) NrP r r r1 r rQ r T)rh r< r' r )r ra rV �mock_csr_reportr$ r$ r% �test_certonly_csr� s zMainTest.test_certonly_csrc C s6 | � dg� |jdksJ �|jd d jdu s2J �d S r� )rh r< r' r )r ri r$ r$ r% �test_certonly_csr_dry_run s z"MainTest.test_certonly_csr_dry_runr� r� c C s� d|_ d}| �dtdtd|dg� ttd��D}|jjdks>J �|jjd d t j � |� � �ksbJ �W d � n1 sv0 Y ttd��@}t �|� � �d }|�� j}|�t �|�tj� W d � n1 s�0 Y d S ) NFr� r� r� �--serverr� �rbrP r )r r} � SS_CERT_PATH�RSA2048_KEY_PATHr r� r< r� r' r� r� �loadr r �pyopenssl_load_certificater� rs �ComparableX509r rt )r r� r� r� r rA r� r$ r$ r% �test_revoke_with_key s" � �& �z MainTest.test_revoke_with_keyc C sL d}t �tj��( | �dtdtd|dg� W d � n1 s>0 Y d S )Nr� r� r� rl r� )r> r? r r r} �CERT�KEY)r r� r$ r$ r% � test_revoke_with_key_mismatch s �z&MainTest.test_revoke_with_key_mismatchc C s� d|_ t�� d f|_ | �dtdg�\}}}}tt��@}t�|�� �d }|� � j }|� t � |�tj� W d � n1 sz0 Y d S )NFr� r� r )r r r* rp rt r r rq r Zacme_from_config_keyr� rs r� rr rt )r r� r� r� rb r rA r� r$ r$ r% �test_revoke_without_key" s �z MainTest.test_revoke_without_keyc C s� t �d���}t �� }d|_|df|j_| �g d�� t �d��H}t �� }||j_dg|j_| �g d��}d|d v sxJ �W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nr_ Zimaginary_accountZworked)ra �--email�user@example.org� certbot._internal.main.account� an accountz There is an existing accountr ) r rG r* rH ra r r} �AccountFileStoragerk )r r� Z mocked_clientr� Zmocked_account�mocked_storagerG r$ r$ r% � test_register0 s zMainTest.test_registerz'certbot._internal.updater._run_updatersc C sl t j|_t�t j�� t�d d d � W d � n1 s80 Y d| j_t � | jd d � |j du shJ �d S rw ) r r� r= r> r? r � renew_certr@ r r Zrun_generic_updatersr )r r� r� r$ r$ r% �test_plugin_selection_errorA s ,z$MainTest.test_plugin_selection_errorz3certbot._internal.main.updater.run_renewal_deployerc C s` d| j _t�� }|t�� f|_t�| j dd� |jdks<J �|jdksJJ �|j� � |� � dS )z8A dry-run renewal shouldn't try to restart the installerTNrP ) r@ r r r* r r r r< r� r; )r r� r^ r� Zmock_run_renewal_deployerr" r$ r$ r% �#test_renew_doesnt_restart_on_dryrunN s z,MainTest.test_renew_doesnt_restart_on_dryrun)NF)N)N)NNN)N)VrC rD rE rF rX r� rp r} r� r� r� r rG r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r� r: r r! r& r r- r1 r3 r4 r7 r8 r; r= r@ rA rB rD rE rF rL rO rP rS rV rW rY rZ r] r_ r` ra rd r� r� re rh rj rk rs rv rw r~ r� r� r� r$ r$ rf r% rl � s@ % � K � rl c @ s> e Zd Zdd� Zdd� Zdd� Ze�d�dd � �Zd d � Z d S ) �UnregisterTestc C s@ t �d�t �d�t �d�t�� d�| _dd� | j�� D �| _d S )Nr� rz r_ )rP r rb � get_utilityc S s i | ]\}}||� � �qS r$ r� r� r$ r$ r% r� h r6 z(UnregisterTest.setUp.<locals>.<dictcomp>)r rG r� r� r r� r ru r$ r$ r% rX b s �zUnregisterTest.setUpc C s | j �� D ] }|�� q d S r� )r r rd r r$ r$ r% r� j s zUnregisterTest.tearDownc C sR t �� | jd j_| jd � }d|j_t �� }t �� }t�||�}|dksNJ �d S )Nr r� FzDeactivation aborted.)r r r r| r r� r � unregister)r r8 r@ r� �resr$ r$ r% �test_abort_unregistern s z$UnregisterTest.test_abort_unregisterr/ c C s� t �� }dg|j_|| jd j_t �� df| jd _t �� }|| jd j_t �� }t �� }t�||�}|d u srJ �|� d� d S )Nr{ r ZfoorP rb zAccount deactivated.) r r* rk r r