Your IP : 216.73.216.60
3
� fc� � @ s� d dl Z d dlZd dlmZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
Zd dlZd dlZd dlZd dlZd dlZd dlZy d dlZW n ek
r� dZY nX ejd�Zy d dlZW n ek
r� dZY nX dZeej �Z ej Z ej j d�Z!e! �o"ej"d_kZ#dd � Z$e$d
�Z%e j&e%�Z'e$d �Z(e$d �Z)e j&e(�Z*e j&e)�Z+e$d
�Z,e$d�Z-dZ.e$d�Z/e j&e/�Z0e$dd�Z1e$dd�Z2e$d�Z3e$d�Z4e$d�Z5e$dd�Z6e$d�Z7dZ8e$d�Z9e$d�Z:e$d�Z;e$d �Z<e$d �Z=e$d �Z>e$d �Z?e$d �Z@e j&e@�ZAeBed!d �ZCeBed"d �ZDeBed#d �ZEeBed$d �ZFeBed%d �ZGd&d'� ZHd(d)� ZId*d+� ZJd,d-� ZKd.d/� ZLd0d1� ZMd2d3� ZNd4d5� ZOejPejQd6�ZRejSfejTddddd7�d8d9�ZUG d:d;� d;ejV�ZWG d<d=� d=ejV�ZXG d>d?� d?ejV�ZYG d@dA� dAejV�ZZejPedB�G dCdD� dDejV��Z[G dEdF� dFejV�Z\d`dGdH�Z]dIdJ� Z^e�r�d dKl_m`Z` G dLdM� dMeja�ZbG dNdO� dOeja�ZcdadQdR�ZddbdSdT�ZeG dUdV� dVejV�ZfdWdX� ZgejPejhdY�G dZd[� d[ejV��Zidcd\d]�Zjekd^k�r�ej� dS )d� N)�support�sslFTZLibreSSL� c G s t jjt jjt�f| �� S )N)�os�path�join�dirname�__file__)�name� r �2/opt/alt/python36/lib64/python3.6/test/test_ssl.py� data_file* s r
z keycert.pemz ssl_cert.pemz ssl_key.pemzkeycert.passwd.pemzssl_key.passwd.pemZsomepass�capathz
4e1295a3.0z
5ed36f99.0zrevocation.crlz keycert3.pemz keycert4.pemz
ceff1710.0z allsans.pemzself-signed.pythontest.netz nullcert.pemz badcert.pemzXXXnonexisting.pemz
badkey.pemz nokia.pemznullbytecert.pemztalos-2019-0758.pemz ffdh3072.pem�OP_NO_COMPRESSION�OP_SINGLE_DH_USE�OP_SINGLE_ECDH_USE�OP_CIPHER_SERVER_PREFERENCE�OP_ENABLE_MIDDLEBOX_COMPATc C s. dj tjtj� � �}tjr*tjj| | � d S )N� ) r � traceback�format_exception�sys�exc_infor �verbose�stdout�write)�prefixZ
exc_formatr r r � handle_error` s r c C s
t jdkS )Nr � � �
� )r r r r r! )r �_OPENSSL_API_VERSIONr r r r �can_clear_optionse s r# c C s
t jdkS )Nr r � r r! )r r r$ r r! )r �OPENSSL_VERSION_INFOr r r r � no_sslv2_implies_sslv3_helloi s r& c C s
t jdkS )Nr r r r! )r r r r r! )r r% r r r r �have_verify_flagsm s r' c C s$ t jr t j� jdkr t j S t j S )Nr )�timeZdaylightZ localtimeZtm_isdstZaltzoneZtimezoner r r r �
utc_offsetq s r) c C s^ t jd krZd}tjj| |�}|jdd�}|j|�} | d dkrZ| d d� d | d
d � } | S ) Nr r r r! z%b %d %H:%M:%S %Y GMT)�second� �0r � )r r r r r! )r r" �datetimeZstrptime�replace�strftime)� cert_timeZfmtZdtr r r �asn1timew s
r2 c s, t td�r$tj� �� fdd��}|S � S d S )N�PROTOCOL_SSLv2c sR yt jt j� W n6 t jk
rF t jd krBtj� d
krBtjd��Y nX � | |�S ) Nr r r r! �debian� squeeze/sid� z'Patched Ubuntu OpenSSL breaks behaviour)r r r r! r! )r4 r5 r6 ) r �
SSLContextr3 �SSLErrorr% �platform�linux_distribution�unittest�SkipTest)�args�kwargs)�funcr r �f� s
z$skip_if_broken_ubuntu_ssl.<locals>.f)�hasattrr � functools�wraps)r? r@ r )r? r �skip_if_broken_ubuntu_ssl� s
rD c s t j� �� fdd��}|S )a{ Skip a test if the OpenSSL config MinProtocol is > TLSv1.
OS distros with an /etc/ssl/openssl.cnf and MinProtocol set often do so to
require TLSv1.2 or higher (Debian Buster). Some of our tests for older
protocol versions will fail under such a config.
Alternative workaround: Run this test in a process with
OPENSSL_CONF=/dev/null in the environment.
c s� t jjdd�}y\t|d��H}x@|D ]8}tjd|�}|r"|jd�}|dkr"tjd||f ��q"W W d Q R X W n@ t t
fk
r� } z t j r�t
jjd||f � W Y d d }~X nX � | |�S ) NZ OPENSSL_CONFz/etc/ssl/openssl.cnf�rz MinProtocol\s*=\s*(TLSv\d+\S*)r �TLSv1z)%s has MinProtocol = %s which is > TLSv1.z(
Could not scan %s for MinProtocol: %s
)r �environ�get�open�re�match�groupr; r< �EnvironmentError�UnicodeDecodeErrorr r r r r )r= r> Z openssl_cnf�config�linerK Ztls_ver�err)r? r r r@ � s
z2skip_if_openssl_cnf_minprotocol_gt_tls1.<locals>.f)rB rC )r? r@ r )r? r �'skip_if_openssl_cnf_minprotocol_gt_tls1� s
rR z SNI support needed for this test)� cert_reqs�ca_certs�ciphers�certfile�keyfilec K sf t j|�}|d k r||_|d k r*|j|� |d k s:|d k rF|j||� |d k rX|j|� |j| f|�S )N)r r7 � verify_mode�load_verify_locations�load_cert_chain� set_ciphers� wrap_socket) �sock� ssl_versionrS rT rU rV rW r> �contextr r r �test_wrap_socket� s
r` c @ s� e Zd Zdd� ZejdSkr&ej ej dd� Zdd� Z e
j e j
d kd
�d d � �Zd
Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zejdd� �Zd d � Zd d � Zd d!� Zd"d#� Z d$d%� Z d&d'� Z d(d)� Z d*d+� Z d,d-� Z!d.d/� Z"e
j d0ej#kd1�d2d3� �Z$d4d5� Z%d6d7� Z&e
j e'j(d8kd9�d:d;� �Z)e
j e'j(d8kd9�d<d=� �Z*d>d?� Z+d@dA� Z,dBdC� Z-dDdE� Z.dFdG� Z/e
j e0� dH�dIdJ� �Z1dKdL� Z2ej3dMdN�dOdP� �Z4dQdR� Z5d
S )T�BasicSocketTestsc C sz t j t j t j t j t j t jr*t j t jdkr:t j | j
t j ddh� | j
t jddh� t j t j
t j t j d S )Nr r TF)r r )r � CERT_NONE�
CERT_OPTIONAL�
CERT_REQUIREDr r �HAS_ECDHr r% r �assertIn�HAS_SNI� OP_NO_SSLv2� OP_NO_SSLv3� OP_NO_TLSv1�
OP_NO_TLSv1_3)�selfr r r �test_constants� s
z BasicSocketTests.test_constantsr r c C s2 t j}| jt|�d� t j|�}| j|j|� d S )Nz_SSLMethod.PROTOCOL_TLS)r � PROTOCOL_TLS� assertEqual�strr7 �assertIs�protocol)rl �proto�ctxr r r �test_str_for_enums� s
z#BasicSocketTests.test_str_for_enumsc C s t j� }tjr*tjjd||r dp"df � t jd�\}}| jt |�d� | j||dk� |rxt j
d�}| jt |�d� n| j t j t j
d� | j t
t j
d
� | j t
t jd� tt d�r�| j tt jd� | j tt jdd� t jd d
� t jd d
� t jtd �d
� d S )Nz
RAND_status is %d (%s)
zsufficient randomnesszinsufficient randomness� r r- �RAND_egd�foozthis is a random stringg �R@s this is a random bytes objects! this is a random bytearray object���ry )r � RAND_statusr r r r r �RAND_pseudo_bytesro �lenZ
RAND_bytes� assertRaisesr8 �
ValueErrorrA � TypeErrorrw ZRAND_add� bytearray)rl �v�dataZis_cryptographicr r r � test_random� s(
z BasicSocketTests.test_random�posixzrequires posixc C s t j� }|s| jd� tj� \}}tj� }|dkr�yBtj|� t jd�d }| jt |�d� tj
||� tj|� W n t k
r� tj d� Y n X tj d� nztj|� | j
tj|� tj|d�\}}| j|d� tj|d�}| jt |�d� t jd�d }| jt |�d� | j||� d S )Nz*OpenSSL's PRNG has insufficient randomnessr rv r )r rz �failr �pipe�fork�closer{ ro r| r �
BaseException�_exit�
addCleanup�waitpid�read�assertNotEqual)rl �statusZrfdZwfd�pidZ child_random�_Z
parent_randomr r r �test_random_fork s0
z!BasicSocketTests.test_random_forkNc C s t jjt�}tjr,tjjdt j
|� d � | j |d d$� | j |d t d �� | j |d
t d�� | j |d d� | j |d d-� | j |d d/� t jjt
�}tj� r�tjjdt j
|� d � | j |d d2� | j |d d3� | j |d d4� | j |d d5� d S )6N�
�issuer� countryName�XY� localityName�Castle Anthrax�organizationName�Python Software Foundation�
commonName� localhost�notAfterzAug 26 14:23:15 2028 GMT� notBeforezAug 29 14:23:15 2018 GMT� serialNumberZ98A7CF88C74A32ED�subject�subjectAltName�DNS� projects.developer.nokia.com�projects.forum.nokia.comZOCSP�http://ocsp.verisign.comZ caIssuers�0http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer�crlDistributionPoints�0http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl�r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� )r� r� r� r� �r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� )r� r� r� r� �r� r� )r� �r� r� �r� r� )r� r� )r� )r� )r� )r �_ssl�_test_decode_cert�CERTFILEr r r r r �pprint�pformatro r2 � NOKIACERT)rl �pr r r �test_parse_cert" s8
z BasicSocketTests.test_parse_certc
C sL t jjt�}tjr,tjjdt j
|� d � | j |ddddddd d �� d S )Nr� r� �UKr� �cody-cazJun 14 18:00:58 2028 GMTzJun 18 18:00:58 2018 GMTZ02�#codenomicon-vm-2.test.lal.cisco.comr� � )r� r� r� r� r� r� �version�r� r� �r� �r� r� �r� )r� r� �r� r� �r� �r� r� �r� )r� r� �r� r� )r� ) r r� r� �TALOS_INVALID_CRLDPr r r r r r� r� ro )rl r� r r r � test_parse_cert_CVE_2019_5010J s z.BasicSocketTests.test_parse_cert_CVE_2019_5010c C sx t jjt�}tjr,tjjdt j
|� d � d.}| j |d |� | j |d |� t j d/kr`d5}nd;}| j |d |� d S )<Nr� r� �US�stateOrProvinceName�Oregonr� � Beavertonr� �Python Software Foundation�organizationalUnitName�Python Core Developmentr� �null.python.org example.org� emailAddress�python-dev@python.orgr� r� r r r r� � altnull.python.org example.com�email� null@python.org user@example.org�URI�)http://null.python.org http://example.org�
IP Address� 192.0.2.1�2001:DB8:0:0:0:0:0:1
� <invalid>r� �r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� )r� r� r� r� r� r� r� )r r r �r� r� �r� r� �r� r� �r� r� �r� r� )r� r� r� r� r� �r� r� �r� r� �r� r� �r� r� �r� r� )r� r� r� r� r� )
r r� r� � NULLBYTECERTr r r r r r� r� ro r" )rl r� r� Zsanr r r � test_parse_cert_CVE_2013_4238_ s0
z.BasicSocketTests.test_parse_cert_CVE_2013_4238c
C s t jjt�}| j|d d,� d S )-Nr� r� �allsans� othername�
<unsupported>r� �user@example.org�www.example.org�DirNamer� r� r� �Castle Anthraxr� �Python Software Foundationr� �dirname exampler� �https://www.python.org/�
IP Address� 127.0.0.1�0:0:0:0:0:0:0:1
�
Registered ID� 1.2.3.4.5�r� r �r r �r r �r� r �r� r �r� r� �r �r� r �r �r� r �r �r� r �r �r r r r �r r �r� r
�r r �r r
�r r )
r r r r r r r r r! r" )r r� r� �
ALLSANFILEro )rl r� r r r �test_parse_all_sans| s
z$BasicSocketTests.test_parse_all_sansc
C s� t td��}|j� }W d Q R X tj|�}tj|�}tj|�}| j||� |jtjd �sf| j d| � |j
dtj d �s�| j d| � d S )NrE r� z-DER-to-PEM didn't include correct header:
%r
z-DER-to-PEM didn't include correct footer:
%r
) rI �
CAFILE_CACERTr� r �PEM_cert_to_DER_certZDER_cert_to_PEM_certro �
startswithZ
PEM_HEADERr� �endswithZ
PEM_FOOTER)rl r@ �pem�d1Zp2�d2r r r �test_DER_to_PEM� s
