0x1949 Team - FAZEMRX - MANAGER
Edit File: test_ssl.cpython-310.pyc
o �b[ � @ s d Z ddlZddlZddlmZmZmZmZ ddlm Z ddl m Z ddl m Z ddlmZ ddlmZ dd lmZ dd lmZ zdd lmamZ dd lma dd lmZm Z W n e yh dd� Z e � Y nw ddl m Z G dd� de j!�Z"G dd� de j!�Z#G dd� dej$�Z%G dd� dej$�Z&e ej'�G dd� dej$��Z(dd � Z)d d � Z*G d d � d �Z+tdur�G d!d"� d"tj,�Z-G d#d$� d$ee�Z.G d%d&� d&e�Z/G d'd(� d(e/�Z0G d)d*� d*e�Z1G d+d,� d,ee+�Z2G d-d.� d.�Z3G d/d0� d0e�Z4G d1d2� d2e�Z5dS )3z Tests for twisted SSL support. � N)�defer� interfaces�protocol�reactor)�ConnectionDone)�basic)�FilePath)�platform)�waitUntilAllDisconnected)�ProperlyCloseFilesMixin)�TestCase)�SSL�crypto)�ssl)�ClientTLSContext�certPathc C s d a ad S �N)r r � r r �7/usr/lib/python3/dist-packages/twisted/test/test_ssl.py�_noSSL s r )� implementerc @ s@ e Zd ZdZg d�ZddgZdd� Zdd� Zd d � Zd d � Z d S )�UnintelligentProtocola @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @cvar pretext: text sent before TLS is set up. @type pretext: C{bytes} @cvar posttext: text sent after TLS is set up. @type posttext: C{bytes} )s first lines last thing before tls starts� STARTTLSs first thing after tls starteds last thing everc C � t �� | _d S r �r �Deferred�deferred��selfr r r �__init__7 � z UnintelligentProtocol.__init__c C s | j D ]}| �|� qd S r )�pretext�sendLine)r �lr r r �connectionMade: s �z$UnintelligentProtocol.connectionMadec C sD |dkr | j �t� | jj� | jD ]}| �|� q| j �� d S d S )N� READY)� transport�startTLSr �factory�client�posttextr" �loseConnection)r �liner# r r r � lineReceived> s �z"UnintelligentProtocol.lineReceivedc C � | j �d � d S r �r �callback�r �reasonr r r �connectionLostE � z$UnintelligentProtocol.connectionLostN) �__name__� __module__� __qualname__�__doc__r! r* r r$ r- r3 r r r r r ' s r c @ s: e Zd ZdZddd�Zdd� Zdd� Zd d � Zd d � Zd S )� LineCollectoraJ @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @ivar doTLS: whether the protocol is initiate TLS or not. @type doTLS: C{bool} @ivar fillBuffer: if set to True, it will send lots of data once C{STARTTLS} is received. @type fillBuffer: C{bool} Fc C s || _ || _t�� | _d S r )�doTLS� fillBufferr r r )r r: r; r r r r V s zLineCollector.__init__c C s d| j _g | j _d S )N� )r( �rawdata�linesr r r r r$ [ s z LineCollector.connectionMadec C sv | j j�|� |dkr9| jrtd�D ]}| �d� q| �d� | jr3tttd�}| j � || j j � d S | � � d S d S )Nr i� s� XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXr% )�privateKeyFileName�certificateFileName) r( r> �appendr; �ranger" r: �ServerTLSContextr r& r' �server� setRawMode)r r, �x�ctxr r r r- _ s � �zLineCollector.lineReceivedc C s | j j|7 _| j�� d S r )r( r= r& r+ �r �datar r r �rawDataReceivedo s z LineCollector.rawDataReceivedc C r. r r/ r1 r r r r3 s r4 z LineCollector.connectionLostN�F) r5 r6 r7 r8 r r$ r- rJ r3 r r r r r9 I s r9 c @ s e Zd ZdZdd� ZdS )�SingleLineServerProtocolzK A protocol that sends a single line of data at C{connectionMade}. c C s | j �d� | j �� d S )N� +OK <some crap> )r& �write�getPeerCertificater r r r r$ | s z'SingleLineServerProtocol.connectionMadeN)r5 r6 r7 r8 r$ r r r r rL w s rL c @ �( e Zd ZdZdd� Zdd� Zdd� ZdS ) �RecordingClientProtocolzv @ivar deferred: a deferred that will fire with first received content. @type deferred: L{defer.Deferred} c C r r r r r r r r � r z RecordingClientProtocol.