Your IP : 216.73.216.213
��Yf�_ � @ s� d d l Z d d l Z d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z d d l Z d d l Z d d l Z d d l Z d d l Z e j d � Z e e j � Z e j Z e j j d � Z e o1e j d d d f k Z e oPe j d d d f k Z d d � Z e d � Z! e j" e! � Z# e d � Z$ e d
� Z% e j" e$ � Z& e j" e% � Z' e d � Z( e d � Z) d
Z* e d � Z+ e j" e+ � Z, e d d � Z- e d d � Z. e d � Z/ e d � Z0 e d � Z1 e d � Z2 e d � Z3 d Z4 e d � Z5 e d � Z6 e d � Z7 e d � Z8 e d � Z9 e d � Z: e d � Z; e d � Z< e d � Z= e j" e= � Z> d d! � Z? d" d# � Z@ d$ d% � ZA d& d' � ZB d( d) � ZC d* d+ � ZD d, d- � ZE e jF e jG d. � ZH Gd/ d0 � d0 e jI � ZJ Gd1 d2 � d2 e jI � ZK Gd3 d4 � d4 e jI � ZL Gd5 d6 � d6 e jI � ZM Gd7 d8 � d8 e jI � ZN Gd9 d: � d: e jI � ZO y d d lP ZP Wn eQ k
r�d; ZR Yn� Xd< ZR d d= lS mT ZT Gd> d? � d? eP jU � ZV Gd@ dA � dA eP jU � ZW dB d< d; d dC dD � ZX d d d dE dF � ZY GdG dH � dH e jI � ZZ d; dI dJ � Z[ e\ dK k r�e[ � d S)L� N)�support�sslZLibreSSL� c G s t j j t j j t � | � S)N)�os�path�join�dirname�__file__)�name� r �2/opt/alt/python35/lib64/python3.5/test/test_ssl.py� data_file s r
z keycert.pemz ssl_cert.pemz ssl_key.pemzkeycert.passwd.pemzssl_key.passwd.pemZsomepass�capathz
4e1295a3.0z
5ed36f99.0zrevocation.crlz keycert3.pemz keycert4.pemz pycacert.pemz allsans.pemzself-signed.pythontest.netz selfsigned_pythontestdotnet.pemz nullcert.pemz badcert.pemzXXXnonexisting.pemz
badkey.pemz nokia.pemznullbytecert.pemztalos-2019-0758.pemz
dh1024.pemc C s? d j t j t j � � � } t j r; t j j | | � d S)N� ) r � traceback�format_exception�sys�exc_infor �verbose�stdout�write)�prefixZ
exc_formatr r r � handle_errorO s r c C s
t j d k S)Nr � � �
� )r r r r r )r �_OPENSSL_API_VERSIONr r r r �can_clear_optionsT s r c C s
t j d k S)Nr r � r r )r r r r r )r �OPENSSL_VERSION_INFOr r r r � no_sslv2_implies_sslv3_helloX s r! c C s
t j d k S)Nr r r r )r r r r r )r r r r r r �have_verify_flags\ s r" c C s. t j r& t j � j d k r& t j St j S)Nr )�timeZdaylightZ localtimeZtm_isdstZaltzoneZtimezoner r r r �
utc_offset` s r$ c C s� t j d k r} d } t j j | | � } | j d d � } | j | � } | d d k r} | d d � d | d
d � } | S) Nr r r r z%b %d %H:%M:%S %Y GMT�second� �0r � )r r r r r )r r �datetimeZstrptime�replace�strftime)� cert_timeZfmtZdtr r r �asn1timef s "r- c s< t t d � r4 t j � � � f d d � � } | S� Sd S)N�PROTOCOL_SSLv2c si y t j t j � WnE t j k
r[ t j d k rW t j � d
k rW t j d � � Yn X� | | � S) Nr r r r �debian� squeeze/sid� z'Patched Ubuntu OpenSSL breaks behaviour)r r r r r )r/ r0 r1 ) r �
SSLContextr. �SSLErrorr �platform�linux_distribution�unittestZSkipTest)�args�kwargs)�funcr r �fw s z$skip_if_broken_ubuntu_ssl.<locals>.f)�hasattrr � functools�wraps)r9 r: r )r9 r �skip_if_broken_ubuntu_sslu s ! r> z SNI support needed for this testc @ sD e Z d Z d d � Z d d � Z d d � Z e j e j d k d � d d
� � Z
d d � Z d
d � Z d d � Z
d d � Z d d � Z d d � Z e j d d � � Z d d � Z d d � Z d d � Z d d � Z d! d" � Z d# d$ � Z d% d& � Z d' d( � Z d) d* � Z d+ d, � Z e j d- e j k d. � d/ d0 � � Z d1 d2 � Z! d3 d4 � Z" e j e# j$ d5 k d6 � d7 d8 � � Z% e j e# j$ d5 k d6 � d9 d: � � Z& d; d< � Z' d= d> � Z( d? d@ � Z) dA dB � Z* dC dD � Z+ e j e, � dE � dF dG � � Z- dH dI � Z. e j/ dJ dK � dL dM � � Z0 dN S)O�BasicSocketTestsc C s t j t j t j t j t j t j r3 t j t j d k rI t j | j
t j d d h � | j
t j d d h � d S)Nr r TF)r r ) r � CERT_NONE�
CERT_OPTIONAL�
CERT_REQUIREDZOP_CIPHER_SERVER_PREFERENCE�OP_SINGLE_DH_USE�HAS_ECDH�OP_SINGLE_ECDH_USEr �OP_NO_COMPRESSION�assertIn�HAS_SNI)�selfr r r �test_constants� s z BasicSocketTests.test_constantsc C sE t j } | j t | � d � t j | � } | j | j | � d S)Nz_SSLMethod.PROTOCOL_TLS)r � PROTOCOL_TLS� assertEqual�strr2 �assertIs�protocol)rI �proto�ctxr r r �test_str_for_enums� s z#BasicSocketTests.test_str_for_enumsc C sg t j � } t j r; t j j d | | r0 d p3 d f � t j d � \ } } | j t | � d � | j | | d k � | r� t j
d � } | j t | � d � n | j t j t j
d � | j t
t j
d
� | j t
t j d � t t d � r-| j t t j d � | j t t j d d � t j d d
� t j d d
� t j t d � d
� d S)Nz
RAND_status is %d (%s)
zsufficient randomnesszinsufficient randomness� r r( �RAND_egd�foozthis is a random stringg �R@s this is a random bytes objects! this is a random bytearray object���rV )r � RAND_statusr r r r r �RAND_pseudo_bytesrL �lenZ
RAND_bytes� assertRaisesr3 �
ValueErrorr; � TypeErrorrT ZRAND_add� bytearray)rI �v�dataZis_cryptographicr r r � test_random� s( z BasicSocketTests.test_random�posixzrequires posixc C s t j � } | s | j d � t j � \ } } t j � } | d k r� yW t j | � t j d � d } | j t | � d � t j
| | � t j | � Wn t k
r� t j d � Yq{Xt j d � n� t j | � | j
t j | � t j | d � \ } } | j | d � t j | d � } | j t | � d � t j d � d } | j t | � d � | j | | � d S)Nz*OpenSSL's PRNG has insufficient randomnessr rS r )r rW �failr �pipe�fork�closerX rL rY r �
BaseException�_exit�
addCleanup�waitpid�read�assertNotEqual)rI �statusZrfdZwfd�pidZ child_random�_Z
parent_randomr r r �test_random_fork� s0
z!BasicSocketTests.test_random_forkc C sP t j j t � } t j r< t j j d t j
| � d � | j | d d$ � | j | d t d � � | j | d
t d � � | j | d d � | j | d d- � | j | d d/ � t j j t
� } t j r� t j j d t j
| � d � | j | d d2 � | j | d d3 � | j | d d4 � | j | d d5 � d S)6N�
�issuer� countryName�XY� localityName�Castle Anthrax�organizationName�Python Software Foundation�
commonName� localhost�notAfterzOct 5 23:01:56 2020 GMT� notBeforezOct 8 23:01:56 2010 GMT� serialNumberZD7C7381919AFC24E�subject�subjectAltName�DNS� projects.developer.nokia.com�projects.forum.nokia.comZOCSP�http://ocsp.verisign.comZ caIssuers�0http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer�crlDistributionPoints�0http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl�rr rs �r� �rt ru �r� �rv rw �r� �rx ry �r� )r� r� r� r� �rr rs �r� �rt ru �r� �rv rw �r� �rx ry �r� )r� r� r� r� �r ry )r� �r r� �r r� )r� r� )r� )r� )r� )r �_ssl�_test_decode_cert�CERTFILEr r r r r �pprint�pformatrL r- � NOKIACERT)rI �pr r r �test_parse_cert� s8 !
!
z BasicSocketTests.test_parse_certc C sz t j j t � } t j r< t j j d t j
| � d � | j | d d d d d d
d d d
d d d d d i � d S) Nrp rq rr �UKrx �cody-carz zJun 14 18:00:58 2028 GMTr{ zJun 18 18:00:58 2018 GMTr| Z02r} �#codenomicon-vm-2.test.lal.cisco.comr~ r �version� �rr r� �r� �rx r� �r� )r� r� �rr r� �r� �rx r� �r� )r� r� �r r� )r� ) r r� r� �TALOS_INVALID_CRLDPr r r r r r� r� rL )rI r� r r r � test_parse_cert_CVE_2019_5010 s ! z.BasicSocketTests.test_parse_cert_CVE_2019_5010c C s� t j j t � } t j r< t j j d t j
| � d � d. } | j | d | � | j | d | � t j d/ k r� d5 } n d; } | j | d | � d S)<Nrp rr �US�stateOrProvinceName�Oregonrt � Beavertonrv �Python Software Foundation�organizationalUnitName�Python Core Developmentrx �null.python.org example.org� emailAddress�python-dev@python.orgr} rq r r r r � altnull.python.org example.com�email� null@python.org user@example.org�URI�)http://null.python.org http://example.org�
IP Address� 192.0.2.1�2001:DB8:0:0:0:0:0:1
� <invalid>r~ �rr r� �r� �r� r� �r� �rt r� �r� �rv r� �r� �r� r� �r� �rx r� �r� �r� r� �r� )r� r� r� r� r� r� r� )r r r �r r� �r� r� �r� r� �r� r� �r� r� )r� r� r� r� r� �r r� �r� r� �r� r� �r� r� �r� r� )r� r� r� r� r� )
r r� r� � NULLBYTECERTr r r r r r� r� rL r )rI r� r} Zsanr r r � test_parse_cert_CVE_2013_4238 s0 ! z.BasicSocketTests.test_parse_cert_CVE_2013_4238c
C s* t j j t � } | j | d d, � d S)-Nr~ r �allsans� othername�
<unsupported>r� �user@example.org�www.example.org�DirNamerr rs rt �Castle Anthraxrv �Python Software Foundationrx �dirname exampler� �https://www.python.org/�
IP Address� 127.0.0.1�0:0:0:0:0:0:0:1
�
Registered ID� 1.2.3.4.5�r r� �r� r� �r� r� �r� r� �r r� �rr rs �r� �rt r� �r� �rv r� �r� �rx r� �r� �r� r� r� r� �r� r� �r� r� �r� r� �r� r� �r� r� )
r� r� r� r� r� r� r� r� r� r� )r r� r� �
ALLSANFILErL )rI r� r r r �test_parse_all_sans3 s
z$BasicSocketTests.test_parse_all_sansc
C s� t t d � � } | j � } Wd QRXt j | � } t j | � } t j | � } | j | | � | j t j d � s� | j d | � | j
d t j d � s� | j d | � d S)N�rrp z-DER-to-PEM didn't include correct header:
%r
z-DER-to-PEM didn't include correct footer:
%r
) �open�
CAFILE_CACERTrj r �PEM_cert_to_DER_certZDER_cert_to_PEM_certrL �
startswithZ
PEM_HEADERrb �endswithZ
PEM_FOOTER)rI r: �pem�d1Zp2�d2r r r �test_DER_to_PEMH s z BasicSocketTests.test_DER_to_PEMc C s� t j } t j } t j } | j | t � | j | t � | j | t � | j | d � | j | d � | \ } } } } } | j | d � | j | d � | j | d � | j | d � | j | d � | j | d � | j | d � | j
| d � | j | d � | j
| d � t rZ| j | j
d j | � � | | t | � f � n7 | j | j
d j | | | � � | | t | � f � d S)
Ni � i 0r r� � �? r z
LibreSSL {:d}zOpenSSL {:d}.{:d}.{:d})r ZOPENSSL_VERSION_NUMBERr �OPENSSL_VERSION�assertIsInstance�int�tuplerM ZassertGreaterEqual�
assertLessZassertLessEqual� IS_LIBRESSL�
assertTruer �format�hex) rI �n�t�s�major�minorZfixZpatchrl r r r �test_openssl_versionT s0 !z%BasicSocketTests.test_openssl_versionc
C sg t j t j � } t j | � } t j | � } t j d t f � � ~ | j | � d � Wd QRXd S)Nr1 )
�socket�AF_INETr � wrap_socket�weakref�refr Zcheck_warnings�ResourceWarningrL )rI r �ss�wrr r r �
test_refcycles s z BasicSocketTests.test_refcyclec
