o iZ@sdZddlZddlZddlmZmZmZmZddlm Z ddl m Z ddl m Z ddlmZddlmZdd lmZdd lmZzdd lmamZdd lmadd lmZmZWneyhddZeYnwddlm Z Gddde j!Z"Gddde j!Z#Gdddej$Z%Gdddej$Z&e ej'Gdddej$Z(ddZ)ddZ*Gdd d Z+tdurGd!d"d"tj,Z-Gd#d$d$eeZ.Gd%d&d&eZ/Gd'd(d(e/Z0Gd)d*d*eZ1Gd+d,d,ee+Z2Gd-d.d.Z3Gd/d0d0eZ4Gd1d2d2eZ5dS)3z Tests for twisted SSL support. N)defer interfacesprotocolreactor)ConnectionDone)waitUntilAllDisconnected)basic)FilePath)platform)ProperlyCloseFilesMixin)TestCase)SSLcrypto)ssl)ClientTLSContextcertPathcCs daadSN)r rrr[C:\Users\psant\Downloads\PAF backend\school\venv\Lib\site-packages\twisted/test/test_ssl.py_noSSLs r) implementerc@s@eZdZdZgdZddgZddZddZd d Zd d Z d S)UnintelligentProtocola @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @cvar pretext: text sent before TLS is set up. @type pretext: C{bytes} @cvar posttext: text sent after TLS is set up. @type posttext: C{bytes} )s first lineslast thing before tls startsSTARTTLSsfirst thing after tls startedslast thing evercCt|_dSrrDeferreddeferredselfrrr__init__7zUnintelligentProtocol.__init__cCs|jD]}||qdSr)pretextsendLine)rlrrrconnectionMade:s  z$UnintelligentProtocol.connectionMadecCsD|dkr |jt|jj|jD]}||q|jdSdS)NREADY) transportstartTLSrfactoryclientposttextr"loseConnection)rliner#rrr lineReceived>s   z"UnintelligentProtocol.lineReceivedcC|jddSrrcallbackrreasonrrrconnectionLostEz$UnintelligentProtocol.connectionLostN) __name__ __module__ __qualname____doc__r!r*rr$r-r3rrrrr's  rc@s:eZdZdZdddZddZddZd d Zd d Zd S) LineCollectoraJ @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @ivar doTLS: whether the protocol is initiate TLS or not. @type doTLS: C{bool} @ivar fillBuffer: if set to True, it will send lots of data once C{STARTTLS} is received. @type fillBuffer: C{bool} FcCs||_||_t|_dSr)doTLS fillBufferrrr)rr:r;rrrrVszLineCollector.__init__cCsd|j_g|j_dS)N)r(rawdatalinesrrrrr$[s zLineCollector.connectionMadecCsv|jj||dkr9|jrtdD]}|dq|d|jr3tttd}|j ||jj dS| dSdS)NrisXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXr%)ZprivateKeyFileNameZcertificateFileName) r(r>appendr;ranger"r:ServerTLSContextrr&r'serverZ setRawMode)rr,xctxrrrr-_s    zLineCollector.lineReceivedcCs|jj|7_|jdSr)r(r=r&r+rdatarrrrawDataReceivedoszLineCollector.rawDataReceivedcCr.rr/r1rrrr3sr4zLineCollector.connectionLostNF) r5r6r7r8rr$r-rGr3rrrrr9Is  r9c@seZdZdZddZdS)SingleLineServerProtocolzK A protocol that sends a single line of data at C{connectionMade}. cCs|jd|jdS)N+OK )r&writegetPeerCertificaterrrrr$|s z'SingleLineServerProtocol.connectionMadeN)r5r6r7r8r$rrrrrIws rIc@(eZdZdZddZddZddZdS) RecordingClientProtocolzv @ivar deferred: a deferred that will fire with first received content. @type deferred: L{defer.Deferred} cCrrrrrrrrr z RecordingClientProtocol.