Your IP : 216.73.216.85
���]�_ � @ s� d d l Z d d l Z d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z d d l Z d d l Z d d l Z d d l Z d d l Z e j d � Z e e j � Z e j Z e j j d � Z e o1e j d d d f k Z e oPe j d d d f k Z d d � Z e d � Z! e j" e! � Z# e d � Z$ e d
� Z% e j" e$ � Z& e j" e% � Z' e d � Z( e d � Z) d
Z* e d � Z+ e j" e+ � Z, e d d � Z- e d d � Z. e d � Z/ e d � Z0 e d � Z1 e d � Z2 e d � Z3 d Z4 e d � Z5 e d � Z6 e d � Z7 e d � Z8 e d � Z9 e d � Z: e d � Z; e d � Z< e d � Z= e j" e= � Z> d d! � Z? d" d# � Z@ d$ d% � ZA d& d' � ZB d( d) � ZC d* d+ � ZD d, d- � ZE e jF e jG d. � ZH Gd/ d0 � d0 e jI � ZJ Gd1 d2 � d2 e jI � ZK Gd3 d4 � d4 e jI � ZL Gd5 d6 � d6 e jI � ZM Gd7 d8 � d8 e jI � ZN Gd9 d: � d: e jI � ZO y d d lP ZP Wn eQ k
r�d; ZR Yn� Xd< ZR d d= lS mT ZT Gd> d? � d? eP jU � ZV Gd@ dA � dA eP jU � ZW dB d< d; d dC dD � ZX d d d dE dF � ZY GdG dH � dH e jI � ZZ d; dI dJ � Z[ e\ dK k r�e[ � d S)L� N)�support�sslZLibreSSL� c G s t j j t j j t � | � S)N)�os�path�join�dirname�__file__)�name� r �-/opt/alt/python35/lib64/python3.5/test_ssl.py� data_file s r
z keycert.pemz ssl_cert.pemz ssl_key.pemzkeycert.passwd.pemzssl_key.passwd.pemZsomepass�capathz
4e1295a3.0z
5ed36f99.0zrevocation.crlz keycert3.pemz keycert4.pemz pycacert.pemz allsans.pemzself-signed.pythontest.netz selfsigned_pythontestdotnet.pemz nullcert.pemz badcert.pemzXXXnonexisting.pemz
badkey.pemz nokia.pemznullbytecert.pemztalos-2019-0758.pemz
dh1024.pemc C s? d j t j t j � � � } t j r; t j j | | � d S)N� ) r � traceback�format_exception�sys�exc_infor �verbose�stdout�write)�prefixZ
exc_formatr r r � handle_errorO s r c C s
t j d k S)Nr � � �
� )r r r r r )r �_OPENSSL_API_VERSIONr r r r �can_clear_optionsT s r c C s
t j d k S)Nr r � r r )r r r r r )r �OPENSSL_VERSION_INFOr r r r � no_sslv2_implies_sslv3_helloX s r! c C s
t j d k S)Nr r r r )r r r r r )r r r r r r �have_verify_flags\ s r" c C s. t j r& t j � j d k r& t j St j S)Nr )�time�daylight� localtime�tm_isdst�altzone�timezoner r r r �
utc_offset` s r) c C s� t j d k r} d } t j j | | � } | j d d � } | j | � } | d d k r} | d d � d | d
d � } | S) Nr r r r z%b %d %H:%M:%S %Y GMT�second� �0r � )r r r r r )r r �datetime�strptime�replace�strftime)� cert_time�fmtZdtr r r �asn1timef s "r4 c s< t t d � r4 t j � � � f d d � � } | S� Sd S)N�PROTOCOL_SSLv2c si y t j t j � WnE t j k
r[ t j d k rW t j � d
k rW t j d � � Yn X� | | � S) Nr r r r �debian� squeeze/sid� z'Patched Ubuntu OpenSSL breaks behaviour)r r r r r )r6 r7 r8 ) r �
SSLContextr5 �SSLErrorr �platform�linux_distribution�unittestZSkipTest)�args�kwargs)�funcr r �fw s z$skip_if_broken_ubuntu_ssl.<locals>.f)�hasattrr � functools�wraps)r@ rA r )r@ r �skip_if_broken_ubuntu_sslu s ! rE z SNI support needed for this testc @ sD e Z d Z d d � Z d d � Z d d � Z e j e j d k d � d d
� � Z
d d � Z d
d � Z d d � Z
d d � Z d d � Z d d � Z e j d d � � Z d d � Z d d � Z d d � Z d d � Z d! d" � Z d# d$ � Z d% d& � Z d' d( � Z d) d* � Z d+ d, � Z e j d- e j k d. � d/ d0 � � Z d1 d2 � Z! d3 d4 � Z" e j e# j$ d5 k d6 � d7 d8 � � Z% e j e# j$ d5 k d6 � d9 d: � � Z& d; d< � Z' d= d> � Z( d? d@ � Z) dA dB � Z* dC dD � Z+ e j e, � dE � dF dG � � Z- dH dI � Z. e j/ dJ dK � dL dM � � Z0 dN S)O�BasicSocketTestsc C s t j t j t j t j t j t j r3 t j t j d k rI t j | j
t j d d h � | j
t j d d h � d S)Nr r TF)r r ) r � CERT_NONE�
CERT_OPTIONAL�
CERT_REQUIREDZOP_CIPHER_SERVER_PREFERENCE�OP_SINGLE_DH_USE�HAS_ECDH�OP_SINGLE_ECDH_USEr �OP_NO_COMPRESSION�assertIn�HAS_SNI)�selfr r r �test_constants� s z BasicSocketTests.test_constantsc C sE t j } | j t | � d � t j | � } | j | j | � d S)Nz_SSLMethod.PROTOCOL_TLS)r � PROTOCOL_TLS� assertEqual�strr9 �assertIs�protocol)rP �proto�ctxr r r �test_str_for_enums� s z#BasicSocketTests.test_str_for_enumsc C sg t j � } t j r; t j j d | | r0 d p3 d f � t j d � \ } } | j t | � d � | j | | d k � | r� t j
d � } | j t | � d � n | j t j t j
d � | j t
t j
d
� | j t
t j d � t t d � r-| j t t j d � | j t t j d d � t j d d
� t j d d
� t j t d � d
� d S)Nz
RAND_status is %d (%s)
zsufficient randomnesszinsufficient randomness� r r- �RAND_egd�foozthis is a random stringg �R@s this is a random bytes objects! this is a random bytearray object���r] )r � RAND_statusr r r r r �RAND_pseudo_bytesrS �lenZ
RAND_bytes� assertRaisesr: �
ValueErrorrB � TypeErrorr[ ZRAND_add� bytearray)rP �v�dataZis_cryptographicr r r � test_random� s( z BasicSocketTests.test_random�posixzrequires posixc C s t j � } | s | j d � t j � \ } } t j � } | d k r� yW t j | � t j d � d } | j t | � d � t j
| | � t j | � Wn t k
r� t j d � Yq{Xt j d � n� t j | � | j
t j | � t j | d � \ } } | j | d � t j | d � } | j t | � d � t j d � d } | j t | � d � | j | | � d S)Nz*OpenSSL's PRNG has insufficient randomnessr rZ r )r r^ �failr �pipe�fork�closer_ rS r` r �
BaseException�_exit�
addCleanup�waitpid�read�assertNotEqual)rP �statusZrfdZwfd�pidZ child_random�_Z
parent_randomr r r �test_random_fork� s0
z!BasicSocketTests.test_random_forkc C sP t j j t � } t j r< t j j d t j
| � d � | j | d d$ � | j | d t d � � | j | d
t d � � | j | d d � | j | d d- � | j | d d/ � t j j t
� } t j r� t j j d t j
| � d � | j | d d2 � | j | d d3 � | j | d d4 � | j | d d5 � d S)6N�
�issuer� countryName�XY� localityName�Castle Anthrax�organizationName�Python Software Foundation�
commonName� localhost�notAfterzOct 5 23:01:56 2020 GMT� notBeforezOct 8 23:01:56 2010 GMT� serialNumberZD7C7381919AFC24E�subject�subjectAltName�DNS� projects.developer.nokia.com�projects.forum.nokia.comZOCSP�http://ocsp.verisign.comZ caIssuers�0http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer�crlDistributionPoints�0http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl�ry rz �r� �r{ r| �r� �r} r~ �r� �r r� �r� )r� r� r� r� �ry rz �r� �r{ r| �r� �r} r~ �r� �r r� �r� )r� r� r� r� �r� r� )r� �r� r� �r� r� )r� r� )r� )r� )r� )r �_ssl�_test_decode_cert�CERTFILEr r r r r �pprint�pformatrS r4 � NOKIACERT)rP �pr r r �test_parse_cert� s8 !
!