r| �Clientr r� rs )r r1 r} � cb_clientr@ r� r� r$ r$ r% �test_unregisterz s z UnregisterTest.test_unregisterc C s| t �� }g |j_|| jd j_t �� }|| jd j_t �� }d|_t �� }t� ||�}d}||ksfJ �|j j j du sxJ �d S )Nr rb z"https://acme.example.com/directoryzNCould not find existing account for server https://acme.example.com/directory.F) r r* rk r r r| r� r� r r� r� Zdeactivate_registrationr )r r} r� r@ r� r� �mr$ r$ r% �test_unregister_no_account� s z)UnregisterTest.test_unregister_no_accountN) rC rD rE rX r� r� r rG r� r� r$ r$ r$ r% r� a s r� c @ s" e Zd ZdZe�d�dd� �ZdS )�MakeOrVerifyNeededDirsz<Tests for certbot._internal.main.make_or_verify_needed_dirs.zcertbot._internal.main.utilc C sp t �| j� | jj| jjfD ]}|j�|tj| jj � q | jj | jj | jj f}|D ]}|j j|| jj d� qRd S )N)r� )r Zmake_or_verify_needed_dirsr@ r rr Zset_up_core_dirr% r ZCONFIG_DIRS_MODEZstrict_permissionsZrenewal_pre_hooks_dirZrenewal_deploy_hooks_dirZrenewal_post_hooks_dirZmake_or_verify_dir)r Z mock_utilZcore_dirZ hook_dirsZhook_dirr$ r$ r% �test_it� s ���z MakeOrVerifyNeededDirs.test_itN)rC rD rE rF r rG r� r$ r$ r$ r% r� � s r� c s� e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�e�d �e�d �e�d �d d � ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d �e�d �e�d�dd� ���Z e�d �e�d �e�d�dd� ���Z e�d �e�d�dd� ��Z dd� Ze�d�e�d �e�d�dd� ���Ze�d �e�d �e�d�e�d�e�� d d � �����Ze�d �e�d �e�d�e�d�e�� d d � �����Zd d!� Z� ZS )"� EnhanceTestz)Tests for certbot._internal.main.enhance.c s4 t � �� t�� | _| j�� | _tjt j d�| _ d S �N)�spec) rW rX r� r� r� rZ r� r r* r �AutoHSTSEnhancement� mockinstallerru rf r$ r% rX � s zEnhanceTest.setUpc C s | j �� d S r� r� ru r$ r$ r% r� � s zEnhanceTest.tearDownc C s� t j�� }t�||�}t�d���}dg|_t�d���}dg|_t�d��P}t�� }||_ ||_t � ||� |W d � W d � W d � S 1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr r� r� rJ ) r rj rk r rl r rG r r* r@ r �enhance)r rn ro r@ Z mock_certsZmock_domr^ rN r$ r$ r% rp � s zEnhanceTest._callr� r� z0certbot._internal.main.display_ops.choose_valuesz0certbot._internal.main._find_domains_or_certnamec C sx t jdd�|_dg|_d|_t �d��>}| �ddg� |js@J �d|jd d v sVJ �W d � n1 sj0 Y d S ) N�/tmp/nonexistent�r� r� �NNr� r� � --redirectr r rQ )r r* r rG rp r r' )r � mock_findr� r" r� � mock_pickr$ r$ r% �test_selection_question� s z#EnhanceTest.test_selection_questionc C s� t jdd�|_dg|_d|_t �d��t t �d��J}| �g d��}|jsLJ �d|jd d v sbJ �|jjsnJ �W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nr� r� r� r� r� z.certbot._internal.main.plug_sel.logger.warning)r� r� rQ r� z make senser )r r* r rG rp r r' �enhance_config)r r� r� r" r� Zmock_logrN r$ r$ r% �test_selection_auth_warning� s z'EnhanceTest.test_selection_auth_warningc s� t jdd�|_dg|_t �d��� | �g d��� ddg}dg}� jjsJJ �t� fd d �|D ��sdJ �t� fd d �|D ��r~J �d� jj d d v s�J �W d � n1 s�0 Y d S ) Nr� r� r� r� �r� r� �--hstsZredirectZhstsZuirc 3 s | ]}t � j|�V qd S r� ��getattrr@ �r� r� �rN r$ r% r� � r6 z7EnhanceTest.test_enhance_config_call.<locals>.