z BasicSocketTests.test_DER_to_PEMc C s& t j}t j}t j}| j|t� | j|t� | j|t� | j|d� | j |d� |\}}}}}| j|d� | j |d� | j|d� | j |d� | j|d� | j |d� | j|d� | j
|d� | j|d� | j
|d� t r�| j |j
dj|��||t|�f� n&| j |j
d j|||��||t|�f� d S )
Ni � i 0r r� � �? r! z
LibreSSL {:d}zOpenSSL {:d}.{:d}.{:d})r ZOPENSSL_VERSION_NUMBERr% �OPENSSL_VERSION�assertIsInstance�int�tuplerp �assertGreaterEqual�
assertLessZassertLessEqual� IS_LIBRESSL�
assertTruer' �format�hex) rl �n�t�s�major�minorZfixZpatchr� r r r �test_openssl_version� s0 z%BasicSocketTests.test_openssl_versionc
C sL t j t j�}t|�}tj|�}tjdtf�� ~W d Q R X | j|� d � d S )Nr6 ) �socket�AF_INETr` �weakref�refr Zcheck_warnings�ResourceWarningro )rl r; �ss�wrr r r �
test_refcycle� s
z BasicSocketTests.test_refcyclec C s� t j t j�}t|���}| jt|jd� | jt|jtd�� | jt|jd� | jt|j td�d� | jt|j
d� | jt|j dd� | jt |j
� | jt |jdgf dd� | jt |jd� | jt |jtd�g� W d Q R X d S )Nr � x�0.0.0.0r �d )rH r )rH r )r? r@ r` r} �OSError�recv� recv_intor� �recvfrom�
recvfrom_into�send�sendto�NotImplementedError�dup�sendmsg�recvmsg� recvmsg_into)rl r; rD r r r �test_wrapped_unconnected� s
z)BasicSocketTests.test_wrapped_unconnectedc C sL xFdD ]>}t j t j�}|j|� t|��}| j||j� � W d Q R X qW d S )N� � @)NrW rX )r? r@ �
settimeoutr` ro Z
gettimeout)rl �timeoutr; rD r r r � test_timeout� s
z BasicSocketTests.test_timeoutc 6 C sd t j � }| jtdtj|td� | jtdtj|dd� | jtdtj|ddd� tj|dtd�� }| jtd|jtd f� W d Q R X | jt ��(}t j � �}tj|t
d
� W d Q R X W d Q R X | j |j j
t
j� | jt ��*}t j � �}tj|tt
d � W d Q R X W d Q R X | j |j j
t
j� | jt ��*}t j � �}tj|t
t
d � W d Q R X W d Q R X | j |j j
t
j� d S ) Nzcertfile must be specified)rW z5certfile must be specified for server-side operationsT)� server_sider6 )r\ rV z!can't connect in server-side modei� )rV )rV rW )r? �assertRaisesRegexr~ r r\ r� �connect�HOSTr} rJ �NONEXISTINGCERTro � exception�errno�ENOENT)rl r] r; �cmr r r �test_errors_sslwrap� s6
"
z$BasicSocketTests.test_errors_sslwrapc C s\ t jjt jjt�pt j|�}tj� }| j|j� | j t
j �� t ||t
j
d� W dQ R X dS )z;Check that trying to use the given client certificate fails)rV r^ N)r r r r r �curdirr? r� r� r} r r8 r` �PROTOCOL_TLSv1)rl rV r] r r r �
bad_cert_test� s z BasicSocketTests.bad_cert_testc C s | j d� dS )z Wrapping with an empty cert filez nullcert.pemN)rh )rl r r r �test_empty_cert
s z BasicSocketTests.test_empty_certc C s | j d� dS )z:Wrapping with a badly formatted certificate (syntax error)z badcert.pemN)rh )rl r r r �test_malformed_cert s z$BasicSocketTests.test_malformed_certc C s | j d� dS )z2Wrapping with a badly formatted key (syntax error)z
badkey.pemN)rh )rl r r r �test_malformed_key s z#BasicSocketTests.test_malformed_keyc s� dd� }� fdd�}ddRi}||d� ||d� ||d � ||d
� ||d � ||d � ddUi}||d� ||d� ||d� ||d� ||d� ddXi}||d� ||d� ||d� ||d� ||d� dd[i}||d� ||d � ||d� dd^i}||d� ||d� ||d� ||d� ddai}||d � ||d � ||d� d j d �jd �}dd|fffi}|||� dddi}|||� ddgi}|||� d#j d �jd �}dd|fffi}||d$j d �jd �� ||d%j d �jd �� ||d&j d �jd �� ||d'j d �jd �� d(djdnd/�}||d+� ||d,� ||d.� ||d)� d0dyd:�}||d9� ||d;� ||d4� d|d�d?�}||d=� ||d>� ||d@� ||dA� d�d�d?�}||dD� ||dE� ||dF� ||dA� d0d�d:�}||d9� dGd�d�d/�}||d9� dGd�d�d/�}||dI� � jttjd d� � jttji d� dd�i}||dK� dd�i}||dK� dd�i}� jtj��}tj|dN� W d Q R X � jdOt|j �� d S )�Nc S s t j| |� d S )N)r �match_hostname)�cert�hostnamer r r �ok s z0BasicSocketTests.test_match_hostname.<locals>.okc s � j tjtj| |� d S )N)r} r �CertificateErrorrl )rm rn )rl r r r� s z2BasicSocketTests.test_match_hostname.<locals>.failr� r� � example.comz ExAmple.cOmzwww.example.comz .example.comz example.orgZ exampleXcom�*.a.comz foo.a.comz
bar.foo.a.comza.comzXa.comz.a.com�f*.comzfoo.comzf.comzbar.comz bar.foo.com�null.python.org example.orgznull.python.org� *.*.a.com�a.*.comz a.foo.comza..comu püthon.python.org�idna�ascii�
x*.python.org�xn--p*.python.orgu www*.pythön.orgu www.pythön.orgu www1.pythön.orgu ftp.pythön.orgu pythön.orgzJun 26 21:41:46 2011 GMT� linuxfrz.orgr� � linuxfr.org� linuxfr.comr �
<unsupported>)r� r� r� zDec 18 23:59:59 2011 GMTr� r� r� �
Californiar� �
Mountain Viewr� �
Google Inc�mail.google.com)r� r� z gmail.com�
IP Address� 10.11.12.13� 14.15.16.17)r� r� z 14.15.16.18z example.net�2001:0:0:0:0:0:0:CAFE
�2003:0:0:0:0:0:0:BABA
z
2001::cafez
2003::babaz
2003::bebezDec 18 23:59:59 2099 GMT�blablaz
google.com�a*b.comzaxxb.com�a*b.co*�a*b*.comz axxbxxc.comztoo many wildcards�r� rq �r� )r� �r� rr �r� )r� �r� rs �r� )r� �r� rt �r� )r� �r� ru �r� )r� �r� rv �r� )r� �r� ry �r� )r� �r� rz �r� )r� �r� r{ �r� )r� �r� r| �r� r} �r r~ )r� r� r� �r� r� �r� �r� r �r� �r� r� �r� �r� r� �r� �r� r� �r� )r� r� r� r� r� �r� rq �r� )r� �r� rq �r� r� �r� r� )r� r� r� �r� rq �r� )r� �r� rq �r� r� �r� r� )r� r� r� �r� r� �r� �r� r �r� �r� r� �r� �r� r� �r� )r� r� r� r� �r� r� �r� �r� r �r� �r� r� �r� �r� r� �r� )r� r� r� r� �r r� )r� �r� r� �r� �r� r �r� �r� r� �r� �r� r� �r� )r� r� r� r� �r r� )r� �r� r� �r� )r� �r� r� �r� )r� �r� r� �r� )r� )
�encode�decoder} r~ r rl rp rf rp ra )rl ro r� rm rw rd r )rl r �test_match_hostname s�
z$BasicSocketTests.test_match_hostnamec C s: t jt j�}tj� � }| jt|j|ddd� W d Q R X d S )NTz
some.hostname)�server_hostname)r r7 �PROTOCOL_SSLv23r? r} r~ r\ )rl rt r] r r r �test_server_side� s
z!BasicSocketTests.test_server_sidec C s| t j t j�}|jd� |j� t j t j�}|j|j� � t|dd��&}| jt�� |j d� W d Q R X W d Q R X |j
� d S )N� 127.0.0.1r F)�do_handshake_on_connectz unknown-type)r� r ) r? r@ �bind�listenr^ � getsocknamer` r} r~ �get_channel_bindingr� )rl r; �crD r r r � test_unknown_channel_binding� s
z-BasicSocketTests.test_unknown_channel_bindingz
tls-uniquez*'tls-unique' channel binding not availablec C sj t j t j�}t|��}| j|jd�� W d Q R X t j t j�}t|dtd��}| j|jd�� W d Q R X d S )Nz
tls-uniqueT)r\ rV )r? r@ r` � assertIsNoner� r� )rl r; rD r r r � test_tls_unique_channel_binding� s
z0BasicSocketTests.test_tls_unique_channel_bindingc C sV t tjtj��}t|�}| jt��}d }tj� W d Q R X | j|t |j
j d �� d S )Nr ) r` r? r@ �reprZ assertWarnsrC r Z
gc_collectrf rp Zwarningr= )rl rD rE rd r r r �test_dealloc_warn� s z"BasicSocketTests.test_dealloc_warnc
C sr t j� }| jt|�d� | j|t j� tj� �:}t|d< t |d< t j� }| j|j
t � | j|j t� W d Q R X d S )N� � SSL_CERT_DIR�
SSL_CERT_FILE) r Zget_default_verify_pathsro r| r0 ZDefaultVerifyPathsr �EnvironmentVarGuard�CAPATHr� �cafiler )rl �paths�envr r r � test_get_default_verify_paths� s
z.BasicSocketTests.test_get_default_verify_paths�win32zWindows specificc C s� | j tjd�� | j tjd�� | jttj� | jttjd� t� }x�dD ]�}tj|�}| j|t� xr|D ]j}| j|t � | j
t |�d� |\}}}| j|t � | j
|ddh� | j|ttf� t|t�rj|j|� qjW qJW d}| j
||� d S ) N�CA�ROOTr6 r� �x509_asn�
pkcs_7_asnz1.3.6.1.5.5.7.3.1)r� r� )r6 r Zenum_certificatesr} r � WindowsError�setr0 �listr2 ro r| �bytesrf �bool�
isinstance�update) rl Z
trust_oidsZ storenameZstore�elementrm �encZtrust�
serverAuthr r r �test_enum_certificates� s&
z'BasicSocketTests.test_enum_certificatesc C s� | j tjd�� | jttj� | jttjd� tjd�}| j|t� xL|D ]D}| j|t� | j t
|�d� | j|d t � | j |d ddh� qJW d S )Nr� r6 � r r r� r� )
r6 r Z enum_crlsr} r r� r0 r� r2 ro r| r� rf )rl Zcrlsr� r r r �test_enum_crls� s
z BasicSocketTests.test_enum_crlsc C s� d }t jd�}| j||� | j|jd� | j|jd� | j|jd� | j|jd� | j|t j� | jt t jd� t jj
d�}| j||� | j|t j� | jt t jj
d � | j t d�� t jj
d� W d Q R X xxt d�D ]l}yt jj
|�}W n t k
�r Y q�X | j|jt
� | j|jt� | j|jt� | j|jttd �f� q�W t jjd�}| j||� | j|t j� | jt jjd�|� | jt jjd�|� | j t d �� t jjd
� W d Q R X d S )
N� r� � TLS Web Server Authentication�1.3.6.1.5.5.7.3.1r zunknown NID 100000i�� i� zunknown object 'serverauth'Z
serverauth)r r� r r ���)r � _ASN1Objectro �nid� shortnameZlongname�oidr0 r} r~ Zfromnidr] �ranger1 rp �typeZfromname)rl �expected�val�i�objr r r �test_asn1object sB
z BasicSocketTests.test_asn1objectc C s� t jd�}| jt jjt j� | jt jj|� | jt jjjd� | jt jjjd� | jt jjjd� t jd�}| jt jj t j� | jt jj |� | jt jj jd� | jt jj jd� | jt jj jd� d S )Nz1.3.6.1.5.5.7.3.1r r� z1.3.6.1.5.5.7.3.2� Z
clientAuth)
r r r0 �Purpose� SERVER_AUTHro r r r � CLIENT_AUTH)rl r
r r r �test_purpose_enum5 s
z"BasicSocketTests.test_purpose_enumc C s� t j t jt j�}| j|j� | jt��}t|tj d� W d Q R X | j
t |j �d� tj
tj�}| jt��}|j|� W d Q R X | j
t |j �d� d S )N)rS z!only stream sockets are supported)r? r@ Z
SOCK_DGRAMr� r� r} rQ r` r rb ro rp ra r7 r� r\ )rl r; Zcxrt r r r �test_unsupported_dtlsF s z&BasicSocketTests.test_unsupported_dtlsc C s | j tj|�|� d S )N)ro r �cert_time_to_seconds)rl �
timestringZ timestampr r r � cert_time_okQ s z BasicSocketTests.cert_time_okc C s$ | j t�� tj|� W d Q R X d S )N)r} r~ r r )rl r r r r �cert_time_failT s z BasicSocketTests.cert_time_failz)local time needs to be different from UTCc C s | j dd� | j dd� d S )NzMay 9 00:00:00 2007 GMTg �C��AzJan 5 09:34:43 2018 GMTg ��ѓ�A)r )rl r r r �"test_cert_time_to_seconds_timezoneX s z3BasicSocketTests.test_cert_time_to_seconds_timezonec C s� d}d}| j ||� | jtj|d�|� | j d|� | j d|� | jd� | jd� | jd� | jd � | jd
� | jd � | jd � d