__init__c C � | j �� d S r )r& rO r r r r r$ � r z&RecordingClientProtocol.connectionMadec C s | j �|� d S r r/ rH r r r � dataReceived� r4 z$RecordingClientProtocol.dataReceivedN)r5 r6 r7 r8 r r$ rS r r r r rQ � s rQ c @ � e Zd ZdZdd� Zdd� ZdS )� ImmediatelyDisconnectingProtocolz� A protocol that disconnect immediately on connection. It fires the C{connectionDisconnected} deferred of its factory on connetion lost. c C rR r �r& r+ r r r r �handshakeCompleted� r z3ImmediatelyDisconnectingProtocol.handshakeCompletedc C s | j j�d � d S r )r( �connectionDisconnectedr0 r1 r r r r3 � � z/ImmediatelyDisconnectingProtocol.connectionLostN)r5 r6 r7 r8 rW r3 r r r r rU � s rU c C s� t �� }|�t jd� t �� }|�� }| |_||_|�|� |� |d� t � � }|� d� |� d� |� d� |�|�� � |�|�� � |�|�� � |� |d� |||fS )z� Create a certificate for given C{organization} and C{organizationalUnit}. @return: a tuple of (key, request, certificate) objects. i �md5� r �< )r �PKey� generate_key�TYPE_RSA�X509Req� get_subject�O�OU� set_pubkey�sign�X509�set_serial_number�gmtime_adj_notBefore�gmtime_adj_notAfter� set_issuer� set_subject� get_pubkey)� organization�organizationalUnit�pkey�req�subject�certr r r �generateCertificateObjects� s" rs c C sn t ||�\}}}d|tjfd|tjfd|tjffD ]\}}}tj�| |f��d�} t | �� |tj |�� qdS )z� Create certificate files key, req and cert prefixed by C{basename} for given C{organization} and C{organizationalUnit}. �keyrp rr zutf-8N) rs r �dump_privatekey�dump_certificate_request�dump_certificate�os�extsep�join�encoder � setContent� FILETYPE_PEM) �basenamerm rn ro rp rr �ext�obj�dumpFunc�fNamer r r �generateCertificateFiles� s ��r� c @ rT )�ContextGeneratingMixinah Offer methods to create L{ssl.DefaultOpenSSLContextFactory} for both client and server. @ivar clientBase: prefix of client certificate files. @type clientBase: C{str} @ivar serverBase: prefix of server certificate files. @type serverBase: C{str} @ivar clientCtxFactory: a generated context factory to be used in L{IReactorSSL.connectSSL}. @type clientCtxFactory: L{ssl.DefaultOpenSSLContextFactory} @ivar serverCtxFactory: a generated context factory to be used in L{IReactorSSL.listenSSL}. @type serverCtxFactory: L{ssl.DefaultOpenSSLContextFactory} c O sN | � � }t|||� tjtj�|df�tj�|df�g|�R i |��}||fS )Nrt rr )�mktempr� r � DefaultOpenSSLContextFactoryrx ry rz )r �org�orgUnit�args�kwArgs�base�serverCtxFactoryr r r �makeContextFactory� s ���z)ContextGeneratingMixin.makeContextFactoryc C s4 | j |i |��\| _| _| j |i |��\| _| _d S r )r� � clientBase�clientCtxFactory� serverBaser� )r � clientArgs� clientKwArgs� serverArgs� serverKwArgsr r r �setupServerAndClient� s ����z+ContextGeneratingMixin.setupServerAndClientN)r5 r6 r7 r8 r� r� r r r r r� � s r� c @ s e Zd ZdZdZdd� ZdS )rC zf A context factory with a default method set to L{OpenSSL.SSL.SSLv23_METHOD}. Fc O s( t j|d< tjj| g|�R i |�� d S )N� sslmethod)r � SSLv23_METHODr r� r )r r� �kwr r r r � s zServerTLSContext.