<genexpr>c 3 s | ]}t � j|�V qd S r� r� r� r� r$ r% r� � r6 r ) r r* r rG rp r� r �all�anyr' )r r� r� r" Zreq_enhZ not_req_enhr$ r� r% �test_enhance_config_call� s z$EnhanceTest.test_enhance_config_callc C sl t jdd�|_dg|_t �d��8 | �g d��}|jjs<J �|jdu sJJ �W d � n1 s^0 Y d S )Nr� r� r� r� )r� r� r� z--non-interactiveF)r r* r rG rp r� r )r r� r� r" rN r$ r$ r% �test_enhance_noninteractive� s � z'EnhanceTest.test_enhance_noninteractivec C sn g |_ t�d��J t�tj�� | �g d�� W d � n1 sB0 Y W d � n1 s`0 Y d S )Nr� r� )r r rG r> r? r r rp )r r� r� r$ r$ r% �test_user_abort_domains s z#EnhanceTest.test_user_abort_domainsc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r )r> r? r r� rp ru r$ r$ r% � test_no_enhancements_defined s z(EnhanceTest.test_no_enhancements_definedrz c C s: dg|_ d|_ t�� |_| �ddg�}|jjdu s6J �d S )Nr� r� r� r� F)r r r� r= rp r� r )r r� r� r� rN r$ r$ r% r� s z'EnhanceTest.test_plugin_selection_errorr� c C s^ | j |_ddg|_tjdd�|_| �ddg� | j jjs<J �| j jjd d ddgksZJ �d S ) Nr� � another.tldr� r� r� � --auto-hstsr rP )r� r r r* rp Zenable_autohstsr r' �r r� r� r� r� r" r$ r$ r% �test_enhancement_enable s �z#EnhanceTest.test_enhancement_enablec C sf t �| jd�|_ddg|_tjdd�|_t�tj �� | � ddg� W d � n1 sX0 Y d S )Nr r� r� r� r� r� r� ) r r| r@ r r r* r> r? r r~ rp r� r$ r$ r% �%test_enhancement_enable_not_supported, s z1EnhanceTest.test_enhancement_enable_not_supportedc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r� )r> r? r r rp ru r$ r$ r% � test_enhancement_enable_conflict8 s z,EnhanceTest.test_enhancement_enable_conflict)rC rD rE rF rX r� rp r rG r� r� r� r� r� r� r� r� r� r� r� r� r� r$ r$ rf r% r� � sV r� c sX e Zd ZdZ� fdd�Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Z� Z S ) � InstallTestz)Tests for certbot._internal.main.install.c s t � �� tjtjd�| _d S r� )rW rX r r* r r� r� ru rf r$ r% rX @ s zInstallTest.setUpr� r� c C sh t �| jd�|_tj�� }d| j_d| j_t � t j �� t �| j|� W d � n1 sZ0 Y d S )Nr TZ nonexistent)r r| r@ r r rj rk r} r2 r> r? r r~ r r� �r r� r� ro r$ r$ r% �&test_install_enhancement_not_supportedD s z2InstallTest.test_install_enhancement_not_supportedc C sp | j |_tj�� }d| j_d | j_d| j_d| j_ t � t j �� t�| j|� W d � n1 sb0 Y d S )NTr� )r� r r rj rk r@ r} r2 r� r� r> r? r r� r r� r� r$ r$ r% �$test_install_enhancement_no_certnameN s z0InstallTest.test_install_enhancement_no_certname) rC rD rE rF rX r rG r� r� r� r$ r$ rf r% r� = s r� c @ sx e Zd ZdZdd� Zdd� Zedd� �Zedd � �Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� ZdS )�ReportNewCertTestznTests for certbot._internal.main._report_new_cert and certbot._internal.main._csr_report_new_cert. c C sJ t �d�| _| j�� | _t �d�| _| j�� | _t�ddddd�| j_d S )Nr/ z+certbot._internal.main.crypto_util.notAfteri� rP r ) r rG � notify_patchrZ r1 �notafter_patchZ mock_notafterr� r ru r$ r$ r% rX ` s zReportNewCertTest.setUpc C s | j �� | j�� d S r� )r� rd r� ru r$ r$ r% r� h s zReportNewCertTest.tearDownc O s ddl m} ||i |��S )Nr )�_report_new_cert)rm r� )�clsrn r� r� r$ r$ r% rp l s zReportNewCertTest._callc O s ddl m} ||i |��S )Nr )�_csr_report_new_cert)rm r� )r� rn r� r� r$ r$ r% � _call_csrq s zReportNewCertTest._call_csrc C s( | � tjdd�d d d � | j�d� d S �NT�r r# �rp r r r1 r0 ru r$ r$ r% �test_report_dry_runv s z%ReportNewCertTest.test_report_dry_runc C s( | � tjdd�d d d � | j�d� d S r� �r� r r r1 r0 ru r$ r$ r% �test_csr_report_dry_runz s z)ReportNewCertTest.test_csr_report_dry_runc C s� t �t��( | �tjdd�d d d � W d � n1 s80 Y t �t��( | �tjdd�d d d � W d � n1 sz0 Y d S )NFr� )r> r? r rp r r r� ru r$ r$ r% �test_report_no_paths~ s 6 z&ReportNewCertTest.test_report_no_pathsc C s( | � tjdd�ddd� | j�d� d S )NFr� �/path/to/cert.pem�/path/to/fullchain.pem�/path/to/privkey.pemaA Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem Key is saved at: /path/to/privkey.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background.r� ru r$ r$ r% � test_report� s ��z ReportNewCertTest.test_reportc C s( | � tjdd�ddd � | j�d� d S )NFr� r� r� a Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background.r� ru r$ r$ r% �test_report_no_key� s ��z$ReportNewCertTest.test_report_no_keyc C s* | � tjddd�ddd� | j�d� d S )NF)r �preconfigured_renewalr� r� r� �� Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem Key is saved at: /path/to/privkey.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews.r� ru r$ r$ r% �$test_report_no_preconfigured_renewal� s ��z6ReportNewCertTest.test_report_no_preconfigured_renewalc C s( | � tjdd�ddd� | j�d� d S )NFr� r� z/path/to/chain.pemr� z� Successfully received certificate. Certificate is saved at: /path/to/cert.pem Intermediate CA chain is saved at: /path/to/chain.pem Full certificate chain is saved at: /path/to/fullchain.pem This certificate expires on 1970-01-01.r� ru r$ r$ r% �test_csr_report� s ��z!ReportNewCertTest.test_csr_reportc C s, | � tjdddd�ddd� | j�d� dS ) zBShouldn't get a message about autorenewal if no --manual-auth-hookFr N)r r �manual_auth_hookr� r� r� r� r� ru r$ r$ r% �test_manual_no_hooks_report� s ��z-ReportNewCertTest.test_manual_no_hooks_reportN)rC rD rE rF rX r� � classmethodrp r� r� r� r� r� r� r� r� r� r$ r$ r$ r% r� [ s r� c @ sZ e Zd ZdZdd� Zdd� Zedd� �Zed�d d �Z d d � Z d d� Z dd� Z dd� Z dS )�ReportNextStepsTestz3Tests for certbot._internal.main._report_next_stepsc C sL t jddd dd d�| _t �d�}|�� | _| �|j� tj | _ t � � t_ d S )Nr� Tr )Z cert_namer� r r r� r/ ) r r* r@ rG rZ r1 rc rd rb r~ � old_stdoutr� r� )r r� r$ r$ r% rX � s � zReportNextStepsTest.setUpc C s | j t_d S r� )r� rb r~ ru r$ r$ r% r� � s z ReportNextStepsTest.tearDownc O s ddl m} ||i |�� d S )Nr )�_report_next_steps)rm r� )r� rn r� r� r$ r$ r% rp � s zReportNextStepsTest._call)�returnc C s@ | j jdksJ �| j jd d d dks,J �| j jd d d S )Nr1 r z NEXT STEPS:rP )r1 r< r� ru r$ r$ r% �_output� s zReportNextStepsTest._outputc C s. d| j _d| j _| �| j dd� | j�� dS )z No steps for a normal renewalr z /bin/trueN)r@ r r� rp r1 r; ru r$ r$ r% r� � s z ReportNextStepsTest.test_reportc C s, d| j _| �| j dd� d| �� v s(J �dS )z --csr requires manual renewalzfoo.csrNz--csr will not be renewed)r@ r rp r� ru r$ r$ r% r� � s z#ReportNextStepsTest.test_csr_reportc C s, d| j _| �| j dd� d| �� v s(J �dS )z/--manual without a hook requires manual renewalr Nz --manual certificates requires)r@ r rp r� ru r$ r$ r% �test_manual_no_hook_renewal� s z/ReportNextStepsTest.test_manual_no_hook_renewalc C s, d| j _| �| j dd� d| �� v s(J �dS )z2No --preconfigured-renewal