}| j d|� | j d|� | j dd� | j dd� | j dd� | jd� | j dd� d S )NzJan 5 09:34:43 2018 GMTg ��ѓ�A)r1 zJan 05 09:34:43 2018 GMTzJaN 5 09:34:43 2018 GmTzJan 5 09:34 2018 GMTzJan 5 09:34:43 2018zJan 5 09:34:43 2018 UTCzJan 35 09:34:43 2018 GMTzJon 5 09:34:43 2018 GMTzJan 5 24:00:00 2018 GMTzJan 5 09:60:43 2018 GMTg �W�AzDec 31 23:59:60 2008 GMTzJan 1 00:00:00 2009 GMTzJan 5 09:34:59 2018 GMTi�FOZzJan 5 09:34:60 2018 GMTi�FOZzJan 5 09:34:61 2018 GMTi�FOZzJan 5 09:34:62 2018 GMTzDec 31 23:59:59 9999 GMTg �� �MB)r ro r r r )rl r ZtsZ
newyear_tsr r r �test_cert_time_to_seconds` s*
z*BasicSocketTests.test_cert_time_to_seconds�LC_ALLr6 c C s@ dd� }|� j � dkr | jd� | jdd� | j|� d � d S )Nc S s t jdd �S )
Nz%br r r� r+ r- r� r ) r r r� r+ r- r� r r r )r( r0 r r r r �local_february_name� s zNBasicSocketTests.test_cert_time_to_seconds_locale.<locals>.local_february_nameZfebz>locale-specific month name needs to be different from C localezFeb 9 00:00:00 2007 GMTg `�r�Az 9 00:00:00 2007 GMT)�lower�skipTestr r )rl r r r r � test_cert_time_to_seconds_locale� s
z1BasicSocketTests.test_cert_time_to_seconds_localec C sv t j t j�}| j|j� tj|�}tt j t j�tjd�}| j|j� |j t
|f�}t j t j
t jt jf}| j||� d S )N)rS )r? r@ r� r� r � bind_portr` r rd �
connect_exr_ rb Z ECONNREFUSEDZ EHOSTUNREACHZ ETIMEDOUT� EWOULDBLOCKrf )rl �server�portr; �rc�errorsr r r �test_connect_ex_error� s
z&BasicSocketTests.test_connect_ex_error)r r r )6�__name__�
__module__� __qualname__rm r r% �
OP_NO_TLSv1_1�
OP_NO_TLSv1_2ru r� r; �
skipUnlessr r
r� ZmaxDiffr� r� r r$ r, r> r Z cpython_onlyrF rV r[ re rh ri rj rk r� r� r� �CHANNEL_BINDING_TYPESr� r� r� r r9 r� r r r r r r r) r r Zrun_with_localer! r) r r r r ra � sT
( ' #ra c @ sR e Zd Zedd� �Zedd� �Zdd� Zeje j
d@k d
�d d � �Z ed
d� �Z dd� Z
eje� d�dd� �Zdd� Zdd� Zdd� Zdd� Zed d � �Zd d � Zeje jd �d!d"� �Zed#d$� �Zed%d&� �Zd'd(� Z d)d*� Z d+d,� Z eje j d-kd.�eje!d/�d0d1� ��Z"eje j d-kd2�d3d4� �Z#d5d6� Z$d7d8� Z%d9d:� Z&d;d<� Z'd=d>� Z(d?S )A� ContextTestsc C sT xt D ]}tj|� qW tj� }| j|jtj� | jttjd� | jttjd� d S )Nr �* r )� PROTOCOLSr r7 ro rr rn r} r~ )rl rr rt r r r �test_constructor� s
z ContextTests.test_constructorc C s* x$t D ] }tj|�}| j|j|� qW d S )N)r3 r r7 ro rr )rl rs rt r r r �
test_protocol� s
zContextTests.test_protocolc C sH t jt j�}|jd� |jd� | jt jd�� |jd� W d Q R X d S )N�ALL�DEFAULTzNo cipher can be selectedz^$:,;?*'dorothyx)r r7 rg r[ r] r8 )rl rt r r r � test_ciphers� s
zContextTests.test_ciphersr r r zOpenSSL too oldc C sH t jt j�}|jd� tdd� |j� D ��}| jd|� | jd|� d S )NZAESGCMc s s | ]}|d V qdS )r
Nr )�.0�dr r r � <genexpr>� s z0ContextTests.test_get_ciphers.<locals>.<genexpr>zAES256-GCM-SHA384zAES128-GCM-SHA256)r r7 rg r[ r� Z get_ciphersrf )rl rt �namesr r r �test_get_ciphers� s
z ContextTests.test_get_ciphersc C s� t jt j�}t jt jB t jB }|ttB tB t B t
B O }| j ||j � | j t j
O _ | j |t j
B |j � t� r�|j t j
@ |_ | j ||j � d|_ | j d|j t j @ � n | jt�� d|_ W d Q R X d S )Nr )r r7 �PROTOCOL_TLS_CLIENT�OP_ALLrh ri r r r r r ro �optionsrj r# r} r~ )rl rt �defaultr r r � test_options� s zContextTests.test_optionsc C s� t jt j�}| j|jt j� t j|_| j|jt j� t j|_| j|jt j� t j|_| j|jt j� | jt �� d |_W d Q R X | jt
�� d|_W d Q R X d S )Nr2 ) r r7 rg ro rX rb rc rd r} r r~ )rl rt r r r �test_verify_mode� s z ContextTests.test_verify_modez!verify_flags need OpenSSL > 0.9.8c C s� t jt j�}tt dd�}| j|jt j|B � t j|_| j|jt j� t j|_| j|jt j� t j|_| j|jt j� t jt j B |_| j|jt jt j B � | j
t �� d |_W d Q R X d S )N�VERIFY_X509_TRUSTED_FIRSTr ) r r7 rg �getattrro � verify_flags�VERIFY_DEFAULT�VERIFY_CRL_CHECK_LEAFZVERIFY_CRL_CHECK_CHAINZVERIFY_X509_STRICTr} r )rl rt �tfr r r �test_verify_flags� s z ContextTests.test_verify_flagsc f C s� t jt j�}|jtd d� |jttd� | jt|jtd� | jt��}|jt� W d Q R X | j |j
j t j � | j
t jd�� |jt� W d Q R X | j
t jd�� |jt� W d Q R X t jt j�}|jtt� |jttd� |jttd� | j
t jd�� |jt� W d Q R X | j
t jd�� |jt� W d Q R X | j
t jd�� |jttd� W d Q R X t jt j�}| j
t jd�� |jtt� W d Q R X |jttd� |jttj� d� |jtttj� �d� |jttt� |jtttj� � |jttttj� �� | j
td�� |jtdd� W d Q R X | jt j�� |jtdd� W d Q R X | j
td �� |jtd
d d� W d Q R X d d
� }dd� }dd� }dd� }dd� }dd� }dd� } G dd� d�}
|jt|d� |jt|d� |jt|d� |jt|
� d� |jt|
� j d� | jt j�� |jt|d� W d Q R X | j
td �� |jt|d� W d Q R X | j
td �� |jt|d� W d Q R X | j
t d �� |jt| d� W d Q R X |jt| d� d S ) N)rW zPEM lib)rV rW zkey values mismatch)Zpasswordzshould be a stringT�badpasszcannot be longer� ai � c S s t S )N)� KEY_PASSWORDr r r r �getpass_unicode+ s z:ContextTests.test_load_cert_chain.<locals>.getpass_unicodec S s t j� S )N)rM r� r r r r �
getpass_bytes- s z8ContextTests.test_load_cert_chain.<locals>.getpass_bytesc S s t tj� �S )N)r� rM r� r r r r �getpass_bytearray/ s z<ContextTests.test_load_cert_chain.<locals>.getpass_bytearrayc S s dS )NrK r r r r r �getpass_badpass1 s z:ContextTests.test_load_cert_chain.<locals>.getpass_badpassc S s dd S )NrL i i r r r r r � getpass_huge3 s z7ContextTests.test_load_cert_chain.<locals>.getpass_hugec S s dS )Nr r r r r r �getpass_bad_type5 s z;ContextTests.test_load_cert_chain.<locals>.getpass_bad_typec S s t d��d S )Nz
getpass error)� Exceptionr r r r �getpass_exception7 s z<ContextTests.test_load_cert_chain.<locals>.getpass_exceptionc @ s e Zd Zdd� Zdd� ZdS )z:ContextTests.test_load_cert_chain.<locals>.GetPassCallablec S s t S )N)rM )rl r r r �__call__: s zCContextTests.test_load_cert_chain.<locals>.GetPassCallable.__call__c S s t S )N)rM )rl r r r �getpass< s zBContextTests.test_load_cert_chain.<locals>.GetPassCallable.getpassN)r* r+ r, rV rW r r r r �GetPassCallable9 s rX zmust return a stringz
getpass error) r r7 rg rZ r� r} r rJ r` ro ra rb rc r] r8 �BADCERT� EMPTYCERT�ONLYCERT�ONLYKEY�BYTES_ONLYCERT�
BYTES_ONLYKEYr% �CERTFILE_PROTECTEDrM r� r� �ONLYKEY_PROTECTEDr~ rW rT ) rl rt rd rN rO rP rQ rR rS rU rX r r r �test_load_cert_chain� sz z!ContextTests.test_load_cert_chainc C s� t jt j�}|jt� |jtd d� |jt� |jtd d� | jt|j� | jt|jd d d � | jt��}|jt � W d Q R X | j
|j j t j
� | jt jd�� |jt� W d Q R X |jtt� |jttd� | jt|jd d� d S )N)r� r zPEM lib)r T)r r7 rg rY r� �BYTES_CERTFILEr} r rJ r` ro ra rb rc r] r8 rY r� � BYTES_CAPATH)rl rt rd r r r �test_load_verify_locationsO s
z'ContextTests.test_load_verify_locationsc C sJ t t��}|j� }W d Q R X tj|�}t t��}|j� }W d Q R X tj|�}tjtj�}| j|j � d d� |j
|d� | j|j � d d� |j
|d� | j|j � d d� |j
|d� | j|j � d d� tjtj�}dj ||f�}|j
|d� | j|j � d d� tjtj�}d|d|d |d
g}|j
dj |�d� | j|j � d d� tjtj�}|j
|d� |j
|d� | j|j � d d� |j
|d� | j|j � d d� tjtj�}d j ||f�}|j
|d� | j|j � d d� tjtj�}| j t
|j
td� | jtjd �� |j
d
d� W d Q R X | jtjd�� |j
dd� W d Q R X d S )N�x509_car )�cadatar r r� �head�otherZagain�tail� z
no start lineZbrokenznot enough datas broken)rI r% r� r r& �CAFILE_NEURONIOr7 rg ro �cert_store_statsrY r r} r �objectr] r8 )rl r@ Z
cacert_pemZ
cacert_derZ neuronio_pemZ neuronio_derrt Zcombinedr r r �test_load_verify_cadatab sN
z$ContextTests.test_load_verify_cadatac C s� t jt j�}|jt� tjdkr*|jt� | jt |j� | jt |jd � | jt
��}|jt � W d Q R X | j |j
jtj� | jt j��}|jt� W d Q R X d S )N�nt)r r7 rg �load_dh_params�DHFILEr r
� BYTES_DHFILEr} r �FileNotFoundErrorr` ro ra rb rc r8 r� )rl rt rd r r r �test_load_dh_params� s
z ContextTests.test_load_dh_paramsc C sD x>t D ]6}tj|�}| j|j� dddddddddddd� � qW d S )Nr ) Znumberr^ Z connect_goodZconnect_renegotiate�acceptZ accept_goodZaccept_renegotiate�hits�missesZtimeoutsZ
cache_full)r3 r r7 ro �
session_stats)rl rs rt r r r �test_session_stats� s
z ContextTests.test_session_statsc C s t jt j�}|j� d S )N)r r7 rg Zset_default_verify_paths)rl rt r r r � test_set_default_verify_paths� s z*ContextTests.test_set_default_verify_pathsz#ECDH disabled on this OpenSSL buildc C sb t jt j�}|jd� |jd� | jt|j� | jt|jd � | jt|jd� | jt|jd� d S )NZ
prime256v1s
prime256v1rx s foo)r r7 rg Zset_ecdh_curver} r r~ )rl rt r r r �test_set_ecdh_curve� s
z ContextTests.test_set_ecdh_curvec C sj t jt j�}| jt|j� | jt|jd� | jt|jd� | jt|j|� dd� }|jd � |j|� d S )Nr+ r6 c S s d S )Nr )r] �
servernamert r r r �
dummycallback� s z5ContextTests.test_sni_callback.<locals>.dummycallback)r r7 rg r} r �set_servername_callback)rl rt r} r r r �test_sni_callback� s
z ContextTests.test_sni_callbackc C sJ t jt j�}|fdd�}|j|� tj|�}~~tj� | j|� d � d S )Nc S s d S )Nr )r] r| rt �cycler r r r} � s z>ContextTests.test_sni_callback_refcycle.<locals>.dummycallback) r r7 rg r~ rA rB �gc�collectrq )rl rt r} rE r r r �test_sni_callback_refcycle� s
z'ContextTests.test_sni_callback_refcyclec C s� t jt j�}| j|j� dddd�� |jt� | j|j� dddd�� |jt� | j|j� dddd�� |jt� | j|j� dddd�� d S )Nr )re �crl�x509r r ) r r7 rg ro rl rZ r� rY r% )rl rt r r r �test_cert_store_stats� s
z"ContextTests.test_cert_store_statsc C s� t jt j�}| j|j� g � |jt� | j|j� g � |jt� | j|j� dtd �td
�d dd"d
d�g� t t��}|j
� }W d Q R X t j |�}| j|jd�|g� d S )#Nr� �Root CAr� �http://www.cacert.orgr� �CA Cert Signing Authorityr� �support@cacert.orgzMar 29 12:29:49 2033 GMTzMar 30 12:29:49 2003 GMTZ00�!https://www.cacert.org/revoke.crlr� )r� r� r� r� r� r� r� T�r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� )r� r� r� r� )r� �r� r� �r� �r� r� �r� �r� r� �r� �r� r� �r� )r� r� r� r� ) r r7 rg ro � get_ca_certsrY r� r% r2 rI r� r& )rl rt r@ r) �derr r r �test_get_ca_certs� s.