z BasicSocketTests.test_parse_certc C sz t j j t � } t j r< t j j d t j
| � d � | j | d d d d d d
d d d
d d d d d i � d S) Nrw rx ry �UKr �cody-car� zJun 14 18:00:58 2028 GMTr� zJun 18 18:00:58 2018 GMTr� Z02r� �#codenomicon-vm-2.test.lal.cisco.comr� r� �version� �ry r� �r� �r r� �r� )r� r� �ry r� �r� �r r� �r� )r� r� �r� r� )r� ) r r� r� �TALOS_INVALID_CRLDPr r r r r r� r� rS )rP r� r r r � test_parse_cert_CVE_2019_5010 s ! z.BasicSocketTests.test_parse_cert_CVE_2019_5010c C s� t j j t � } t j r< t j j d t j
| � d � d. } | j | d | � | j | d | � t j d/ k r� d5 } n d; } | j | d | � d S)<Nrw ry �US�stateOrProvinceName�Oregonr{ � Beavertonr} �Python Software Foundation�organizationalUnitName�Python Core Developmentr �null.python.org example.org� emailAddress�python-dev@python.orgr� rx r r r r� � altnull.python.org example.com�email� null@python.org user@example.org�URI�)http://null.python.org http://example.org�
IP Address� 192.0.2.1�2001:DB8:0:0:0:0:0:1
� <invalid>r� �ry r� �r� �r� r� �r� �r{ r� �r� �r} r� �r� �r� r� �r� �r r� �r� �r� r� �r� )r� r� r� r� r� r� r� )r r r �r� r� �r� r� �r� r� �r� r� �r� r� )r� r� r� r� r� �r� r� �r� r� �r� r� �r� r� �r� r� )r� r� r� r� r� )
r r� r� � NULLBYTECERTr r r r r r� r� rS r )rP r� r� Zsanr r r � test_parse_cert_CVE_2013_4238 s0 ! z.BasicSocketTests.test_parse_cert_CVE_2013_4238c
C s* t j j t � } | j | d d, � d S)-Nr� r� �allsans� othername�
<unsupported>r� �user@example.org�www.example.org�DirNamery rz r{ �Castle Anthraxr} �Python Software Foundationr �dirname exampler� �https://www.python.org/�
IP Address� 127.0.0.1�0:0:0:0:0:0:0:1
�
Registered ID� 1.2.3.4.5�r� r� �r� r� �r� r� �r� r� �r� r� �ry rz �r� �r{ r� �r� �r} r� �r� �r r� �r� �r� r� r� r �r� r �r� r� �r� r� �r� r� �r� r� )
r� r� r� r� r� r r r r r )r r� r� �
ALLSANFILErS )rP r� r r r �test_parse_all_sans3 s
z$BasicSocketTests.test_parse_all_sansc
C s� t t d � � } | j � } Wd QRXt j | � } t j | � } t j | � } | j | | � | j t j d � s� | j d | � | j
d t j d � s� | j d | � d S)N�rrw z-DER-to-PEM didn't include correct header:
%r
z-DER-to-PEM didn't include correct footer:
%r
) �open�
CAFILE_CACERTrq r �PEM_cert_to_DER_certZDER_cert_to_PEM_certrS �
startswithZ
PEM_HEADERri �endswithZ
PEM_FOOTER)rP rA �pem�d1Zp2�d2r r r �test_DER_to_PEMH s z BasicSocketTests.test_DER_to_PEMc C s� t j } t j } t j } | j | t � | j | t � | j | t � | j | d � | j | d � | \ } } } } } | j | d � | j | d � | j | d � | j | d � | j | d � | j | d � | j | d � | j
| d � | j | d � | j
| d � t rZ| j | j
d j | � � | | t | � f � n7 | j | j
d j | | | � � | | t | � f � d S)
Ni � i 0r r� � �? r z
LibreSSL {:d}zOpenSSL {:d}.{:d}.{:d})r ZOPENSSL_VERSION_NUMBERr �OPENSSL_VERSION�assertIsInstance�int�tuplerT ZassertGreaterEqual�
assertLessZassertLessEqual� IS_LIBRESSL�
assertTruer
�format�hex) rP �n�t�s�major�minorZfixZpatchrs r r r �test_openssl_versionT s0 !z%BasicSocketTests.test_openssl_versionc
C sg t j t j � } t j | � } t j | � } t j d t f � � ~ | j | � d � Wd QRXd S)Nr8 )
�socket�AF_INETr � wrap_socket�weakref�refr Zcheck_warnings�ResourceWarningrS )rP r �ss�wrr r r �
test_refcycles s z BasicSocketTests.test_refcyclec
C s� t j t j � } t j | � �� } | j t | j d � | j t | j t d � � | j t | j d � | j t | j
t d � d � | j t | j d � | j t | j d d � Wd QRXd S)Nr � x�0.0.0.0r )r. r )
r$ r% r r& ra �OSError�recv� recv_intord �recvfrom�
recvfrom_into�send�sendto)rP r r* r r r �test_wrapped_unconnected~ s z)BasicSocketTests.test_wrapped_unconnectedc C sc x\ d D]T } t j t j � } | j | � t j | � � } | j | | j � � Wd QRXq Wd S)N� � @)Nr7 r8 )r$ r% �
settimeoutr r& rS �
gettimeout)rP �timeoutr r* r r r � test_timeout� s
z BasicSocketTests.test_timeoutc 7 C s� t j � } | j t d t j | d t �| j t d t j | d d �| j t d t j | d d d d �t j | d d d t ��& } | j t d | j t d f � Wd QRX| j t � �0 } t j � � } t j | d t
�Wd QRXWd QRX| j | j j
t
j � | j t � �6 } t j � � } t j | d t d t
�Wd QRXWd QRX| j | j j
t
j � | j t � �6 } t j � � } t j | d t
d t
�Wd QRXWd QRX| j | j j
t
j � d S)
Nzcertfile must be specified�keyfilez5certfile must be specified for server-side operations� server_sideT�certfiler8 z!can't connect in server-side modei� )r$ �assertRaisesRegexrb r r& r� �connect�HOSTra r/ �NONEXISTINGCERTrS � exception�errno�ENOENT)rP �sockr �cmr r r � test_errors� s6 ! z BasicSocketTests.test_errorsc
C s� t j j t j j t � p! t j | � } t j � } | j | j � | j t
j � �! t
j | d | d t
j
�Wd QRXd S)Nr? � ssl_version)r r r r r �curdirr$ ro rl ra r r: r& �PROTOCOL_TLSv1)rP r? rG r r r �
bad_cert_test� s ! z BasicSocketTests.bad_cert_testc C s | j d � d S)Nz nullcert.pem)rM )rP r r r �test_empty_cert� s z BasicSocketTests.test_empty_certc C s | j d � d S)Nz badcert.pem)rM )rP r r r �test_malformed_cert� s z$BasicSocketTests.test_malformed_certc C s | j d � d S)Nz
badkey.pem)rM )rP r r r �test_malformed_key� s z#BasicSocketTests.test_malformed_keyc s d d � } � f d d � } d dQ i } | | d � | | d � | | d � | | d
� | | d � | | d � d dT i } | | d � | | d � | | d � | | d � | | d � d dW i } | | d � | | d � | | d � | | d � | | d � d dZ i } | | d � | | d � | | d � d d] i } | | d � | | d � | | d � | | d � d d` i } | | d � | | d � | | d � d j d � j d � } d d | f f f i } | | | � d dc i } | | | � d df i } | | | � d# j d � j d � } d d | f f f i } | | d$ j d � j d � � | | d% j d � j d � � | | d& j d � j d � � | | d' j d � j d � � d( d) d di d+ dm i } | | d- � | | d. � | | d0 � | | d* � d( d1 d dx i } | | d: � | | d; � | | d5 � d d{ d+ d i } | | d= � | | d> � | | d? � | | d@ � d d� d+ d� i } | | dC � | | dD � | | dE � | | d@ � d( d1 d d� i } | | d: � d( dF d d� d+ d� i } | | d: � d( dF d d� d+ d� i } | | dH � � j t t j d d � � j t t j i d � d d� i } | | dJ � d d� i } | | dJ � d d� i } � j t j � � } t j | dM � Wd QRX� j dN t | j � � d S)�Nc S s t j | | � d S)N)r �match_hostname)�cert�hostnamer r r �ok� s z0BasicSocketTests.test_match_hostname.<locals>.okc s � j t j t j | | � d S)N)ra r �CertificateErrorrQ )rR rS )rP r r ri � s z2BasicSocketTests.test_match_hostname.<locals>.failr� r � example.comz ExAmple.cOmzwww.example.comz .example.comz example.orgZ exampleXcom�*.a.comz foo.a.comz
bar.foo.a.comza.comzXa.comz.a.com�f*.comzfoo.comzf.comzbar.comz bar.foo.com�null.python.org example.orgznull.python.org� *.*.a.com�a.*.comz a.foo.comza..comu püthon.python.org�idna�ascii�
x*.python.org�xn--p*.python.orgu www*.pythön.orgu www.pythön.orgu www1.pythön.orgu ftp.pythön.orgu pythön.orgr� zJun 26 21:41:46 2011 GMT� linuxfrz.orgr� r� � linuxfr.org� linuxfr.comr� �
<unsupported>zDec 18 23:59:59 2011 GMTry r� r� �
Californiar{ �
Mountain Viewr} �
Google Inc�mail.google.comz gmail.com�
IP Address� 10.11.12.13� 14.15.16.17z 14.15.16.18z example.net�2001:0:0:0:0:0:0:CAFE
�2003:0:0:0:0:0:0:BABA
z
2001::cafez
2003::babaz
2003::bebezDec 18 23:59:59 2099 GMT�blablaz
google.com�a*b.comzaxxb.com�a*b.co*�a*b*.comz axxbxxc.comztoo many wildcards�r rV �rq )rr �r rW �rs )rt �r rX �ru )rv �r rY �rw )rx �r rZ �ry )rz �r r[ �r{ )r| �r r^ �r} )r~ �r r_ �r )r� �r r` �r� )r� �r� ra �r� rb �r� rc )r� r� r� �ry r� �r� �r� rd �r� �r{ re �r� �r} rf �r� �r rg �r� )r� r� r� r� r� �r rV �r� )r� �r� rV �rh ri �rh rj )r� r� r� �r rV �r� )r� �r� rV �rh rk �rh rl )r� r� r� �ry r� �r� �r� rd �r� �r{ re �r� �r} rf �r� )r� r� r� r� �ry r� �r� �r� rd �r� �r{ re �r� �r rg �r� )r� r� r� r� �r� rm )r� �ry r� �r� �r� rd �r� �r{ re �r� �r} rf �r� )r� r� r� r� �r� rm )r� �r rn �r� )r� �r ro �r� )r� �r rp �r� )r� )
�encode�decodera rb r rQ rU rN rT rD )rP rT ri rR r\ rH r )rP r �test_match_hostname� s�
z$BasicSocketTests.test_match_hostnamec C sK t j t j � } t j � �& } | j t | j | d d d �Wd QRXd S)NT�server_hostnamez
some.hostname)r r9 �PROTOCOL_SSLv23r$ ra rb r& )rP rX rG r r r �test_server_sided s z!BasicSocketTests.test_server_sidec C s� t j t j � } | j d � | j � t j t j � } | j | j � � t j | d d ��+ } | j t � � | j
d � Wd QRXWd QRX| j � d S)N� 127.0.0.1r �do_handshake_on_connectFz unknown-type)r� r ) r$ r% �bind�listenrA � getsocknamer r& ra rb �get_channel_bindingrl )rP r �cr* r r r � test_unknown_channel_bindingk s
z-BasicSocketTests.test_unknown_channel_bindingz
tls-uniquez*'tls-unique' channel binding not availablec C s� t j t j � } t j | � � } | j | j d � � Wd QRXt j t j � } t j | d d d t �� } | j | j d � � Wd QRXd S)Nz
tls-uniquer> Tr? )r$ r% r r& � assertIsNoner� r� )rP r r* r r r � test_tls_unique_channel_bindingw s z0BasicSocketTests.test_tls_unique_channel_bindingc C st t j t j t j � � } t | � } | j t � � } d } t j � Wd QRX| j | t
| j j d � � d S)Nr )
r r& r$ r% �reprZ assertWarnsr) r Z
gc_collectrN rT �warningr> )rP r* r rH r r r �test_dealloc_warn� s z"BasicSocketTests.test_dealloc_warnc
C s� t j � } | j t | � d � | j | t j � t j � �M } t | d <t | d <t j � } | j | j
t � | j | j t � Wd QRXd S)N� � SSL_CERT_DIR�
SSL_CERT_FILE) r Zget_default_verify_pathsrS r` r ZDefaultVerifyPathsr �EnvironmentVarGuard�CAPATHr� �cafiler )rP �paths�envr r r � test_get_default_verify_paths� s
z.BasicSocketTests.test_get_default_verify_paths�win32zWindows specificc C sF | j t j d � � | j t j d � � | j t t j � | j t t j d � t � } x� d D]� } t j | � } | j | t � x� | D]� } | j | t � | j
t | � d � | \ } } } | j | t � | j
| d d h � | j | t t f � t | t � r� | j | � q� Wqe Wd } | j
| | � d S) N�CA�ROOTr8 r� �x509_asn�
pkcs_7_asnz1.3.6.1.5.5.7.3.1)r� r� )r r Zenum_certificatesra rc � WindowsError�setr �listr rS r` �bytesrN �bool�
isinstance�update) rP Z
trust_oidsZ storename�store�elementrR �encZtrust�
serverAuthr r r �test_enum_certificates� s&
z'BasicSocketTests.test_enum_certificatesc C s� | j t j d � � | j t t j � | j t t j d � t j d � } | j | t � xb | D]Z } | j | t � | j t
| � d � | j | d t � | j | d d d h � qe Wd S)Nr� r8 � r r r� r� )
r r Z enum_crlsra rc r� r r� r rS r` r� rN )rP Zcrlsr� r r r �test_enum_crls� s
z BasicSocketTests.test_enum_crlsc C sG d } t j d � } | j | | � | j | j d � | j | j d � | j | j d � | j | j d � | j | t j � | j t t j d � t j j
d � } | j | | � | j | t j � | j t t j j
d � | j t d � � t j j
d � Wd QRXx� t d � D]� } y t j j
| � } Wn t k
rOYq X| j | j t
� | j | j t � | j | j t � | j | j t t d � f � q Wt j j d � } | j | | � | j | t j � | j t j j d � | � | j t j j d � | � | j t d � � t j j d
� Wd QRXd S)
N� r� � TLS Web Server Authentication�1.3.6.1.5.5.7.3.1r zunknown NID 100000i�� i� zunknown object 'serverauth'Z
serverauth)r� r� r� r� ���)r � _ASN1ObjectrS �nid� shortnameZlongname�oidr ra rb Zfromnidr@ �ranger rT �typeZfromname)rP �expected�val�i�objr r r �test_asn1object� sB
# z BasicSocketTests.test_asn1objectc C s t j d � } | j t j j t j � | j t j j | � | j t j j j d � | j t j j j d � | j t j j j d � t j d � } | j t j j t j � | j t j j | � | j t j j j d � | j t j j j d � | j t j j j d � d S)Nz1.3.6.1.5.5.7.3.1r� r� z1.3.6.1.5.5.7.3.2� Z
clientAuth)