__init__N)r5 r6 r7 r8 �isClientr r r r r rC � s rC c @ �D e Zd ZdZe�ed�du rdZdd� Zdd� Z dd � Z d d � Z dS ) �StolenTCPTestszc For SSL transports, test many of the same things which are tested for TCP transports. N�2Reactor does not support SSL, cannot run SSL testsc C s. t j�tt��� �}|�� }tj||||d�S )zY Create an SSL server with a certificate using L{IReactorSSL.listenSSL}. �� interface) r �PrivateCertificate�loadPEMr r � getContent�optionsr � listenSSL)r �address� portNumberr( rr �contextFactoryr r r � createServer s zStolenTCPTests.createServerc C s t �� }|�|||�S )zG Create an SSL client using L{IReactorSSL.connectSSL}. )r �CertificateOptions� connectSSL)r r� r� � clientCreatorr� r r r � connectClient s z StolenTCPTests.connectClientc C s t jS )z� Return L{OpenSSL.SSL.Error} as the expected error type which will be raised by a write to the L{OpenSSL.SSL.Connection} object after it has been closed. )r �Errorr r r r �getHandleExceptionType s z%StolenTCPTests.getHandleExceptionTypec C s4 t �t �t �d�t �t �d�t �d��t �d���S )a4 Return a L{hamcrest.core.matcher.Matcher} for the argument L{OpenSSL.SSL.Error} will be constructed with for this case. This is basically just a random OpenSSL implementation detail. It would be better if this test worked in a way which did not require this. z SSL routines� SSL_write�ssl_write_internalzprotocol is shutdown)�hamcrest�contains�equal_to�any_ofr r r r �getHandleErrorCodeMatcher# s ���z(StolenTCPTests.getHandleErrorCodeMatcher) r5 r6 r7 r8 r � IReactorSSLr �skipr� r� r� r� r r r r r� s r� c @ sZ e Zd ZdZe�ed�du rdZdZdZ dZ dd� Z ddd�Z d d � Z d d � Zd d� ZdS )�TLSTestsz� Tests for startTLS support. @ivar fillBuffer: forwarded to L{LineCollector.fillBuffer} @type fillBuffer: C{bool} Nr� Fc C s8 | j jd ur | j j�� | jjd ur| jj�� d S d S r )� clientProtor& r+ � serverProtor r r r �tearDownI s �zTLSTests.tearDownc s� � | _ t�� }| _� fdd�|_|rd|_nd|_�| _t�� }| _�fdd�|_|r1d|_nd|_t j d|dd�}| � |j � t � d|�� j|� t�� j�jg�S ) a� Helper method to run TLS tests. @param clientProto: protocol instance attached to the client connection. @param serverProto: protocol instance attached to the server connection. @param clientIsServer: flag indicated if client should initiate startTLS instead of server. @return: a L{defer.Deferred} that will fire when both connections are lost. c � � S r r r �r� r r �<lambda>_ � z#TLSTests._runTest.<locals>.<lambda>FTc r� r r r �r� r r r� g r� r � 127.0.0.1r� )r� r � ClientFactory� clientFactoryrD r) r� � ServerFactory� serverFactoryr � listenTCP� addCleanup� stopListening� connectTCP�getHost�portr � gatherResultsr )r r� r� �clientIsServer�cf�sfr� r �r� r� r �_runTestO s zTLSTests._runTestc �, � fdd�}� � t� td� j��}|�|�S )z~ Test for server and client startTLS: client should received data both before and after the startTLS. c � � � � jjtjtj � d S r )� assertEqualr� r> r r! r* )�ignorer r r �checkz � �z TLSTests.test_TLS.<locals>.checkT�r� r r9 r; � addCallback�r r� �dr r r �test_TLSt s zTLSTests.test_TLSc r� )z� Test for server startTLS not followed by a startTLS in client: the data received after server startTLS should be received as raw. c s& � � � jjtj� � �� jjd� d S )NzNo encrypted bytes received)r� r� r> r r! � assertTruer= ��ignoredr r r r� � s z"TLSTests.test_unTLS.