C s� t j t j � } t j | � �� } | j t | j d � | j t | j t d � � | j t | j d � | j t | j
t d � d � | j t | j d � | j t | j d d � Wd QRXd S)Nr � x�0.0.0.0r )r' r )
r r r r rZ �OSError�recv� recv_intor] �recvfrom�
recvfrom_into�send�sendto)rI r r# r r r �test_wrapped_unconnected~ s z)BasicSocketTests.test_wrapped_unconnectedc C sc x\ d D]T } t j t j � } | j | � t j | � � } | j | | j � � Wd QRXq Wd S)N� � @)Nr0 r1 )r r �
settimeoutr r rL Z
gettimeout)rI �timeoutr r# r r r � test_timeout� s
z BasicSocketTests.test_timeoutc 7 C s� t j � } | j t d t j | d t �| j t d t j | d d �| j t d t j | d d d d �t j | d d d t ��& } | j t d | j t d f � Wd QRX| j t � �0 } t j � � } t j | d t
�Wd QRXWd QRX| j | j j
t
j � | j t � �6 } t j � � } t j | d t d t
�Wd QRXWd QRX| j | j j
t
j � | j t � �6 } t j � � } t j | d t
d t
�Wd QRXWd QRX| j | j j
t
j � d S)
Nzcertfile must be specified�keyfilez5certfile must be specified for server-side operations� server_sideT�certfiler1 z!can't connect in server-side modei� )r �assertRaisesRegexr[ r r r� �connect�HOSTrZ r( �NONEXISTINGCERTrL � exception�errno�ENOENT)rI �sockr �cmr r r � test_errors� s6 ! z BasicSocketTests.test_errorsc
C s� t j j t j j t � p! t j | � } t j � } | j | j � | j t
j � �! t
j | d | d t
j
�Wd QRXd S)z;Check that trying to use the given client certificate failsr7 � ssl_versionN)r r r r r �curdirr rh re rZ r r3 r �PROTOCOL_TLSv1)rI r7 r? r r r �
bad_cert_test� s ! z BasicSocketTests.bad_cert_testc C s | j d � d S)z Wrapping with an empty cert filez nullcert.pemN)rE )rI r r r �test_empty_cert� s z BasicSocketTests.test_empty_certc C s | j d � d S)z:Wrapping with a badly formatted certificate (syntax error)z badcert.pemN)rE )rI r r r �test_malformed_cert� s z$BasicSocketTests.test_malformed_certc C s | j d � d S)z2Wrapping with a badly formatted key (syntax error)z
badkey.pemN)rE )rI r r r �test_malformed_key� s z#BasicSocketTests.test_malformed_keyc s d d � } � f d d � } d dQ i } | | d � | | d � | | d � | | d
� | | d � | | d � d dT i } | | d � | | d � | | d � | | d � | | d � d dW i } | | d � | | d � | | d � | | d � | | d � d dZ i } | | d � | | d � | | d � d d] i } | | d � | | d � | | d � | | d � d d` i } | | d � | | d � | | d � d j d � j d � } d d | f f f i } | | | � d dc i } | | | � d df i } | | | � d# j d � j d � } d d | f f f i } | | d$ j d � j d � � | | d% j d � j d � � | | d& j d � j d � � | | d' j d � j d � � d( d) d di d+ dm i } | | d- � | | d. � | | d0 � | | d* � d( d1 d dx i } | | d: � | | d; � | | d5 � d d{ d+ d i } | | d= � | | d> � | | d? � | | d@ � d d� d+ d� i } | | dC � | | dD � | | dE � | | d@ � d( d1 d d� i } | | d: � d( dF d d� d+ d� i } | | d: � d( dF d d� d+ d� i } | | dH � � j t t j d d � � j t t j i d � d d� i } | | dJ � d d� i } | | dJ � d d� i } � j t j � � } t j | dM � Wd QRX� j dN t | j � � d S)�Nc S s t j | | � d S)N)r �match_hostname)�cert�hostnamer r r �ok� s z0BasicSocketTests.test_match_hostname.<locals>.okc s � j t j t j | | � d S)N)rZ r �CertificateErrorrI )rJ rK )rI r r rb � s z2BasicSocketTests.test_match_hostname.<locals>.failr} rx � example.comz ExAmple.cOmzwww.example.comz .example.comz example.orgZ exampleXcom�*.a.comz foo.a.comz
bar.foo.a.comza.comzXa.comz.a.com�f*.comzfoo.comzf.comzbar.comz bar.foo.com�null.python.org example.orgznull.python.org� *.*.a.com�a.*.comz a.foo.comza..comu püthon.python.org�idna�ascii�
x*.python.org�xn--p*.python.orgu www*.pythön.orgu www.pythön.orgu www1.pythön.orgu ftp.pythön.orgu pythön.orgrz zJun 26 21:41:46 2011 GMT� linuxfrz.orgr~ r � linuxfr.org� linuxfr.comr� �
<unsupported>zDec 18 23:59:59 2011 GMTrr r� r� �
Californiart �
Mountain Viewrv �
Google Inc�mail.google.comz gmail.com�
IP Address� 10.11.12.13� 14.15.16.17z 14.15.16.18z example.net�2001:0:0:0:0:0:0:CAFE
�2003:0:0:0:0:0:0:BABA
z
2001::cafez
2003::babaz
2003::bebezDec 18 23:59:59 2099 GMT�blablaz
google.com�a*b.comzaxxb.com�a*b.co*�a*b*.comz axxbxxc.comztoo many wildcards�rx rN �ri )rj �rx rO �rk )rl �rx rP �rm )rn �rx rQ �ro )rp �rx rR �rq )rr �rx rS �rs )rt �rx rV �ru )rv �rx rW �rw )rx �rx rX �ry )rz �r rY �r rZ �r� r[ )r{ r| r} �rr r� �r~ �r� r\ �r� �rt r] �r� �rv r^ �r� �rx r_ �r� )r r� r� r� r� �rx rN �r� )r� �r rN �r` ra �r` rb )r� r� r� �rx rN �r� )r� �r rN �r` rc �r` rd )r� r� r� �rr r� �r� �r� r\ �r� �rt r] �r� �rv r^ �r� )r� r� r� r� �rr r� �r� �r� r\ �r� �rt r] �r� �rx r_ �r� )r� r� r� r� �r� re )r� �rr r� �r� �r� r\ �r� �rt r] �r� �rv r^ �r� )r� r� r� r� �r� re )r� �rx rf �r� )r� �rx rg �r� )r� �rx rh �r� )r� )
�encode�decoderZ r[ r rI rM rG rM r< )rI rL rb rJ rT r@ r )rI r �test_match_hostname� s�
z$BasicSocketTests.test_match_hostnamec C sK t j t j � } t j � �& } | j t | j | d d d �Wd QRXd S)NT�server_hostnamez
some.hostname)r r2 �PROTOCOL_SSLv23r rZ r[ r )rI rQ r? r r r �test_server_sided s z!BasicSocketTests.test_server_sidec C s� t j t j � } | j d � | j � t j t j � } | j | j � � t j | d d ��+ } | j t � � | j
d � Wd QRXWd QRX| j � d S)N� 127.0.0.1r �do_handshake_on_connectFz unknown-type)r� r ) r r �bind�listenr9 � getsocknamer r rZ r[ �get_channel_bindingre )rI r �cr# r r r � test_unknown_channel_bindingk s
z-BasicSocketTests.test_unknown_channel_bindingz
tls-uniquez*'tls-unique' channel binding not availablec C s� t j t j � } t j | � � } | j | j d � � Wd QRXt j t j � } t j | d d d t �� } | j | j d � � Wd QRXd S)Nz
tls-uniquer6 Tr7 )r r r r � assertIsNoner� r� )rI r r# r r r � test_tls_unique_channel_bindingw s z0BasicSocketTests.test_tls_unique_channel_bindingc C st t j t j t j � � } t | � } | j t � � } d } t j � Wd QRX| j | t
| j j d � � d S)Nr )
r r r r �reprZ assertWarnsr" r Z
gc_collectrG rM Zwarningr7 )rI r# r r@ r r r �test_dealloc_warn� s z"BasicSocketTests.test_dealloc_warnc
C s� t j � } | j t | � d � | j | t j � t j � �M } t | d <t | d <t j � } | j | j
t � | j | j t � Wd QRXd S)N� � SSL_CERT_DIR�
SSL_CERT_FILE) r Zget_default_verify_pathsrL rY r ZDefaultVerifyPathsr �EnvironmentVarGuard�CAPATHr� �cafiler )rI �paths�envr r r � test_get_default_verify_paths� s
z.BasicSocketTests.test_get_default_verify_paths�win32zWindows specificc C sF | j t j d � � | j t j d � � | j t t j � | j t t j d � t � } x� d D]� } t j | � } | j | t � x� | D]� } | j | t � | j
t | � d � | \ } } } | j | t � | j
| d d h � | j | t t f � t | t � r� | j | � q� Wqe Wd } | j
| | � d S) N�CA�ROOTr1 r� �x509_asn�
pkcs_7_asnz1.3.6.1.5.5.7.3.1)r� r� )r r Zenum_certificatesrZ r\ � WindowsError�setr �listr rL rY �bytesrG �bool�
isinstance�update) rI Z
trust_oidsZ storenameZstore�elementrJ �encZtrust�
serverAuthr r r �test_enum_certificates� s&
z'BasicSocketTests.test_enum_certificatesc C s� | j t j d � � | j t t j � | j t t j d � t j d � } | j | t � xb | D]Z } | j | t � | j t
| � d � | j | d t � | j | d d d h � qe Wd S)Nr� r1 � r r r� r� )
r r Z enum_crlsrZ r\ r� r r� r rL rY r� rG )rI Zcrlsr� r r r �test_enum_crls� s
z BasicSocketTests.test_enum_crlsc C sG d } t j d � } | j | | � | j | j d � | j | j d � | j | j d � | j | j d � | j | t j � | j t t j d � t j j
d � } | j | | � | j | t j � | j t t j j
d � | j t d � � t j j
d � Wd QRXx� t d � D]� } y t j j
| � } Wn t k
rOYq X| j | j t
� | j | j t � | j | j t � | j | j t t d � f � q Wt j j d � } | j | | � | j | t j � | j t j j d � | � | j t j j d � | � | j t d � � t j j d
� Wd QRXd S)
N� r� � TLS Web Server Authentication�1.3.6.1.5.5.7.3.1r zunknown NID 100000i�� i� zunknown object 'serverauth'Z
serverauth)r� r� r� r� ���)r � _ASN1ObjectrL �nid� shortnameZlongname�oidr rZ r[ Zfromnidr8 �ranger rM �typeZfromname)rI �expected�val�i�objr r r �test_asn1object� sB
# z BasicSocketTests.test_asn1objectc C s t j d � } | j t j j t j � | j t j j | � | j t j j j d � | j t j j j d � | j t j j j d � t j d � } | j t j j t j � | j t j j | � | j t j j j d � | j t j j j d � | j t j j j d � d S)Nz1.3.6.1.5.5.7.3.1r� r� z1.3.6.1.5.5.7.3.2� Z
clientAuth)
r r� r �Purpose� SERVER_AUTHrL r� r� r� � CLIENT_AUTH)rI r� r r r �test_purpose_enum� s z"BasicSocketTests.test_purpose_enumc C s� t j t j t j � } | j | j � | j t � � } t j | d t j �Wd QRX| j
t | j � d � t j
t j � } | j t � � } | j | � Wd QRX| j
t | j � d � d S)N� cert_reqsz!only stream sockets are supported)r r Z
SOCK_DGRAMrh re rZ �NotImplementedErrorr r r@ rL rM r< r2 r� )rI r ZcxrQ r r r �test_unsupported_dtls� s z&BasicSocketTests.test_unsupported_dtlsc C s | j t j | � | � d S)N)rL r �cert_time_to_seconds)rI �
timestringZ timestampr r r � cert_time_ok s z BasicSocketTests.cert_time_okc C s( | j t � � t j | � Wd QRXd S)N)rZ r[ r r� )rI r� r r r �cert_time_fail s z BasicSocketTests.cert_time_failz)local time needs to be different from UTCc C s$ | j d d � | j d d � d S)NzMay 9 00:00:00 2007 GMTg �C��AzJan 5 09:34:43 2018 GMTg ��ѓ�A)r� )rI r r r �"test_cert_time_to_seconds_timezone s z3BasicSocketTests.test_cert_time_to_seconds_timezonec C s* d } d } | j | | � | j t j d | � | � | j d | � | j d | � | j d � | j d � | j d � | j d � | j d
� | j d � | j d � d
} | j d | � | j d | � | j d d � | j d d � | j d d � | j d � | j d d � d S)NzJan 5 09:34:43 2018 GMTg ��ѓ�Ar, zJan 05 09:34:43 2018 GMTzJaN 5 09:34:43 2018 GmTzJan 5 09:34 2018 GMTzJan 5 09:34:43 2018zJan 5 09:34:43 2018 UTCzJan 35 09:34:43 2018 GMTzJon 5 09:34:43 2018 GMTzJan 5 24:00:00 2018 GMTzJan 5 09:60:43 2018 GMTg �W�AzDec 31 23:59:60 2008 GMTzJan 1 00:00:00 2009 GMTzJan 5 09:34:59 2018 GMTi�FOZzJan 5 09:34:60 2018 GMTi�FOZzJan 5 09:34:61 2018 GMTi�FOZzJan 5 09:34:62 2018 GMTzDec 31 23:59:59 9999 GMTg �� �MB)r� rL r r� r� )rI r� ZtsZ