needs manual cron setupFNz!https://certbot.org/renewal-setup)r@ r� rp r� ru r$ r$ r% � test_no_preconfigured_renewal� s z1ReportNextStepsTest.test_no_preconfigured_renewalN)rC rD rE rF rX r� r� rp r* r� r� r� r� r� r$ r$ r$ r% r� � s r� c sj e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z e � d�dd� �Z dd� Z� ZS )�UpdateAccountTestz/Tests for certbot._internal.main.update_accountc st t �d�t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd �� D �| _� �� D ]}| �|j� qXt� � � S ) Nrz r� r_ r� r/ z*certbot._internal.eff.prepare_subscription)r �atexitrb �determine_account�notify� prepare_subr c s i | ]}|� | � � �qS r$ r� �r� r� �re r$ r% r� r6 z+UpdateAccountTest.setUp.<locals>.<dictcomp>� r rG r� r� r r rc rd rW rX r rf r� r% rX s � zUpdateAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S �Nr� r� r rm rn ro �r rG r@ r rr rq r r, r$ r$ r% rp s � ��zUpdateAccountTest._callc C sX t �� }t �� }t �� }|g|j_|| jd j_|j|j_|t �� f| jd _|||fS )Nr r� )r r* rk r r r| �bodyr� �r rQ Z mock_account� mock_regrr$ r$ r% �_prepare_mock_account s z'UpdateAccountTest._prepare_mock_accountc C s� | � � \}}}| �|�}|du s$J �| jd �� jjjdks@J �|jjj dd� |j jdks`J �| jd � d� | jd � � dS ) z9Utility to assert that email removal is handled correctlyNrb rP r$ ��contactr� zFAny contact information associated with this account has been removed.r� ) r� rp r r� r� �update_registrationr< r� �updater0 � update_regrr; )r rn r� rQ r� �resultr$ r$ r% �_test_update_no_contact# s �z)UpdateAccountTest._test_update_no_contactc C s8 t �� }g |j_|| jd j_| �g d��dks4J �dS )�2Test that no existing account is handled correctlyr )�update_accountrx ry �]Could not find an existing account for server https://acme-v02.api.letsencrypt.org/directory.N�r r* rk r r r| rp �r rQ r$ r$ r% �test_no_existing_accounts5 s �z+UpdateAccountTest.test_no_existing_accountsc C s | � ddg� dS )zBTest that --register-unsafely-without-email is handled as no emailr� z!--register-unsafely-without-emailN�r� ru r$ r$ r% � test_update_account_remove_email> s z2UpdateAccountTest.test_update_account_remove_emailc C s | � g d�� dS )z9Test that providing an empty email is handled as no email)r� r� r; Nr� ru r$ r$ r% � test_update_account_empty_emailB s z1UpdateAccountTest.test_update_account_empty_emailz,certbot._internal.main.display_ops.get_emailc C s� d|_ | �� \}}}t�� }|| jd j_ | �dg�}|du sBJ �|jjj dksTJ �|j j dksdJ �| jd j dksxJ �| jd � d� dS ) z=Test that updating with a singular email is handled correctlyzuser@example.comrb r� NrP r� r� z4Your e-mail address was updated to user@example.com.) r r� r r* r r� rp r� r� r< r� r0 )r Z mock_emailr� rQ rN r� r$ r$ r% � test_update_account_with_emailF s �z0UpdateAccountTest.test_update_account_with_emailc C s\ | � � \}}}| �g d��du s$J �|jjjddgd� |jjdksHJ �| jd �d� dS ) z8Test that multiple email addresses are handled correctly)r� r� z!user@example.com,user@example.orgNzmailto:user@example.comzmailto:user@example.orgr� rP r� zEYour e-mail address was updated to user@example.com,user@example.org.)r� rp r� r� r0 r� r< r )r r� rQ r� r$ r$ r% �(test_update_account_with_multiple_emails[ s � �z:UpdateAccountTest.test_update_account_with_multiple_emails)rC rD rE rF rX rp r� r� r� r� r� r rG r� r� r� r$ r$ rf r% r� � s r� c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�ShowAccountTestz-Tests for certbot._internal.main.show_accountc sl t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd�� D �| _� �� D ]}| �|j� qPt� � � S ) Nrz r� r_ r� r/ )r r� rb r� r� r c s i | ]}|� | � � �qS r$ r� r� r� r$ r% r� s r6 z)ShowAccountTest.setUp.