__init__cC|jdSr)r&rLrrrrr$r z&RecordingClientProtocol.connectionMadecCs|j|dSrr/rErrr dataReceivedr4z$RecordingClientProtocol.dataReceivedN)r5r6r7r8rr$rPrrrrrNs  rNc@ eZdZdZddZddZdS) ImmediatelyDisconnectingProtocolz A protocol that disconnect immediately on connection. It fires the C{connectionDisconnected} deferred of its factory on connetion lost. cCrOrr&r+rrrrhandshakeCompletedr z3ImmediatelyDisconnectingProtocol.handshakeCompletedcCs|jjddSr)r(connectionDisconnectedr0r1rrrr3z/ImmediatelyDisconnectingProtocol.connectionLostN)r5r6r7r8rTr3rrrrrRs rRcCst}|tjdt}|}||_||_||| |dt }| d| d| d||||||| |d|||fS)z Create a certificate for given C{organization} and C{organizationalUnit}. @return: a tuple of (key, request, certificate) objects. imd5r<N)rZPKeyZ generate_keyZTYPE_RSAZX509ReqZ get_subjectOZOUZ set_pubkeysignZX509Zset_serial_numberZgmtime_adj_notBeforeZgmtime_adj_notAfterZ set_issuerZ set_subjectZ get_pubkey) organizationorganizationalUnitpkeyreqsubjectcertrrrgenerateCertificateObjectss"       rbc Csnt||\}}}d|tjfd|tjfd|tjffD]\}}}tj||fd} t |  |tj |qdS)z Create certificate files key, req and cert prefixed by C{basename} for given C{organization} and C{organizationalUnit}. keyr_razutf-8N) rbrZdump_privatekeyZdump_certificate_requestZdump_certificateosextsepjoinencoder Z setContentZ FILETYPE_PEM) basenamer\r]r^r_raextobjZdumpFuncZfNamerrrgenerateCertificateFiless   rkc@rQ)ContextGeneratingMixinah Offer methods to create L{ssl.DefaultOpenSSLContextFactory} for both client and server. @ivar clientBase: prefix of client certificate files. @type clientBase: C{str} @ivar serverBase: prefix of server certificate files. @type serverBase: C{str} @ivar clientCtxFactory: a generated context factory to be used in L{IReactorSSL.connectSSL}. @type clientCtxFactory: L{ssl.DefaultOpenSSLContextFactory} @ivar serverCtxFactory: a generated context factory to be used in L{IReactorSSL.listenSSL}. @type serverCtxFactory: L{ssl.DefaultOpenSSLContextFactory} cOsN|}t|||tjtj|dftj|dfg|Ri|}||fS)Nrcra)mktemprkrDefaultOpenSSLContextFactoryrdrerf)rorgZorgUnitargsZkwArgsbaseserverCtxFactoryrrrmakeContextFactorys z)ContextGeneratingMixin.makeContextFactorycCs4|j|i|\|_|_|j|i|\|_|_dSr)rsZ clientBaseclientCtxFactoryZ serverBaserr)rZ clientArgsZ clientKwArgsZ serverArgsZ serverKwArgsrrrsetupServerAndClientsz+ContextGeneratingMixin.setupServerAndClientN)r5r6r7r8rsrurrrrrls rlc@seZdZdZdZddZdS)rAzf A context factory with a default method set to L{OpenSSL.SSL.SSLv23_METHOD}. FcOs(tj|d<tjj|g|Ri|dS)NZ sslmethod)r Z SSLv23_METHODrrnr)rrpkwrrrrs zServerTLSContext.__init__N)r5r6r7r8ZisClientrrrrrrAs rAc@DeZdZdZeeddurdZddZddZ dd Z d d Z dS) StolenTCPTestszc For SSL transports, test many of the same things which are tested for TCP transports. N2Reactor does not support SSL, cannot run SSL testscCs.tjtt}|}tj||||dS)zY Create an SSL server with a certificate using L{IReactorSSL.listenSSL}. Z interfaceN) rZPrivateCertificateZloadPEMr rZ getContentoptionsr listenSSL)raddress portNumberr(racontextFactoryrrr createServer szStolenTCPTests.createServercCst}||||S)zG Create an SSL client using L{IReactorSSL.connectSSL}. N)rZCertificateOptions connectSSL)rr}r~Z clientCreatorrrrr connectClientszStolenTCPTests.connectClientcCstjS)z Return L{OpenSSL.SSL.Error} as the expected error type which will be raised by a write to the L{OpenSSL.SSL.Connection} object after it has been closed. N)r ErrorrrrrgetHandleExceptionTypesz%StolenTCPTests.getHandleExceptionTypec