newyear_tsr r r �test_cert_time_to_seconds s*
z*BasicSocketTests.test_cert_time_to_seconds�LC_ALLr1 c C sV d d � } | � j � d k r. | j d � | j d d � | j | � d � d S)Nc S s t j d d � S)
Nz%br r� r� r& r( r� r ) r r� r� r& r( r� r r r )r# r+ r r r r �local_february_name8 s zNBasicSocketTests.test_cert_time_to_seconds_locale.<locals>.local_february_nameZfebz>locale-specific month name needs to be different from C localezFeb 9 00:00:00 2007 GMTg `�r�Az 9 00:00:00 2007 GMT)�lower�skipTestr� r� )rI r� r r r � test_cert_time_to_seconds_locale4 s
z1BasicSocketTests.test_cert_time_to_seconds_localeN)1�__name__�
__module__� __qualname__rJ rR r` r6 �
skipUnlessr r
ro r� r� r� r r r r Z cpython_onlyr% r/ r4 rA rE rF rG rH r� r� r� r �CHANNEL_BINDING_TYPESr� r� r� r r4 r� r� r� r� r� r� r� r$ r� r� Zrun_with_localer r r r r r? � sH
' ( � '' ' #r? c @ s� e Z d Z e d d � � Z e d d � � Z d d � Z e e j e d � d d � � � Z
d
d � Z e j e
� d � d
d � � Z d d � Z d d � Z d d � Z d d � Z e d d � � Z d d � Z e j e j d � d d � � Z e d d � � Z e d d! � � Z d" d# � Z d$ d% � Z d& d' � Z e j e j d( k d) � e j e d* � d+ d, � � � Z! e j e j d( k d- � d. d/ � � Z" d0 d1 � Z# d2 d3 � Z$ d4 d5 � Z% d6 S)7� ContextTestsc C sp x t D] } t j | � q Wt j � } | j | j t j � | j t t j d � | j t t j d � d S)Nr �* r� )� PROTOCOLSr r2 rL rO rK rZ r[ )rI rO rQ r r r �test_constructorF s
z ContextTests.test_constructorc C s7 x0 t D]( } t j | � } | j | j | � q Wd S)N)r r r2 rL rO )rI rP rQ r r r �
test_protocolO s
zContextTests.test_protocolc C sZ t j t j � } | j d � | j d � | j t j d � � | j d � Wd QRXd S)N�ALL�DEFAULTzNo cipher can be selectedz^$:,;?*'dorothyx)r r2 rD � set_ciphersr8 r3 )rI rQ r r r � test_ciphersU s
zContextTests.test_ciphersz bpo-36576: fail on OpenSSL 1.1.1c C s t j t j � } t j t j Bt j B} t rL t j d k rL | t j O} | j | | j
� | j
t j O_
| j | t j B| j
� t � r� | j
t j @| _
| j | | j
� d | _
| j d | j
t j @� n | j
t � � d | _
Wd QRXd S)Nr r )r r r )r r2 rD �OP_ALL� OP_NO_SSLv2� OP_NO_SSLv3r r rF rL �options� OP_NO_TLSv1r rZ r[ )rI rQ �defaultr r r � test_options\ s
zContextTests.test_optionsc C s� t j t j � } | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � | j t � � d | _ Wd QRX| j t
� � d | _ Wd QRXd S)Nr ) r r2 rD rL � verify_moder@ rA rB rZ r\ r[ )rI rQ r r r �test_verify_modeq s z ContextTests.test_verify_modez!verify_flags need OpenSSL > 0.9.8c C s� t j t j � } t t d d � } | j | j t j | B� t j | _ | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � t j t j B| _ | j | j t j t j B� | j
t � � d | _ Wd QRXd S)N�VERIFY_X509_TRUSTED_FIRSTr ) r r2 rD �getattrrL � verify_flags�VERIFY_DEFAULT�VERIFY_CRL_CHECK_LEAFZVERIFY_CRL_CHECK_CHAINZVERIFY_X509_STRICTrZ r\ )rI rQ �tfr r r �test_verify_flags� s z ContextTests.test_verify_flagsc f C s� t j t j � } | j t d d �| j t d t �| j t | j d t �| j t � � } | j t � Wd QRX| j | j
j t j � | j
t j d � � | j t � Wd QRX| j
t j d � � | j t � Wd QRXt j t j � } | j t t � | j d t d t � | j d t d t � | j
t j d � � | j t � Wd QRX| j
t j d � � | j t � Wd QRX| j
t j d � � | j d t d t � Wd QRXt j t j � } | j
t j d � � | j t t � Wd QRX| j t d t �| j t d t j � �| j t d t t j � � �| j t t t � | j t t t j � � | j t t t t j � � � | j
t d � � | j t d d �Wd QRX| j t j � � | j t d d �Wd QRX| j
t d � � | j t d d
d �Wd QRXd d
� } d d � } d d � } d d � } d d � } d d � } d d � } Gd d � d � }
| j t d | �| j t d | �| j t d | �| j t d |
� �| j t d |
� j �| j t j � � | j t d | �Wd QRX| j
t d � � | j t d | �Wd QRX| j
t d � � | j t d | �Wd QRX| j
t d � � | j t d | �Wd QRX| j t d | �d S) Nr5 zPEM libr7 zkey values mismatchZpasswordzshould be a stringT�badpasszcannot be longer� ai � c S s t S)N)� KEY_PASSWORDr r r r �getpass_unicode� s z:ContextTests.test_load_cert_chain.<locals>.getpass_unicodec S s
t j � S)N)r! r� r r r r �
getpass_bytes� s z8ContextTests.test_load_cert_chain.<locals>.getpass_bytesc S s t t j � � S)N)r] r! r� r r r r �getpass_bytearray� s z<ContextTests.test_load_cert_chain.<locals>.getpass_bytearrayc S s d S)Nr r r r r r �getpass_badpass� s z:ContextTests.test_load_cert_chain.<locals>.getpass_badpassc S s d d S)Nr i i r r r r r � getpass_huge� s z7ContextTests.test_load_cert_chain.<locals>.getpass_hugec S s d S)Nr r r r r r �getpass_bad_type� s z;ContextTests.test_load_cert_chain.<locals>.getpass_bad_typec S s t d � � d S)Nz
getpass error)� Exceptionr r r r �getpass_exception� s z<ContextTests.test_load_cert_chain.<locals>.getpass_exceptionc @ s( e Z d Z d d � Z d d � Z d S)z:ContextTests.test_load_cert_chain.<locals>.GetPassCallablec S s t S)N)r! )rI r r r �__call__� s zCContextTests.test_load_cert_chain.<locals>.GetPassCallable.__call__c S s t S)N)r! )rI r r r �getpass� s zBContextTests.test_load_cert_chain.<locals>.GetPassCallable.getpassN)r r r r* r+ r r r r �GetPassCallable� s r, zmust return a stringz
getpass error) r r2 rD �load_cert_chainr� rZ r\ r( r; rL r< r= r> r8 r3 �BADCERT� EMPTYCERT�ONLYCERT�ONLYKEY�BYTES_ONLYCERT�
BYTES_ONLYKEYr �CERTFILE_PROTECTEDr! r� r] �ONLYKEY_PROTECTEDr[ r+ r( ) rI rQ r@ r" r# r$ r% r& r' r) r, r r r �test_load_cert_chain� sz
z!ContextTests.test_load_cert_chainc C s0 t j t j � } | j t � | j d t d d � | j t � | j d t d d � | j t | j � | j t | j d d d � | j t � � } | j t � Wd QRX| j
| j j t j
� | j t j d � � | j t � Wd QRX| j t t � | j t d t �| j t | j d d � d S)Nr� r zPEM libT)r r2 rD �load_verify_locationsr� �BYTES_CERTFILErZ r\ r( r; rL r< r= r> r8 r3 r. r� � BYTES_CAPATH)rI rQ r@ r r r �test_load_verify_locations� s
z'ContextTests.test_load_verify_locationsc C s
t t � � } | j � } Wd QRXt j | � } t t � � } | j � } Wd QRXt j | � } t j t j � } | j | j � d d � | j
d | � | j | j � d d � | j
d | � | j | j � d d � | j
d | � | j | j � d d � t j t j � } d j | | f � } | j
d | � | j | j � d d � t j t j � } d | d | d | d
g } | j
d d j | � � | j | j � d d � t j t j � } | j
d | � | j
d | � | j | j � d d � | j
d | � | j | j � d d � t j t j � } d j | | f � } | j
d | � | j | j � d d � t j t j � } | j t
| j
d t �| j t j d � � | j
d d
� Wd QRX| j t j d � � | j
d d � Wd QRXd S)N�x509_car �cadatar r� rp �head�otherZagain�tail� z
no start lineZbrokenznot enough datas broken)r r rj r r �CAFILE_NEURONIOr2 rD rL �cert_store_statsr7 r rZ r\ �objectr8 r3 )rI r: Z
cacert_pemZ
cacert_derZ neuronio_pemZ neuronio_derrQ Zcombinedr r r �test_load_verify_cadata� sN z$ContextTests.test_load_verify_cadatac C s� t j t j � } | j t � t j d k r; | j t � | j t | j � | j t | j d � | j t
� � } | j t � Wd QRX| j | j
j t j � | j t j � � } | j t � Wd QRXd S)N�nt)r r2 rD �load_dh_params�DHFILEr r
� BYTES_DHFILErZ r\ �FileNotFoundErrorr; rL r< r= r> r3 r� )rI rQ r@ r r r �test_load_dh_params4 s
z ContextTests.test_load_dh_paramsc C s| xu t D]m } t j | � } | j | j � d d d d d d d d d d d d d d d d d
d d d d d i � q Wd S)
NZnumberr r9 Z connect_goodZconnect_renegotiate�acceptZ accept_goodZaccept_renegotiate�hits�missesZtimeoutsZ
cache_full)r r r2 rL Z
session_stats)rI rP rQ r r r �test_session_statsA s
z ContextTests.test_session_statsc C s t j t j � } | j � d S)N)r r2 rD Zset_default_verify_paths)rI rQ r r r � test_set_default_verify_pathsS s z*ContextTests.test_set_default_verify_pathsz#ECDH disabled on this OpenSSL buildc C s� t j t j � } | j d � | j d � | j t | j � | j t | j d � | j t | j d � | j t | j d � d S)NZ
prime256v1s
prime256v1rU s foo)r r2 rD Zset_ecdh_curverZ r\ r[ )rI rQ r r r �test_set_ecdh_curveY s
z ContextTests.test_set_ecdh_curvec C s� t j t j � } | j t | j � | j t | j d � | j t | j d � | j t | j | � d d � } | j d � | j | � d S)Nr& r1 c S s d S)Nr )r? �
servernamerQ r r r �
dummycallbackm s z5ContextTests.test_sni_callback.<locals>.dummycallback)r r2 rD rZ r\ �set_servername_callback)rI rQ rR r r r �test_sni_callbackc s
z ContextTests.test_sni_callbackc C sd t j t j � } | d d � } | j | � t j | � } ~ ~ t j � | j | � d � d S)Nc S s d S)Nr )r? rQ rQ �cycler r r rR w s z>ContextTests.test_sni_callback_refcycle.<locals>.dummycallback) r r2 rD rS r r! �gc�collectrN )rI rQ rR r$ r r r �test_sni_callback_refcycler s
z'ContextTests.test_sni_callback_refcyclec C s� t j t j � } | j | j � d d d d d d i � | j t � | j | j � d d d d d d i � | j t � | j | j � d d d d d d i � | j t � | j | j � d d d d d d i � d S)Nr; r �crl�x509r r� ) r r2 rD rL rB r- r� r7 r )rI rQ r r r �test_cert_store_stats s
z"ContextTests.test_cert_store_statsc C s� t j t j � } | j | j � g � | j t � | j | j � g � | j t � | j | j � d d d
t d � d t d
� d d d d d d( d d i g � t t � � } | j
� } Wd QRXt j | � } | j | j d � | g � d S))Nrq rv �Root CAr� �http://www.cacert.orgrx �CA Cert Signing Authorityr� �support@cacert.orgrz zMar 29 12:29:49 2033 GMTr{ zMar 30 12:29:49 2003 GMTr| Z00r� �!https://www.cacert.org/revoke.crlr} r� r� T�rv r\ �ra �r� r] �rc �rx r^ �re �r� r_ �rg )rb rd rf rh )r` �rv r\ �ri �r� r] �rk �rx r^ �rm �r� r_ �ro )rj rl rn rp ) r r2 rD rL � get_ca_certsr7 r� r r- r rj r )rI rQ r: r �derr r r �test_get_ca_certs� s.