r r� r �Purpose� SERVER_AUTHrS r� r� r� � CLIENT_AUTH)rP r� r r r �test_purpose_enum� s z"BasicSocketTests.test_purpose_enumc C s� t j t j t j � } | j | j � | j t � � } t j | d t j �Wd QRX| j
t | j � d � t j
t j � } | j t � � } | j | � Wd QRX| j
t | j � d � d S)N� cert_reqsz!only stream sockets are supported)r$ r% �
SOCK_DGRAMro rl ra �NotImplementedErrorr r& rG rS rT rD r9 r� )rP r ZcxrX r r r �test_unsupported_dtls� s z&BasicSocketTests.test_unsupported_dtlsc C s | j t j | � | � d S)N)rS r �cert_time_to_seconds)rP �
timestringZ timestampr r r � cert_time_ok s z BasicSocketTests.cert_time_okc C s( | j t � � t j | � Wd QRXd S)N)ra rb r r )rP r r r r �cert_time_fail s z BasicSocketTests.cert_time_failz)local time needs to be different from UTCc C s$ | j d d � | j d d � d S)NzMay 9 00:00:00 2007 GMTg �C��AzJan 5 09:34:43 2018 GMTg ��ѓ�A)r )rP r r r �"test_cert_time_to_seconds_timezone s z3BasicSocketTests.test_cert_time_to_seconds_timezonec C s* d } d } | j | | � | j t j d | � | � | j d | � | j d | � | j d � | j d � | j d � | j d � | j d
� | j d � | j d � d
} | j d | � | j d | � | j d d � | j d d � | j d d � | j d � | j d d � d S)NzJan 5 09:34:43 2018 GMTg ��ѓ�Ar2 zJan 05 09:34:43 2018 GMTzJaN 5 09:34:43 2018 GmTzJan 5 09:34 2018 GMTzJan 5 09:34:43 2018zJan 5 09:34:43 2018 UTCzJan 35 09:34:43 2018 GMTzJon 5 09:34:43 2018 GMTzJan 5 24:00:00 2018 GMTzJan 5 09:60:43 2018 GMTg �W�AzDec 31 23:59:60 2008 GMTzJan 1 00:00:00 2009 GMTzJan 5 09:34:59 2018 GMTi�FOZzJan 5 09:34:60 2018 GMTi�FOZzJan 5 09:34:61 2018 GMTi�FOZzJan 5 09:34:62 2018 GMTzDec 31 23:59:59 9999 GMTg �� �MB)r rS r r r )rP r �tsZ
newyear_tsr r r �test_cert_time_to_seconds s*
z*BasicSocketTests.test_cert_time_to_seconds�LC_ALLr8 c C sV d d � } | � j � d k r. | j d � | j d d � | j | � d � d S)Nc S s t j d d � S)
Nz%br r� r� r+ r- r� r ) r r� r� r+ r- r� r r r )r# r1 r r r r �local_february_name8 s zNBasicSocketTests.test_cert_time_to_seconds_locale.<locals>.local_february_nameZfebz>locale-specific month name needs to be different from C localezFeb 9 00:00:00 2007 GMTg `�r�Az 9 00:00:00 2007 GMT)�lower�skipTestr r )rP r r r r � test_cert_time_to_seconds_locale4 s
z1BasicSocketTests.test_cert_time_to_seconds_localeN)1�__name__�
__module__� __qualname__rQ rY rg r= �
skipUnlessr r
rv r� r� r� r r r# r Z cpython_onlyr, r6 r< rI rM rN rO rP r� r� r� r �CHANNEL_BINDING_TYPESr� r� r� r r; r� r� r� r� r r r r) r r Zrun_with_localer r r r r rF � sH
' ( � '' ' #rF c @ s� e Z d Z e d d � � Z e d d � � Z d d � Z e e j e d � d d � � � Z
d
d � Z e j e
� d � d
d � � Z d d � Z d d � Z d d � Z d d � Z e d d � � Z d d � Z e j e j d � d d � � Z e d d � � Z e d d! � � Z d" d# � Z d$ d% � Z d& d' � Z e j e j d( k d) � e j e d* � d+ d, � � � Z! e j e j d( k d- � d. d/ � � Z" d0 d1 � Z# d2 d3 � Z$ d4 d5 � Z% d6 S)7� ContextTestsc C sp x t D] } t j | � q Wt j � } | j | j t j � | j t t j d � | j t t j d � d S)Nr �* r� )� PROTOCOLSr r9 rS rV rR ra rb )rP rV rX r r r �test_constructorF s
z ContextTests.test_constructorc C s7 x0 t D]( } t j | � } | j | j | � q Wd S)N)r r r9 rS rV )rP rW rX r r r �
test_protocolO s
zContextTests.test_protocolc C sZ t j t j � } | j d � | j d � | j t j d � � | j d � Wd QRXd S)N�ALL�DEFAULTzNo cipher can be selectedz^$:,;?*'dorothyx)r r9 rL � set_ciphersr@ r: )rP rX r r r � test_ciphersU s
zContextTests.test_ciphersz bpo-36576: fail on OpenSSL 1.1.1c C s t j t j � } t j t j Bt j B} t rL t j d k rL | t j O} | j | | j
� | j
t j O_
| j | t j B| j
� t � r� | j
t j @| _
| j | | j
� d | _
| j d | j
t j @� n | j
t � � d | _
Wd QRXd S)Nr r )r r r )r r9 rL �OP_ALL� OP_NO_SSLv2� OP_NO_SSLv3r r rM rS �options� OP_NO_TLSv1r ra rb )rP rX �defaultr r r � test_options\ s
zContextTests.test_optionsc C s� t j t j � } | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � | j t � � d | _ Wd QRX| j t
� � d | _ Wd QRXd S)Nr ) r r9 rL rS � verify_moderG rH rI ra rc rb )rP rX r r r �test_verify_modeq s z ContextTests.test_verify_modez!verify_flags need OpenSSL > 0.9.8c C s� t j t j � } t t d d � } | j | j t j | B� t j | _ | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � t j t j B| _ | j | j t j t j B� | j
t � � d | _ Wd QRXd S)N�VERIFY_X509_TRUSTED_FIRSTr ) r r9 rL �getattrrS � verify_flags�VERIFY_DEFAULT�VERIFY_CRL_CHECK_LEAFZVERIFY_CRL_CHECK_CHAINZVERIFY_X509_STRICTra rc )rP rX �tfr r r �test_verify_flags� s z ContextTests.test_verify_flagsc f C s� t j t j � } | j t d d �| j t d t �| j t | j d t �| j t � � } | j t � Wd QRX| j | j
j t j � | j
t j d � � | j t � Wd QRX| j
t j d � � | j t � Wd QRXt j t j � } | j t t � | j d t d t � | j d t d t � | j
t j d � � | j t � Wd QRX| j
t j d � � | j t � Wd QRX| j
t j d � � | j d t d t � Wd QRXt j t j � } | j
t j d � � | j t t � Wd QRX| j t d t �| j t d t j � �| j t d t t j � � �| j t t t � | j t t t j � � | j t t t t j � � � | j
t d � � | j t d d �Wd QRX| j t j � � | j t d d �Wd QRX| j
t d � � | j t d d
d �Wd QRXd d
� } d d � } d d � } d d � } d d � } d d � } d d � } Gd d � d � }
| j t d | �| j t d | �| j t d | �| j t d |
� �| j t d |
� j �| j t j � � | j t d | �Wd QRX| j
t d � � | j t d | �Wd QRX| j
t d � � | j t d | �Wd QRX| j
t d � � | j t d | �Wd QRX| j t d | �d S) Nr= zPEM libr? zkey values mismatchZpasswordzshould be a stringT�badpasszcannot be longer� ai � c S s t S)N)� KEY_PASSWORDr r r r �getpass_unicode� s z:ContextTests.test_load_cert_chain.<locals>.getpass_unicodec S s
t j � S)N)r- r� r r r r �
getpass_bytes� s z8ContextTests.test_load_cert_chain.<locals>.getpass_bytesc S s t t j � � S)N)rd r- r� r r r r �getpass_bytearray� s z<ContextTests.test_load_cert_chain.<locals>.getpass_bytearrayc S s d S)Nr+ r r r r r �getpass_badpass� s z:ContextTests.test_load_cert_chain.<locals>.getpass_badpassc S s d d S)Nr, i i r r r r r � getpass_huge� s z7ContextTests.test_load_cert_chain.<locals>.getpass_hugec S s d S)Nr r r r r r �getpass_bad_type� s z;ContextTests.test_load_cert_chain.<locals>.getpass_bad_typec S s t d � � d S)Nz
getpass error)� Exceptionr r r r �getpass_exception� s z<ContextTests.test_load_cert_chain.<locals>.getpass_exceptionc @ s( e Z d Z d d � Z d d � Z d S)z:ContextTests.test_load_cert_chain.<locals>.GetPassCallablec S s t S)N)r- )rP r r r �__call__� s zCContextTests.test_load_cert_chain.<locals>.GetPassCallable.__call__c S s t S)N)r- )rP r r r �getpass� s zBContextTests.test_load_cert_chain.<locals>.GetPassCallable.getpassN)r
r r r6 r7 r r r r �GetPassCallable� s r8 zmust return a stringz
getpass error) r r9 rL �load_cert_chainr� ra rc r/ rC rS rD rE rF r@ r: �BADCERT� EMPTYCERT�ONLYCERT�ONLYKEY�BYTES_ONLYCERT�
BYTES_ONLYKEYr �CERTFILE_PROTECTEDr- r� rd �ONLYKEY_PROTECTEDrb r7 r4 ) rP rX rH r. r/ r0 r1 r2 r3 r5 r8 r r r �test_load_cert_chain� sz
z!ContextTests.test_load_cert_chainc C s0 t j t j � } | j t � | j d t d d � | j t � | j d t d d � | j t | j � | j t | j d d d � | j t � � } | j t � Wd QRX| j
| j j t j
� | j t j d � � | j t � Wd QRX| j t t � | j t d t �| j t | j d d � d S)Nr� r zPEM libT)r r9 rL �load_verify_locationsr� �BYTES_CERTFILEra rc r/ rC rS rD rE rF r@ r: r: r� � BYTES_CAPATH)rP rX rH r r r �test_load_verify_locations� s
z'ContextTests.test_load_verify_locationsc C s
t t � � } | j � } Wd QRXt j | � } t t � � } | j � } Wd QRXt j | � } t j t j � } | j | j � d d � | j
d | � | j | j � d d � | j
d | � | j | j � d d � | j
d | � | j | j � d d � t j t j � } d j | | f � } | j
d | � | j | j � d d � t j t j � } d | d | d | d
g } | j
d d j | � � | j | j � d d � t j t j � } | j
d | � | j
d | � | j | j � d d � | j
d | � | j | j � d d � t j t j � } d j | | f � } | j
d | � | j | j � d d � t j t j � } | j t
| j
d t �| j t j d � � | j
d d
� Wd QRX| j t j d � � | j
d d � Wd QRXd S)N�x509_car �cadatar r� rw �head�otherZagain�tail� z
no start line�brokenznot enough datas broken)r
r rq r r �CAFILE_NEURONIOr9 rL rS �cert_store_statsrC r ra rc �objectr@ r: )rP rA Z
cacert_pemZ
cacert_derZ neuronio_pemZ neuronio_derrX Zcombinedr r r �test_load_verify_cadata� sN z$ContextTests.test_load_verify_cadatac C s� t j t j � } | j t � t j d k r; | j t � | j t | j � | j t | j d � | j t
� � } | j t � Wd QRX| j | j
j t j � | j t j � � } | j t � Wd QRXd S)N�nt)r r9 rL �load_dh_params�DHFILEr r
� BYTES_DHFILEra rc �FileNotFoundErrorrC rS rD rE rF r: r� )rP rX rH r r r �test_load_dh_params4 s
z ContextTests.test_load_dh_paramsc C s| xu t D]m } t j | � } | j | j � d d d d d d d d d d d d d d d d d
d d d d d i � q Wd S)
NZnumberr rA Z connect_goodZconnect_renegotiate�acceptZ accept_goodZaccept_renegotiate�hits�missesZtimeoutsZ
cache_full)r r r9 rS Z
session_stats)rP rW rX r r r �test_session_statsA s
z ContextTests.test_session_statsc C s t j t j � } | j � d S)N)r r9 rL Zset_default_verify_paths)rP rX r r r � test_set_default_verify_pathsS s z*ContextTests.test_set_default_verify_pathsz#ECDH disabled on this OpenSSL buildc C s� t j t j � } | j d � | j d � | j t | j � | j t | j d � | j t | j d � | j t | j d � d S)NZ
prime256v1s
prime256v1r\ s foo)r r9 rL Zset_ecdh_curvera rc rb )rP rX r r r �test_set_ecdh_curveY s
z ContextTests.test_set_ecdh_curvec C s� t j t j � } | j t | j � | j t | j d � | j t | j d � | j t | j | � d d � } | j d � | j | � d S)Nr+ r8 c S s d S)Nr )rG �
servernamerX r r r �
dummycallbackm s z5ContextTests.test_sni_callback.<locals>.dummycallback)r r9 rL ra rc �set_servername_callback)rP rX r_ r r r �test_sni_callbackc s
z ContextTests.test_sni_callbackc C sd t j t j � } | d d � } | j | � t j | � } ~ ~ t j � | j | � d � d S)Nc S s d S)Nr )rG r^ rX �cycler r r r_ w s z>ContextTests.test_sni_callback_refcycle.<locals>.dummycallback) r r9 rL r` r' r( �gc�collectrU )rP rX r_ r+ r r r �test_sni_callback_refcycler s
z'ContextTests.test_sni_callback_refcyclec C s� t j t j � } | j | j � d d d d d d i � | j t � | j | j � d d d d d d i � | j t � | j | j � d d d d d d i � | j t � | j | j � d d d d d d i � d S)NrG r �crl�x509r r� ) r r9 rL rS rO r9 r� rC r )rP rX r r r �test_cert_store_stats s
z"ContextTests.test_cert_store_statsc C s� t j t j � } | j | j � g � | j t � | j | j � g � | j t � | j | j � d d d
t d � d t d
� d d d d d d( d d i g � t t � � } | j
� } Wd QRXt j | � } | j | j d � | g � d S))Nrx r} �Root CAr� �http://www.cacert.orgr �CA Cert Signing Authorityr� �support@cacert.orgr� zMar 29 12:29:49 2033 GMTr� zMar 30 12:29:49 2003 GMTr� Z00r� �!https://www.cacert.org/revoke.crlr� r� r� T�r} ri �rn �r� rj �rp �r rk �rr �r� rl �rt )ro rq rs ru )rm �r} ri �rv �r� rj �rx �r rk �rz �r� rl �r| )rw ry r{ r} ) r r9 rL rS � get_ca_certsrC r� r r4 r
rq r )rP rX rA r �derr r r �test_get_ca_certs� s.