Cs<tttdttdtdtdtdS)a4 Return a L{hamcrest.core.matcher.Matcher} for the argument L{OpenSSL.SSL.Error} will be constructed with for this case. This is basically just a random OpenSSL implementation detail. It would be better if this test worked in a way which did not require this. z SSL routinesZ SSL_writeZssl_write_internalzprotocol is shutdownN)hamcrestcontainsZequal_toZany_ofrrrrgetHandleErrorCodeMatcher#s z(StolenTCPTests.getHandleErrorCodeMatcher) r5r6r7r8r IReactorSSLrskiprrrrrrrrrxs rxc@sZeZdZdZeeddurdZdZdZ dZ ddZ dddZ d d Z d d Zd dZdS)TLSTestsz Tests for startTLS support. @ivar fillBuffer: forwarded to L{LineCollector.fillBuffer} @type fillBuffer: C{bool} NryFcCs8|jjdur |jj|jjdur|jjdSdSr) clientProtor&r+ serverProtorrrrtearDownJs   zTLSTests.tearDowncs|_t}|_fdd|_|rd|_nd|_|_t}|_fdd|_|r1d|_nd|_t j d|dd}| |j t d|j|tjjgS) a Helper method to run TLS tests. @param clientProto: protocol instance attached to the client connection. @param serverProto: protocol instance attached to the server connection. @param clientIsServer: flag indicated if client should initiate startTLS instead of server. @return: a L{defer.Deferred} that will fire when both connections are lost. cSrrrrrr`z#TLSTests._runTest..FTcrrrrrrrrhrr 127.0.0.1rzN)rr ClientFactory clientFactoryrBr)r ServerFactory serverFactoryrZ listenTCP addCleanup stopListeningZ connectTCPgetHostportr gatherResultsr)rrrZclientIsServercfZsfrrrrr_runTestPs  zTLSTests._runTestc,fdd}ttdj}||S)z~ Test for server and client startTLS: client should received data both before and after the startTLS. cjjtjtjdSr) assertEqualrr>rr!r*)ignorerrrcheck{ z TLSTests.test_TLS..checkTNrrr9r; addCallbackrrdrrrtest_TLSus  zTLSTests.test_TLScr)z Test for server startTLS not followed by a startTLS in client: the data received after server startTLS should be received as raw. cs&jjtjjjddS)NzNo encrypted bytes received)rrr>rr! assertTruer=Zignoredrrrrsz"TLSTests.test_unTLS..checkFNrrrrr test_unTLSs  zTLSTests.test_unTLScs.fdd}tdjtd}||S)z: Test startTLS first initiated by client. crr)rrr>rr!r*rrrrrrz)TLSTests.test_backwardsTLS..checkTN)rr9r;rrrrrrtest_backwardsTLSs  zTLSTests.test_backwardsTLSrH)r5r6r7r8rrrrr;rrrrrrrrrrrr:s % rc@s(eZdZdZeeddurdZdZdS)SpammyTLSTestszA Test TLS features with bytes sitting in the out buffer. NryT) r5r6r7r8rrrrr;rrrrrs rc@s8eZdZeeddurdZdZdZddZ ddZ dS)BufferingTestsNrycCsB|jjdur |jj|jjdur|jjtt|j|jgSr)rr&r+rrrrrrrrs    zBufferingTests.tearDowncst|_t|_t}t}|_fdd|_fdd|_t t t }t }t j d||dd}||jt d|j||}||jj|jdS)Ncrrrrrrrrrz6BufferingTests.test_openSSLBuffering..crrrrrrrrrrrrzrJ)rIrrNrrrrr)rrnrClientContextFactoryrr|rrrrrZ disconnectrrr)rrBr)ZsCTXZcCTXrZclientConnectorrrrtest_openSSLBufferings"     z$BufferingTests.test_openSSLBuffering) r5r6r7rrrrrrrrrrrrrs rc@rw) ConnectionLostTestsz' SSL connection closing tests. Nrycsd}||dfi||dfit}tj|_td|j_}t}t |_t |_ t d|j|j|j fddS)Ntwisted.test.test_ssl, client, serverrrcs jSr) serverPortr)Z ignoredResultrrrrs z=ConnectionLostTests.testImmediateDisconnect..)rurrProtocolrr|rrrrrRrrrUrrrrtr)rroserverProtocolFactoryrclientProtocolFactoryrrrtestImmediateDisconnects*   