<locals>.checkFr� r� r r r � test_unTLS� s � zTLSTests.test_unTLSc s. � fdd�}� � td� j�t� d�}|�|�S )z: Test startTLS first initiated by client. c r� r )r� r� r> r r! r* r� r r r r� � r� z)TLSTests.test_backwardsTLS.<locals>.checkT)r� r9 r; r r� r� r r r �test_backwardsTLS� s � zTLSTests.test_backwardsTLSrK )r5 r6 r7 r8 r r� r r� r; r� r� r� r� r� r� r� r r r r r� 9 s % r� c @ s( e Zd ZdZe�ed�du rdZdZdS )�SpammyTLSTestszA Test TLS features with bytes sitting in the out buffer. Nr� T) r5 r6 r7 r8 r r� r r� r; r r r r r� � s r� c @ s8 e Zd Ze�ed�du rdZdZdZdd� Z dd� Z dS )�BufferingTestsNr� c C sB | j jd ur | j j�� | jjd ur| jj�� tt| j | jg�S r )r� r& r+ r� r r r r r r r� � s zBufferingTests.tearDownc s� t � �| _t� � | _t�� }t�� }| _�fdd�|_� fdd�|_t� t t �}t� � }t j d||dd�}| �|j� t �d|�� j||�}| �|j� � j�| jd�S )Nc r� r r r r� r r r� � r� z6BufferingTests.test_openSSLBuffering.<locals>.<lambda>c r� r r r r� r r r� � r� r r� r� rM )rL r� rQ r� r r� r� r) r r� r �ClientContextFactoryr r� r� r� r� r� r� � disconnectr r� r� )r rD r) �sCTX�cCTXr� �clientConnectorr r� r �test_openSSLBuffering� s" � �z$BufferingTests.test_openSSLBuffering) r5 r6 r7 r r� r r� r� r� r� r� r r r r r� � s r� c @ r� ) �ConnectionLostTestsz' SSL connection closing tests. Nr� c s� d}� � ||d fi ||d fi � t�� }tj|_t�d|� j� � _}t�� }t |_t � � |_ t� d|�� j|� j� |j �� fdd��S )N�twisted.test.test_ssl�, client�, serverr r� c s � j �� S r )� serverPortr� )� ignoredResultr r r r� � s z=ConnectionLostTests.testImmediateDisconnect.<locals>.<lambda>)r� r r� �Protocolr r� r� r� r� rU r r rX r� r� r� r� r� )r r� �serverProtocolFactoryr� �clientProtocolFactoryr r r �testImmediateDisconnect� s* � � � �z+ConnectionLostTests.testImmediateDisconnectc s� t tj�G dd� dtj��}d}| �||d fi ||d fi � |� �t�� }�fdd�|_t�d|| j �}| � |j � |� � t� � }� fd d�|_t� d |�� j|| j� d d � }t�� j�|��j�|�g�S ) z� Both sides of SSL connection close connection; the connections should close cleanly, and only after the underlying TCP connection has disconnected. c @ rP ) zMConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshakeFc S r r )r r �doner r r r r r zVConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshake.__init__c S rR r rV r r r r rW r z`ConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshake.handshakeCompletedc S s | j �|� | ` d S r )r� �errbackr1 r r r r3 s z\ConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshake.connectionLostN)r5 r6 r7 �gotDatar rW r3 r r r r �CloseAfterHandshake s r� r� r� r� c r� r r r ��serverProtocolr r r� r� zBConnectionLostTests.test_bothSidesLoseConnection.<locals>.<lambda>r c r� r r r ��clientProtocolr r r� r� r� c S s | � t� d S r )�trapr )�failurer r r � checkResult& r zEConnectionLostTests.test_bothSidesLoseConnection.<locals>.checkResult)r r �IHandshakeListenerr r� r� r� r r� r� r� r� r� r� r� r� r� r r� r� � addErrback)r r� r� r� r� r� r� r �r� r� r � test_bothSidesLoseConnection� s4 � � ��z0ConnectionLostTests.test_bothSidesLoseConnectionc s� d}| � ||d fi ||d fi � dd� }| j�� �tj|� t�� }t� � �|j �_ t� � }�fdd�|_t �d|| j� | _}t�� }t� � � |j � _ t�� }� fd d�|_t �d |�� j|| j� tj||gd d �}|�| j�S ) Nr� r� r� c W s dS )NFr )�ar r r �verify6 � z4ConnectionLostTests.testFailedVerify.