z ContextTests.test_get_ca_certsc C s� t j t j � } | j � t j t j � } | j t j j � | j � t j t j � } | j t j j � t j t j � } | j t | j d � | j t | j d � d S)Nr� ) r r9 rL �load_default_certsr� r� r� ra rc )rP rX r r r �test_load_default_certs� s
z$ContextTests.test_load_default_certsr� znot-Windows specificz!LibreSSL doesn't support env varsc C sr t j t j � } t j � �M } t | d <t | d <| j � | j | j � d d d d d d i � Wd QRXd S)Nr� r� rf r rg r rG )
r r9 rL r r� r� r� r� rS rO )rP rX r� r r r �test_load_default_certs_env� s
z(ContextTests.test_load_default_certs_envzWindows specificc C s� t j t j � } | j � | j � } t j t j � } t j � �I } t | d <t | d <| j � | d d 7<| j | j � | � Wd QRXd S)Nr� r� rg r )
r r9 rL r� rO r r� r� r� rS )rP rX �statsr� r r r �#test_load_default_certs_env_windows� s
z0ContextTests.test_load_default_certs_env_windowsc C s; t j � } | j | j t j � | j | j t j � | j | j � | j | j t j
@t j
� | j | j t t d d � @t t d d � � t t
� � } | j � } Wd QRXt j d t
d t d | � } | j | j t j � | j | j t j � | j | j t j
@t j
� | j | j t t d d � @t t d d � � t j t j j � } | j | j t j � | j | j t j � | j | j t j
@t j
� | j | j t t d d � @t t d d � � | j | j t t d d � @t t d d � � | j | j t t d d � @t t d d � � d S)NrM r r� r rH rJ rL )r �create_default_contextrS rV r� r" rI r �check_hostnamer r r% r
�
SIGNING_CArq r� r� r� rG )rP rX rA rH r r r �test_create_default_context� s> z(ContextTests.test_create_default_contextc C s� t j � } | j | j t j � | j | j t j � | j | j � | j | j t j
@t j
� t j t j � } | j | j t j � | j | j t j � | j | j t j
@t j
� t j t j d t j d d �} | j | j t j � | j | j t j � | j
| j � | j | j t j
@t j
� t j d t j j � } | j | j t j � | j | j t j � | j | j t j
@t j
� d S)Nr� r� TZpurpose)r Z_create_stdlib_contextrS rV r� r" rG � assertFalser� r r rL rI r r� r� )rP rX r r r �test__create_stdlib_context� s( z(ContextTests.test__create_stdlib_contextc C s� t j t j � } | j | j � | j t � � d | _ Wd QRXt j | _ | j | j � d | _ | j | j � t j
| _ d | _ | j | j � | j t � � t j | _ Wd QRXd | _ | j | j � d S)NTF) r r9 rL r� r� ra rb rI r" r rH rG )rP rX r r r �test_check_hostname s z ContextTests.test_check_hostnameN)&r
r r rE r r r r= �skipIf�IS_OPENSSL_1_1_1r! r# r r" r* rB rF rQ rW r[ r\ r rK r] � needs_snira re rh r� r� r r; r r� r� r� r� r� r r r r r D s4 ! S :
!
! ' ( r c @ s4 e Z d Z d d � Z d d � Z d d � Z d S)�
SSLErrorTestsc C sz t j d d � } | j t | � d � | j | j d � t j d d � } | j t | � d � | j | j d � d S)Nr r\ )r r: rS rT rE ZSSLZeroReturnError)rP �er r r �test_str* s zSSLErrorTests.test_strc
C s� t j t j � } | j t j � � } | j t � Wd QRX| j | j j d � | j | j j
d � t | j � } | j | j
d � | � d S)NZPEMZ
NO_START_LINEz"[PEM: NO_START_LINE] no start line)r r9 rL ra r: rS r� rS rD Zlibrary�reasonrT r r
)rP rX rH r r r r �test_lib_reason4 s z SSLErrorTests.test_lib_reasonc C s� t j t j � } t j � �� } | j d � | j � t j � } | j | j � � | j d � | j | d d d ��n } | j
t j � � } | j � Wd QRXt
| j � } | j | j d � | � | j | j j t j � Wd QRXWd QRXd S)N� 127.0.0.1r Fr� z%The operation did not complete (read))r� r )r r9 rL r$ r� r� rA r� � setblockingr& ra �SSLWantReadError� do_handshakerT rD r r
rS rE �SSL_ERROR_WANT_READ)rP rX r r� rH r r r �
test_subclass> s
zSSLErrorTests.test_subclassN)r
r r r� r� r� r r r r r� ( s
r� c @ sL e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d S) �MemoryBIOTestsc C s� t j � } | j d � | j | j � d � | j | j � d � | j d � | j d � | j | j � d � | j | j � d � | j d � | j | j d � d � | j | j d � d � | j | j d � d � d S)
Ns foorL s bars foobars bazr� s bar � z)r � MemoryBIOr rS rq )rP �bior r r �test_read_writeS s
z MemoryBIOTests.test_read_writec C s� t j � } | j | j � | j | j � d � | j | j � | j d � | j | j � | j � | j | j � | j | j d � d � | j | j � | j | j d � d � | j | j � | j | j � d � | j | j � d S)NrL s foor� s for � o) r r� r� �eofrS rq r � write_eofr )rP r� r r r �test_eofa s
zMemoryBIOTests.test_eofc C s� t j � } | j | j d � | j d � | j | j d � x< t d � D]. } | j d � | j | j d | d � qL Wx8 t d � D]* } | j d � | j | j | d � q� W| j � | j | j d � d S)Nr s foor� r r- )r r� rS �pendingr r� rq )rP r� r� r r r � test_pendingq s
zMemoryBIOTests.test_pendingc C s� t j � } | j d � | j | j � d � | j t d � � | j | j � d � | j t d � � | j | j � d � d S)Ns foos bars baz)r r� r rS rq rd �
memoryview)rP r� r r r �test_buffer_types s
z MemoryBIOTests.test_buffer_typesc C sh t j � } | j t | j d � | j t | j d � | j t | j d � | j t | j d � d S)Nr\ Tr )r r� ra rc r )rP r� r r r �test_error_types� s
z MemoryBIOTests.test_error_typesN)r
r r r� r� r� r� r� r r r r r� Q s
r� c @ s� e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d d � Z d
d � Z d d � Z
e j e
j d k d � d d � � Z d d � Z d d � Z d d � Z d d � Z d d � Z e d d � � Z d! S)"�NetworkedTestsc C s, t j t � �t j t j t j � d t j �} z- | j t d f � | j i | j
� � Wd | j � Xt j t j t j � d t j �} | j
t j d | j t d f � | j � t j t j t j � d t j d t �} z* | j t d f � | j | j
� � Wd | j � XWd QRXd S)Nr� i� zcertificate verify failed�ca_certs)r �transient_internet� REMOTE_HOSTr r& r$ r% rG rA rS � getpeercertrl rI r@ r: �REMOTE_ROOT_CERTr )rP r r r r � test_connect� s&
zNetworkedTests.test_connectc C s� t j t � �s t j t j t j � d t j d t �} z6 | j d | j
t d f � � | j | j � � Wd | j
� XWd QRXd S)Nr� r� r i� )r r� r� r r& r$ r% rI r� rS �
connect_exr r� rl )rP r r r r �test_connect_ex� s z NetworkedTests.test_connect_exc C s> t j t � �(t j t j t j � d t j d t d d �} z� | j d � | j
t d f � } | j | d t j
t j f � t j g | g g d � xq y | j � PWq� t j k
r� t j | g g g d � Yq� t j k
r t j g | g g d � Yq� Xq� W| j | j � � Wd | j � XWd QRXd S)Nr� r� r� Fi� r g @)r r� r� r r& r$ r% rI r� r� r� rN rE Z EINPROGRESS� EWOULDBLOCK�selectr� r� �SSLWantWriteErrorr r� rl )rP r �rcr r r � test_non_blocking_connect_ex� s(
"z+NetworkedTests.test_non_blocking_connect_exc C s� t j t � �� t j t j t j � d t j d t d d �} z[ | j d � | j
t d f � } | d k r~ | j d � | j | t
j t
j f � Wd | j � XWd QRXd S) Nr� r� r� FgH�����z>i� r z!REMOTE_HOST responded too quickly)r r� r� r r& r$ r% rI r� r9 r� r rN rE �EAGAINr� rl )rP r r� r r r �test_timeout_connect_ex� s
z&NetworkedTests.test_timeout_connect_exc C s� t j t � �� t j t j t j � d t j d t �} zG | j t d f � } t
j t
j t
j
t
j f } | j | | � Wd | j � XWd QRXd S)Nr� r� i� )r r� r� r r& r$ r% rI r� r� rE Z ECONNREFUSEDZ EHOSTUNREACHZ ETIMEDOUTr� rN rl )rP r r� �errorsr r r �test_connect_ex_error� s z$NetworkedTests.test_connect_ex_errorc C sz t j t � �dt j t j � } | j t j t j � � } | j t d f � z | j
i | j � � Wd | j � X| j t j t j � d t �} | j t d f � | j � t j
| _ | j t j t j � � } | j t j d | j t d f � | j � | j t � | j t j t j � � } | j t d f � z | j � } | j | � Wd | j � XWd QRXd S)Ni� r� zcertificate verify failed)r r� r� r r9 r� r& r$ r% rA rS r� rl rI r" r@ r: rC r� r )rP rX r rR r r r �test_connect_with_context� s.
z(NetworkedTests.test_connect_with_contextc C s) t j t � �t j t j � } t j | _ | j d t � | j
t j t j � � } | j
t d f � z | j � } | j | � Wd | j � Xt j t j � } t j | _ | j d t � | j
t j t j � � } | j
t d f � z | j � } | j | � Wd | j � XWd QRXd S)Nr i� )r r� r� r r9 r� rI r" rC r� r& r$ r% rA r� r rl rE )rP rX r rR r r r �test_connect_capath s& z"NetworkedTests.test_connect_capathc C sJ t t � � } | j � } Wd QRXt j | � } t j t � �t j t j � } t j
| _ | j d | � | j
t j t j � � �3 } | j t d f � | j � } | j | � Wd QRXt j t j � } t j
| _ | j d | � | j
t j t j � � �3 } | j t d f � | j � } | j | � Wd QRXWd QRXd S)NrH i� )r
r� rq r r r r� r� r9 r� rI r" rC r& r$ r% rA r� r )rP rA r r rX r rR r r r �test_connect_cadata4 s$ z"NetworkedTests.test_connect_cadatarR z*Can't use a socket as a file under Windowsc C s� t j t � �� t j t j t j � � } | j t d f � | j � } | j � } | j
� t j | d � | j
� t
j � | j t � � } t j | d � Wd QRX| j | j j t j � Wd QRXd S)Ni� r )r r� r� r r& r$ r% rA �fileno�makefilerl r rq rc rd ra r/ rS rD rE �EBADF)rP r* �fdrA r� r r r �test_makefile_closeJ s
z"NetworkedTests.test_makefile_closec C s t j t � �� t j t j � } | j t d f � | j d � t j | d t j d d �} d } xu y | d 7} | j
� PWqi t j k
r� t j | g g g � Yqi t j
k
r� t j g | g g � Yqi Xqi W| j � t j rt j j d | � Wd QRXd S)Ni� Fr� r� r r z9
Needed %d calls to do_handshake() to establish session.