z ContextTests.test_get_ca_certsc C s� t j t j � } | j � t j t j � } | j t j j � | j � t j t j � } | j t j j � t j t j � } | j t | j d � | j t | j d � d S)Nr� ) r r2 rD �load_default_certsr� r� r� rZ r\ )rI rQ r r r �test_load_default_certs� s
z$ContextTests.test_load_default_certsr� znot-Windows specificz!LibreSSL doesn't support env varsc C sr t j t j � } t j � �M } t | d <t | d <| j � | j | j � d d d d d d i � Wd QRXd S)Nr� r� rY r rZ r r; )
r r2 rD r r� r� r� rt rL rB )rI rQ r� r r r �test_load_default_certs_env� s
z(ContextTests.test_load_default_certs_envzWindows specificc C s� t j t j � } | j � | j � } t j t j � } t j � �I } t | d <t | d <| j � | d d 7<| j | j � | � Wd QRXd S)Nr� r� rZ r )
r r2 rD rt rB r r� r� r� rL )rI rQ �statsr� r r r �#test_load_default_certs_env_windows� s
z0ContextTests.test_load_default_certs_env_windowsc C s; t j � } | j | j t j � | j | j t j � | j | j � | j | j t j
@t j
� | j | j t t d d � @t t d d � � t t
� � } | j � } Wd QRXt j d t
d t d | � } | j | j t j � | j | j t j � | j | j t j
@t j
� | j | j t t d d � @t t d d � � t j t j j � } | j | j t j � | j | j t j � | j | j t j
@t j
� | j | j t t d d � @t t d d � � | j | j t t d d � @t t d d � � | j | j t t d d � @t t d d � � d S)NrF r r� r r< rC rE )r �create_default_contextrL rO r� r rB r �check_hostnamer r r r �
SIGNING_CArj r� r� r� r@ )rI rQ r: r< r r r �test_create_default_context� s> z(ContextTests.test_create_default_contextc C s� t j � } | j | j t j � | j | j t j � | j | j � | j | j t j
@t j
� t j t j � } | j | j t j � | j | j t j � | j | j t j
@t j
� t j t j d t j d d �} | j | j t j � | j | j t j � | j
| j � | j | j t j
@t j
� t j d t j j � } | j | j t j � | j | j t j � | j | j t j
@t j
� d S)Nr� rz TZpurpose)r Z_create_stdlib_contextrL rO r� r r@ � assertFalserz r r rD rB r r� r� )rI rQ r r r �test__create_stdlib_context� s( z(ContextTests.test__create_stdlib_contextc C s� t j t j � } | j | j � | j t � � d | _ Wd QRXt j | _ | j | j � d | _ | j | j � t j
| _ d | _ | j | j � | j t � � t j | _ Wd QRXd | _ | j | j � d S)NTF) r r2 rD r} rz rZ r[ rB r r rA r@ )rI rQ r r r �test_check_hostname s z ContextTests.test_check_hostnameN)&r r r r> r r
r r6 �skipIf�IS_OPENSSL_1_1_1r r r r" r r6 r: rD rJ rN rO r rD rP � needs_snirT rX r[ rs ru r r4 r rv rx r| r~ r r r r r r D s4 ! S :
!
! ' ( r c @ s4 e Z d Z d d � Z d d � Z d d � Z d S)�
SSLErrorTestsc C sz t j d d � } | j t | � d � | j | j d � t j d d � } | j t | � d � | j | j d � d S)Nr rU )r r3 rL rM r= ZSSLZeroReturnError)rI �er r r �test_str* s zSSLErrorTests.test_strc
C s� t j t j � } | j t j � � } | j t � Wd QRX| j | j j d � | j | j j
d � t | j � } | j | j
d � | � d S)NZPEMZ
NO_START_LINEz"[PEM: NO_START_LINE] no start line)r r2 rD rZ r3 rF r� rL r< Zlibrary�reasonrM r r )rI rQ r@ r r r r �test_lib_reason4 s z SSLErrorTests.test_lib_reasonc C s� t j t j � } t j � �� } | j d � | j � t j � } | j | j � � | j d � | j | d d d ��n } | j
t j � � } | j � Wd QRXt
| j � } | j | j d � | � | j | j j t j � Wd QRXWd QRXd S)N� 127.0.0.1r Fr� z%The operation did not complete (read))r� r )r r2 rD r r� r� r9 r� � setblockingr rZ �SSLWantReadError� do_handshakerM r< r r rL r= �SSL_ERROR_WANT_READ)rI rQ r r� r@ r r r �
test_subclass> s
zSSLErrorTests.test_subclassN)r r r r� r� r� r r r r r� ( s
r� c @ sL e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d S) �MemoryBIOTestsc C s� t j � } | j d � | j | j � d � | j | j � d � | j d � | j d � | j | j � d � | j | j � d � | j d � | j | j d � d � | j | j d � d � | j | j d � d � d S)
Ns foor@ s bars foobars bazr� s bar � z)r � MemoryBIOr rL rj )rI �bior r r �test_read_writeS s
z MemoryBIOTests.test_read_writec C s� t j � } | j | j � | j | j � d � | j | j � | j d � | j | j � | j � | j | j � | j | j d � d � | j | j � | j | j d � d � | j | j � | j | j � d � | j | j � d S)Nr@ s foor� s for � o) r r� r} �eofrL rj r � write_eofr )rI r� r r r �test_eofa s
zMemoryBIOTests.test_eofc C s� t j � } | j | j d � | j d � | j | j d � x< t d � D]. } | j d � | j | j d | d � qL Wx8 t d � D]* } | j d � | j | j | d � q� W| j � | j | j d � d S)Nr s foor� r r& )r r� rL �pendingr r� rj )rI r� r� r r r � test_pendingq s
zMemoryBIOTests.test_pendingc C s� t j � } | j d � | j | j � d � | j t d � � | j | j � d � | j t d � � | j | j � d � d S)Ns foos bars baz)r r� r rL rj r] �
memoryview)rI r� r r r �test_buffer_types s
z MemoryBIOTests.test_buffer_typesc C sh t j � } | j t | j d � | j t | j d � | j t | j d � | j t | j d � d S)NrU Tr )r r� rZ r\ r )rI r� r r r �test_error_types� s
z MemoryBIOTests.test_error_typesN)r r r r� r� r� r� r� r r r r r� Q s
r� c @ s� e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d d � Z d
d � Z d d � Z
e j e
j d k d � d d � � Z d d � Z d d � Z d d � Z d d � Z d d � Z e d d � � Z d! S)"�NetworkedTestsc C s, t j t � �t j t j t j � d t j �} z- | j t d f � | j i | j
� � Wd | j � Xt j t j t j � d t j �} | j
t j d | j t d f � | j � t j t j t j � d t j d t �} z* | j t d f � | j | j
� � Wd | j � XWd QRXd S)Nr� i� zcertificate verify failed�ca_certs)r �transient_internet� REMOTE_HOSTr r r r r@ r9 rL � getpeercertre rB r8 r3 �REMOTE_ROOT_CERTr )rI r r r r � test_connect� s&
zNetworkedTests.test_connectc C s� t j t � �s t j t j t j � d t j d t �} z6 | j d | j
t d f � � | j | j � � Wd | j
� XWd QRXd S)Nr� r� r i� )r r� r� r r r r rB r� rL �
connect_exr r� re )rI r r r r �test_connect_ex� s z NetworkedTests.test_connect_exc C s> t j t � �(t j t j t j � d t j d t d d �} z� | j d � | j
t d f � } | j | d t j
t j f � t j g | g g d � xq y | j � PWq� t j k
r� t j | g g g d � Yq� t j k
r t j g | g g d � Yq� Xq� W| j | j � � Wd | j � XWd QRXd S)Nr� r� r� Fi� r g @)r r� r� r r r r rB r� r� r� rG r= Z EINPROGRESS� EWOULDBLOCK�selectr� r� �SSLWantWriteErrorr r� re )rI r �rcr r r � test_non_blocking_connect_ex� s(
"z+NetworkedTests.test_non_blocking_connect_exc C s� t j t � �� t j t j t j � d t j d t d d �} z[ | j d � | j
t d f � } | d k r~ | j d � | j | t
j t
j f � Wd | j � XWd QRXd S) Nr� r� r� FgH�����z>i� r z!REMOTE_HOST responded too quickly)r r� r� r r r r rB r� r2 r� r� rG r= ZEAGAINr� re )rI r r� r r r �test_timeout_connect_ex� s
z&NetworkedTests.test_timeout_connect_exc C s� t j t � �� t j t j t j � d t j d t �} zG | j t d f � } t
j t
j t
j
t
j f } | j | | � Wd | j � XWd QRXd S)Nr� r� i� )r r� r� r r r r rB r� r� r= Z ECONNREFUSEDZ EHOSTUNREACHZ ETIMEDOUTr� rG re )rI r r� �errorsr r r �test_connect_ex_error� s z$NetworkedTests.test_connect_ex_errorc C sz t j t � �dt j t j � } | j t j t j � � } | j t d f � z | j
i | j � � Wd | j � X| j t j t j � d t �} | j t d f � | j � t j
| _ | j t j t j � � } | j t j d | j t d f � | j � | j t � | j t j t j � � } | j t d f � z | j � } | j | � Wd | j � XWd QRXd S)Ni� r� zcertificate verify failed)r r� r� r r2 r� r r r r9 rL r� re rB r r8 r3 r7 r� r )rI rQ r rJ r r r �test_connect_with_context� s.
z(NetworkedTests.test_connect_with_contextc C s) t j t � �t j t j � } t j | _ | j d t � | j
t j t j � � } | j
t d f � z | j � } | j | � Wd | j � Xt j t j � } t j | _ | j d t � | j
t j t j � � } | j
t d f � z | j � } | j | � Wd | j � XWd QRXd S)Nr i� )r r� r� r r2 r� rB r r7 r� r r r r9 r� r re r9 )rI rQ r rJ r r r �test_connect_capath s& z"NetworkedTests.test_connect_capathc C sJ t t � � } | j � } Wd QRXt j | � } t j t � �t j t j � } t j
| _ | j d | � | j
t j t j � � �3 } | j t d f � | j � } | j | � Wd QRXt j t j � } t j
| _ | j d | � | j
t j t j � � �3 } | j t d f � | j � } | j | � Wd QRXWd QRXd S)Nr< i� )r r� rj r r r r� r� r2 r� rB r r7 r r r r9 r� r )rI r: r rr rQ r rJ r r r �test_connect_cadata4 s$ z"NetworkedTests.test_connect_cadatarE z*Can't use a socket as a file under Windowsc C s� t j t � �� t j t j t j � � } | j t d f � | j � } | j � } | j
� t j | d � | j
� t
j � | j t � � } t j | d � Wd QRX| j | j j t j � Wd QRXd S)Ni� r )r r� r� r r r r r9 �fileno�makefilere r rj rV rW rZ r( rL r< r= ZEBADF)rI r# �fdr: r� r r r �test_makefile_closeJ s
z"NetworkedTests.test_makefile_closec C s t j t � �� t j t j � } | j t d f � | j d � t j | d t j d d �} d } xu y | d 7} | j
� PWqi t j k
r� t j | g g g � Yqi t j
k
r� t j g | g g � Yqi Xqi W| j � t j rt j j d | � Wd QRXd S)Ni� Fr� r� r r z9
Needed %d calls to do_handshake() to establish session.