<locals>.<dictcomp>r� r rf r� r% rX j s � zShowAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S r� r� r, r$ r$ r% rp y s � ��zShowAccountTest._callc C s\ t �� }t �� }t �� }|g|j_|| jd j_|j|j_d|jj _|t �� f| jd _d S )Nr s foobarbazr� ) r r* rk r r r| r� r� r� Z thumbprintr� r$ r$ r% r� � s z%ShowAccountTest._prepare_mock_accountc C sd | � � t�� }t�� }||j_d|_||jj_|| j d j _dg}| � |� |jjj dks`J �d S )Nz+https://www.letsencrypt-demo.org/acme/reg/1rb � show_accountrP ) r� r r* r� r� Zurir� Zquery_registrationr r r� rp r< )r r� rN r� rn r$ r$ r% �_test_show_account� s z"ShowAccountTest._test_show_accountc C s6 t �� }g |j_|| jd j_| �dg�dks2J �dS )r� r r� r� Nr� r� r$ r$ r% r� � s �z)ShowAccountTest.test_no_existing_accountsc C sp | � � t�� }d|_|| jd j_z| �dg� W n6 tj yj } z dt |�ksVJ �W Y d}~n d}~0 0 dS )z;Test that issues with the ACME client are handled correctlyNrb r� zACME client is not set.) r� r r* r� r r� r rp r r r* )r rN r� r$ r$ r% �test_no_existing_client� s z'ShowAccountTest.test_no_existing_clientc C s: | � d� | jd jdks J �| jd �t�d�g� d S )Nr$ r� rP z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contact: none�r� r r< Zassert_has_callsr r� ru r$ r$ r% �test_no_contacts� s �z ShowAccountTest.test_no_contactsc C s> d}| � |� | jd jdks"J �| jd �t�d�g� d S )N)�mailto:foo@example.comr� rP z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contact: foo@example.comr� �r r� r$ r$ r% �test_single_email� s �z!ShowAccountTest.test_single_emailc C s> d}| � |� | jd jdks"J �| jd �t�d�g� d S )N)r� zmailto:bar@example.comr� rP z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contacts: foo@example.com, bar@example.comr� r� r$ r$ r% �test_double_email� s �z!ShowAccountTest.test_double_email)rC rD rE rF rX rp r� r� r� r� r� r� r� r� r$ r$ rf r% r� g s r� c @ s` e Zd ZdZejZdZe� d�Ze j dd� �Z e j dd� �Ze j d�� d �d d � �Zd d � ZdS )� TestLockOrderzFTests that Certbot's directory locks were acquired in the right order.z Expected TestLockOrder errorz|1 renew failurec c s4 t �d��}|V W d � n1 s&0 Y d S )Nz certbot._internal.lock.lock_dir)r rG )r � mock_lock_dirr$ r$ r% r� � s zTestLockOrder.mock_lock_dirc # s� � ��fdd�}����fdd�}t j�tjd|��H t j�tjd|�� dV W d � n1 sd0 Y W d � n1 s�0 Y dS )zJPatches plugin prepare to call mock_lock_dir and raise the expected error.c s �� � �� �j��d S r� ��EXPECTED_ERROR_TYPE�EXPECTED_ERROR_STR�Z unused_self)�authenticator_dirr� r r$ r% �authenticator_lock� s z=TestLockOrder.mock_plugin_prepare.<locals>.authenticator_lockc s �� � �dkr �� �j��d S )Nr� r r )� installer_dirr� r � subcommandr$ r% �installer_lock� s z9TestLockOrder.mock_plugin_prepare.