)r r� r� r$ r% rA r� r r& rG r� r� r� r� rl r r r r )rP r �countr r r �test_non_blocking_handshake^ s(
z*NetworkedTests.test_non_blocking_handshakec s? d � f d d � } | t d t � t j r; | d d � d S)Nc s, t j | � �t j | | f � } | sB � j d | | f � y t j | | f d t �} WnE t j k
r� } z" t j r� t j j
d | � WYd d } ~ Xn X� j d | | | f � t j | | f d | �} | s� � j d | | f � t j r!t j j
d | | | f � Wd QRXd S)Nz No server certificate on %s:%s!r� z%s
z$Got server certificate %s for %s:%s!z&
Verified certificate for %s:%s is
%s
) r r� r Zget_server_certificateri r� r: r r r r )�host�portrR r �x)rP r r � _test_get_server_certificateu s"
' zPNetworkedTests.test_get_server_certificate.<locals>._test_get_server_certificatei� zipv6.google.com)r� r� r Z IPV6_ENABLED)rP r� r )rP r �test_get_server_certificatet s z*NetworkedTests.test_get_server_certificatec ) C s t d f } t j | d � �� t j t j t j � d t j d d �� } | j | � Wd QRXt j t j t j � d t j d d �� } | j | � Wd QRX| j t j
d � �L t j t j � �2 } t j | d t j d d �} | j | � Wd QRXWd QRXWd QRXd S) Ni� r r� �ciphersr r zNo cipher can be selectedz^$:,;?*'dorothyx) r� r r� r r& r$ r% rG rA r@ r: )rP �remoter rG r r r r � s zNetworkedTests.test_ciphersc C s2 t j d
k r# | j d t j � t j s9 | j d � d } t j j t j j t � d � } t
j d � �� t j t j
� } t j | _ | j | � | j t j t j � d
d �} z] | j | � t
j rt j j d | | j � f � t j j d t j | j � � � Wd | j � XWd QRXd S)Nr r r r zSHA256 not available on %rzSNI needed for this test�sha256.tbs-internet.com� z
sha256.pemr� z
Cipher with %r is %r
zCertificate is:
%s
)r r r r r )r� r� ) r r r r rO r r r r r r r� r9 rL rI r" rC r& r$ r% rA r r r r �cipherr� r� r� rl )rP r� Z sha256_certrX r r r r �test_algorithms� s(
!
z NetworkedTests.test_algorithmsc C s� t j t � �� t j t j � } t j | _ | j d t � | j
| j � g � | j t
j
t
j � � } | j t d f � z | j � } | j | � Wd | j � X| j
t | j � � d � Wd QRXd S)Nr i� r )r r� r� r r9 r� rI r" rC r� rS r~ r& r$ r% rA r� r rl r` )rP rX r rR r r r �test_get_ca_certs_capath� s z'NetworkedTests.test_get_ca_certs_capathc C s� t j t � �� t j t j � } t j t j � } t j t j � } | j | � �u } | j
t d f � | j | j | � | j | j
j | � | | _ | j | j | � | j | j
j | � Wd QRXWd QRXd S)Ni� )r r� r� r r9 rL r� r$ r% r& rA rU �context�_sslobj)rP Zctx1Zctx2r r* r r r �test_context_setget� s z"NetworkedTests.test_context_setgetN)r
r r r� r� r� r� r� r� r� r� r= r� r r
r� r� r� r r� r� r� r� r r r r r� � s ' r� c @ s4 e Z d Z d d � Z d d � Z d d � Z d S)�NetworkedBIOTestsc
O s" | j d d � } d } x� d } | d 7} y | | � }
WnO t j k
r� } z, | j t j t j f k rq � | j } WYd d } ~ Xn X| j � } | j | � | d k r� Pq | t j k r | j d � } | r� | j | � q | j
� q Wt j r t
j j d | | j f � |
S)Nr; �
r r i � z"Needed %d calls to complete %s().
)�getr r: rE r� ZSSL_ERROR_WANT_WRITErq �sendallr0 r r� r r r r r
)
rP rG �incoming�outgoingr@ r> r? r; r� rE �retr� �bufr r r � ssl_io_loop� s2
z NetworkedBIOTests.ssl_io_loopc C s� t j t � ��t j t j � } | j t d f � t j � } t j � } t j t j � } t j
| _ | j t
� d | _ | j | | d t � } | j | j j | � | j | j � � | j | j � � | j t | j � d t j k r
| j | j d � � | j | | | | j � | j | j � � | j | j � � | j | j � � d t j k r�| j | j d � � y | j | | | | j � Wn t j k
r�Yn X| j t j! | j" d � | j# � Wd QRXd S)Ni� TFz
tls-uniques foo)$r r� r� r$ r% rA r r� r9 r� rI r" rC r� r� �wrap_biorU r� �ownerr� r� �assertIsNotNone�shared_ciphersra rb r� r r� r� r� r �unwrapZSSLSyscallErrorr: r rl )rP rG r� r� rX �sslobjr r r �test_handshake s8
z NetworkedBIOTests.test_handshakec
C s! t j t � � t j t j � } | j t d f � t j � } t j � } t j t j � } t j
| _ | j | | d � } | j
| | | | j � d } | j
| | | | j | � | j
| | | | j d � } | j | d d � d � | j
| | | | j � | j � Wd QRXd S)Ni� Fs GET / HTTP/1.0
i r- s HTTP/)r r� r� r$ r% rA r r� r9 r� rG r" r� r� r� r rq rS r� rl )rP rG r� r� rX r� Zreqr� r r r �test_read_write_data! s z&NetworkedBIOTests.test_read_write_dataN)r
r r r� r� r� r r r r r� � s " !r� FT)�make_https_serverc
@ s� e Z d Z Gd d � d e j � Z d d d d d d d d d d d d d � Z d d � Z d
d � Z d d d
� Z d d � Z
d d � Z d S)�ThreadedEchoServerc @ sX e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d d � Z d
S)z$ThreadedEchoServer.ConnectionHandlerc C sZ | | _ d | _ | | _ | | _ | j j d � d | _ t j j | � d | _ d S)NFr T)
�server�runningrG �addrr� �sslconn� threading�Thread�__init__�daemon)rP r� Zconnsockr� r r r r� D s z-ThreadedEchoServer.ConnectionHandler.__init__c C s! y] | j j j | j d d �| _ | j j j | j j � � | j j j | j j � � Wn� t
j t f k
r� } zc | j j
j | � | j j r� t d t | j � d � d | _ | j j � | j � d SWYd d } ~ Xn2X| j j j | j j � � | j j j t
j k r�| j j � } t j re| j j ret j j d t j | � d � | j j d � } t j r�| j j r�t j j d t t! | � � d � | j j" � } t j r| j j rt j j d
t | � d � t j j d t | j j � � d � d Sd S) Nr> Tz'
server: bad connection attempt from z:
Fz client cert is rw z cert binary is z bytes
z" server: connection cipher is now z" server: selected protocol is now )#r� r� r& rG r� �selected_npn_protocols�append�selected_npn_protocol�selected_alpn_protocols�selected_alpn_protocolr r: �ConnectionResetError� conn_errors�chattyr r� r� r� �stoprl r� r" rI r� r r r r r r� r� rT r` r� )rP r� rR Z cert_binaryr� r r r � wrap_connN s6
!$ z.ThreadedEchoServer.ConnectionHandler.wrap_connc C s* | j r | j j � S| j j d � Sd S)Ni )r� rq rG r0 )rP r r r rq s s
z)ThreadedEchoServer.ConnectionHandler.readc C s- | j r | j j | � S| j j | � Sd S)N)r� r rG r4 )rP r� r r r r y s z*ThreadedEchoServer.ConnectionHandler.writec C s* | j r | j j � n
| j j � d S)N)r� rl rG )rP r r r rl s z*ThreadedEchoServer.ConnectionHandler.closec C s� d | _ | j j s% | j � s% d Sx�| j r�y3| j � } | j � } | sh d | _ | j � n�| d k r� t j r� | j j r� t
j j d � | j � d S| j j r| d k rt j r� | j j r� t
j j d � | j d � | j � scd Sn_| j j r�| j
r�| d k r�t j rJ| j j rJt
j j d � | j d � | j
j � | _ d | _
t j rc| j j rct
j j d
� n� | d k r t j r�| j j r�t
j j d � | j
j d
� } | j t | � j d � d � nc t j rP| j j rP| j
r$d p'd } t
j j d | | | j � | f � | j | j � � Wq( t k
r�| j j r�t d � | j � d | _ | j j � Yq( Xq( Wd S)NTFs overz" server: client closed connection
s STARTTLSz2 server: read STARTTLS from client, sending OK...
s OK
s ENDTLSz0 server: read ENDTLS from client, sending OK...
z* server: connection is now unencrypted...
s
CB tls-uniquez@ server: read CB tls-unique from client, sending our CB data...
z
tls-uniquezus-asciis
Z encryptedZ unencryptedz/ server: read %r (%s), sending back %r (%s)...