)r r� r� r r r9 r� r r r@ r� r� r� r� re r r r r )rI r �countr r r �test_non_blocking_handshake^ s(
z*NetworkedTests.test_non_blocking_handshakec s? d � f d d � } | t d t � t j r; | d d � d S)Nc s, t j | � �t j | | f � } | sB � j d | | f � y t j | | f d t �} WnE t j k
r� } z" t j r� t j j
d | � WYd d } ~ Xn X� j d | | | f � t j | | f d | �} | s� � j d | | f � t j r!t j j
d | | | f � Wd QRXd S)Nz No server certificate on %s:%s!r� z%s
z$Got server certificate %s for %s:%s!z&
Verified certificate for %s:%s is
%s
) r r� r Zget_server_certificaterb r� r3 r r r r )�host�portrJ r �x)rI r r � _test_get_server_certificateu s"
' zPNetworkedTests.test_get_server_certificate.<locals>._test_get_server_certificatei� zipv6.google.com)r� r� r Z IPV6_ENABLED)rI r� r )rI r �test_get_server_certificatet s z*NetworkedTests.test_get_server_certificatec ) C s t d f } t j | d � �� t j t j t j � d t j d d �� } | j | � Wd QRXt j t j t j � d t j d d �� } | j | � Wd QRX| j t j
d � �L t j t j � �2 } t j | d t j d d �} | j | � Wd QRXWd QRXWd QRXd S) Ni� r r� �ciphersr r zNo cipher can be selectedz^$:,;?*'dorothyx) r� r r� r r r r r@ r9 r8 r3 )rI �remoter r? r r r r � s zNetworkedTests.test_ciphersc C s2 t j d
k r# | j d t j � t j s9 | j d � d } t j j t j j t � d � } t
j d � �� t j t j
� } t j | _ | j | � | j t j t j � d
d �} z] | j | � t
j rt j j d | | j � f � t j j d t j | j � � � Wd | j � XWd QRXd S)Nr r r r zSHA256 not available on %rzSNI needed for this test�sha256.tbs-internet.com� z
sha256.pemr� z
Cipher with %r is %r
zCertificate is:
%s
)r r r r r )r� r� ) r r r� r rH r r r r r r r� r2 rD rB r r7 r r r r9 r r r r �cipherr� r� r� re )rI r� Z sha256_certrQ r r r r �test_algorithms� s(
!
z NetworkedTests.test_algorithmsc C s� t j t � �� t j t j � } t j | _ | j d t � | j
| j � g � | j t
j
t
j � � } | j t d f � z | j � } | j | � Wd | j � X| j
t | j � � d � Wd QRXd S)Nr i� r )r r� r� r r2 r� rB r r7 r� rL rq r r r r9 r� r re rY )rI rQ r rJ r r r �test_get_ca_certs_capath� s z'NetworkedTests.test_get_ca_certs_capathc C s� t j t � �� t j t j � } t j t j � } t j t j � } | j | � �u } | j
t d f � | j | j | � | j | j
j | � | | _ | j | j | � | j | j
j | � Wd QRXWd QRXd S)Ni� )r r� r� r r2 rD r� r r r r9 rN �context�_sslobj)rI Zctx1Zctx2r r# r r r �test_context_setget� s z"NetworkedTests.test_context_setgetN)r r r r� r� r� r� r� r� r� r� r6 r� r r
r� r� r� r r� r� r� r� r r r r r� � s ' r� c @ s4 e Z d Z d d � Z d d � Z d d � Z d S)�NetworkedBIOTestsc
O s" | j d d � } d } x� d } | d 7} y | | � }
WnO t j k
r� } z, | j t j t j f k rq � | j } WYd d } ~ Xn X| j � } | j | � | d k r� Pq | t j k r | j d � } | r� | j | � q | j
� q Wt j r t
j j d | | j f � |
S)Nr3 �
r r i � z"Needed %d calls to complete %s().
)�getr r3 r= r� ZSSL_ERROR_WANT_WRITErj �sendallr) r r� r r r r r )
rI r? �incoming�outgoingr9 r7 r8 r3 r� r= Zretr� �bufr r r � ssl_io_loop� s2
z NetworkedBIOTests.ssl_io_loopc C s� t j t � ��t j t j � } | j t d f � t j � } t j � } t j t j � } t j
| _ | j t
� d | _ | j | | d t � } | j | j j | � | j | j � � | j | j � � | j t | j � d t j k r
| j | j d � � | j | | | | j � | j | j � � | j | j � � | j | j � � d t j k r�| j | j d � � y | j | | | | j � Wn t j k
r�Yn X| j t j! | j" d � | j# � Wd QRXd S)Ni� TFz
tls-uniques foo)$r r� r� r r r9 r r� r2 r� rB r r7 r� rz �wrap_biorN r� �ownerr� r� �assertIsNotNone�shared_ciphersrZ r[ r� r r� r� r� r �unwrapZSSLSyscallErrorr3 r re )rI r? r� r� rQ �sslobjr r r �test_handshake s8
z NetworkedBIOTests.test_handshakec
C s! t j t � � t j t j � } | j t d f � t j � } t j � } t j t j � } t j
| _ | j | | d � } | j
| | | | j � d } | j
| | | | j | � | j
| | | | j d � } | j | d d � d � | j
| | | | j � | j � Wd QRXd S)Ni� Fs GET / HTTP/1.0
i r( s HTTP/)r r� r� r r r9 r r� r2 r� r@ r r� r� r� r rj rL r� re )rI r? r� r� rQ r� Zreqr� r r r �test_read_write_data! s z&NetworkedBIOTests.test_read_write_dataN)r r r r� r� r� r r r r r� � s " !r� FT)�make_https_serverc
@ s� e Z d Z Gd d � d e j � Z d d d d d d d d d d d d d � Z d d � Z d
d � Z d d d
� Z d d � Z
d d � Z d S)�ThreadedEchoServerc @ s^ e Z d Z d Z d d � Z d d � Z d d � Z d d � Z d
d � Z d d
� Z d S)z$ThreadedEchoServer.ConnectionHandlerz�A mildly complicated class, because we want it to work both
with and without the SSL wrapper around the socket connection, so
that we can test the STARTTLS functionality.c C sZ | | _ d | _ | | _ | | _ | j j d � d | _ t j j | � d | _ d S)NFr T)
�server�runningr? �addrr� �sslconn� threading�Thread�__init__�daemon)rI r� Zconnsockr� r r r r� D s z-ThreadedEchoServer.ConnectionHandler.__init__c C s! y] | j j j | j d d �| _ | j j j | j j � � | j j j | j j � � Wn� t
j t f k
r� } zc | j j
j | � | j j r� t d t | j � d � d | _ | j j � | j � d SWYd d } ~ Xn2X| j j j | j j � � | j j j t
j k r�| j j � } t j re| j j ret j j d t j | � d � | j j d � } t j r�| j j r�t j j d t t! | � � d � | j j" � } t j r| j j rt j j d
t | � d � t j j d t | j j � � d � d Sd S) Nr6 Tz'
server: bad connection attempt from z:
Fz client cert is rp z cert binary is z bytes
z" server: connection cipher is now z" server: selected protocol is now )#r� r� r r? r� �selected_npn_protocols�append�selected_npn_protocol�selected_alpn_protocols�selected_alpn_protocolr r3 �ConnectionResetError� conn_errors�chattyr r� r� r� �stopre r� r rB r� r r r r r r� r� rM rY r� )rI r� rJ Z cert_binaryr� r r r � wrap_connN s6
!$ z.ThreadedEchoServer.ConnectionHandler.wrap_connc C s* | j r | j j � S| j j d � Sd S)Ni )r� rj r? r) )rI r r r rj s s
z)ThreadedEchoServer.ConnectionHandler.readc C s- | j r | j j | � S| j j | � Sd S)N)r� r r? r- )rI r� r r r r y s z*ThreadedEchoServer.ConnectionHandler.writec C s* | j r | j j � n
| j j � d S)N)r� re r? )rI r r r re s z*ThreadedEchoServer.ConnectionHandler.closec C s� d | _ | j j s% | j � s% d Sx�| j r�y3| j � } | j � } | sh d | _ | j � n�| d k r� t j r� | j j r� t
j j d � | j � d S| j j r| d k rt j r� | j j r� t
j j d � | j d � | j � scd Sn_| j j r�| j
r�| d k r�t j rJ| j j rJt
j j d � | j d � | j
j � | _ d | _
t j rc| j j rct
j j d
� n� | d k r t j r�| j j r�t
j j d � | j
j d
� } | j t | � j d � d � nc t j rP| j j rP| j
r$d p'd } t
j j d | | | j � | f � | j | j � � Wq( t k
r�| j j r�t d � | j � d | _ | j j � Yq( Xq( Wd S)NTFs overz" server: client closed connection
s STARTTLSz2 server: read STARTTLS from client, sending OK...
s OK
s ENDTLSz0 server: read ENDTLS from client, sending OK...
z* server: connection is now unencrypted...
s
CB tls-uniquez@ server: read CB tls-unique from client, sending our CB data...
z
tls-uniquezus-asciis
Z encryptedZ unencryptedz/ server: read %r (%s), sending back %r (%s)...
zTest server failure:
)r� r� �starttls_serverr� rj �stripre r r �connectionchattyr r r r� r� r? r� r� r� r� r( r� r r� )rI �msgZstrippedr_ Zctyper r r �run� sb
#
z(ThreadedEchoServer.ConnectionHandler.runN)
r r r �__doc__r� r� rj r re r� r r r r �ConnectionHandler> s
% r� NTFc C sZ | r | | _ n� t j | d k r* | n t j � | _ | d k rK | n t j | j _ | rp | j j | � | r� | j j | � | r� | j j | � | r� | j j | � |
r� | j j
|
� | | _ | | _ | | _
t j � | _ t j | j � | _ d | _ d | _ g | _ g | _ g | _ g | _ t j j | � d | _ d S)NFT) r� r r2 rD r@ r r7 r- �set_npn_protocols�set_alpn_protocolsr
r� r� r� r r? r � bind_portr� �flag�activer� r� r� r� r� r� r� r� ) rI Z certificaterB �certreqs�cacertsr� r� r� Z
npn_protocolsZalpn_protocolsr� r� r r r r� � s< zThreadedEchoServer.__init__c C s$ | j t j � � | j j � | S)N)�startr� �Eventr� �wait)rI r r r � __enter__� s
z ThreadedEchoServer.__enter__c G s | j � | j � d S)N)r� r )rI r7 r r r �__exit__� s
zThreadedEchoServer.__exit__c C s | | _ t j j | � d S)N)r� r� r� r� )rI r� r r r r� � s zThreadedEchoServer.startc C s | j j d � | j j � d | _ | j r< | j j � x� | j r� yr | j j � \ } } t j r� | j r� t
j j d t
| � d � | j | | | � } | j � | j � Wq? t j k
r� Yq? t k
r� | j � Yq? Xq? W| j j � d S)Ng�������?Tz server: new connection from rp )r? r2 r� r� r� r� rK r r r� r r r r� r� r� r r r3 �KeyboardInterruptr� re )rI ZnewconnZconnaddrZhandlerr r r r� � s&
zThreadedEchoServer.runc C s
d | _ d S)NF)r� )rI r r r r� s zThreadedEchoServer.stop) r r r r� r� r� r� r� r� r� r� r� r r r r r� < s ~ ! r� c @ s� e Z d Z Gd d � d e j � Z d d � Z d d � Z d d � Z d d
� Z d d d
� Z
d d � Z d d � Z d S)�AsyncoreEchoServerc @ sM e Z d Z Gd d � d e j � Z d d � Z d d � Z d d � Z d S)
z AsyncoreEchoServer.EchoServerc @ sX e Z d Z d d � Z d d � Z d d � Z d d � Z d d
� Z d d � Z d
S)z/AsyncoreEchoServer.EchoServer.ConnectionHandlerc C sQ t j | d d d | d d �| _ t j j | | j � d | _ | j � d S)Nr6 Tr7 r� F)r r r �asyncore�dispatcher_with_sendr� �_ssl_accepting�_do_ssl_handshake)rI �connr7 r r r r� s z8AsyncoreEchoServer.EchoServer.ConnectionHandler.__init__c C s? t | j t j � r; x# | j j � d k r: | j � q Wd S)Nr T)r� r r � SSLSocketr� Zhandle_read_event)rI r r r �readable s z8AsyncoreEchoServer.EchoServer.ConnectionHandler.readablec C s� y | j j � Wn� t j t j f k
r5 d SYn� t j k
rS | j � SYne t j k
rj � YnN t k
r� } z% | j d t
j k r� | j � SWYd d } ~ Xn
Xd | _ d S)Nr F)
r r� r r� r� Z SSLEOFError� handle_closer3 r( r7 r= Z ECONNABORTEDr )rI �errr r r r s zAAsyncoreEchoServer.EchoServer.ConnectionHandler._do_ssl_handshakec C sr | j r | j � nX | j d � } t j rH t j j d t | � � | s[ | j � n | j
| j � � d S)Ni z server: read %s from client
) r r r) r r r r r r� re r- r� )rI r_ r r r � handle_read, s
z;AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_readc C s. | j � t j r* t j j d | j � d S)Nz server: closed connection %s
)re r r r r r r )rI r r r r 8 s
z<AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_closec C s � d S)Nr )rI r r r r = s z<AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_errorN) r r r r� r r r r r r r r r r�
s r� c C sZ | | _ t j t j t j � } t j | d � | _ t j j | | � | j
d � d S)Nr1 r( ) r7 r r Z SOCK_STREAMr r� r� r� �
dispatcherr� r� )rI r7 r? r r r r� @ s
z&AsyncoreEchoServer.EchoServer.__init__c C s4 t j r t j j d | � | j | | j � d S)Nz$ server: new connection from %s:%s
)r r r r r r� r7 )rI Zsock_objr� r r r �handle_acceptedG s z-AsyncoreEchoServer.EchoServer.handle_acceptedc C s � d S)Nr )rI r r r r L s z*AsyncoreEchoServer.EchoServer.handle_errorN) r r r r� r� r� r� r r r r r r �
EchoServer s 3 r
c C sP d | _ d | _ | j | � | _ | j j | _ t j j | � d | _ d S)NFT) r� r� r
r� r� r� r� r� r� )rI r7 r r r r� O s zAsyncoreEchoServer.__init__c C s d | j j | j f S)Nz<%s %s>)� __class__r r� )rI r r r �__str__W s zAsyncoreEchoServer.__str__c C s$ | j t j � � | j j � | S)N)r� r� r� r� r� )rI r r r r� Z s
z AsyncoreEchoServer.__enter__c G ss t j r t j j d � | j � t j r< t j j d � | j � t j r_ t j j d � t j d d � d S)Nz cleanup: stopping server.