z ContextTests.test_get_ca_certsc C s� t jt j�}|j� t jt j�}|jt jj� |j� t jt j�}|jt jj� t jt j�}| jt|jd � | jt|jd� d S )Nr ) r r7 rg �load_default_certsr r r r} r )rl rt r r r �test_load_default_certs s z$ContextTests.test_load_default_certsr� znot-Windows specificz!LibreSSL doesn't support env varsc
C sT t jt j�}tj� �6}t|d< t|d< |j� | j|j � dddd�� W d Q R X d S )Nr� r� r r )r� r� re )
r r7 rg r r� r� r� r� ro rl )rl rt r� r r r �test_load_default_certs_env s
z(ContextTests.test_load_default_certs_envzWindows specificc C sx t jt j�}|j� |j� }t jt j�}tj� �>}t|d< t|d< |j� |d d7 < | j |j� |� W d Q R X d S )Nr� r� r� r )
r r7 rg r� rl r r� r� r� ro )rl rt �statsr� r r r �#test_load_default_certs_env_windows* s
z0ContextTests.test_load_default_certs_env_windowsc C s� | j |jtj@ tj� tdkr0| j |jt@ t� tdkrJ| j |jt@ t� tdkrd| j |jt@ t� tdkr~| j |jt@ t� d S )Nr )ro r@ r rh r r r r )rl rt r r r �_assert_context_options8 s z$ContextTests._assert_context_optionsc C s� t j� }| j|jt j� | j|jt j� | j|j� | j |� t
t ��}|j � }W d Q R X t jt t
|d�}| j|jt j� | j|jt j� | j |� t jt jj�}| j|jt j� | j|jt j� | j |� d S )N)r� r rf )r �create_default_contextro rr r� rX rd r6 �check_hostnamer� rI �
SIGNING_CAr� r� r r rb )rl rt r@ rf r r r �test_create_default_contextG s
z(ContextTests.test_create_default_contextc C s� t j� }| j|jt j� | j|jt j� | j|j� | j |� t jt j
�}| j|jt j
� | j|jt j� | j |� t jt j
t j dd�}| j|jt j
� | j|jt j � | j |j� | j |� t jt j
jd�}| j|jt j� | j|jt j� | j |� d S )NT)rS r� )Zpurpose)r Z_create_stdlib_contextro rr r� rX rb � assertFalser� r� rg rd r6 r r )rl rt r r r �test__create_stdlib_context] s(
z(ContextTests.test__create_stdlib_contextc C s� t jt j�}| j|j� | jt�� d|_W d Q R X t j|_| j|j� d|_| j |j� t j
|_d|_| j |j� | jt�� t j |_W d Q R X d|_| j|j� d S )NTF) r r7 rg r� r� r} r~ rd rX r6 rc rb )rl rt r r r �test_check_hostnamev s z ContextTests.test_check_hostnamec C sT t jt j�}| j|j� | j|jt j� t jt j�}| j |j� | j|jt j
� d S )N) r r7 r> r6 r� ro rX rd �PROTOCOL_TLS_SERVERr� rb )rl rt r r r �test_context_client_server� s z'ContextTests.test_context_client_serverN)r r r r r ))r* r+ r, rD r4 r5 r8 r; �skipIfr r% r= rB rC r/ r' rJ ra rd rn rt ry rz re r{ � needs_snir r� r� r� r� r r9 r5 r� r� r� r� r� r� r� r r r r r1 � s8 S:
r1 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�
SSLErrorTestsc C sX t jdd�}| jt|�d� | j|jd� t jdd�}| jt|�d� | j|jd� d S )Nr rx )r r8 ro rp rb ZSSLZeroReturnError)rl �er r r �test_str� s zSSLErrorTests.test_strc
C sn t jt j�}| jt j��}|jt� W d Q R X | j|jj d� | j|jj
d� t |j�}| j |j
d�|� d S )NZPEMZ
NO_START_LINEz"[PEM: NO_START_LINE] no start line)r r7 rg r} r8 rp r� ro ra Zlibrary�reasonrp r6 r' )rl rt rd r; r r r �test_lib_reason� s
z SSLErrorTests.test_lib_reasonc C s� t jt j�}tj� ��}|jd� |j� tj� }|j|j� � |jd� |j |ddd��T}| j
t j ��}|j � W d Q R X t
|j�}| j|jd�|� | j|jjt j� W d Q R X W d Q R X d S )N� 127.0.0.1r F)r� z%The operation did not complete (read))r� r )r r7 rg r? r� r� r^ r� � setblockingr\ r} �SSLWantReadError� do_handshakerp ra r6 r' ro rb �SSL_ERROR_WANT_READ)rl rt r; r� rd r r r �
test_subclass� s
zSSLErrorTests.test_subclassN)r* r+ r, r� r� r� r r r r r� � s
r� c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd S ) �MemoryBIOTestsc C s� t j� }|jd� | j|j� d� | j|j� d� |jd� |jd� | j|j� d� | j|j� d� |jd� | j|jd�d� | j|jd�d � | j|jd�d� d S )
Ns foorj s bars foobars bazr s bar � z)r � MemoryBIOr ro r� )rl �bior r r �test_read_write� s
z MemoryBIOTests.test_read_writec C s� t j� }| j|j� | j|j� d� | j|j� |jd� | j|j� |j� | j|j� | j|jd�d� | j|j� | j|jd�d� | j|j� | j|j� d� | j|j� d S )Nrj s foor s for � o) r r� r� �eofro r� r � write_eofr6 )rl r� r r r �test_eof� s
zMemoryBIOTests.test_eofc C s� t j� }| j|jd� |jd� | j|jd� x0td�D ]$}|jd� | j|jd| d � q8W x,td�D ] }|jd� | j|j|d � qjW |j� | j|jd� d S )Nr s foor� r rG )r r� ro �pendingr r
r� )rl r� r r r r � test_pending� s
zMemoryBIOTests.test_pendingc C sb t j� }|jd� | j|j� d� |jtd�� | j|j� d� |jtd�� | j|j� d� d S )Ns foos bars baz)r r� r ro r� r� �
memoryview)rl r� r r r �test_buffer_types� s
z MemoryBIOTests.test_buffer_typesc C sL t j� }| jt|jd� | jt|jd � | jt|jd� | jt|jd� d S )Nrx Tr )r r� r} r r )rl r� r r r �test_error_types� s
z MemoryBIOTests.test_error_typesN)r* r+ r, r� r� r� r� r� r r r r r� � s
r� zNeeds threading modulec @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z e
jejdkd�dd� �Zdd� Zdd� Zd d � Zd d � Zd d!� Zee
jeed"�d#�d$d%� ��Zd&d'� Z d(d)� Z d*d+� Z d,S )-�SimpleBackgroundTestsz?Tests that connect to a simple server running in the backgroundc C s2 t t�}t|jf| _|j� | j|jd d d � d S )N)�ThreadedEchoServer�SIGNED_CERTFILEr_ r& � server_addr� __enter__r� �__exit__)rl r% r r r �setUp s zSimpleBackgroundTests.setUpc C s� t tjtj�tjd��.}|j| j� | ji |j� � | j |j
� W d Q R X t tjtj�tj t d��,}|j| j� | j
|j� � | j |j
� W d Q R X d S )N)rS )rS rT )r` r? r@ r rb r^ r� ro � getpeercertr� r\ rd r� r6 )rl r; r r r � test_connect s
z"SimpleBackgroundTests.test_connectc C s< t tjtj�tjd�}| j|j� | jtjd|j | j
� d S )N)rS zcertificate verify failed) r` r? r@ r rd r� r� r] r8 r^ r� )rl r; r r r �test_connect_fail s
z'SimpleBackgroundTests.test_connect_failc C sJ t tjtj�tjtd�}| j|j� | jd|j | j
�� | j |j � � d S )N)rS rT r )
r` r? r@ r rd r� r� r� ro r# r� r6 r� )rl r; r r r �test_connect_ex$ s z%SimpleBackgroundTests.test_connect_exc C s� t tjtj�tjtdd�}| j|j� |jd� |j | j
�}| j |dt j
t jf� tjg |gg d� xby|j� P W qf tjk
r� tj|gg g d� Y qf tjk
r� tjg |gg d� Y qfX qfW | j|j� � d S )NF)rS rT r� r g @)r` r? r@ r rd r� r� r� r� r# r� rf rb Z EINPROGRESSr$ �selectr� r� �SSLWantWriteErrorr6 r� )rl r; r' r r r � test_non_blocking_connect_ex- s$
z2SimpleBackgroundTests.test_non_blocking_connect_exc C s� t jt j�}|jtjtj���"}|j| j� | ji |j � � W d Q R X |jtjtj�dd��}|j| j� W d Q R X t j
|_ |j t
� |jtjtj���$}|j| j� |j � }| j|� W d Q R X d S )NZdummy)r� )r r7 r� r\ r? r@ r^ r� ro r� rd rX rY r� r6 )rl rt r; rm r r r �test_connect_with_contextG s
z/SimpleBackgroundTests.test_connect_with_contextc C sL t jt j�}t j|_|jtjtj��}| j|j � | j
t j d|j | j
� d S )Nzcertificate verify failed)r r7 r� rd rX r\ r? r@ r� r� r] r8 r^ r� )rl rt r; r r r � test_connect_with_context_failY s
z4SimpleBackgroundTests.test_connect_with_context_failc C s� t jt j�}t j|_|jtd� |jtjtj ���$}|j
| j � |j � }| j
|� W d Q R X t jt j�}t j|_|jtd� |jtjtj ���$}|j
| j � |j � }| j
|� W d Q R X d S )N)r )r r7 r� rd rX rY r� r\ r? r@ r^ r� r� r6 rc )rl rt r; rm r r r �test_connect_capathd s z)SimpleBackgroundTests.test_connect_capathc C s� t t��}|j� }W d Q R X tj|�}tjtj�}tj|_|j |d� |j
t j t j ���$}|j
| j� |j� }| j|� W d Q R X tjtj�}tj|_|j |d� |j
t j t j ���$}|j
| j� |j� }| j|� W d Q R X d S )N)rf )rI r� r� r r& r7 r� rd rX rY r\ r? r@ r^ r� r� r6 )rl r@ r) r� rt r; rm r r r �test_connect_cadataz s"
z)SimpleBackgroundTests.test_connect_cadataro z*Can't use a socket as a file under Windowsc
C s� t tjtj��}|j| j� |j� }|j� }|j� tj |d� |j� t
j � | j t
��}tj |d� W d Q R X | j|jjtj� d S )Nr )r` r? r@ r^ r� �fileno�makefiler� r r� r� r� r} rJ ro ra rb ZEBADF)rl rD �fdr@ r� r r r �test_makefile_close� s z)SimpleBackgroundTests.test_makefile_closec C s� t j t j�}|j| j� |jd� t|tjdd�}| j|j � d}xfy|d7 }|j
� P W qD tj k
r� t j |gg g � Y qD tj
k
r� t j g |gg � Y qDX qDW tjr�tjjd| � d S )NF)rS r� r r z9
Needed %d calls to do_handshake() to establish session.
)r? r@ r^ r� r� r` r rb r� r� r� r� r� r� r r r r r )rl r; �countr r r �test_non_blocking_handshake� s&
z1SimpleBackgroundTests.test_non_blocking_handshakec C s t | f| j�dti� d S )Nrm )� _test_get_server_certificater� r� )rl r r r �test_get_server_certificate� s z1SimpleBackgroundTests.test_get_server_certificatec C s t | f| j�� d S )N)�!_test_get_server_certificate_failr� )rl r r r � test_get_server_certificate_fail� s z6SimpleBackgroundTests.test_get_server_certificate_failc ! C s� t tjtj�tjdd��}|j| j� W d Q R X t tjtj�tjdd��}|j| j� W d Q R X | jtjd��: tjtj��"}t |tjdd�}|j| j� W d Q R X W d Q R X d S )Nr6 )rS rU r7 zNo cipher can be selectedz^$:,;?*'dorothyx) r` r? r@ r rb r^ r� r] r8 )rl r; r] r r r r8 � s z"SimpleBackgroundTests.test_ciphersc
C s� t jt j�}t j|_|jtd� | j|j� g � |j t
j
t
j ���$}|j | j
� |j� }| j|� W d Q R X | jt|j� �d� d S )N)r r )r r7 r� rd rX rY r� ro r� r\ r? r@ r^ r� r� r6 r| )rl rt r; rm r r r �test_get_ca_certs_capath� s z.SimpleBackgroundTests.test_get_ca_certs_capath�PROTOCOL_TLSv1_2z
needs TLS 1.2c
C s� t jt j�}t jt j�}tjtj�}|j|��T}|j| j� | j |j
|� | j |j j
|� ||_
| j |j
|� | j |j j
|� W d Q R X d S )N) r r7 r� r� r? r@ r\ r^ r� rq r_ �_sslobj)rl Zctx1Zctx2r; rD r r r �test_context_setget� s z)SimpleBackgroundTests.test_context_setgetc
O s� |j dd�}d}x�d } |d7 }y ||� }
W n> tjk
rh } z | jtjtjfkrR� | j} W Y d d } ~ X nX |j� } |j| � | d kr�P q| tjkr|jd�} | r�|j | � q|j
� qW t j r�t
jj d||jf � |
S )NrZ �
r r i � z"Needed %d calls to complete %s().