zTest server failure:
)r� r� �starttls_serverr� rq �striprl r r �connectionchattyr r r r� r� rG r� r� r� r
r/ r� r r� )rP �msg�strippedrf Zctyper r r �run� sb
#
z(ThreadedEchoServer.ConnectionHandler.runN) r
r r r� r� rq r rl r� r r r r �ConnectionHandler> s
% r� NTFc C sZ | r | | _ n� t j | d k r* | n t j � | _ | d k rK | n t j | j _ | rp | j j | � | r� | j j | � | r� | j j | � | r� | j j | � |
r� | j j
|
� | | _ | | _ | | _
t j � | _ t j | j � | _ d | _ d | _ g | _ g | _ g | _ g | _ t j j | � d | _ d S)NFT) r� r r9 rL rG r" rC r9 �set_npn_protocols�set_alpn_protocolsr r� r� r� r$ rG r � bind_portr� �flag�activer� r� r� r� r� r� r� r� ) rP Z certificaterJ �certreqs�cacertsr� r� r� Z
npn_protocolsZalpn_protocolsr� r� r r r r� � s< zThreadedEchoServer.__init__c C s$ | j t j � � | j j � | S)N)�startr� �Eventr �wait)rP r r r � __enter__� s
z ThreadedEchoServer.__enter__c G s | j � | j � d S)N)r� r )rP r> r r r �__exit__� s
zThreadedEchoServer.__exit__c C s | | _ t j j | � d S)N)r r� r� r )rP r r r r r � s zThreadedEchoServer.startc C s | j j d � | j j � d | _ | j r< | j j � x� | j r� yr | j j � \ } } t j r� | j r� t
j j d t
| � d � | j | | | � } | j � | j � Wq? t j k
r� Yq? t k
r� | j � Yq? Xq? W| j j � d S)Ng�������?Tz server: new connection from rw )rG r9 r� r r r� rX r r r� r r r r� r� r r r$ r; �KeyboardInterruptr� rl )rP ZnewconnZconnaddr�handlerr r r r� � s&
zThreadedEchoServer.runc C s
d | _ d S)NF)r )rP r r r r� s zThreadedEchoServer.stop) r
r r r� r� r� r� r
r r r� r� r r r r r� < s ~ ! r� c @ s� e Z d Z Gd d � d e j � Z d d � Z d d � Z d d � Z d d
� Z d d d
� Z
d d � Z d d � Z d S)�AsyncoreEchoServerc @ sM e Z d Z Gd d � d e j � Z d d � Z d d � Z d d � Z d S)
z AsyncoreEchoServer.EchoServerc @ sX e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d d � Z d
S)z/AsyncoreEchoServer.EchoServer.ConnectionHandlerc C sQ t j | d d d | d d �| _ t j j | | j � d | _ | j � d S)Nr> Tr? r� F)r r& r$ �asyncore�dispatcher_with_sendr� �_ssl_accepting�_do_ssl_handshake)rP �connr? r r r r� s z8AsyncoreEchoServer.EchoServer.ConnectionHandler.__init__c C s? t | j t j � r; x# | j j � d k r: | j � q Wd S)Nr T)r� r$ r � SSLSocketr� Zhandle_read_event)rP r r r �readable s z8AsyncoreEchoServer.EchoServer.ConnectionHandler.readablec C s� y | j j � Wn� t j t j f k
r5 d SYn� t j k
rS | j � SYne t j k
rj � YnN t k
r� } z% | j d t
j k r� | j � SWYd d } ~ Xn
Xd | _ d S)Nr F)
r$ r� r r� r� Z SSLEOFError� handle_closer: r/ r> rE Z ECONNABORTEDr )rP �errr r r r s zAAsyncoreEchoServer.EchoServer.ConnectionHandler._do_ssl_handshakec C sr | j r | j � nX | j d � } t j rH t j j d t | � � | s[ | j � n | j
| j � � d S)Ni z server: read %s from client
) r r r0 r r r r r r� rl r4 r
)rP rf r r r � handle_read, s
z;AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_readc C s. | j � t j r* t j j d | j � d S)Nz server: closed connection %s
)rl r r r r r r$ )rP r r r r 8 s
z<AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_closec C s � d S)Nr )rP r r r r = s z<AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_errorN) r
r r r� r r r r r r r r r r�
s r� c C sZ | | _ t j t j t j � } t j | d � | _ t j j | | � | j
d � d S)Nr8 r- ) r? r$ r% � SOCK_STREAMr r r� r �
dispatcherr� r� )rP r? rG r r r r� @ s
z&AsyncoreEchoServer.EchoServer.__init__c C s4 t j r t j j d | � | j | | j � d S)Nz$ server: new connection from %s:%s
)r r r r r r� r? )rP Zsock_objr� r r r �handle_acceptedG s z-AsyncoreEchoServer.EchoServer.handle_acceptedc C s � d S)Nr )rP r r r r L s z*AsyncoreEchoServer.EchoServer.handle_errorN) r
r r r r r� r� r r r r r r �
EchoServer s 3 r c C sP d | _ d | _ | j | � | _ | j j | _ t j j | � d | _ d S)NFT) r r r r� r� r� r� r� r� )rP r? r r r r� O s zAsyncoreEchoServer.__init__c C s d | j j | j f S)Nz<%s %s>)� __class__r
r� )rP r r r �__str__W s zAsyncoreEchoServer.__str__c C s$ | j t j � � | j j � | S)N)r r� r r r )rP r r r r
Z s
z AsyncoreEchoServer.__enter__c G ss t j r t j j d � | j � t j r< t j j d � | j � t j r_ t j j d � t j d d � d S)Nz cleanup: stopping server.
z! cleanup: joining server thread.
z cleanup: successfully joined.
Z
ignore_allT) r r r r r r� r r Z close_all)rP r> r r r r _ s
zAsyncoreEchoServer.__exit__Nc C s | | _ t j j | � d S)N)r r� r� r )rP r r r r r k s zAsyncoreEchoServer.startc C sO d | _ | j r | j j � x) | j rJ y t j d � Wq" Yq" Xq" Wd S)NTr )r r r� r Zloop)rP r r r r� o s
zAsyncoreEchoServer.runc C s d | _ | j j � d S)NF)r r� rl )rP r r r r� y s zAsyncoreEchoServer.stop)
r
r r r r r r� r r
r r r� r� r r r r r s D
r s FOO
c C s� i } t d | d | d d � } | ��| j t j � d | ���} | j t | j f � x� | t | � t | � g D]� } | r� t j r� t
j j d | � | j | � | j
� }
| r� t j r� t
j j d |
� |
| j � k rx t d |
d d � t |
� | d d � j � t | � f � � qx W| j d
� | rat j rat
j j d � | j d | j � d
| j � d | j � d | j � d | j � d | j � i � | j � Wd QRX| j | d <| j | d <| j | d <Wd QRX| S)Nr� r� r� Fr� z client: sending %r...
z client: read %r
z4bad data <<%r>> (%d) received; expected <<%r>> (%d)
� s over
z client: closing connection.
� compressionr� �peercert�client_alpn_protocol�client_npn_protocolr� �server_alpn_protocols�server_npn_protocols�server_shared_ciphers) r� r& r$ rA rB r� rd r� r r r r r rq r
�AssertionErrorr` r� r r� r� r� r� r� rl r� r� r� ) �client_context�server_context�indatar� r� �sni_namer� r� r �arg�outdatar r r �server_params_test} sN "
*
r. c
C s | d k r t j } t j d t j d t j d i | } t j r� | rO d pR d } t j j | t j | � t j | � | f � t j
| � } | j | O_ t j
| � } | j | O_ | j t j
k r� | j d � x7 | | f D]) }
| |
_ |
j t � |
j t � q� Wy t | | d d d d �} Wn] t j k
rX| rT� Yn� t k
r�} z | s�| j t j k r�� WYd d } ~ Xnh X| s�t d
t j | � t j | � f � � n6 | d k r�| | d k r�t d
| | d f � � d S)NrG rH rI z %s->%s %s
z
{%s->%s} %s
r r� Fr� z5Client protocol %s succeeded with server protocol %s!Tr� z%version mismatch: expected %r, got %r)r rG rH rI r r r r r Zget_protocol_namer9 r rV r� r r" r9 r� rC r. r: r/ rE �
ECONNRESETr' )
Zserver_protocolZclient_protocol�expect_successZ certsreqs�server_options�client_optionsZcerttypeZ formatstrr( r) rX r� r� r r r �try_protocol_combo� sP
r3 c @ s� e Z d Z e d d � � Z d d � Z e j e � d � d d � � Z d d � Z
d
d � Z d d
� Z e e j e
e d � d � d d � � � Z e d d � � Z e e j e
e d � d � d d � � � Z e d d � � Z e e j e
e d � d � d d � � � Z e e j e
e d � d � d d! � � � Z d" d# � Z d$ d% � Z d& d' � Z d( d) � Z d* d+ � Z d, d- � Z d. d/ � Z d0 d1 � Z d2 d3 � Z d4 d5 � Z d6 d7 � Z d8 d9 � Z e j e j! d: � e j" e# d; � d< d= � � � Z$ e j d> e j% k d? � d@ dA � � Z& dB dC � Z' e j e
e dD � dE � dF dG � � Z( dH dI � Z) dJ dK � Z* e j e j+ dL � dM dN � � Z, e j e j+ dO � e j" e# d; � dP dQ � � � Z- dR dS � Z. e j e j/ dT � dU dV � � Z0 dW dX � Z1 dY dZ � Z2 e3 d[ d\ � � Z4 e3 d] d^ � � Z5 e3 d_ d` � � Z6 e3 da db � � Z7 e j" e# d; � dc dd � � Z8 de df � Z9 dg dh � Z: di S)j�
ThreadedTestsc C s� t j r t j j d � xd t D]\ } | j d t j | � �: t j | � } | j
t � t | | d d d d �Wd QRXq Wd S)Nrw rV r� Tr� )
r r r r r r ZsubTestr �_PROTOCOL_NAMESr9 r9 r� r. )rP rV r� r r r � test_echo� s
zThreadedTests.test_echoc C s� t j r t j j d � t j t j � } t j | _ | j
t � | j t � t
d | d d � } | �p| j t j � d d �} | j t | j f � | j t � � | j � Wd QRX| j � | j � } | j | d � | j � } t j r5t j j t j | � d � t j j d t | � d � d | k r[| j d
t j | � � d | d k rx| j d
� | j d | � | j d | � t j | d � } t j | d � } | j | | � | j � Wd QRXd S)Nrw r� r� Fr� zCan't get peer certificate.zConnection cipher is z.
r� z$No subject field in certificate: %s.r} �Python Software FoundationzkMissing or invalid 'organizationName' field in certificate subject; should be 'Python Software Foundation'.r� r� �r} r7 )r8 )!r r r r r r r9 r� rI r" rC r� r9 r� r& r$ rA rB r� ra rb r� r� r r� r� r� rT ri rN r r rl )rP r� r� r rR r� Zbefore�afterr r r �test_getpeercert� sB
z ThreadedTests.test_getpeercertz!verify_flags need OpenSSL > 0.9.8c 4 C s t j r t j j d � t j t j � } | j t � t j t j � } t j
| _ | j t
� t t d d � } | j | j t j | B� t d | d d � } | �V | j t j � � �9 } | j t | j f � | j � } | j | d � Wd QRXWd QRX| j t j O_ t d | d d � } | �W | j t j � � �: } | j t j d � � | j t | j f � Wd QRXWd QRXWd QRX| j t � t d | d d � } | �V | j t j � � �9 } | j t | j f � | j � } | j | d � Wd QRXWd QRXd S) Nrw r$ r r� r� TzCan't get peer certificate.zcertificate verify failed) r r r r r r r9 rL r9 �SIGNED_CERTFILErI r" rC r� r% rS r& r' r� r& r$ rA rB r� r� r r( r@ r: �CRLFILE)rP r) r� r) r� r rR r r r �test_crl_check s:
+
z ThreadedTests.test_crl_checkc : C s� t j r t j j d � t j t j � } | j t � t j t j � } t j
| _ d | _ | j
t � t d | d d � } | �\ | j t j � d d ��9 } | j t | j f � | j � } | j | d � Wd QRXWd QRXt d | d d � } | �] | j t j � d d ��: } | j t j d � � | j t | j f � Wd QRXWd QRXWd QRXt d | d d � } | �B t j � �. } | j t d
� � | j | � Wd QRXWd QRXWd QRXd S) Nrw Tr� r� r� r� zCan't get peer certificate.�invalidz,hostname 'invalid' doesn't match 'localhost'z'check_hostname requires server_hostname)r r r r r r r9 rL r9 r; rI r" r� rC r� r� r& r$ rA rB r� r� r r@ rU rb )rP r) r� r� r rR r r r r� G s8
+
z!ThreadedTests.test_check_hostnamec % C sf t j j t j j t � p! t j d � } t t d t j d t d d d d �} | �t
j
� �� } t j | d | d t j ��� } y | j
t | j f � Wn� t j k
r� } z" t j r� t j j d | � WYd d } ~ Xnd t k
r?} z7 | j t j k r� t j r-t j j d
| � WYd d } ~ Xn X| j d � Wd QRXWd QRXWd QRXd S) Nz
wrongcert.pemr r r� Fr� r? rJ z
SSLError is %r
z
socket.error is %r
z'Use of invalid cert should have failed!)r r r r r rK r� r� r rI r$ r& rL rA rB r� r: r r r r r r/ rE r/ ri )rP r? r� rG r r� r r r �test_wrong_certm s, ! & 'z ThreadedTests.test_wrong_certc
s� t j � � t j � � t j � � t j � t � � � � � f d d � } � � � � f d d � } t j d | � } | j � z | � Wd | j � Xd S)Nc sH � j � � j � � j � \ } } | j � � j � � j � d S)N)r� r� rX rl )Znewsockr� )�
listener_gone�listener_readyr r r �listener� s
z2ThreadedTests.test_rude_shutdown.<locals>.listenerc sv � j � t j � �Y } | j t � f � � j � y t j | � } Wn t k
r] Yn X� j d � Wd QRXd S)Nz2connecting to closed SSL socket should have failed)r r$ rA rB r r& r/ ri )r� �ssl_sock)r@ rA r� rP r r � connector� s
z3ThreadedTests.test_rude_shutdown.<locals>.connector�target) r� r r$ r r rB r� r r )rP rB rD r r )r@ rA r� r rP r �test_rude_shutdown� s
z ThreadedTests.test_rude_shutdownr5 z)OpenSSL is compiled without SSLv2 supportc C s" t j r t j j d � t t j t j d � t t j t j d t j � t t j t j d t j � t t j t j
d � t t d � r� t t j t j d � t t j t j
d � t � r� t t j t j
d d t j �t t j t j
d d t j �t t j t j
d d t j �d S)Nrw TF�PROTOCOL_SSLv3r2 )r r r r r r3 r r5 rH rI r� rB rG rL r! r r r )rP r r r �test_protocol_sslv2� s
z!ThreadedTests.test_protocol_sslv2c C s t j r t j j d � t t d � r� y t t j t j d � WnH t
k
r� } z( t j rz t j j d t | � � WYd d } ~ Xn Xt t d � r� t t j t j d � t t j t j d � t t j t j
d � t t d � r t t j t j d t j � t t j t j d t j � t t j t j
d t j � t t d � rlt t j t j d t j � t t j t j d t j � t t j t j
d t j � t t d � r�t t j t j d d t j �t t j t j d d t j t j B�t t j t j
d d t j �d S) Nrw r5 Tz; SSL2 client to SSL23 server test unexpectedly failed:
%s
rG F�TLSv1r1 )r r r r r rB r r3 r� r5 r/ rT rG rL rH rI r r r )rP r� r r r �test_protocol_sslv23� s: !