z! cleanup: joining server thread.
z cleanup: successfully joined.
Z
ignore_allT) r r r r r r� r r� Z close_all)rI r7 r r r r� _ s
zAsyncoreEchoServer.__exit__Nc C s | | _ t j j | � d S)N)r� r� r� r� )rI r� r r r r� k s zAsyncoreEchoServer.startc C sO d | _ | j r | j j � x) | j rJ y t j d � Wq" Yq" Xq" Wd S)NTr )r� r� r� r� Zloop)rI r r r r� o s
zAsyncoreEchoServer.runc C s d | _ | j j � d S)NF)r� r� re )rI r r r r� y s zAsyncoreEchoServer.stop)
r r r r� r r
r� r r� r� r� r� r� r r r r r� s D
r� s FOO
c C s� i } t d | d | d d � } | ��| j t j � d | ���} | j t | j f � x� | t | � t | � g D]� } | r� t j r� t
j j d | � | j | � | j
� }
| r� t j r� t
j j d |
� |
| j � k rx t d |
d d
� t |
� | d d
� j � t | � f � � qx W| j d � | rat j rat
j j d � | j d
| j � d | j � d | j � d | j � d | j � d | j � i � | j � Wd QRX| j | d <| j | d <| j | d <Wd QRX| S)zc
Launch a server, connect a client to it and try various reads
and writes.
r� r� r� Fr� z client: sending %r...
z client: read %r
z4bad data <<%r>> (%d) received; expected <<%r>> (%d)
N� s over
z client: closing connection.
� compressionr� �peercert�client_alpn_protocol�client_npn_protocolr� �server_alpn_protocols�server_npn_protocols�server_shared_ciphers) r� r r r9 r: r� r] r� r r r r r rj r� �AssertionErrorrY r� r r� r� r� r� r� re r� r� r� ) �client_context�server_context�indatar� r� �sni_namerw r� r �arg�outdatar r r �server_params_test} sN "
*
r c
C s | d k r t j } t j d t j d t j d i | } t j r� | rO d pR d } t j j | t j | � t j | � | f � t j
| � } | j | O_ t j
| � } | j | O_ | j t j
k r� | j d � x7 | | f D]) }
| |
_ |
j t � |
j t � q� Wy t | | d d d
d �} Wn] t j k
rX| rT� Yn� t k
r�} z | s�| j t j k r�� WYd d } ~ Xnh X| s�t d t j | � t j | � f � � n6 | d k r�| | d
k r�t d | | d
f � � d S)aT
Try to SSL-connect using *client_protocol* to *server_protocol*.
If *expect_success* is true, assert that the connection succeeds,
if it's false, assert that the connection fails.
Also, if *expect_success* is a string, assert that it is the protocol
version actually used by the connection.
Nr@ rA rB z %s->%s %s
z
{%s->%s} %s
r r� Fr� z5Client protocol %s succeeded with server protocol %s!Tr� z%version mismatch: expected %r, got %r)r r@ rA rB r r r r r Zget_protocol_namer2 r rO r� r
r r- r� r7 r r3 r( r= �
ECONNRESETr )
Zserver_protocolZclient_protocol�expect_successZ certsreqs�server_options�client_optionsZcerttypeZ formatstrr r rQ rw r� r r r �try_protocol_combo� sP
r! c @ s� e Z d Z e d d � � Z d d � Z e j e � d � d d � � Z d d � Z
d
d � Z d d
� Z e e j e
e d � d � d d � � � Z e d d � � Z e e j e
e d � d � d d � � � Z e d d � � Z e e j e
e d � d � d d � � � Z e e j e
e d � d � d d! � � � Z d" d# � Z d$ d% � Z d& d' � Z d( d) � Z d* d+ � Z d, d- � Z d. d/ � Z d0 d1 � Z d2 d3 � Z d4 d5 � Z d6 d7 � Z d8 d9 � Z e j e j! d: � e j" e# d; � d< d= � � � Z$ e j d> e j% k d? � d@ dA � � Z& dB dC � Z' e j e
e dD � dE � dF dG � � Z( dH dI � Z) dJ dK � Z* e j e j+ dL � dM dN � � Z, e j e j+ dO � e j" e# d; � dP dQ � � � Z- dR dS � Z. e j e j/ dT � dU dV � � Z0 dW dX � Z1 dY dZ � Z2 e3 d[ d\ � � Z4 e3 d] d^ � � Z5 e3 d_ d` � � Z6 e3 da db � � Z7 e j" e# d; � dc dd � � Z8 de df � Z9 dg dh � Z: di S)j�
ThreadedTestsc C s� t j r t j j d � xd t D]\ } | j d t j | � �: t j | � } | j
t � t | | d d d d �Wd QRXq Wd S)z2Basic test of an SSL client connecting to a serverrp rO r� Tr� N)
r r r r r r ZsubTestr �_PROTOCOL_NAMESr2 r- r� r )rI rO r� r r r � test_echo� s
zThreadedTests.test_echoc C s� t j r t j j d � t j t j � } t j | _ | j
t � | j t � t
d | d d � } | �p| j t j � d d �} | j t | j f � | j t � � | j � Wd QRX| j � | j � } | j | d � | j � } t j r5t j j t j | � d � t j j d t | � d � d | k r[| j d
t j | � � d | d k rx| j d
� | j d | � | j d | � t j | d � } t j | d � } | j | | � | j � Wd QRXd S)Nrp r� r� Fr� zCan't get peer certificate.zConnection cipher is z.
r} z$No subject field in certificate: %s.rv �Python Software FoundationzkMissing or invalid 'organizationName' field in certificate subject; should be 'Python Software Foundation'.r{ rz �rv r% )r& )!r r r r r r r2 r� rB r r7 r� r- r� r r r9 r: r� rZ r[ r� r� r r� r� r� rM rb rG r� r re )rI r� r� r rJ r� Zbefore�afterr r r �test_getpeercert� sB
z ThreadedTests.test_getpeercertz!verify_flags need OpenSSL > 0.9.8c 4 C s t j r t j j d � t j t j � } | j t � t j t j � } t j
| _ | j t
� t t d d � } | j | j t j | B� t d | d d � } | �V | j t j � � �9 } | j t | j f � | j � } | j | d � Wd QRXWd QRX| j t j O_ t d | d d � } | �W | j t j � � �: } | j t j d � � | j t | j f � Wd QRXWd QRXWd QRX| j t � t d | d d � } | �V | j t j � � �9 } | j t | j f � | j � } | j | d � Wd QRXWd QRXd S) Nrp r r r� r� TzCan't get peer certificate.zcertificate verify failed) r r r r r r r2 rD r- �SIGNED_CERTFILErB r r7 r{ r rL r r r� r r r9 r: r� r� r r r8 r3 �CRLFILE)rI r r� r r� r rJ r r r �test_crl_check s:
+
z ThreadedTests.test_crl_checkc : C s� t j r t j j d � t j t j � } | j t � t j t j � } t j
| _ d | _ | j
t � t d | d d � } | �\ | j t j � d d ��9 } | j t | j f � | j � } | j | d � Wd QRXWd QRXt d | d d � } | �] | j t j � d d ��: } | j t j d � � | j t | j f � Wd QRXWd QRXWd QRXt d | d d � } | �B t j � �. } | j t d
� � | j | � Wd QRXWd QRXWd QRXd S) Nrp Tr� r� r� ry zCan't get peer certificate.Zinvalidz,hostname 'invalid' doesn't match 'localhost'z'check_hostname requires server_hostname)r r r r r r r2 rD r- r) rB r rz r7 r{ r� r r r9 r: r� r� r r8 rM r[ )rI r r� r� r rJ r r r r G s8
+
z!ThreadedTests.test_check_hostnamec % C sf t j j t j j t � p! t j d � } t t d t j d t d d d d �} | �t
j
� �� } t j | d | d t j ��� } y | j
t | j f � Wn� t j k
r� } z" t j r� t j j d | � WYd
d
} ~ Xnd t k
r?} z7 | j t j k r� t j r-t j j d | � WYd
d
} ~ Xn X| j d � Wd
QRXWd
QRXWd
QRXd
S)
z�Connecting when the server rejects the client's certificate
Launch a server with CERT_REQUIRED, and check that trying to
connect to it with a wrong client certificate fails.
z
wrongcert.pemr� r� r� Fr� r7 rB z
SSLError is %r
Nz
socket.error is %r
z'Use of invalid cert should have failed!)r r r r r rC r� r� r rB r r rD r9 r: r� r3 r r r r r r( r= r rb )rI r7 r� r? r r� r r r �test_wrong_certm s, ! & 'z ThreadedTests.test_wrong_certc
s� t j � � t j � � t j � � t j � t � � � � � f d d � } � � � � f d d � } t j d | � } | j � z | � Wd | j � Xd S)z|A brutal shutdown of an SSL server should raise an OSError
in the client when attempting handshake.
c sH � j � � j � � j � \ } } | j � � j � � j � d S)N)r� r� rK re )Znewsockr� )�
listener_gone�listener_readyr r r �listener� s
z2ThreadedTests.test_rude_shutdown.<locals>.listenerc sv � j � t j � �Y } | j t � f � � j � y t j | � } Wn t k
r] Yn X� j d � Wd QRXd S)Nz2connecting to closed SSL socket should have failed)r� r r9 r: r r r( rb )r� �ssl_sock)r- r. r� rI r r � connector� s
z3ThreadedTests.test_rude_shutdown.<locals>.connector�targetN) r� r� r r r� r: r� r� r )rI r/ r1 r r )r- r. r� r rI r �test_rude_shutdown� s
z ThreadedTests.test_rude_shutdownr. z)OpenSSL is compiled without SSLv2 supportc C s" t j r t j j d � t t j t j d � t t j t j d t j � t t j t j d t j � t t j t j
d � t t d � r� t t j t j d � t t j t j
d � t � r� t t j t j
d d t j �t t j t j
d d t j �t t j t j
d d t j �d S)z9Connecting to an SSLv2 server with various client optionsrp TF�PROTOCOL_SSLv3r N)r r r r r r! r r. rA rB r� r; r4 rD r! r r r )rI r r r �test_protocol_sslv2� s
z!ThreadedTests.test_protocol_sslv2c C s t j r t j j d � t t d � r� y t t j t j d � WnH t
k
r� } z( t j rz t j j d t | � � WYd d } ~ Xn Xt t d � r� t t j t j d � t t j t j d � t t j t j
d � t t d � r t t j t j d t j � t t j t j d t j � t t j t j
d t j � t t d � rlt t j t j d t j � t t j t j d t j � t t j t j
d t j � t t d � r�t t j t j d d t j �t t j t j d d t j t j B�t t j t j
d d t j �d S)
z:Connecting to an SSLv23 server with various client optionsrp r. Tz; SSL2 client to SSL23 server test unexpectedly failed:
%s
Nr4 F�TLSv1r )r r r r r r; r r! r� r. r( rM r4 rD rA rB r r r )rI r� r r r �test_protocol_sslv23� s: !