)rH r r8 rb r� ZSSL_ERROR_WANT_WRITEr� �sendallrK r r� r r r r r* )
rl r] �incoming�outgoingr? r= r> rZ r� rb �retr� �bufr r r � ssl_io_loop� s2
z!SimpleBackgroundTests.ssl_io_loopc C sv t j t j�}| j|j� |j| j� tj� }tj� }tjtj �}tj
|_ |j t
� d|_|j||dd�}| j|jj|� | j|j� � | j|j� � | j|j� � | jt|j� dtjkr�| j|j d�� | j ||||j � | j |j� � | j|j� � | j|j� � | j |j� � dtjk�r0| j |j d�� y| j ||||j � W n tj!k
�r^ Y nX | jtj"|j#d� d S )NTFr� z
tls-uniques foo)$r? r@ r� r� r^ r� r r� r7 r� rd rX rY r� r� �wrap_biorq r� �ownerr� �cipherr� �assertIsNotNone�shared_ciphersr} r~ r� r0 r� r� r� r6 �unwrapZSSLSyscallErrorr8 r )rl r] r� r� rt �sslobjr r r �test_bio_handshake
s:
z(SimpleBackgroundTests.test_bio_handshakec C s� t j t j�}| j|j� |j| j� tj� }tj� }tjtj �}tj
|_ |j ||d�}| j
||||j� d}| j
||||j|� | j
||||jd�}| j|d� | j
||||j� d S )NFs FOO
i s foo
)r? r@ r� r� r^ r� r r� r7 r� rb rX r� r� r� r r� ro r� )rl r] r� r� rt r� Zreqr� r r r �test_bio_read_write_data+ s z.SimpleBackgroundTests.test_bio_read_write_dataN) r* r+ r, �__doc__r� r� r� r� r� r� r� r� r� r; r� r r
r� r� r� r� r8 r� r� r/ rA r r� r� r� r� r r r r r� s*
"!r� c @ s* e Zd Zdd� Zejejd�dd� �ZdS )�NetworkedTestsc C s| t jt��h ttjtj�tjdd�}| j|j � |j
d� |j tdf�}|dkrZ| j d� | j
|tjtjf� W d Q R X d S )NF)rS r� gH�����z>i� r z!REMOTE_HOST responded too quickly)r �transient_internet� REMOTE_HOSTr` r? r@ r rd r� r� rY r# r rf rb ZEAGAINr$ )rl r; r' r r r �test_timeout_connect_ex> s
z&NetworkedTests.test_timeout_connect_exz
Needs IPv6c C s2 t jd�� t| dd� t| dd� W d Q R X d S )Nzipv6.google.comi� )r r� r� r� )rl r r r � test_get_server_certificate_ipv6L s z/NetworkedTests.test_get_server_certificate_ipv6N) r* r+ r, r� r; r/ r Z IPV6_ENABLEDr� r r r r r� < s r� c C sl t j||f�}|s$| jd||f � t j||f|d�}|sL| jd||f � tjrhtjjd|||f � d S )Nz No server certificate on %s:%s!)rT z&
Verified certificate for %s:%s is
%s
)r �get_server_certificater� r r r r r )�test�hostr& rm r) r r r r� S s r� c C sj yt j||ftd�}W n: t jk
rP } z tjr@tjjd| � W Y d d }~X nX | j d|||f � d S )N)rT z%s
z$Got server certificate %s for %s:%s!)
r r� r� r8 r r r r r r� )r r r& r) �xr r r r� ^ s "r� )�make_https_serverc @ sR e Zd ZG dd� dej�Zddd�Zdd � Zd
d � Zdd d
�Z dd� Z
dd� Z dS )r� c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dS )z$ThreadedEchoServer.ConnectionHandlerz�A mildly complicated class, because we want it to work both
with and without the SSL wrapper around the socket connection, so
that we can test the STARTTLS functionality.c C s@ || _ d| _|| _|| _| jjd� d | _tjj| � d| _ d S )NFr T)
r% �runningr] �addrr� �sslconn� threading�Thread�__init__�daemon)rl r% Zconnsockr r r r r t s z-ThreadedEchoServer.ConnectionHandler.__init__c C s yB| j jj| jdd�| _| j jj| jj� � | j jj| jj � � W n� t
t fk
r� } zB| j j jt
|�� | j jr�tdt| j� d � d| _| j� dS d }~X �n\ tjtfk
�r } zL| j j jt
|�� | j jr�tdt| j� d � d| _| j j� | j� dS d }~X n�X | j jj| jj� � | j jjtjk�r�| jj� }t j �rr| j j�rrt j j dt!j"|� d � | jjd�}t j �r�| j j�r�t j j dt
t#|�� d � | jj$� }t j �r�| j j�r�t j j d
t
|� d � t j j d t
| jj� � d � dS d S ) NT)r\ z'
server: bad connection attempt from z:
Fz client cert is r� z cert binary is z bytes
z" server: connection cipher is now z" server: selected protocol is now )%r% r_ r\ r] r �selected_npn_protocols�append�selected_npn_protocol�selected_alpn_protocols�selected_alpn_protocol�ConnectionResetError�BrokenPipeError� conn_errorsrp �chattyr r� r r r� r r8 rJ �stopr� rX rd r� r r r r r r� r� r| r� )rl r� rm Z cert_binaryr� r r r � wrap_conn~ sF
z.ThreadedEchoServer.ConnectionHandler.wrap_connc C s | j r| j j� S | jjd�S d S )Ni )r r� r] rK )rl r r r r� � s
z)ThreadedEchoServer.ConnectionHandler.readc C s" | j r| j j|�S | jj|�S d S )N)r r r] rO )rl r� r r r r � s z*ThreadedEchoServer.ConnectionHandler.writec C s | j r| j j� n
| jj� d S )N)r r� r] )rl r r r r� � s z*ThreadedEchoServer.ConnectionHandler.closec C sz d| _ | jjs| j� sd S �xX| j �rt�y�| j� }|j� }|s|d| _ y| jj� | _W n t k
rh Y nX d | _| j
� �nj|dkr�t j r�| jj
r�tjjd� | j
� d S | jjr�|dkr�t j r�| jj
r�tjjd� | jd� | j� s�d S �n�| jj�rf| j�rf|dk�rft j �r(| jj
�r(tjjd � | jd� | jj� | _d | _t j �r�| jj
�r�tjjd
� �n�|d k�r�t j �r�| jj
�r�tjjd � | jjd
�}| jt|�jd�d � �n0|dk�r8t j �r�| jj
�r�tjjd� y| jj� W n> tjk
�r* } z | jt|�jd�d � W Y d d }~X n X | jd� n�|dk�rj| jj� d k �r^| jd� n
| jd� n||dk�r�| jj� }| jt|�jd�d � nNt j �r�| jj
�r�| j�r�d�p�d}tjjd|||j� |f � | j|j� � W q tk
�r2 | jj�r t j �r tjjdj| j �� | j
� d| _ Y q t k
�rp | jj�rTt d� | j
� d| _ | jj � Y q X q W d S )NTFs overz" server: client closed connection
s STARTTLSz2 server: read STARTTLS from client, sending OK...
s OK
s ENDTLSz0 server: read ENDTLS from client, sending OK...
z* server: connection is now unencrypted...
s
CB tls-uniquez@ server: read CB tls-unique from client, sending our CB data...
z
tls-uniquezus-ascii�
s PHAz( server: initiating post handshake auth
s HASCERTs TRUE
s FALSE
s GETCERTZ encryptedZ unencryptedz/ server: read %r (%s), sending back %r (%s)...
z Connection reset by peer: {}
zTest server failure:
) r r% �starttls_serverr r� �stripr r� r] rJ r� r r �connectionchattyr r r r� r� r� � verify_client_post_handshaker r8 r� r r r r7 r r r )rl �msg�strippedr� r� rm Zctyper r r �run� s�
*
z(ThreadedEchoServer.ConnectionHandler.runN)
r* r+ r, r� r r r� r r� r r r r r �ConnectionHandlern s
8r NTFc C s� | r | | _ n�tj|d k r |ntj�| _ |d k r2|ntj| j _|rL| j j|� |r\| j j|� |rl| j j|� | r|| j j | � |
r�| j j
|
� || _ || _ || _
tj� | _tj| j�| _d | _d| _g | _g | _g | _g | _tjj| � d| _ d S )NFT) r_ r r7 rn rb rX rY rZ �set_npn_protocols�set_alpn_protocolsr[ r r r r? r] r r" r& �flag�activer r r� r r r r r
) rl Z certificater^ �certreqs�cacertsr r r Z
npn_protocolsZalpn_protocolsrU r_ r r r r $ s<
zThreadedEchoServer.__init__c C s | j tj� � | jj� | S )N)�startr �Eventr! �wait)rl r r r r� I s
z ThreadedEchoServer.__enter__c G s | j � | j� d S )N)r r )rl r= r r r r� N s zThreadedEchoServer.__exit__c C s || _ tjj| � d S )N)r! r r r% )rl r! r r r r% R s zThreadedEchoServer.startc C s | j jd� | j j� d| _| jr,| jj� x�| j�ryT| j j� \}}tjrj| j rjt
j j dt
|� d � | j| ||�}|j� |j� W q. tjk
r� Y q. tk
r� | j� Y q. tk
r� } z*tjr�| j r�t
j j dt
|� d � W Y d d }~X q.X q.W | j j� d S )Ng�������?Tz server: new connection from r� z connection handling failed: )r] rY r� r" r! r� ru r r r r r r r� r r% r r? rZ �KeyboardInterruptr r� r� )rl ZnewconnZconnaddrZhandlerr� r r r r V s.
(zThreadedEchoServer.runc C s
d| _ d S )NF)r" )rl r r r r q s zThreadedEchoServer.stop) NNNNTFFNNNN)N) r* r+ r, r r r r r� r� r% r r r r r r r� l s 7
!
r� c @ sX e Zd ZG dd� dej�Zdd� Zdd� Zdd� Zd d
� Z dd d
�Z
dd� Z dd� Z d S )�AsyncoreEchoServerc @ s6 e Zd ZG dd� dej�Zdd� Zdd� Zdd� Zd S )
z AsyncoreEchoServer.EchoServerc @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
S )z/AsyncoreEchoServer.EchoServer.ConnectionHandlerc C s4 t |d|dd�| _tjj| | j� d| _| j� d S )NTF)r\ rV r� )r` r? �asyncore�dispatcher_with_sendr �_ssl_accepting�_do_ssl_handshake)rl �connrV r r r r | s
z8AsyncoreEchoServer.EchoServer.ConnectionHandler.__init__c C s. t | jtj�r*x| jj� dkr(| j� qW dS )Nr T)r� r? r � SSLSocketr� Zhandle_read_event)rl r r r �readable� s z8AsyncoreEchoServer.EchoServer.ConnectionHandler.readablec C s� y| j j� W n� tjtjfk
r* d S tjk
rB | j� S tjk
rX � Y n@ tk
r� } z |j d t
j kr�| j� S W Y d d }~X nX d| _ d S )Nr F)
r? r� r r� r� Z SSLEOFError� handle_closer8 rJ r= rb Z ECONNABORTEDr, )rl rQ r r r r- � s zAAsyncoreEchoServer.EchoServer.ConnectionHandler._do_ssl_handshakec C sT | j r| j� n@| jd�}tjr4tjjdt|� � |sB| j � n| j
|j � � d S )Ni z server: read %s from client
) r, r- rK r r r r r r� r� rO r )rl r� r r r � handle_read� s
z;AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_readc C s$ | j � tjr tjjd| j � d S )Nz server: closed connection %s
)r� r r r r r r? )rl r r r r1 � s z<AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_closec C s � d S )Nr )rl r r r r � s z<AsyncoreEchoServer.EchoServer.ConnectionHandler.handle_errorN) r* r+ r, r r0 r- r2 r1 r r r r r r z s r c C s@ || _ tjtjtj�}tj|d�| _tjj | |� | j
d� d S )Nr6 r- ) rV r? r@ Z SOCK_STREAMr r" r& r* �
dispatcherr r� )rl rV r] r r r r � s
z&AsyncoreEchoServer.EchoServer.__init__c C s( t jrtjjd| � | j|| j� d S )Nz$ server: new connection from %s:%s
)r r r r r r rV )rl Zsock_objr r r r �handle_accepted� s z-AsyncoreEchoServer.EchoServer.handle_acceptedc C s � d S )Nr )rl r r r r � s z*AsyncoreEchoServer.EchoServer.handle_errorN) r* r+ r, r* r+ r r r4 r r r r r �
EchoServerx s 3r5 c C s8 d | _ d| _| j|�| _| jj| _tjj| � d| _d S )NFT) r! r" r5 r% r& r r r r
)rl rV r r r r � s
zAsyncoreEchoServer.__init__c C s d| j j| jf S )Nz<%s %s>)� __class__r* r% )rl r r r �__str__� s zAsyncoreEchoServer.__str__c C s | j tj� � | jj� | S )N)r% r r& r! r' )rl r r r r� � s
z AsyncoreEchoServer.__enter__c G sV t jrtjjd� | j� t jr,tjjd� | j� t jrFtjjd� tjdd� d S )Nz cleanup: stopping server.
z! cleanup: joining server thread.
z cleanup: successfully joined.
T)Z
ignore_all) r r r r r r r r* Z close_all)rl r= r r r r� � s zAsyncoreEchoServer.__exit__Nc C s || _ tjj| � d S )N)r! r r r% )rl r! r r r r% � s zAsyncoreEchoServer.startc C sB d| _ | jr| jj� x&| j r<ytjd� W q Y qX qW d S )NTr )r" r! r� r* Zloop)rl r r r r � s
zAsyncoreEchoServer.runc C s d| _ | jj� d S )NF)r" r% r� )rl r r r r � s zAsyncoreEchoServer.stop)N)
r* r+ r, r* r3 r5 r r7 r� r� r% r r r r r r r) t s D
r) � FOO
c C sz i }t ||dd�}|��X | jtj� ||d���} | jt|jf� x�|t|�t|�gD ]�}
|rttj rtt
j j d| � | j |
� | j
� } |r�tj r�t
j j d| � | |j� krVtd| dd� t| �|dd� j� t|�f ��qVW | j d � |�rtj �rt
j j d
� |j| j� | j� | j� | j� | j� | j� | j| jd �� | j� W dQ R X |j|d < |j |d
< |j |d< W dQ R X |S )zc
Launch a server, connect a client to it and try various reads
and writes.
F)r_ r r )r� �sessionz client: sending %r...
z client: read %r
z4bad data <<%r>> (%d) received; expected <<%r>> (%d)
N� s over
z client: closing connection.