z"ThreadedTests.test_protocol_sslv23rG z)OpenSSL is compiled without SSLv3 supportc C s� t j r t j j d � t t j t j d � t t j t j d t j � t t j t j d t j � t
t d � r� t t j t j d � t t j t j d d t j
�t t j t j d � t � r� t t j t j d d t j �d S)Nrw ZSSLv3r5 Fr2 )r r r r r r3 r rG rH rI rB r5 r� r rL r! r )rP r r r �test_protocol_sslv3� s
z!ThreadedTests.test_protocol_sslv3c C s� t j r t j j d � t t j t j d � t t j t j d t j � t t j t j d t j � t
t d � r� t t j t j d � t
t d � r� t t j t j d � t t j t j
d d t j �d S)Nrw rI r5 FrG r2 )r r r r r r3 r rL rH rI rB r5 rG r� r )rP r r r �test_protocol_tlsv1
s z!ThreadedTests.test_protocol_tlsv1�PROTOCOL_TLSv1_1z TLS version 1.1 not supported.c C s� t j r t j j d � t t j t j d � t t d � rT t t j t j d � t t d � ry t t j t j
d � t t j t j d d t j �t t j t j d � t t j t j
d � t t j
t j d � d S)Nrw zTLSv1.1r5 FrG r2 )r r r r r r3 r rM rB r5 rG r� �
OP_NO_TLSv1_1rL )rP r r r �test_protocol_tlsv1_1
s
z#ThreadedTests.test_protocol_tlsv1_1�PROTOCOL_TLSv1_2z TLS version 1.2 not supported.c C s* t j r t j j d � t t j t j d d t j t j Bd t j t j B�t
t d � rt t t j t j d � t
t d � r� t t j t j d � t t j t j
d d t j �t t j
t j d � t t j t j d � t t j t j d � t t j t j d � t t j t j d � d S)Nrw zTLSv1.2r1 r2 r5 FrG )r r r r r r3 r rP r r rB r5 rG r� Z
OP_NO_TLSv1_2rL rM )rP r r r �test_protocol_tlsv1_2/
s
z#ThreadedTests.test_protocol_tlsv1_2c C s' d } t t d t j d
d d d d
d �} d } | ��t j � } | j d � | j t | j f � t j
r� t j j
d � x>| D]6} t j
r� t j j
d | � | r� | j
| � | j � } n | j | � | j d � } | j � j � } | d k rU| j d � rUt j
r4t j j
d | � t j | d t j �} d } q� | d k r�| j d � r�t j
r�t j j
d | � | j � } d } q� t j
r� t j j
d | � q� Wt j
r�t j j
d � | r�| j
d � n
| j d � | r| j � n
| j � Wd QRXd S)N� msg 1� MSG 2� STARTTLS� MSG 3� msg 4� ENDTLS� msg 5� msg 6rJ r� Tr� r� Fr rw z client: sending %r...
i s okz/ client: read %r from server, starting TLS...
z- client: read %r from server, ending TLS...
z client: read %r from server
z client: closing connection.
s over
)rR rS rT rU rV rW rX rY )r� r� r rL r$ r� rA rB r� r r r r r rq r4 r0 r� r
r
r& r� rl ) rP Zmsgsr� �wrappedr r* r r- r� r r r �
test_starttlsG
s`
zThreadedTests.test_starttlsc C s4 t | d t �} t j r+ t j j d � t t d � � } | j � } Wd QRXd } d | j t
j j t � d f } t
j d t � } t j j | d | �} zo | j � j d � } | rt | � d
k r| j t | � � } t j rt j j d t | � | f � Wd | j � X| j | | � d S) Nr? rw �rbr8 zhttps://localhost:%d/%sr r� r� zcontent-lengthr z/ client: read %d bytes from remote server '%s'
)r� r� r r r r r r
rq r� r r �splitr r� �urllibZrequest�urlopen�infor� r r` rl rS )rP r� rA r r Zurlr� Zdlenr r r �test_socketserver�
s( z ThreadedTests.test_socketserverc C sY t j r t j j d � d } t t � } | �!t j t j � � } | j
d | j f � t j rz t j j d | � | j | � | j � } t j r� t j j d | � | | j
� k r| j d | d d � t | � | d d � j
� t | � f � | j d � t j r+t j j d � | j � t j rNt j j d
� Wd QRXd S) Nrw s FOO
z 127.0.0.1z client: sending %r...
z client: read %r
z4bad data <<%r>> (%d) received; expected <<%r>> (%d)
r s over
z client: closing connection.
z client: connection closed.
)r r r r r r r� r r& r$ rA r� rq r
ri r` rl )rP r* r� r r- r r r �test_asyncore_server�
s2
$
z"ThreadedTests.test_asyncore_serverc s� t j r t j j d � t t d t j d t j d t d d d d �} | �Mt j
t j � d d d
t d t d t j d t j �� � j t
| j f � � f d
d � } � f d d � } d � j d g f d � j d d g f d � j d g f g } d � j d g f d � j d d g f d | d g f d | d g f g } d } x(| D] \ } } } }
| | j d � } y� | | |
� � j � } | | j � k r�| j d j d | d | d d � d t | � d | d d � d! t | � � � WqZt k
ry}
zX | r3| j d" j d | � � t |
� j | � sg| j d# j d | d$ |
� � WYd d }
~
XqZXqZWx2| D]*\ } } } }
| | j d � } y� � j | � | |
� } | | j � k r)| j d% j d | d | d d � d t | � d | d d � d! t | � � � Wq�t k
r�}
zb | r^| j d& j d | � � t |
� j | � s�| j d# j d | d$ |
� � � j � WYd d }
~
Xq�Xq�Wd' } � j | � t t | � � } | j � j d+ | � t | � � | j | | � | j t � j! d' g � | j t � j" d) � | j t � j# t d) � � � j d* � | j t � j d, � | j t � j d- � � j$ � Wd QRXd S).Nrw r rJ r r� Tr� Fr> r? r� r� c s- t d d � } � j | � } | d | � S)Ns �d )rd r1 )�br� )r r r �
_recv_into�
s z0ThreadedTests.test_recv_send.<locals>._recv_intoc s3 t d d � } � j | � \ } } | d | � S)Ns rc )rd r3 )rd r� r� )r r r �_recvfrom_into�
s z4ThreadedTests.test_recv_send.<locals>._recvfrom_intor4 r5 z some.addressr� r0 r2 r1 r3 ZPREFIX_r] zpWhile sending with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
r
r- r Znoutr* Zninz>Failed to send with method <<{name:s}>>; expected to succeed.
zFMethod <<{name:s}>> failed with unexpected exception message: {exp:s}
�expzrWhile receiving with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
zAFailed to receive with method <<{name:s}>>; expected to succeed.
s datar rc s over
r� r� r� )%r r r r r r� r� r rG rL r& r$ rA rB r� r4 r5 r� r0 r2 r� rq r
ri r r` rb rT r
rd rS ra r� �sendmsg�recvmsg� recvmsg_intorl )rP r� re rf Z send_methodsZ recv_methodsZ data_prefixZ meth_nameZ send_methr0 r> r* r- r� Z recv_methrf �bufferr )r r �test_recv_send�
s�
$
'
$
!
"
z ThreadedTests.test_recv_sendc C s t t � } | j � | j | j d d � t j t | j f � } | j | j � t
j | d d �} | j | j � | j d � | j
| j d � d � | j
| j d � d � | j
| j � d � | j d � | j
| j d � d � | j
| j t � � d � d S)NZsuppress_ragged_eofsFs datar rL )r� r� r
ro r r$ �create_connectionrB r� rl r r& r4 rS r0 rq r� r1 rd )rP r� r r r r �test_recv_zero6 s
z ThreadedTests.test_recv_zeroc s� t t d t j d t j d t d d d d �} | �� t j t j � d d d t d
t d t j d t j �� � j t | j f � � j
d � t d � � � � f d
d � } | j t j
t j f | � � j
d � � j � Wd QRXd S)Nr rJ r r� Tr� Fr> r? r� r� i c s x � j � � q Wd S)N)r4 r )r� r r r � fill_buffer^ s z8ThreadedTests.test_nonblocking_send.<locals>.fill_buffer)r� r� r rG rL r& r$ rA rB r� r� rd ra r� r� rl )rP r� ro r )r� r r �test_nonblocking_sendJ s*
z#ThreadedTests.test_nonblocking_sendc s_ t j t j � � d } t j � � } t j � � d � � � � f d d � } t j d | � } | j � � j � z� zR t j t j � } | j d � | j
| | f � | j t j d t
j | � Wd | j � XzT t j t j � } t
j | � } | j d � | j t j d | j
| | f � Wd | j � XWd d � | j � � j � Xd S) Nz 127.0.0.1Fc s� � j � � j � g } xQ � sm t j � g g g d � \ } } } � | k r | j � j � d � q Wx | D] } | j � qu Wd S)Ng�������?r )r� r� r� r� rX rl )Zconnsr �wr� rG )�finishr� �startedr r �servep s
$
z3ThreadedTests.test_handshake_timeout.<locals>.serverE g�������?z timed outT)r$ r% r r r� r r� r r r9 rA r@ r; r r& rl r )rP r� r� rt r r� r )rr r� rs r �test_handshake_timeouth s6
z$ThreadedTests.test_handshake_timeoutc sP t j t j � } t j | _ | j t � | j t � t j t j � � d } t
j � � } | j � d d �� t
j � � d � d � � � � � f d d � } t
j d | � } | j � � j � | j t j � � } | j | | f � | j � } | j � | j � � j � � j � | j � t j � | j � | � d S)Nz 127.0.0.1r> Tc s7 � j � � j � � j � \ � � � j d � d S)Nr )r� r� rX r0 r )�evt�peerr� r� r r rt � s
z/ThreadedTests.test_server_accept.<locals>.serverE )r r9 r� rI r" rC r� r9 r$ r% r r r& r� r r� r r rA r� rl r r r rS )rP r� r� r� rt r �clientZ client_addrr )rv rw r� r� r �test_server_accept� s0
z ThreadedTests.test_server_acceptc C sq t j t j � } | j t j � � �C } | j t � � } | j � Wd QRX| j | j j
t
j � Wd QRXd S)N) r r9 r� r& r$ ra r/ r� rS rD rE �ENOTCONN)rP r� rG rH r r r �test_getpeercert_enotconn� s
z'ThreadedTests.test_getpeercert_enotconnc C sq t j t j � } | j t j � � �C } | j t � � } | j � Wd QRX| j | j j
t
j � Wd QRXd S)N) r r9 r� r& r$ ra r/ r� rS rD rE rz )rP r� rG rH r r r �test_do_handshake_enotconn� s
z(ThreadedTests.test_do_handshake_enotconnc " C s� t j t j � } y | j d � Wn" t j k
rG | j d � Yn Xt t d t j d d ��S } | j t j � � �4 } | j
t � � | j t
| j f � Wd QRXWd QRXWd QRX| j d t | j d � � d S)NZDESzno DES cipher availablerJ r� Fzno shared cipherr )r r9 r� r r: r r� r� r& r$ ra r/ rA rB r� rN rT r� )rP r� r� r r r r �test_default_ciphers� s +z"ThreadedTests.test_default_ciphersc C s� t j t j � } t t d t j d d ��~ } | j t j � � �I } | j | j � d � | j t
| j f � | j | j � d � Wd QRX| j | j � d � Wd QRXd S)NrJ r� FrI )
r r9 rL r� r� r& r$ rU r� rA rB r� rS )rP r� r� r r r r �test_version_basic� s z ThreadedTests.test_version_basicz"test requires ECDH-enabled OpenSSLz bpo-36576: fail on OpenSSL 1.1.1c C s� t j t j � } | j t � t j d k r; | j d � t d | � �V } | j t j � � �7 } | j
t | j f � | j
d | j � d � Wd QRXWd QRXd S)Nr r z
ECCdraft:ECDHr� ZECDH)r r r )r r9 r� r9 r� r r r� r& r$ rA rB r� rN r� )rP r� r� r r r r �test_default_ecdh_curve� s