z"ThreadedTests.test_protocol_sslv23r4 z)OpenSSL is compiled without SSLv3 supportc C s� t j r t j j d � t t j t j d � t t j t j d t j � t t j t j d t j � t
t d � r� t t j t j d � t t j t j d d t j
�t t j t j d � t � r� t t j t j d d t j �d S)z9Connecting to an SSLv3 server with various client optionsrp ZSSLv3r. Fr N)r r r r r r! r r4 rA rB r; r. r� r rD r! r )rI r r r �test_protocol_sslv3� s
z!ThreadedTests.test_protocol_sslv3c C s� t j r t j j d � t t j t j d � t t j t j d t j � t t j t j d t j � t
t d � r� t t j t j d � t
t d � r� t t j t j d � t t j t j
d d t j �d S)z8Connecting to a TLSv1 server with various client optionsrp r6 r. Fr4 r N)r r r r r r! r rD rA rB r; r. r4 r� r )rI r r r �test_protocol_tlsv1
s z!ThreadedTests.test_protocol_tlsv1�PROTOCOL_TLSv1_1z TLS version 1.1 not supported.c C s� t j r t j j d � t t j t j d � t t d � rT t t j t j d � t t d � ry t t j t j
d � t t j t j d d t j �t t j t j d � t t j t j
d � t t j
t j d � d S)znConnecting to a TLSv1.1 server with various client options.
Testing against older TLS versions.rp zTLSv1.1r. Fr4 r N)r r r r r r! r r: r; r. r4 r� �
OP_NO_TLSv1_1rD )rI r r r �test_protocol_tlsv1_1
s
z#ThreadedTests.test_protocol_tlsv1_1�PROTOCOL_TLSv1_2z TLS version 1.2 not supported.c C s* t j r t j j d � t t j t j d d t j t j Bd t j t j B�t
t d � rt t t j t j d � t
t d � r� t t j t j d � t t j t j
d d t j �t t j
t j d � t t j t j d � t t j t j d � t t j t j d � t t j t j d � d S) znConnecting to a TLSv1.2 server with various client options.
Testing against older TLS versions.rp zTLSv1.2r r r. Fr4 N)r r r r r r! r r= r r r; r. r4 r� Z
OP_NO_TLSv1_2rD r: )rI r r r �test_protocol_tlsv1_2/
s
z#ThreadedTests.test_protocol_tlsv1_2c C s' d } t t d t j d
d d d d
d �} d } | ��t j � } | j d � | j t | j f � t j
r� t j j
d � x>| D]6} t j
r� t j j
d | � | r� | j
| � | j � } n | j | � | j d � } | j � j � } | d k rU| j d � rUt j
r4t j j
d | � t j | d t j �} d } q� | d k r�| j d � r�t j
r�t j j
d | � | j � } d } q� t j
r� t j j
d | � q� Wt j
r�t j j
d � | r�| j
d � n
| j d � | r| j � n
| j � Wd QRXd S)z6Switching from clear text to encrypted and back again.� msg 1� MSG 2� STARTTLS� MSG 3� msg 4� ENDTLS� msg 5� msg 6rB r� Tr� r� Fr rp z client: sending %r...
i s okz/ client: read %r from server, starting TLS...
z- client: read %r from server, ending TLS...
z client: read %r from server
z client: closing connection.
s over
N)r? r@ rA rB rC rD rE rF )r� r� r rD r r� r9 r: r� r r r r r rj r- r) r� r� r r r� re ) rI Zmsgsr� �wrappedr r r r r� r r r �
test_starttlsG
s`
zThreadedTests.test_starttlsc C s4 t | d t �} t j r+ t j j d � t t d � � } | j � } Wd QRXd } d | j t
j j t � d f } t
j d t � } t j j | d | �} zo | j � j d
� } | rt | � d k r| j t | � � } t j rt j j d t | � | f � Wd | j � X| j | | � d S)
z8Using socketserver to create and manage SSL connections.r7 rp �rbNr1 zhttps://localhost:%d/%sr r� r� zcontent-lengthr z/ client: read %d bytes from remote server '%s'
)r� r� r r r r r r rj r� r r �splitr ry �urllibZrequestZurlopen�infor� r rY re rL )rI r� r: r r
Zurlr� Zdlenr r r �test_socketserver�
s( z ThreadedTests.test_socketserverc C sY t j r t j j d � d } t t � } | �!t j t j � � } | j
d | j f � t j rz t j j d | � | j | � | j � } t j r� t j j d | � | | j
� k r| j d | d d � t | � | d d � j
� t | � f � | j d � t j r+t j j d
� | j � t j rNt j j d � Wd QRXd S) z'Check the example asyncore integration.rp s FOO
z 127.0.0.1z client: sending %r...
z client: read %r
z4bad data <<%r>> (%d) received; expected <<%r>> (%d)
Nr
s over
z client: closing connection.
z client: connection closed.
)r r r r r r� r� r r r r9 r� rj r� rb rY re )rI r r� r r r r r �test_asyncore_server�
s2
$
z"ThreadedTests.test_asyncore_serverc s� t j r t j j d � t t d t j d t j d t d d d d �} | �Mt j
t j � d d d
t d t d t j d t j �� � j t
| j f � � f d
d � } � f d d � } d � j d g f d � j d d g f d � j d g f g } d � j d g f d � j d d g f d | d g f d | d g f g } d } x(| D] \ } } } }
| | j d � } y� | | |
� � j � } | | j � k r�| j d j d | d | d d � d t | � d! | d d � d" t | � � � WqZt k
ry}
zX | r3| j d# j d | � � t |
� j | � sg| j d$ j d | d% |
� � WYd d }
~
XqZXqZWx2| D]*\ } } } }
| | j d � } y� � j | � | |
� } | | j � k r)| j d& j d | d | d d � d t | � d! | d d � d" t | � � � Wq�t k
r�}
zb | r^| j d' j d | � � t |
� j | � s�| j d$ j d | d% |
� � � j � WYd d }
~
Xq�Xq�Wd( } � j | � t t | � � } | j � j d, | � t | � � | j | | � | j t � j! d( g � | j t � j" d* � | j t � j# t d* � � � j d+ � | j t � j d- � | j t � j d. � � j$ � Wd QRXd S)/z Test recv(), send() and friends.rp r� rB r� r� Tr� Fr6 r7 r� r� c s- t d d � } � j | � } | d | � S)Ns �d )r] r* )�br� )r r r �
_recv_into�
s z0ThreadedTests.test_recv_send.<locals>._recv_intoc s3 t d d � } � j | � \ } } | d | � S)Ns rO )r] r, )rP r� r� )r r r �_recvfrom_into�
s z4ThreadedTests.test_recv_send.<locals>._recvfrom_intor- r. z some.addressr� r) r+ r* r, ZPREFIX_rU zpWhile sending with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
r
r Nr
Znoutr Zninz>Failed to send with method <<{name:s}>>; expected to succeed.
zFMethod <<{name:s}>> failed with unexpected exception message: {exp:s}
ZexpzrWhile receiving with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
zAFailed to receive with method <<{name:s}>>; expected to succeed.
s datar rO s over
r� r� r� )%r r r r r r� r� r r@ rD r r r9 r: r� r- r. r� r) r+ r� rj r� rb r rY r[ rM r r] rL rZ r� ZsendmsgZrecvmsgZ recvmsg_intore )rI r� rQ rR Z send_methodsZ recv_methodsZ data_prefixZ meth_nameZ send_methr r7 r r r� Z recv_methr_ �bufferr )r r �test_recv_send�
s�
$
'
$
!
"
z ThreadedTests.test_recv_sendc C s t t � } | j � | j | j d d � t j t | j f � } | j | j � t
j | d d �} | j | j � | j d � | j
| j d � d � | j
| j d � d � | j
| j � d � | j d � | j
| j d � d � | j
| j t � � d � d S)NZsuppress_ragged_eofsFs datar r@ )r� r� r� rh r� r Zcreate_connectionr: r� re r r r- rL r) rj r� r* r] )rI r� r r r r �test_recv_zero6 s
z ThreadedTests.test_recv_zeroc s� t t d t j d t j d t d d d d �} | �� t j t j � d d d t d
t d t j d t j �� � j t | j f � � j
d � t d � � � � f d
d � } | j t j
t j f | � � j
d � � j � Wd QRXd S)Nr� rB r� r� Tr� Fr6 r7 r� r� i c s x � j � � q Wd S)N)r- r )r� r r r � fill_buffer^ s z8ThreadedTests.test_nonblocking_send.<locals>.fill_buffer)r� r� r r@ rD r r r9 r: r� r� r] rZ r� r� re )rI r� rV r )r� r r �test_nonblocking_sendJ s*
z#ThreadedTests.test_nonblocking_sendc s_ t j t j � � d } t j � � } t j � � d � � � � f d d � } t j d | � } | j � � j � z� zR t j t j � } | j d � | j
| | f � | j t j d t
j | � Wd | j � XzT t j t j � } t
j | � } | j d � | j t j d | j
| | f � Wd | j � XWd d � | j � � j � Xd S) Nz 127.0.0.1Fc s� � j � � j � g } xQ � sm t j � g g g d � \ } } } � | k r | j � j � d � q Wx | D] } | j � qu Wd S)Ng�������?r )r� r� r� r� rK re )Zconnsr �wr� r? )�finishr� �startedr r �servep s
$
z3ThreadedTests.test_handshake_timeout.<locals>.server2 g�������?z timed outT)r r r r� r� r� r� r� r� r2 r9 r8 r3 r r re r )rI r� r� r[ r r� r )rY r� rZ r �test_handshake_timeouth s6
z$ThreadedTests.test_handshake_timeoutc sP t j t j � } t j | _ | j t � | j t � t j t j � � d } t
j � � } | j � d d �� t
j � � d � d � � � � � f d d � } t
j d | � } | j � � j � | j t j � � } | j | | f � | j � } | j � | j � � j � � j � | j � t j � | j � | � d S)Nz 127.0.0.1r6 Tc s7 � j � � j � � j � \ � � � j d � d S)Nr )r� r� rK r) r )�evt�peerr� r� r r r[ � s
z/ThreadedTests.test_server_accept.<locals>.server2 )r r2 r� rB r r7 r� r- r r r r� r r� r� r� r� r� r9 r� re r r r rL )rI r� r� r� r[ r �clientZ client_addrr )r] r^ r� r� r �test_server_accept� s0
z ThreadedTests.test_server_acceptc C sq t j t j � } | j t j � � �C } | j t � � } | j � Wd QRX| j | j j
t
j � Wd QRXd S)N) r r2 r� r r rZ r( r� rL r< r= �ENOTCONN)rI r� r? r@ r r r �test_getpeercert_enotconn� s
z'ThreadedTests.test_getpeercert_enotconnc C sq t j t j � } | j t j � � �C } | j t � � } | j � Wd QRX| j | j j
t
j � Wd QRXd S)N) r r2 r� r r rZ r( r� rL r< r= ra )rI r� r? r@ r r r �test_do_handshake_enotconn� s
z(ThreadedTests.test_do_handshake_enotconnc " C s� t j t j � } y | j d � Wn" t j k
rG | j d � Yn Xt t d t j d d ��S } | j t j � � �4 } | j
t � � | j t
| j f � Wd QRXWd QRXWd QRX| j d t | j d � � d S)NZDESzno DES cipher availablerB r� Fzno shared cipherr )r r2 r� r
r3 r� r� r� r r rZ r( r9 r: r� rG rM r� )rI r� r� r r r r �test_default_ciphers� s +z"ThreadedTests.test_default_ciphersc C s� t j t j � } t t d t j d d ��~ } | j t j � � �I } | j | j � d � | j t
| j f � | j | j � d � Wd QRX| j | j � d � Wd QRXd S)z�
Basic tests for SSLSocket.version().