)� compressionr� �peercert�client_alpn_protocol�client_npn_protocolr� �session_reusedr9 �server_alpn_protocols�server_npn_protocols�server_shared_ciphers) r� r\ r? r^ r_ r& r� r� r r r r r r� r �AssertionErrorr| r� r; r� r� r r
r� r? r9 r� r r r� ) �client_context�server_context�indatar r �sni_namer9 r� r% r; �arg�outdatar r r �server_params_test� sR
rJ c
C s� |dkrt j}t jdt jdt jdi| }tjr\|r6dp8d}tjj|t j |�t j | �|f � t j
|�}| j |O _ t j
| �} | j |O _ |j t j
kr�|jd� x*|| fD ] }
||
_|
jt� |
jt� q�W yt|| ddd �} W nT t jk
r� |r�� Y n� tk
�r6 } z |�s$| jtjk�r&� W Y dd} ~ X nRX |�s\td
t j |�t j | �f ��n,|d k �r�|| d k�r�td
|| d f ��dS )aT
Try to SSL-connect using *client_protocol* to *server_protocol*.
If *expect_success* is true, assert that the connection succeeds,
if it's false, assert that the connection fails.
Also, if *expect_success* is a string, assert that it is the protocol
version actually used by the connection.
Nrb rc rd z %s->%s %s
z
{%s->%s} %s
r6 F)r r z5Client protocol %s succeeded with server protocol %s!Tr� z%version mismatch: expected %r, got %r)r rb rc rd r r r r r Zget_protocol_namer7 r@ rr r� r[ rX rZ r� rY rJ r8 rJ rb �
ECONNRESETrC )
Zserver_protocolZclient_protocol�expect_successZ certsreqs�server_options�client_optionsZcerttypeZ formatstrrD rE rt r� r� r r r �try_protocol_combo sP
rO c @ sp e Zd Zedd� �Zdd� Zeje� d�dd� �Z dd � Z
d
d � Z d d
� Z eeje
ed�d�dd� ��Zeedd� ��Zeeje
ed�d�dd� ��Zedd� �Zeeje
ed�d�ed d � ���Zeeje
ed �d �d d!� ��Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Z d0d1� Z d2d3� Z d4d5� Z d6d7� Z d8d9� Z!ejej"d:�d;d<� �Z#ejej$d=�d>d?� �Z%ejd@ej&kdA�dBdC� �Z'dDdE� Z(eje
edF�dG�dHdI� �Z)dJdK� Z*dLdM� Z+ejej,dN�dOdP� �Z-ejej,dQ�dRdS� �Z.dTdU� Z/ejej0dV�dWdX� �Z1dYdZ� Z2d[d\� Z3e4d]d^� �Z5e4d_d`� �Z6e4dadb� �Z7e4dcdd� �Z8dedf� Z9dgdh� Z:didj� Z;dkdl� Z<dmdn� Z=doS )p�
ThreadedTestsc 7 C s� t jrtjjd� x`tD ]X}|tjtjhkr.q| j tj
| d��* tj |�}|j t
� t||ddd� W dQ R X qW tj tj�}|jt� tj tj�}|j t� | j tjtjd�� t||dddd� W dQ R X d |_| j tjtjd��B | jtj��}t||dddd� W dQ R X | jd
t|j�� W dQ R X | j tjtjd��@ | jtj��}t||ddd � W dQ R X | jd
t|j�� W dQ R X | j tjtjd��@ | jtj��}t||ddd � W dQ R X | jd
t|j�� W dQ R X dS ) z2Basic test of an SSL client connecting to a serverr� )rr T)r r N)�clientr% � fakehostname)rD rE r r rG Fz%called a function you should not call)rD rE r r )r r r r r r3 r r> r� ZsubTest�_PROTOCOL_NAMESr7 rZ r� rJ rY r� �SIGNED_CERTFILE2r� r} r8 rf rp ra )rl rr r_ rD rE r� r r r � test_echoZ sT
zThreadedTests.test_echoc C sr t jrtjjd� tjtj�}tj|_ |j
t � |j t � t
|dd�}|�� |jtj� dd�}|jt|jf� | jt�� |j� W d Q R X |j� |j� }| j|d� |j� }t jr�tjjtj|�d � tjjdt|� d � d|k�r| j d tj|� � d|d k�r | j d � | j d
|� | j d|� tj |d
�}tj |d �}| j ||� |j � W d Q R X d S )Nr� F)r_ r )r� zCan't get peer certificate.zConnection cipher is z.
r� z$No subject field in certificate: %s.r� �Python Software FoundationzkMissing or invalid 'organizationName' field in certificate subject; should be 'Python Software Foundation'.r� r� �r� rV )rW )!r r r r r r r7 r� rd rX rY r� rZ r� r\ r? r^ r_ r& r} r~ r� r� r6 r� r� r� rp r� rf r r4 r� )rl r_ r% r; rm r� Zbefore�afterr r r �test_getpeercert� sB
z ThreadedTests.test_getpeercertz!verify_flags need OpenSSL > 0.9.8c 4 C s� t jrtjjd� tjtj�}|jt � tjtj�}tj
|_ |j t
� ttdd�}| j|jtj|B � t|dd�}|�D |jtj� ��*}|jt|jf� |j� }| j|d� W d Q R X W d Q R X | jtjO _t|dd�}|�J |jtj� ��0}| jtj d�� |jt|jf� W d Q R X W d Q R X W d Q R X |j t � t|dd�}|�D |jtj� ��*}|jt|jf� |j� }| j|d� W d Q R X W d Q R X d S )Nr� rD r T)r_ r zCan't get peer certificate.zcertificate verify failed) r r r r r r r7 rg rZ r� rd rX rY r� rE ro rF rG r� r\ r? r^ r_ r& r� r6 rH r] r8 �CRLFILE)rl rE r_ rI r% r; rm r r r �test_crl_check� s:
.
z ThreadedTests.test_crl_checkc : C sd t jrtjjd� tjtj�}|jt � tjtj�}tj
|_ d|_ |j
t� t|dd�}|�H |jtj� dd��*}|jt|jf� |j� }| j|d� W d Q R X W d Q R X t|dd�}|�N |jtj� dd��0}| jtjd�� |jt|jf� W d Q R X W d Q R X W d Q R X t|dd�}|�< tj� �(}| jtd �� |j|� W d Q R X W d Q R X W d Q R X d S )
Nr� T)r_ r r� )r� zCan't get peer certificate.Zinvalidz,hostname 'invalid' doesn't match 'localhost'z'check_hostname requires server_hostname)r r r r r r r7 rg rZ r� rd rX r� rY r� r� r\ r? r^ r_ r& r� r6 r] rp r~ )rl rE r_ r% r; rm r r r r� � s8
.
z!ThreadedTests.test_check_hostnamec % C s t jjt jjt�pt jd�}tttj t
ddd�}|�� t j � ��}t ||tj
d���}y|jt|jf� W n~ tjk
r� } z tjr�tjjd| � W Y dd}~X nP tk
r� } z*|jtjkr�� tjr�tjjd| � W Y dd}~X n X | jd� W dQ R X W dQ R X W dQ R X dS ) z�Connecting when the server rejects the client's certificate
Launch a server with CERT_REQUIRED, and check that trying to
connect to it with a wrong client certificate fails.
z keycert.pemF)r# r$ r r )rV r^ z
SSLError is %r
Nz
socket.error is %r
z'Use of invalid cert should have failed!)r r r r r rf r� r� r rd r� r? r` rg r^ r_ r& r8 r r r r r rJ rb rK r� )rl rV r% r] r; r� r r r �test_wrong_cert
s,
"z ThreadedTests.test_wrong_certc
st t j� �t j� � tj� �tj�t��� ��fdd�}� ���fdd�}t j|d�}|j� z
|� W d|j� X dS )z|A brutal shutdown of an SSL server should raise an OSError
in the client when attempting handshake.
c s8 �j � �j� �j� \} }| j� �j� � j� d S )N)r� r� ru r� )Znewsockr )�
listener_gone�listener_readyr; r r �listener5
s z2ThreadedTests.test_rude_shutdown.<locals>.listenerc sb �j � tj� �H} | jt�f� � j � y t| �}W n tk
rH Y n X �jd� W d Q R X d S )Nz2connecting to closed SSL socket should have failed)r' r? r^ r_ r` rJ r� )r� �ssl_sock)r] r^ r& rl r r � connector=
s
z3ThreadedTests.test_rude_shutdown.<locals>.connector)�targetN) r r& r? r r" r_ r r% r )rl r_ ra r: r )r] r^ r& r; rl r �test_rude_shutdown'
s
z ThreadedTests.test_rude_shutdownr3 z)OpenSSL is compiled without SSLv2 supportc C s� t jrtjjd� ttjtjd� ttjtjdtj� ttjtjdtj � ttjtj
d� t td�rtttjtj d� ttjtj
d� t� r�ttjtj
dtjd� ttjtj
dtjd� ttjtj
dtjd� dS )z9Connecting to an SSLv2 server with various client optionsr� TF�PROTOCOL_SSLv3)rN N)r r r r r rO r r3 rc rd r� rA rd rg r& rh ri rj )rl r r r �test_protocol_sslv2P
s
z!ThreadedTests.test_protocol_sslv2c C s� t jrtjjd� ttd�rnyttjtj d� W n< t
k
rl } z t jr\tjjdt |� � W Y dd}~X nX ttd�r�ttjtj d� ttjtjd� ttjtj
d� ttd�r�ttjtj dtj� ttjtjdtj� ttjtj
dtj� ttd��rttjtj dtj� ttjtjdtj� ttjtj
dtj� ttd��rXttjtj dtjd � ttjtjdtjtjB d � ttjtj
dtjd � dS )
z:Connecting to an SSLv23 server with various client optionsr� r3 Tz; SSL2 client to SSL23 server test unexpectedly failed:
%s
Nrd FrF )rM )r r r r r rA r rO r� r3 rJ rp rd rg rc rd ri rh rj )rl r r r r �test_protocol_sslv23h
s:
z"ThreadedTests.test_protocol_sslv23rd z)OpenSSL is compiled without SSLv3 supportc C s� t jrtjjd� ttjtjd� ttjtjdtj� ttjtjdtj � t
td�rdttjtj d� ttjtj dtj
d� ttjtjd� t� r�ttjtj dtjd� dS )z9Connecting to an SSLv3 server with various client optionsr� ZSSLv3r3 F)rN N)r r r r r rO r rd rc rd rA r3 r� ri rg r& rh )rl r r r �test_protocol_sslv3�
s
z!ThreadedTests.test_protocol_sslv3c C s� t jrtjjd� ttjtjd� ttjtjdtj� ttjtjdtj � t
td�rdttjtj d� t
td�r~ttjtj d� ttjtj
dtjd� dS )z8Connecting to a TLSv1 server with various client optionsr� rF r3 Frd )rN N)r r r r r rO r rg rc rd rA r3 rd r� rj )rl r r r �test_protocol_tlsv1�
s
z!ThreadedTests.test_protocol_tlsv1�PROTOCOL_TLSv1_1z TLS version 1.1 not supported.c C s� t jrtjjd� ttjtjd� ttd�r<ttjtj d� ttd�rVttjtj
d� ttjtj dtj d� ttj tjd� ttjtj
d� ttj
tjd� dS )znConnecting to a TLSv1.1 server with various client options.
Testing against older TLS versions.r� zTLSv1.1r3 Frd )rN N)r r r r r rO r ri rA r3 rd r� r- rg )rl r r r �test_protocol_tlsv1_1�
s
z#ThreadedTests.test_protocol_tlsv1_1r� z TLS version 1.2 not supported.c C s� t jrtjjd� ttjtjdtjtj B tjtj B d� t
td�rRttjtj d� t
td�rlttjtj d� ttjtj
dtjd� ttj
tjd� ttjtjd� ttjtjd� ttjtjd� ttjtjd� dS ) znConnecting to a TLSv1.2 server with various client options.
Testing against older TLS versions.r� zTLSv1.2)rM rN r3 Frd )rN N)r r r r r rO r r� ri rh rA r3 rd r� r. rg ri )rl r r r �test_protocol_tlsv1_2�
s
z#ThreadedTests.test_protocol_tlsv1_2c C s� d}t ttjd d d d
�}d }|��l tj� }|jd � |jt|jf� t j
rXt j j
d
� x�|D ]�}t j
rxt j j
d| � |r�|j
|� |j� }n|j|� |jd�}|j� j� }|dkr�|jd�r�t j
r�t j j
d| � t|tjd�}d }q^|dk�r(|jd��r(t j
�rt j j
d| � |j� }d }q^t j
r^t j j
d| � q^W t j
�rVt j j
d� |�rh|j
d� n
|jd� |�r�|j� n|j� W dQ R X dS )z6Switching from clear text to encrypted and back again.� msg 1� MSG 2� STARTTLS� MSG 3� msg 4� ENDTLS� msg 5� msg 6T)r^ r r r Fr r� z client: sending %r...
i s okz/ client: read %r from server, starting TLS...
)r^ z- client: read %r from server, ending TLS...
z client: read %r from server
z client: closing connection.
s over
N)rl rm rn ro rp rq rr rs )r� r� r rg r? r� r^ r_ r& r r r r r r� rO rK r r r' r` r� r� ) rl Zmsgsr% �wrappedr; rF r. rI r r r r �
test_starttls�
s`
zThreadedTests.test_starttlsc C s� t | td�}tjr tjjd� ttd��}|j� }W dQ R X d}d|j t
j j t�d f }t
jtd�}tjj||d �}zN|j� jd
�}|r�t|�d kr�|jt|��}tjr�tjjd t|�|f � W d|j� X | j||� dS )
z8Using socketserver to create and manage SSL connections.)rV r� �rbNr6 zhttps://localhost:%d/%sr )r� )r_ zcontent-lengthr z/ client: read %d bytes from remote server '%s'
)r r� r r r r r rI r� r& r r �splitr r� �urllibZrequestZurlopen�inforH r1 r| r� ro )rl r% r@ r* r+ Zurlr_ Zdlenr r r �test_socketserver s(
z ThreadedTests.test_socketserverc C s t jrtjjd� d}tt�}|�� ttj� �}|j d|j
f� t jrVtjjd| � |j|� |j � }t jr~tjjd| � ||j � kr�| j
d|dd� t|�|dd� j � t|�f � |jd � t jr�tjjd
� |j� t jr�tjjd � W dQ R X dS ) z'Check the example asyncore integration.r� s FOO
z 127.0.0.1z client: sending %r...
z client: read %r
z4bad data <<%r>> (%d) received; expected <<%r>> (%d)
Nr: s over
z client: closing connection.
z client: connection closed.