z%ThreadedTests.test_default_ecdh_curvez
tls-uniquez*'tls-unique' channel binding not availablec C sA t j r t j j d � t t d t j d t j d t d d d d �} | ��t j
t j � d d d
t d t d t j d t j �} | j t
| j f � | j d
� } t j r� t j j d j | � � | j | � | j t | � d � | j d � | j � j � } | j | t | � j d � � | j � t j
t j � d d d
t d t d t j d t j �} | j t
| j f � | j d
� } t j r�t j j d j | � � | j | | � | j | � | j t | � d � | j d � | j � j � } | j | t | � j d � � | j � Wd QRXd S)Nrw r rJ r r� Tr� Fr> r? r� r� z
tls-uniquez! got channel binding data: {0!r}
� s CB tls-unique
zus-asciiz) got another channel binding data: {0!r}
)r r r r r r� r� r rG rL r& r$ rA rB r� r� r r� rS r` rq r� r� r� rl rr )rP r� r Zcb_dataZpeer_data_reprZ new_cb_datar r r r� � s\
z-ThreadedTests.test_tls_unique_channel_bindingc C s� t j t j � } | j t � t | | d d d d �} t j r` t j j
d j | d � � | j | d d d d h � d S)Nr� Tr� z got compression: {!r}
r ZZLIBZRLE)
r r9 rL r9 r� r. r r r r r r rN )rP r� r� r r r �test_compression9 s
z ThreadedTests.test_compressionrM z*ssl.OP_NO_COMPRESSION needed for this testc C sd t j t j � } | j t � | j t j O_ t | | d d d d �} | j | d d � d S)Nr� Tr� r ) r r9 rL r9 r� r rM r. rU )rP r� r� r r r �test_compression_disabledB s
z'ThreadedTests.test_compression_disabledc C s� t j t j � } | j t � | j t � | j d � t | | d d d d �} | d d } | j d � } d | k r� d | k r� d
| k r� | j
d | d � d S) NZkEDHr� Tr� r� r �-ZADHZEDHZDHEzNon-DH cipher: ) r r9 rL r9 r� rS rT r r. r] ri )rP r� r� r� �partsr r r �test_dh_paramsL s
$z ThreadedTests.test_dh_paramsc C sR t j t j � } | j t � t | | d d d d �} | j | d d � d S)Nr� Tr� r" )r r9 rL r9 r� r. rU )rP r� r� r r r �test_selected_alpn_protocolY s
z)ThreadedTests.test_selected_alpn_protocolzALPN support requiredc C s� t j t j � } | j t � t j t j � } | j t � | j d d g � t | | d d d d �} | j | d d � d S)Nr\ �barr� Tr� r" ) r r9 rL rC r� r9 r r. rU )rP r( r) r� r r r �/test_selected_alpn_protocol_if_server_uses_alpna s
z=ThreadedTests.test_selected_alpn_protocol_if_server_uses_alpnz!ALPN support needed for this testc C s� d d d g } d d g d f d d g d f d g d f d d g d f g } xq| D]i\ } } t j t j � } | j t � | j | � t j t j � } | j t � | j | � y t | | d d d d �} Wn. t j k
r} z | } WYd d } ~ Xn X| d k r1t r1| j | t j � qU d t
| � t
| � t
| � f } | d
}
| j |
| | |
d f � t | d � r�| d d n d } | j | | | | d f � qU Wd S)Nr\ r� Z milkshakezhttp/3.0zhttp/4.0r� Tr� zKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sr" rx r$ r �nothingr� r� )
r r9 rP r9 r� r r. r: �IS_OPENSSL_1_1r rT rS r` ) rP �server_protocols�protocol_tests�client_protocolsr� r) r( r� r� r� �
client_result�
server_resultr r r �test_alpn_protocolsm s<
$ z!ThreadedTests.test_alpn_protocolsc C sR t j t j � } | j t � t | | d d d d �} | j | d d � d S)Nr� Tr� r# )r r9 rL r9 r� r. rU )rP r� r� r r r �test_selected_npn_protocol� s
z(ThreadedTests.test_selected_npn_protocolz NPN support needed for this testc C si d d g } d d g d f d d g d f d d g d f d d g d f g } x| D] \ } } t j t j � } | j t � | j | � t j t j � } | j t � | j | � t | | d d d d �} d t | � t | � t | � f } | d
} | j | | | | d f � t | d � r>| d d n d }
| j |
| | |
d f � qU Wd S)Nzhttp/1.1zspdy/2�test�abc�defr� Tr� zKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sr# rx r% r r� r� r� )
r r9 rL r9 r� r r. rT rS r` ) rP r� r� r� r� r) r( r� r� r� r� r r r �test_npn_protocols� s*
$z ThreadedTests.test_npn_protocolsc C sv t j t j � } | j t � t j t j � } | j t � t j t j � } t j | _ | j t � | | | f S)N)
r r9 rL r9 r; �SIGNED_CERTFILE2rI r" rC r� )rP r) �
other_contextr( r r r � sni_contexts� s
zThreadedTests.sni_contextsc C s+ | d } | j d | f f | d � d S)Nr! r r� )rN )rP r� r
rR r r r �check_common_name� s
z ThreadedTests.check_common_namec s g � | j � \ } � } � � f d d � } | j | � t | | d d d d �} | j � d | f g � | j | d � g � t | | d d d d �} | j � d | f g � | j | d � g � | j d � t | | d d d d �} | j | d � | j � g � d S)
Nc s, � j | | f � | d k r( � | _ d S)N)r� r� )rC � server_name�initial_context)�callsr� r r �
servername_cb� s z6ThreadedTests.test_sni_callback.<locals>.servername_cbr� Tr+ � supermessageZ fakehostnamer� Znotfunny)r� r` r. rS r� )rP r) r( r� r� r )r� r� r ra � s,
z ThreadedTests.test_sni_callbackc C s | j � \ } } } d d � } | j | � | j t j � �" } t | | d d d d �} Wd QRX| j | j j d � d S)Nc S s t j S)N)r Z ALERT_DESCRIPTION_ACCESS_DENIED)rC r� r� r r r �cb_returning_alert� s zAThreadedTests.test_sni_callback_alert.<locals>.cb_returning_alertr� Fr+ r� ZTLSV1_ALERT_ACCESS_DENIED) r� r` ra r r: r. rS rD r� )rP r) r� r( r� rH r� r r r �test_sni_callback_alert� s
z%ThreadedTests.test_sni_callback_alertc C s� | j � \ } } } d d � } | j | � | j t j � �8 } t j � �" } t | | d d d d �} Wd QRXWd QRX| j | j j
d � | j d | j � � d S) Nc S s d d d S)Nr r r )rC r� r� r r r �
cb_raising
s z;ThreadedTests.test_sni_callback_raising.<locals>.cb_raisingr� Fr+ r� Z SSLV3_ALERT_HANDSHAKE_FAILURE�ZeroDivisionError)
r� r` ra r r: r �captured_stderrr. rS rD r� rN �getvalue)rP r) r� r( r� rH �stderrr� r r r �test_sni_callback_raising
s
z'ThreadedTests.test_sni_callback_raisingc C s� | j � \ } } } d d � } | j | � | j t j � �8 } t j � �" } t | | d d d d �} Wd QRXWd QRX| j | j j
d � | j d | j � � d S) Nc S s d S)Nr\ r )rC r� r� r r r �cb_wrong_return_type
s zOThreadedTests.test_sni_callback_wrong_return_type.<locals>.cb_wrong_return_typer� Fr+ r� ZTLSV1_ALERT_INTERNAL_ERRORrc )
r� r` ra r r: r r� r. rS rD r� rN r� )rP r) r� r( r� rH r� r� r r r �#test_sni_callback_wrong_return_type
s
z1ThreadedTests.test_sni_callback_wrong_return_typec
C s' t j t j � } | j t � t j t j � } t j | _ | j t � t j d k r� | j
d � | j
d � d } d } n& | j
d � | j
d � d } d } t | | � } | d
d } | j t
| � d � xE | D]= \ } } } | | j d � k r� | | k r� | j | � q� Wd S)
Nr r r� z
AES128:AES256ZAES256zAES-256zAES:3DESZ3DESzDES-CBC3r& r� )r r r� )r r9 rL r9 r; rI r" rC r� r r r. Z
assertGreaterr` r] ri )
rP r) r( Zalg1Zalg2r� r� r
Z tls_version�bitsr r r �test_shared_ciphers#
s(
!z!ThreadedTests.test_shared_ciphersc C s� t j t j � } t j | _ | j t � | j t � t d | d d � } | �f | j t
j
� � } | j t | j
f � | j � | j t | j d � | j t | j d � Wd QRXd S)Nr� r� Fi s hello)r r9 r� rI r" rC r� r9 r� r& r$ rA rB r� rl ra rb rq r )rP r� r� r r r r �,test_read_write_after_close_raises_valuerror<
s
z:ThreadedTests.test_read_write_after_close_raises_valuerrorc C s d d } t t j d � � } | j | � Wd QRX| j t j t j � t j t j � } t j | _
| j t � | j
t � t d | d d � } | �| | j t j � � �_ } | j t | j f � t t j d � �- } | j | � | j | j d � | � Wd QRXWd QRXWd QRXd S) Nr- i �wbr� r� Fr\ i )r
r ZTESTFNr ro �unlinkr r9 r� rI r" rC r� r9 r� r& r$ rA rB r� �sendfilerS r0 )rP Z TEST_DATArA r� r� r �filer r r �
test_sendfileK
s
zThreadedTests.test_sendfileN);r
r r rE r6 r: r= r r" r= r� r? rF rB r rH rJ rK rL rO rQ r[ ra rb rl rn rp ru ry r{ r| r} r~ rK r� r� r r r� r� r� r� r� ZHAS_ALPNr� r� r� ZHAS_NPNr� r� r� r� ra r� r� r� r� r� r� r r r r r4 � sp & * & ! )( : ~ 1 & !;
! !) !
' r4 c C s t j r*d d l } d t j d t j d t j i } | j � �q | j d d t � xV | j
� D]6 \ } } | � } | rc | d rc d | | f } Pqc Wt t j � � } Wd QRXt d t
j t
j f � t d | � t d
t
j � t d t
j � y t d t
j � Wn t k
r)Yn XxZ t t t t t t t t t t t t t g
D]+ } t! j" j# | � sXt j$ d
| � � qXWt% t& t' t( g } t j) d � r�| j* t+ � | j* t, � t- r�t j. � } | r�| j* t/ � z t j0 | � Wd t- rt j1 | � Xd S)Nr ZLinuxZMacZWindows�ignorez?dist\(\) and linux_distribution\(\) functions are deprecated .*z%s %rz test_ssl: testing with %r %rz under %sz HAS_SNI = %rz OP_ALL = 0x%8xz OP_NO_TLSv1_1 = 0x%8xz Can't read certificate file %rZnetwork)2r r �warningsr; r< Zmac_verZ win32_ver�catch_warnings�filterwarnings�PendingDeprecationWarning�itemsr� �printr r r rO r rN �AttributeErrorr� r� rD r< r= r> r? r; r� r� r: �BADKEYr; r r �existsZ
TestFailedr rF r� r� Zis_resource_enabledr� r� r� �
_have_threadsZthreading_setupr4 Z run_unittestZthreading_cleanup) r r� Zplatsr
r@ Zplat�filenameZtests� thread_infor r r � test_main]
sX
r� �__main__)]r r= r� r r$ r� r# r. rc r rE r� �tempfileZurllib.requestr^ r r r' r; rC �
import_moduler �sortedr5 r rB r r
r r r� r� r
r� �fsencoderD r< r= r> r? r@ rA r- r� rE rN r r< r; r� r� r r� r� r; r: rC r� r� r� r� rT rU r r r! r" r) r4 rE r rO r� ZTestCaserF r r� r� r� r� r� � ImportErrorr� Ztest.ssl_serversr� r� r� r r. r3 r4 r� r
r r r r �<module> s� � � �� �)?� MW
�v/;� � � � y9