More tests are done in the test_protocol_*() methods.
rB r� FNr6 )
r r2 rD r� r� r r rN r� r9 r: r� rL )rI r� r� r r r r �test_version_basic� s z ThreadedTests.test_version_basicz"test requires ECDH-enabled OpenSSLz bpo-36576: fail on OpenSSL 1.1.1c C s� t j t j � } | j t � t j d k r; | j d � t d | � �V } | j t j � � �7 } | j
t | j f � | j
d | j � d � Wd QRXWd QRXd S)Nr r z
ECCdraft:ECDHr� ZECDH)r r r )r r2 r� r- r� r r
r� r r r9 r: r� rG r� )rI r� r� r r r r �test_default_ecdh_curve� s
z%ThreadedTests.test_default_ecdh_curvez
tls-uniquez*'tls-unique' channel binding not availablec C sA t j r t j j d � t t d t j d t j d t d d d d �} | ��t j
t j � d d d
t d t d t j d t j �} | j t
| j f � | j d
� } t j r� t j j d j | � � | j | � | j t | � d � | j d � | j � j � } | j | t | � j d � � | j � t j
t j � d d d
t d t d t j d t j �} | j t
| j f � | j d
� } t j r�t j j d j | � � | j | | � | j | � | j t | � d � | j d � | j � j � } | j | t | � j d � � | j � Wd QRXd S)z Test tls-unique channel binding.rp r� rB r� r� Tr� Fr6 r7 r� r� z
tls-uniquez! got channel binding data: {0!r}
� s CB tls-unique
zus-asciiz) got another channel binding data: {0!r}
N)r r r r r r� r� r r@ rD r r r9 r: r� r� r r� rL rY rj r� r� r� re rk )rI r� r Zcb_dataZpeer_data_reprZ new_cb_datar r r r� � s\
z-ThreadedTests.test_tls_unique_channel_bindingc C s� t j t j � } | j t � t | | d d d d �} t j r` t j j
d j | d � � | j | d d d d h � d S)Nr� Tr� z got compression: {!r}
r ZZLIBZRLE)
r r2 rD r- r� r r r r r r r rG )rI r� rw r r r �test_compression9 s
z ThreadedTests.test_compressionrF z*ssl.OP_NO_COMPRESSION needed for this testc C sd t j t j � } | j t � | j t j O_ t | | d d d d �} | j | d d � d S)Nr� Tr� r ) r r2 rD r- r� r rF r rN )rI r� rw r r r �test_compression_disabledB s
z'ThreadedTests.test_compression_disabledc C s� t j t j � } | j t � | j t � | j d � t | | d d d d �} | d d } | j d � } d | k r� d | k r� d
| k r� | j
d | d � d S) NZkEDHr� Tr� r� r �-ZADHZEDHZDHEzNon-DH cipher: ) r r2 rD r- r� rF rG r
r rJ rb )rI r� rw r� �partsr r r �test_dh_paramsL s
$z ThreadedTests.test_dh_paramsc C sR t j t j � } | j t � t | | d d d d �} | j | d d � d S)Nr� Tr� r )r r2 rD r- r� r rN )rI r� rw r r r �test_selected_alpn_protocolY s
z)ThreadedTests.test_selected_alpn_protocolzALPN support requiredc C s� t j t j � } | j t � t j t j � } | j t � | j d d g � t | | d d d d �} | j | d d � d S)NrU �barr� Tr� r ) r r2 rD r7 r� r- r� r rN )rI r r rw r r r �/test_selected_alpn_protocol_if_server_uses_alpna s
z=ThreadedTests.test_selected_alpn_protocol_if_server_uses_alpnz!ALPN support needed for this testc C s� d d d g } d d g d f d d g d f d g d f d d g d f g } xq| D]i\ } } t j t j � } | j t � | j | � t j t j � } | j t � | j | � y t | | d d d d �} Wn. t j k
r} z | } WYd d } ~ Xn X| d k r1t r1| j | t j � qU d t
| � t
| � t
| � f } | d
}
| j |
| | |
d f � t | d � r�| d d n d } | j | | | | d f � qU Wd S)NrU rn Z milkshakezhttp/3.0zhttp/4.0r� Tr� zKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sr r_ r r �nothingr� r� )
r r2 r= r- r� r� r r3 �IS_OPENSSL_1_1r rM rL rY ) rI �server_protocols�protocol_tests�client_protocolsr� r r rw r� r� �
client_result�
server_resultr r r �test_alpn_protocolsm s<
$ z!ThreadedTests.test_alpn_protocolsc C sR t j t j � } | j t � t | | d d d d �} | j | d d � d S)Nr� Tr� r )r r2 rD r- r� r rN )rI r� rw r r r �test_selected_npn_protocol� s
z(ThreadedTests.test_selected_npn_protocolz NPN support needed for this testc C si d d g } d d g d f d d g d f d d g d f d d g d f g } x| D] \ } } t j t j � } | j t � | j | � t j t j � } | j t � | j | � t | | d d d d �} d t | � t | � t | � f } | d
} | j | | | | d f � t | d � r>| d d n d }
| j |
| | |
d f � qU Wd S)Nzhttp/1.1zspdy/2�test�abc�defr� Tr� zKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sr r_ r r rp r� r� )
r r2 rD r- r� r� r rM rL rY ) rI rr rs rt r� r r rw r� ru rv r r r �test_npn_protocols� s*
$z ThreadedTests.test_npn_protocolsc C sv t j t j � } | j t � t j t j � } | j t � t j t j � } t j | _ | j t � | | | f S)N)
r r2 rD r- r) �SIGNED_CERTFILE2rB r r7 r{ )rI r �
other_contextr r r r � sni_contexts� s
zThreadedTests.sni_contextsc C s+ | d } | j d | f f | d � d S)Nr rx r} )rG )rI rw r
rJ r r r �check_common_name� s
z ThreadedTests.check_common_namec s g � | j � \ } � } � � f d d � } | j | � t | | d d d d �} | j � d | f g � | j | d � g � t | | d d d d �} | j � d | f g � | j | d � g � | j d � t | | d d d d �} | j | d � | j � g � d S)
Nc s, � j | | f � | d k r( � | _ d S)N)r� r� )r0 � server_name�initial_context)�callsr~ r r �
servername_cb� s z6ThreadedTests.test_sni_callback.<locals>.servername_cbr� Tr � supermessageZ fakehostnamery Znotfunny)r rS r rL r� )rI r r r� rw r )r� r~ r rT � s,
z ThreadedTests.test_sni_callbackc C s | j � \ } } } d d � } | j | � | j t j � �" } t | | d d d d �} Wd QRX| j | j j d � d S)Nc S s t j S)N)r Z ALERT_DESCRIPTION_ACCESS_DENIED)r0 r� r� r r r �cb_returning_alert� s zAThreadedTests.test_sni_callback_alert.<locals>.cb_returning_alertr� Fr r� ZTLSV1_ALERT_ACCESS_DENIED) r rS rZ r r3 r rL r< r� )rI r r~ r r� r@ rw r r r �test_sni_callback_alert� s
z%ThreadedTests.test_sni_callback_alertc C s� | j � \ } } } d d � } | j | � | j t j � �8 } t j � �" } t | | d d d d �} Wd QRXWd QRX| j | j j
d � | j d | j � � d S) Nc S s d d d S)Nr r r )r0 r� r� r r r �
cb_raising
s z;ThreadedTests.test_sni_callback_raising.<locals>.cb_raisingr� Fr r� Z SSLV3_ALERT_HANDSHAKE_FAILURE�ZeroDivisionError)
r rS rZ r r3 r �captured_stderrr rL r< r� rG �getvalue)rI r r~ r r� r@ �stderrrw r r r �test_sni_callback_raising
s
z'ThreadedTests.test_sni_callback_raisingc C s� | j � \ } } } d d � } | j | � | j t j � �8 } t j � �" } t | | d d d d �} Wd QRXWd QRX| j | j j
d � | j d | j � � d S) Nc S s d S)NrU r )r0 r� r� r r r �cb_wrong_return_type
s zOThreadedTests.test_sni_callback_wrong_return_type.<locals>.cb_wrong_return_typer� Fr r� ZTLSV1_ALERT_INTERNAL_ERRORr\ )
r rS rZ r r3 r r� r rL r< r� rG r� )rI r r~ r r� r@ r� rw r r r �#test_sni_callback_wrong_return_type
s
z1ThreadedTests.test_sni_callback_wrong_return_typec
C s' t j t j � } | j t � t j t j � } t j | _ | j t � t j d k r� | j
d � | j
d � d } d } n& | j
d � | j
d � d } d } t | | � } | d
d } | j t
| � d � xE | D]= \ } } } | | j d � k r� | | k r� | j | � q� Wd S)
Nr r r� z
AES128:AES256ZAES256zAES-256zAES:3DESZ3DESzDES-CBC3r rj )r r r� )r r2 rD r- r) rB r r7 r{ r r
r Z
assertGreaterrY rJ rb )
rI r r Zalg1Zalg2rw r� r
Z tls_version�bitsr r r �test_shared_ciphers#
s(
!z!ThreadedTests.test_shared_ciphersc C s� t j t j � } t j | _ | j t � | j t � t d | d d � } | �f | j t
j
� � } | j t | j
f � | j � | j t | j d � | j t | j d � Wd QRXd S)Nr� r� Fi s hello)r r2 r� rB r r7 r� r- r� r r r9 r: r� re rZ r[ rj r )rI r� r� r r r r �,test_read_write_after_close_raises_valuerror<
s
z:ThreadedTests.test_read_write_after_close_raises_valuerrorc C s d d } t t j d � � } | j | � Wd QRX| j t j t j � t j t j � } t j | _
| j t � | j
t � t d | d d � } | �| | j t j � � �_ } | j t | j f � t t j d � �- } | j | � | j | j d � | � Wd QRXWd QRXWd QRXd S) Nr& i �wbr� r� FrI i )r r ZTESTFNr rh �unlinkr r2 r� rB r r7 r� r- r� r r r9 r: r� �sendfilerL r) )rI Z TEST_DATAr: r� r� r �filer r r �
test_sendfileK
s
zThreadedTests.test_sendfileN);r r r r> r$ r( r6 r r" r+ r r, r3 r; r r5 r7 r8 r9 r< r> rH rM rN rT rU rW r\ r` rb rc rd re rD r� r� rf r r� rh ri rl rm ZHAS_ALPNro rw rx ZHAS_NPNr| r r� r� rT r� r� r� r� r� r� r r r r r" � sp & * & ! )( : ~ 1 & !;
! !) !
' r" c C s t j r*d d l } d t j d t j d t j i } | j � �q | j d d t � xV | j
� D]6 \ } } | � } | rc | d rc d | | f } Pqc Wt t j � � } Wd QRXt d t
j t
j f � t d | � t d
t
j � t d t
j � y t d t
j � Wn t k
r)Yn XxZ t t t t t t t t t t t t t g
D]+ } t! j" j# | � sXt j$ d
| � � qXWt% t& t' t( g } t j) d � r�| j* t+ � | j* t, � t- r�t j. � } | r�| j* t/ � z t j0 | � Wd t- rt j1 | � Xd S)Nr ZLinuxZMacZWindows�ignorez?dist\(\) and linux_distribution\(\) functions are deprecated .*z%s %rz test_ssl: testing with %r %rz under %sz HAS_SNI = %rz OP_ALL = 0x%8xz OP_NO_TLSv1_1 = 0x%8xz Can't read certificate file %rZnetwork)2r r �warningsr4 r5 Zmac_verZ win32_ver�catch_warnings�filterwarnings�PendingDeprecationWarning�itemsr� �printr r r rH r r; �AttributeErrorr� r� r8 r0 r1 r2 r3 r) r} r{ r. �BADKEYr/ r r �existsZ
TestFailedr r? r� r� Zis_resource_enabledr� r� r� �
_have_threadsZthreading_setupr" Z run_unittestZthreading_cleanup) r r� Zplatsr
r9 Zplat�filenameZtests� thread_infor r r � test_main]
sX
r� �__main__)]r r6 ry r r r� r# r) rV r r= r� ZtempfileZurllib.requestrK r r� r r4 r< �
import_moduler �sortedr# r r: r r r r rq r� r
r� �fsencoder8 r0 r1 r2 r3 r4 r5 r! r� r9 rA r r* r) r} r{ r r� r� r/ r. r; r� r� r� r� rG rH r r r! r" r$ r- r> r rH r� ZTestCaser? r r� r� r� r� r� � ImportErrorr� Ztest.ssl_serversr� r� r� r� r r! r" r� r r r r r �<module> s� � � �� �)?� MW
�v/;� � � � y9