<locals>.verifyc r� r r r r� r r r� ? r� z6ConnectionLostTests.testFailedVerify.<locals>.<lambda>r c r� r r r r� r r r� H r� r� T)� consumeErrors)r� r� � getContext� set_verifyr � VERIFY_PEERr r r r� r0 r3 r� r r� r� r� r� r� r� r� � DeferredListr� � _cbLostConns) r r� r �serverConnLostr� r� �clientConnLostr� �dlr r r �testFailedVerify0 s6 � �� z$ConnectionLostTests.testFailedVerifyc C sh |\\}}\}}| � |� | � |� tjg}t�� r%ddlm} |�|� |j|� |j|� | j � � S )Nr )�ConnectionLost) � assertFalser r� r � isWindows�twisted.internet.errorr rA r� r� r� )r �results�sSuccess�sResult�cSuccess�cResult�acceptableErrorsr r r r r S s z ConnectionLostTests._cbLostConns) r5 r6 r7 r8 r r� r r� r� r r r r r r r r� � s 4 #r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) � FakeContextzK L{OpenSSL.SSL.Context} double which can more easily be inspected. c C s || _ d| _d S )Nr )�_method�_options)r �methodr r r r s s zFakeContext.__init__c C s | j |O _ d S r )r )r r� r r r � set_optionsw rY zFakeContext.set_optionsc C � d S r r �r �fileNamer r r �use_certificate_filez r z FakeContext.use_certificate_filec C r r r r r r r �use_privatekey_file} r z FakeContext.use_privatekey_fileN)r5 r6 r7 r8 r r r! r" r r r r r n s r c @ r� ) �!DefaultOpenSSLContextFactoryTestsz8 Tests for L{ssl.DefaultOpenSSLContextFactory}. Nr� c C s" t jtttd�| _| j�� | _d S )N)�_contextFactory)r r� r r r� r �contextr r r r �setUp� s �z'DefaultOpenSSLContextFactoryTests.setUpc C �V | � | jjtj� | � | jjtj@ tj� | �| jjtj@ � | �| jjtj @ � dS )z� L{ssl.DefaultOpenSSLContextFactory.getContext} returns an SSL context which can use SSLv3 or TLSv1 but not SSLv2. N� r� r% r r r� r � OP_NO_SSLv2r � OP_NO_SSLv3� OP_NO_TLSv1r r r r � test_method� s z-DefaultOpenSSLContextFactoryTests.test_methodc C s | � tjtjt| �� � dS )z� Instantiating L{ssl.DefaultOpenSSLContextFactory} with a certificate filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N)� assertRaisesr r� r r� r r� r r r r �test_missingCertificateFile� � �z=DefaultOpenSSLContextFactoryTests.test_missingCertificateFilec C s | � tjtj| �� t� dS )z� Instantiating L{ssl.DefaultOpenSSLContextFactory} with a private key filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N)r- r r� r r� r� r r r r r �test_missingPrivateKeyFile� r/ z<DefaultOpenSSLContextFactoryTests.test_missingPrivateKeyFile) r5 r6 r7 r8 r r� r r� r& r, r. r0 r r r r r# � s r# c @ s4 e Zd ZdZe�ed�du rdZdd� Zdd� Z dS )�ClientContextFactoryTestsz0 Tests for L{ssl.ClientContextFactory}. Nr� c C s" t �� | _t| j_| j�� | _d S r )r r� r� r r$ r r% r r r r r& � s z ClientContextFactoryTests.setUpc C r' )z~ L{ssl.ClientContextFactory.getContext} returns a context which can use SSLv3 or TLSv1 but not SSLv2. Nr( r r r r r, � s z%ClientContextFactoryTests.test_method) r5 r6 r7 r8 r r� r r� r& r, r r r r r1 � s r1 )6r8 rx r� �twisted.internetr r r r r r �twisted.protocolsr �twisted.python.filepathr �twisted.python.runtimer �twisted.test.proto_helpersr �twisted.test.test_tcpr �twisted.trial.unittestr �OpenSSLr r r �twisted.test.ssl_helpersr r � ImportErrorr �zope.interfacer � LineReceiverr r9 r� rL rQ r� rU rs r� r� r� rC r� r� r� r� r� r r# r1 r r r r �<module> sP � ". ) 6j * 4