z+ConnectionLostTests.testImmediateDisconnectcsttjGdddtj}d}|||dfi||dfi|t}fdd|_td||j }| |j |t }fd d|_t d |j||jd d }tj|j|gS)z Both sides of SSL connection close connection; the connections should close cleanly, and only after the underlying TCP connection has disconnected. c@rM) zMConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshakeFcSrr)rrdonerrrrrr zVConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.__init__cSrOrrSrrrrrT r z`ConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.handshakeCompletedcSs|j||`dSr)rZerrbackr1rrrr3 s z\ConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.connectionLostN)r5r6r7ZgotDatarrTr3rrrrCloseAfterHandshakes  rrrrcrrrrserverProtocolrrrrzBConnectionLostTests.test_bothSidesLoseConnection..rcrrrrclientProtocolrrrrrcSs|tdSr)trapr)Zfailurerrr checkResult&r zEConnectionLostTests.test_bothSidesLoseConnection..checkResultN)rrIHandshakeListenerrrrurrr|rrrrrrrrrtrrrZ addErrback)rrrorrrrrrrrtest_bothSidesLoseConnections4    z0ConnectionLostTests.test_bothSidesLoseConnectionc sd}|||dfi||dfidd}|jtj|t}t |j _ t }fdd|_t d||j|_}t}t |j _ t}fd d|_t d |j||jtj||gd d }||jS) NrrrcWsdS)NFr)arrrverify6z4ConnectionLostTests.testFailedVerify..verifycrrrrrrrr?rz6ConnectionLostTests.testFailedVerify..rcrrrrrrrrHrrT)Z consumeErrors)rurt getContextZ set_verifyr Z VERIFY_PEERrrrrr0r3rrr|rrrrrrrZ DeferredListr _cbLostConns) rrorZserverConnLostrrZclientConnLostrdlrrrtestFailedVerify0s6  z$ConnectionLostTests.testFailedVerifycCsh|\\}}\}}||||tjg}tr%ddlm}|||j||j||j S)Nr)ConnectionLost) assertFalser rr Z isWindowstwisted.internet.errorrr?rrr)rresultsZsSuccessZsResultZcSuccessZcResultZacceptableErrorsrrrrrSs       z ConnectionLostTests._cbLostConns) r5r6r7r8rrrrrrrrrrrrrs4 #rc@s0eZdZdZddZddZddZdd Zd S) FakeContextzK L{OpenSSL.SSL.Context} double which can more easily be inspected. cCs||_d|_dS)Nr)_method_options)rmethodrrrrss zFakeContext.__init__cCs|j|O_dSr)r)rr{rrr set_optionswrVzFakeContext.set_optionscCdSrrrfileNamerrruse_certificate_filezrz FakeContext.use_certificate_filecCrrrrrrruse_privatekey_file}rzFakeContext.use_privatekey_fileN)r5r6r7r8rrrrrrrrrns  rc@rw) !DefaultOpenSSLContextFactoryTestsz8 Tests for L{ssl.DefaultOpenSSLContextFactory}. NrycCs"tjtttd|_|j|_dS)N)_contextFactory)rrnrrrrcontextrrrrsetUpsz'DefaultOpenSSLContextFactoryTests.setUpcCsB||jjtj||jjtj@tj||jjtj@dS)z L{ssl.DefaultOpenSSLContextFactory.getContext} returns an SSL context which can use SSLv3 or TLSv1 but not SSLv2. N) rrrr TLS_METHODr OP_NO_SSLv2r OP_NO_TLSv1_2rrrr test_methodsz-DefaultOpenSSLContextFactoryTests.test_methodcCs|tjtjt|dS)z Instantiating L{ssl.DefaultOpenSSLContextFactory} with a certificate filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N) assertRaisesr rrrnrrmrrrrtest_missingCertificateFilez=DefaultOpenSSLContextFactoryTests.test_missingCertificateFilecCs|tjtj|tdS)z Instantiating L{ssl.DefaultOpenSSLContextFactory} with a private key filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N)rr rrrnrmrrrrrtest_missingPrivateKeyFilerzsP           ".  ) 7j )3