<locals>.installer_lockr� N)r rG �objectr r� r r| )r r r r� r r r r$ )r r r� r r r% �mock_plugin_prepare� s z!TestLockOrder.mock_plugin_preparezcertonly install renew run)�paramsc c s� t |d �}t |d �}t |d �}t |d �}t |d �}|j} | dddd d d |d |d |g } t�|d� | �|||| ��@ ||||g} | dkr�| | fV n| | |g fV W d � n1 s�0 Y dS )aR Sets up Certbot with args and mocks to error after acquiring the last lock. This fixture yields the CLI arguments that should be given to Certbot and the expected order of directories to be locked. An error is raised after acquiring the last lock just as a means of stopping Certbot's execution. r r@ r" ZlogsZworkr� r z-ir z--no-random-sleep-on-renewr rn rm r' r� N)r* Zparamr� r+ r ) r r� ZrequestZtmp_pathr r r rq rr r rn � lock_orderr$ r$ r% �args_and_lock_order� s � z!TestLockOrder.args_and_lock_orderc C s� |\}}t j| j| jd�� t�|� W d � n1 s:0 Y |jt|�ksVJ �t|j|�D ] \}}|d d |ksbJ �qbd S )Nr7 r ) r> r? r �EXPECTED_ERROR_STR_REGEXr r< r� �zipr� )r r r� rn r r� Z locked_dirr$ r$ r% �test_lock_order s (z TestLockOrder.test_lock_orderN)rC rD rE rF r r r r r r> Zfixturer� � contextlib�contextmanagerr ri r r r$ r$ r$ r% r� � s r� �__main__rP )UrF r r� � importlibr ru r� r� r[ r� rb r� r �typingr Zunittestr r Zjosepyr� r> r� Z acme.messagesr rh r� r r r r Zcertbot._internalr r r r r Zcertbot._internal.pluginsr r r r Zcertbot.compatr r Zcertbot.pluginsr Zcertbot.tests.utilZtestsr� r� r� rt r� ru ZJWKRSArp Z load_vectorr� ro rn ZTestCaser ZConfigTestCaserH r� r� ZTempDirTestCaser� r� r3 rF rl r� r� r� r� r� r� r� r� r� rC �exit�argv�__file__r$ r$ r$ r% �<module> s� RX ggk > o4ihK
.
Edit
..
Edit
__init__.cpython-39.opt-1.pyc
Edit
__init__.cpython-39.pyc
Edit
account_test.cpython-39.opt-1.pyc
Edit
account_test.cpython-39.pyc
Edit
auth_handler_test.cpython-39.opt-1.pyc
Edit
auth_handler_test.cpython-39.pyc
Edit
cert_manager_test.cpython-39.opt-1.pyc
Edit
cert_manager_test.cpython-39.pyc
Edit
cli_test.cpython-39.opt-1.pyc
Edit
cli_test.cpython-39.pyc
Edit
client_test.cpython-39.opt-1.pyc
Edit
client_test.cpython-39.pyc
Edit
configuration_test.cpython-39.opt-1.pyc
Edit
configuration_test.cpython-39.pyc
Edit
crypto_util_test.cpython-39.opt-1.pyc
Edit
crypto_util_test.cpython-39.pyc
Edit
eff_test.cpython-39.opt-1.pyc
Edit
eff_test.cpython-39.pyc
Edit
error_handler_test.cpython-39.opt-1.pyc
Edit
error_handler_test.cpython-39.pyc
Edit
errors_test.cpython-39.opt-1.pyc
Edit
errors_test.cpython-39.pyc
Edit
helpful_test.cpython-39.opt-1.pyc
Edit
helpful_test.cpython-39.pyc
Edit
hook_test.cpython-39.opt-1.pyc
Edit
hook_test.cpython-39.pyc
Edit
lock_test.cpython-39.opt-1.pyc
Edit
lock_test.cpython-39.pyc
Edit
log_test.cpython-39.opt-1.pyc
Edit
log_test.cpython-39.pyc
Edit
main_test.cpython-39.opt-1.pyc
Edit
main_test.cpython-39.pyc
Edit
ocsp_test.cpython-39.opt-1.pyc
Edit
ocsp_test.cpython-39.pyc
Edit
renewal_test.cpython-39.opt-1.pyc
Edit
renewal_test.cpython-39.pyc
Edit
renewupdater_test.cpython-39.opt-1.pyc
Edit
renewupdater_test.cpython-39.pyc
Edit
reverter_test.cpython-39.opt-1.pyc
Edit
reverter_test.cpython-39.pyc
Edit
storage_test.cpython-39.opt-1.pyc
Edit
storage_test.cpython-39.pyc
Edit
util_test.cpython-39.opt-1.pyc
Edit
util_test.cpython-39.pyc
Edit