)r r r r r r) r� r` r? r^ r& r� r r� r| r� )rl rF r% r; rI r r r �test_asyncore_server6 s2
z"ThreadedTests.test_asyncore_serverc s� t jrtjjd� tttjtj tddd�}|��� t
t j � dtttjtj d�� � j t
|jf� � fdd�}� fdd �}d
� jdg tfd � jdd gtfd
� jdg dd� fg}d� jdg fd� jdd gfd|dg fd|dg fg}d}� x�|D ]�\}}} }
} || jd�} yx|| f|
�� }
dj|�}| j|
| | �|d� � j� }|| j� k�rz| jdj||dd� t|�| dd� t| �d�� W q� tk
�r� } zB| �r�| jd j|d �� t |�j |��s�| jd j||d �� W Y dd}~X q�X q�W x�|D ]�\}}} }
|| jd�} yV� j| � ||
� }|| j� k�rV| jd j||dd� t|�| dd� t| �d�� W nh tk
�r� } zJ| �r�| jd!j|d �� t |�j |��s�| jd j||d �� � j� W Y dd}~X nX �q�W d"}� j|� t t|��}| j� jd&|�t|�� | j||� t dk �rBt j t|� }|j!|�}� j|� | j� j� |� | j"t#� j$� | j"t#� j%d"g� | j"t#� j&d$� | j"t#� j't d$�g� � jd%� | j"t� jd'� | j"t� jd(� � j(� W dQ R X dS ))z Test recv(), send() and friends.r� TF)r# r^ r$ r r )r\ rV rT rS r^ c s" t dd �} � j| �}| d |� S )N� rI )r� rL )�br� )r; r r �
_recv_intog s
z0ThreadedTests.test_recv_send.<locals>._recv_intoc s& t dd �} � j| �\}}| d |� S )Nr| rI )r� rN )r} r� r )r; r r �_recvfrom_intol s z4ThreadedTests.test_recv_send.<locals>._recvfrom_intorO rP z some.addressr� c S s d S )Nr )r r r r �<lambda>u s z.ThreadedTests.test_recv_send.<locals>.<lambda>rK rM rL rN ZPREFIX_rx zsending with {})r zpWhile sending with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
Nr: )r
rI ZnoutrF Zninz>Failed to send with method <<{name:s}>>; expected to succeed.
)r
zFMethod <<{name:s}>> failed with unexpected exception message: {exp:s}
)r
ZexpzrWhile receiving with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
zAFailed to receive with method <<{name:s}>>; expected to succeed.
s datar rI s over
r r r ))r r r r r r� r� r rb rg r` r? r^ r_ r& rO r| rP r� rK rM r� r7 ro r� r r� r~ rp r' r� �ctypesZc_ubyteZfrom_buffer_copyr} rQ rR rS rT rU r� )rl r% r~ r Z send_methodsZ recv_methodsZ data_prefixZ meth_nameZ send_methrL r= Z ret_val_methrF r� r rI r� Z recv_methr� �bufferZubyteZ bytesliker )r; r �test_recv_sendS s�
"
z ThreadedTests.test_recv_sendc C s� t t�}|j� | j|jd d � tjt|jf�}| j|j � t
|dd�}| j|j � |j d� | j |j
d�d� | j |jd�d� | j |j� d� |jd� | j |j
d�d� | j |jt� �d� d S )NF)Zsuppress_ragged_eofss datar rj )r� r� r� r� r� r? Zcreate_connectionr_ r& r� r` rO ro rK r� r� rL r� )rl r% r; r r r �test_recv_zero� s
z ThreadedTests.test_recv_zeroc s� t ttjtjtddd�}|�x ttj� dtttjtjd���jt|j f� �j
d� t d�� � �fdd�}| j tj
tjf|� �j
d� �j� W d Q R X d S )NTF)r# r^ r$ r r )r\ rV rT rS r^ i c s x�j � � qW d S )N)rO r )r� r; r r � fill_buffer s z8ThreadedTests.test_nonblocking_send.<locals>.fill_buffer)r� r� r rb rg r` r? r^ r_ r& r� r� r} r� r� r� )rl r% r� r )r� r; r �test_nonblocking_send� s*
z#ThreadedTests.test_nonblocking_sendc s� t j t j��d}tj��}tj� �d� � ��fdd�}tj|d�}|j� �j� z�z:t j t j�}|j d� |j
||f� | j t j dt
|� W d |j� X z:t j t j�}t
|�}|j d� | j t j d|j
||f� W d |j� X W d d� |j� �j� X d S ) Nz 127.0.0.1Fc sj �j � �j� g } x:� sNtj�gg g d�\}}}�|kr| j�j� d � qW x| D ] }|j� qVW d S )Ng�������?r )r� r� r� r ru r� )ZconnsrE �wr� r] )�finishr% �startedr r �serve s
z3ThreadedTests.test_handshake_timeout.<locals>.serve)rb g�������?z timed outT)r? r@ r r" r r& r r% r' rY r^ r] rZ r` r� r )rl r r& r� r: r� r )r� r% r� r �test_handshake_timeout
s6
z$ThreadedTests.test_handshake_timeoutc s t jt j�}t j|_|jt� |jt� tjtj ��d}t
j ��}|j �dd��| j
�j� tj� � d �d �� ���fdd�}tj|d�}|j� � j� |j tj� �}|j||f� |jd� |j� |j� }|j� |j� �j� �j� | j�t j� | j �|� d S )Nz 127.0.0.1T)r\ c s0 �j � � j� �j� \���j�jd�� d S )Nr+ )r� r� ru rO rK r )�evt�peer�remoter% r r r� N s z/ThreadedTests.test_server_accept.<locals>.serve)rb s data) r r7 r� rd rX rY r� rZ r? r@ r r" r\ r6 r\ r r& r r% r' r^ rO rK r� r� r r0 r/ ro )rl r_ r r& r� r: rQ Z client_addrr )r� r� r� r% r �test_server_accept> s6
z ThreadedTests.test_server_acceptc C sZ t jt j�}|jtj� ��6}| jt��}|j� W d Q R X | j|j j
t
j � W d Q R X d S )N) r r7 r� r\ r? r} rJ r� ro ra rb �ENOTCONN)rl r_ r] rd r r r �test_getpeercert_enotconng s
z'ThreadedTests.test_getpeercert_enotconnc C sZ t jt j�}|jtj� ��6}| jt��}|j� W d Q R X | j|j j
t
j � W d Q R X d S )N) r r7 r� r\ r? r} rJ r� ro ra rb r� )rl r_ r] rd r r r �test_do_handshake_enotconnn s
z(ThreadedTests.test_do_handshake_enotconnc C s� t jt j�}|jt� t jt j�}t j|_d|_| jt j O _|j
d� |j
d� t |d��J}|j t
j
� dd��,}| jt�� |jt|jf� W d Q R X W d Q R X W d Q R X | jd|jd � d S ) NTZAES128�AES256)r_ r� )r� zno shared cipherr )r r7 r� rZ r� rd rX r� r@ rk r[ r� r\ r? r} rJ r^ r_ r& rf r )rl rE rD r% r; r r r �test_no_shared_ciphersu s
.z$ThreadedTests.test_no_shared_ciphersc C s� t jt j�}ttt jdd��`}|jtj� ��6}| j|j� d� |j t
|j f� | j |j� d� W dQ R X | j|j� d� W dQ R X dS )z�
Basic tests for SSLSocket.version().
More tests are done in the test_protocol_*() methods.
F)r^ r NrF )
r r7 rg r� r� r\ r? rq r� r^ r_ r& ro )rl r_ r% r; r r r �test_version_basic� s
z ThreadedTests.test_version_basicz%test requires TLSv1.3 enabled OpenSSLc C s� t jt j�}|jt� | jt jt jB t jB O _t |d��J}|j
t j � ��0}|j t
|jf� | j|j� d dddg� W d Q R X W d Q R X d S )N)r_ r ZTLS_AES_256_GCM_SHA384Z TLS_CHACHA20_POLY1305_SHA256ZTLS_AES_128_GCM_SHA256)r r7 rn rZ r� r@ rj r- r. r� r\ r? r^ r_ r& rf r� )rl r_ r% r; r r r � test_tls1_3� s
zThreadedTests.test_tls1_3z"test requires ECDH-enabled OpenSSLc C s� t jt j�}|jt� | jt jO _t jdk r:|jd� t |d��D}|j
t j � ��*}|j t
|jf� | jd|j� d � W d Q R X W d Q R X d S )Nr r z
ECCdraft:ECDH)r_ ZECDH)r r r )r r7 r� rZ r� r@ rk r% r[ r� r\ r? r^ r_ r& rf r� )rl r_ r% r; r r r �test_default_ecdh_curve� s
z%ThreadedTests.test_default_ecdh_curvez
tls-uniquez*'tls-unique' channel binding not availablec C s� t jrtjjd� tttjtj tddd�}|��L t
t j � dtttjtj d�}|j t
|jf� |jd�}t jr�tjjdj|�� | j|� | jt|�d� |jd � |j� j� }| j|t|�jd
�� |j� t
t j � dtttjtj d�}|j t
|jf� |jd�}t j�r tjjd j|�� | j||� | j|� | jt|�d� |jd � |j� j� }| j|t|�jd
�� |j� W d Q R X d S )
z Test tls-unique channel binding.r� TF)r# r^ r$ r r )r\ rV rT rS r^ z
tls-uniquez! got channel binding data: {0!r}
� s CB tls-unique
zus-asciiz) got another channel binding data: {0!r}
N)r r r r r r� r� r rb rg r` r? r^ r_ r& r� r7 r� ro r| r� r r� r� r� r� )rl r% r; Zcb_dataZpeer_data_reprZ new_cb_datar r r r� � s\
z-ThreadedTests.test_tls_unique_channel_bindingc C s\ t jt j�}|jt� t||ddd�}tjrBtj j
dj |d �� | j |d d ddh� d S )NT)r r z got compression: {!r}
r; ZZLIBZRLE)
r r7 rg rZ r� rJ r r r r r r7 rf )rl r_ r� r r r �test_compression� s
z ThreadedTests.test_compressionr z*ssl.OP_NO_COMPRESSION needed for this testc C sJ t jt j�}|jt� | jt jO _t||ddd�}| j|d d � d S )NT)r r r; ) r r7 rg rZ r� r@ r rJ rq )rl r_ r� r r r �test_compression_disabled
s
z'ThreadedTests.test_compression_disabledc C s~ t jt j�}|jt� |jt� |jd� t||ddd�}|d d }|j d�}d|krzd|krzd |krz| j
d
|d � d S ) NZkEDHT)r r r� r �-ZADHZEDHZDHEzNon-DH cipher: ) r r7 rg rZ r� rp rq r[ rJ rw r� )rl r_ r� r� �partsr r r �test_dh_params
s
z ThreadedTests.test_dh_paramsc C s: t jt j�}|jt� t||ddd�}| j|d d � d S )NT)r r r= )r r7 rg rZ r� rJ rq )rl r_ r� r r r �test_selected_alpn_protocol
s
z)ThreadedTests.test_selected_alpn_protocolzALPN support requiredc C s^ t jt j�}|jt� t jt j�}|jt� |jddg� t||ddd�}| j|d d � d S )Nrx �barT)r r r= ) r r7 rg rY r� rZ r rJ rq )rl rD rE r� r r r �/test_selected_alpn_protocol_if_server_uses_alpn"
s
z=ThreadedTests.test_selected_alpn_protocol_if_server_uses_alpnz!ALPN support needed for this testc C s^ dddg}ddgdfddgdfdgdfddgd fg}�x"|D �]\}}t jt j�}|jt� |j|� t jt j�}|jt� |j|� yt||ddd�}W n( t jk
r� } z
|}W Y d d }~X nX |d kr�tr�t j dk r�| j
|t j� q<d t |�t |�t |�f } |d }
| j |
|| |
d
f � t
|d ��r<|d d nd} | j | || | df � q<W d S )Nrx r� Z milkshakezhttp/3.0zhttp/4.0T)r r r r r� zKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sr= rQ r@ �nothingr% )r r r r� r )r r7 r� rZ r� r rJ r8 �IS_OPENSSL_1_1r% r0 rp ro r| ) rl �server_protocols�protocol_tests�client_protocolsr rE rD r� r� r �
client_result�
server_resultr r r �test_alpn_protocols.
s>
z!ThreadedTests.test_alpn_protocolsc C s: t jt j�}|jt� t||ddd�}| j|d d � d S )NT)r r r> )r r7 rg rZ r� rJ rq )rl r_ r� r r r �test_selected_npn_protocolX
s
z(ThreadedTests.test_selected_npn_protocolz NPN support needed for this testc C s ddg}ddgdfddgdfddgdfddgdfg}x�|D ]�\}}t jt j�}|jt� |j|� t jt j�}|jt� |j|� t||ddd�}dt|�t|�t|�f }|d } | j| ||| d
f � t |d �r�|d d nd
}
| j|
|||
df � q:W d S )Nzhttp/1.1zspdy/2r �abc�defT)r r zKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sr> rQ rA r r� r% r )
r r7 rg rZ r� r rJ rp ro r| ) rl r� r� r� r rE rD r� r r� r� r r r �test_npn_protocols`
s*
z ThreadedTests.test_npn_protocolsc C sT t jt j�}|jt� t jt j�}|jt� t jt j�}t j|_|jt � |||fS )N)
r r7 rg rZ r� rT rd rX rY r� )rl rE �
other_contextrD r r r � sni_contexts}
s
zThreadedTests.sni_contextsc C s" |d }| j d|ff|d � d S )Nr< r� r� )rf )rl r� r
rm r r r �check_common_name�
s z ThreadedTests.check_common_namec s� g � | j � \}�}� �fdd�}|j|� t||ddd�}| j� d|fg� | j|d� g � t||dd d�}| j� d |fg� | j|d� g � |jd � t||ddd�}| j|d� | j� g � d S ) Nc s � j ||f� |d k r �| _d S )N)r r_ )r` � server_name�initial_context)�callsr� r r �
servername_cb�
s z6ThreadedTests.test_sni_callback.<locals>.servername_cbT� supermessage)r rG rR r� Znotfunny)r� r~ rJ ro r� )rl rE rD r� r� r )r� r� r r �
s,
z ThreadedTests.test_sni_callbackc
C s\ | j � \}}}dd� }|j|� | jtj��}t||ddd�}W d Q R X | j|jjd� d S )Nc S s t jS )N)r Z ALERT_DESCRIPTION_ACCESS_DENIED)r` r� r� r r r �cb_returning_alert�
s zAThreadedTests.test_sni_callback_alert.<locals>.cb_returning_alertFr� )r rG ZTLSV1_ALERT_ACCESS_DENIED) r� r~ r} r r8 rJ ro ra r� )rl rE r� rD r� rd r� r r r �test_sni_callback_alert�
s
z%ThreadedTests.test_sni_callback_alertc C s� | j � \}}}dd� }|j|� | jtj��*}tj� �}t||ddd�}W d Q R X W d Q R X | j|j j
d� | j d|j � � d S )Nc S s dd d S )Nr r r )r` r� r� r r r �
cb_raising�
s z;ThreadedTests.test_sni_callback_raising.<locals>.cb_raisingFr� )r rG Z SSLV3_ALERT_HANDSHAKE_FAILURE�ZeroDivisionError)
r� r~ r} r r8 r �captured_stderrrJ ro ra r� rf �getvalue)rl rE r� rD r� rd �stderrr� r r r �test_sni_callback_raising�
s
z'ThreadedTests.test_sni_callback_raisingc C s� | j � \}}}dd� }|j|� | jtj��*}tj� �}t||ddd�}W d Q R X W d Q R X | j|j j
d� | j d|j � � d S )Nc S s dS )Nrx r )r` r� r� r r r �cb_wrong_return_type�
s zOThreadedTests.test_sni_callback_wrong_return_type.<locals>.cb_wrong_return_typeFr� )r rG ZTLSV1_ALERT_INTERNAL_ERRORr )
r� r~ r} r r8 r r� rJ ro ra r� rf r� )rl rE r� rD r� rd r� r� r r r �#test_sni_callback_wrong_return_type�
s
z1ThreadedTests.test_sni_callback_wrong_return_typec s� t jt j�}|jt� t jt j�}t j|_|jt� t j dkr\|j
d� |j
d� ddg}n |j
d� |j
d� dd g}t j r�|j d
d g� t
||�}|d d }| jt|�d� x2|D ]*\� }}t� fd
d�|D ��s�| j� � q�W d S )Nr r r z
AES128:AES256r� zAES-256zAES:3DESZ3DESzDES-CBC3Z TLS_CHACHA20ZTLS_AESrB c 3 s | ]}|� kV qd S )Nr )r9 Zalg)r
r r r; �
s z4ThreadedTests.test_shared_ciphers.<locals>.<genexpr>)r r r )r r7 rg rZ r� rd rX rY r� r% r[ � HAS_TLSv1_3�extendrJ �
assertGreaterr| �anyr� )rl rE rD Z
expected_algsr� rU Z tls_version�bitsr )r
r �test_shared_ciphers�
s(
z!ThreadedTests.test_shared_ciphersc C s� t jt j�}t j|_|jt� |jt� t|dd�}|�L |j t
j
� �}|j t |j
f� |j� | jt|jd� | jt|jd� W d Q R X d S )NF)r_ r i s hello)r r7 r� rd rX rY r� rZ r� r\ r? r^ r_ r& r� r} r~ r� r )rl r_ r% r; r r r �,test_read_write_after_close_raises_valuerror s
z:ThreadedTests.test_read_write_after_close_raises_valuerrorc C s� dd }t tjd��}|j|� W d Q R X | jtjtj� tjtj�}tj |_
|j t � |j
t � t|dd�}|�d |jtj� ��J}|jt|jf� t tjd��"}|j|� | j|jd�|� W d Q R X W d Q R X W d Q R X d S )NrG i �wbF)r_ r rv i )rI r ZTESTFNr r� �unlinkr r7 r� rd rX rY r� rZ r� r\ r? r^ r_ r& �sendfilero rK )rl Z TEST_DATAr@ r_ r% r; �filer r r �
test_sendfile s
zThreadedTests.test_sendfilec C sL t jt j�}|jt� t jt j�}t j|_|jt� t ||�}|d }| j
|j � | j |j
d� | j |jd� | j
|j� t jd kr�| j |jd� | j|d � |j� }| j|d d� | j|d d� t |||d�}|j� }| j|d d� | j|d d� | j
|d � |d }| j|j |j � | j||� | j||� | j|j
|j
� | j|j|j� t ||�}| j|d � |d }| j|j |j � | j||� |j� }| j|d d � | j|d d� t |||d�}| j
|d � |d }| j|j |j � | j||� | j|j
|j
� | j|j|j� |j� }| j|d d
� | j|d d� d S ) Nr9 r r r? ru rv )r9 r r� r+ )r r r )r r7 rg rZ r� rd rX rY r� rJ r6 �idr� r( rZ Z
has_ticketr% Zticket_lifetime_hintr� rx ro Z assertIsNotr3 r� ) rl rE rD r� r9 Z sess_statZsession2Zsession3Zsession4r r r � test_session" s\
zThreadedTests.test_sessionc ; C s$ t jt j�}t j|_|jt� |jt� t jt j�}t j|_|jt� |jt� | jt j O _| jt j O _t
|dd�}|��� |j t j � ��p}| j
|jd � | j
|jd � |jt|jf� |j}| j|� | jt�� }t|_W d Q R X | j
t|j�d� W d Q R X |j t j � ��D}|jt|jf� | jt�� }||_W d Q R X | j
t|j�d� W d Q R X |j t j � ��J}||_|jt|jf� | j
|jj|j� | j
|j|� | j
|jd� W d Q R X |j t j � ��D}| jt�� }||_|jt|jf� W d Q R X | j
t|j�d� W d Q R X W d Q R X d S )NF)r_ r zValue is not a SSLSession.z#Cannot set session after handshake.Tz)Session refers to a different SSLContext.)r r7 r� rd rX rY r� rZ r@ rk r� r\ r? ro r9 r? r^ r_ r& r6 r} r rm rp ra r~ r� )rl r_ Zcontext2r% r; r9 r� r r r �test_session_handlingZ sN
z#ThreadedTests.test_session_handlingN)>r* r+ r, rD rU rY r; r/ r' r[ r� r\ rc rA r re rR rf rg rh rj rk ru rz r{ r� r� r� r� r� r� r� r� r� r� r� re r� r0 r� r� r� r� r� ZHAS_ALPNr� r� r� ZHAS_NPNr� r� r� r� r r� r� r� r� r� r� r� r� r r r r rP X sz 5&*&!) ( : 1) ;
*
' 8rP c C s@ t jt j�} | jt� t jt j�}|jt� |jt� | |dfS )zUCreate context
client_context, server_context, hostname = testing_context()
r� )r r7 r> rY r� r� rZ r� )rD rE r r r �testing_context� s
r� zTest needs TLS 1.3c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�TestPostHandshakeAuthc C s� t jt jt jg}x�|D ]�}t j|�}| j|jd� d|_| j|jd� t j|_| j|jt j� | j|jd� d|_| j|jt j� | j|jd� t j |_d|_| j|jt j � | j|jd� qW d S )NFT)
r rn r� r> r7 ro �post_handshake_authrd rX rc )rl Z protocolsrr rt r r r �test_pha_setter� s
z%TestPostHandshakeAuth.test_pha_setterc C s t � \}}}d|_tj|_d|_|jt� t|dd�}|�� |jt j � |d���}|j
t |j f� |j
d� | j|jd�d� |j
d� | j|jd�d � |j
d� | j|jd�d
� |j
d� | j|jd�d � |j
d � |jd �jd
�}| jd|� W d Q R X W d Q R X d S )NTF)r_ r )r� s HASCERTi s FALSE
s PHAs OK
s TRUE
s GETCERTi zus-asciiz Python Software Foundation CA)r� r� r rd rX rZ r� r� r\ r? r^ r_ r& r ro rK r� rf )rl rD rE rn r% r; Z cert_textr r r �test_pha_required� s*
z'TestPostHandshakeAuth.test_pha_requiredc C s� t � \}}}d|_tj|_d|_t|dd�}|�~ |jtj� |d��`}|jt |j
f� |j d� | j |j
d�d� |j d� | jtjd �� |j
d� W d Q R X W d Q R X W d Q R X d S )
NTF)r_ r )r� s PHAi s OK
s HASCERTz!tlsv13 alert certificate required)r� r� r rd rX r� r\ r? r^ r_ r& r ro rK r] r8 )rl rD rE rn r% r; r r r �test_pha_required_nocert� s
z.TestPostHandshakeAuth.test_pha_required_nocertc C s� t jrtjjd� t� \}}}d|_tj|_ d|_|j
t � tj |_ t
|dd�}|�� |jtj� |d��j}|jt|jf� |jd� | j|jd�d� |jd � | j|jd�d
� |jd� | j|jd�d � W d Q R X W d Q R X d S ) Nr� TF)r_ r )r� s HASCERTi s FALSE
s PHAs OK
s TRUE
)r r r r r r� r� r rd rX rZ r� rc r� r\ r? r^ r_ r& ro rK )rl rD rE rn r% r; r r r �test_pha_optional� s&
z'TestPostHandshakeAuth.test_pha_optionalc C s� t jrtjjd� t� \}}}d|_tj|_ d|_t
|dd�}|�� |j t j � |d��j}|j
t|jf� |jd� | j|jd�d� |jd � | j|jd�d
� |jd� | j|jd�d� W d Q R X W d Q R X d S ) Nr� TF)r_ r )r� s HASCERTi s FALSE
s PHAs OK
)r r r r r r� r� r rc rX r� r\ r? r^ r_ r& ro rK )rl rD rE rn r% r; r r r �test_pha_optional_nocert s"
z.TestPostHandshakeAuth.test_pha_optional_nocertc C s� t � \}}}d|_tj|_|jt� t|dd�}|�r |jt j � |d��T}|j
t |j f� | j
tjd�� |j� W d Q R X |jd� | jd|jd�� W d Q R X W d Q R X d S ) NTF)r_ r )r� z
not servers PHAs extension not receivedi )r� r� r rd rX rZ r� r� r\ r? r^ r_ r& r] r8 r r rf rK )rl rD rE rn r% r; r r r �test_pha_no_pha_client s
z,TestPostHandshakeAuth.test_pha_no_pha_clientc C s� t � \}}}tj|_d|_|jt� t|dd�}|�� |jt j � |d��j}|j
t |j f� |j
d� | j|jd�d� |j
d� | j|jd�d � |j
d� | j|jd�d� W d Q R X W d Q R X d S )
NTF)r_ r )r� s HASCERTi s TRUE
s PHAs OK
)r� r rd rX r� rZ r� r� r\ r? r^ r_ r& r ro rK )rl rD rE rn r% r; r r r �test_pha_no_pha_server& s
z,TestPostHandshakeAuth.test_pha_no_pha_serverc C s� t � \}}}tj|_| jtjO _d|_|jt� t |dd�}|�P |j
t j � |d��2}|j t
|jf� |jd� | jd|jd�� W d Q R X W d Q R X d S )NTF)r_ r )r� s PHAs WRONG_SSL_VERSIONi )r� r rd rX r@ rk r� rZ r� r� r\ r? r^ r_ r& r rf rK )rl rD rE rn r% r; r r r �test_pha_not_tls13: s
z(TestPostHandshakeAuth.test_pha_not_tls13N) r* r+ r, r� r� r� r� r� r� r� r� r r r r r� � s r� c C s� t jr�dd l}tjtjtjd�}|j� �V |jddt � x@|j
� D ](\}}|� }|rB|d rBd||f }P qBW t tj� �}W d Q R X t dt
jt
jf � t d| � t dt
j � t d t
j � yt d
t
j � W n tk
r� Y nX xBttttttttt t t t g D ]"}t j!j"|��st j#d | ���qW t$t%t&t't(g}t j)d ��rP|j*t+� t,�rxt j-� }|�rx|j*t.� |j*t/� zt j0|� W d t,�r�t j1|� X d S )
Nr )ZLinuxZMacZWindows�ignorez?dist\(\) and linux_distribution\(\) functions are deprecated .*z%s %rz test_ssl: testing with %r %rz under %sz HAS_SNI = %rz OP_ALL = 0x%8xz OP_NO_TLSv1_1 = 0x%8xz Can't read certificate file %rZnetwork)2r r �warningsr9 r: Zmac_verZ win32_ver�catch_warnings�filterwarnings�PendingDeprecationWarning�itemsr� �printr r/ r% rg r? r- �AttributeErrorr� rb r[ r\ r] r^ r� rT r� rY �BADKEYrZ r r �existsZ
TestFailedr1 ra r� r� r� Zis_resource_enabledr r� �
_have_threadsZthreading_setuprP r� Z run_unittestZthreading_cleanup) r r� Zplatsr
r? Zplat�filenameZtests� thread_infor r r � test_mainL sZ
r� �__main__)r r r )N)r8 TFNN)Nr r )F)lr r; r r r? r� r( r. r� r rb r� ZtempfileZurllib.requestrx r r* rA r9 rJ rB r� � ImportError�
import_moduler r r� �sortedrS r3 r_ r/ r' r5 r% r� r
r� �fsencoderb r[ r\ r] r^ r_ r` rM r� rc rk r% rZ r� rT r� r# r� rZ rY r` r� r� r� r� rq rr rE r r r r r r r# r& r' r) r2 rD rR r/ rg r� rn rb r` ZTestCasera r1 r� r� r� r� r� r� Ztest.ssl_serversr r r� r) rJ rO rP r� r� r� r� r* r r r r �<module> s�
a x)?
=
v
1
; B
-
<