U n5{i)2 @s(dZddlmZmZmZddlmZmZddlm Z m Z ddl m Z m Z mZddlmZddlmZmZmZddlmZmZmZdd lmZmZmZdd lmZdd lm Z m!Z!m"Z"dd l#m$Z$dd l%m&Z&ddl'm(Z(ddl)m*Z*zddl+m,Z,Wne-k rdZ,YnXddl.m/Z/m0Z0m1Z1GdddZ2GdddZ3eeGdddZ4Gdddee3Z5GdddZ6Gddde2eeZ7Gdd d ee3Z8Gd!d"d"e2ee3ee6Z9Gd#d$d$e2e3e6e!e"eZ:e;e;=dS)'z0 Tests for implementations of L{ITLSTransport}. )OptionalSequenceType) Interface implementer)Deferred DeferredList)SSL4ClientEndpointSSL4ServerEndpointTCP4ClientEndpoint)ConnectionClosed) IReactorSSLIStreamClientEndpoint ITLSTransport) ClientFactoryProtocol ServerFactory)BrokenContextFactoryConnectionTestsMixinEndpointCreator)ReactorBuilder)AbortConnectionMixinConnectToTCPListenerMixinStreamTransportTestsMixin) networkString)FilePath)platform)SkipTest) FILETYPE_PEMN)ClientContextFactoryKeyPairPrivateCertificatec@s>eZdZUegZeeeee d<e r:dZ e e dZ dS)TLSMixinrequiredInterfaceszcFor some reason, these reactors don't deal with SSL disconnection correctly on Windows. See #3371.)z*twisted.internet.glib2reactor.Glib2Reactorz(twisted.internet.gtk2reactor.Gtk2ReactorN)__name__ __module__ __qualname__r r#rrrr__annotations__rZ isWindowsmsgZskippedReactorsr)r)B/tmp/pip-unpacked-wheel-mnhg7r0q/twisted/internet/test/test_tls.pyr"2s r"c@s@eZdZddlZeeejddZ [ddZ ddZ dS) ContextGeneratingMixinrNstests server.pemcCs(|j}t|t|tt}|S)zM Return a new SSL context suitable for use in a test server. )_pemZ getContentr!loadr roptions)selfZpemcertr)r)r*getServerContextHs  z'ContextGeneratingMixin.getServerContextcCstSN)rr/r)r)r*getClientContextRsz'ContextGeneratingMixin.getClientContext) r$r%r&Ztwistedrr__file__Zsiblingchildr,r1r4r)r)r)r*r+@s  r+c@s eZdZdZddZddZdS)StartTLSClientEndpointa! An endpoint which wraps another one and adds a TLS layer immediately when connections are set up. @ivar wrapped: A L{IStreamClientEndpoint} provider which will be used to really set up connections. @ivar contextFactory: A L{ContextFactory} to use to do TLS. cCs||_||_dSr2)wrappedcontextFactory)r/r8r9r)r)r*__init__bszStartTLSClientEndpoint.__init__cs$Gfdddt}j|S)z Establish a connection using a protocol build by C{factory} and immediately start TLS on it. Return a L{Deferred} which fires with the protocol instance. cseZdZfddZdS)z6StartTLSClientEndpoint.connect..WrapperFactorycs(|jffdd }|_S)Ncsjj|dSr2) transportstartTLSr9)orig)protocolr/r)r*connectionMadessz\StartTLSClientEndpoint.connect..WrapperFactory.buildProtocol..connectionMade) buildProtocolr?)Z wrapperSelfaddrr?factoryr/)r>r*r@ps zDStartTLSClientEndpoint.connect..WrapperFactory.buildProtocolN)r$r%r&r@r)rBr)r*WrapperFactoryosrD)rr8connect)r/rCrDr)rBr*rEfs  zStartTLSClientEndpoint.connectN)r$r%r&__doc__r:rEr)r)r)r*r7Vs r7c@s eZdZdZddZddZdS)StartTLSClientCreatorz{ Create L{ITLSTransport.startTLS} endpoint for the client, and normal SSL for server just because it's easier. cCst|d|S)z Construct an SSL server endpoint. This should be constructing a TCP server endpoint which immediately calls C{startTLS} instead, but that is hard. rr r1r/reactorr)r)r*serverszStartTLSClientCreator.servercCstt|d|jtS)zS Construct a TCP client endpoint wrapped to immediately start TLS. 127.0.0.1)r7r portrr/rJZ serverAddressr)r)r*clients zStartTLSClientCreator.clientNr$r%r&rFrKrOr)r)r)r*rG}srGc@seZdZdZddZdS)BadContextTestsMixinz Mixin for L{ReactorBuilder} subclasses which defines a helper for testing the handling of broken context factories. cCs0|}|t||t}|tjt|dS)a Assert that the exception raised by a broken context factory's C{getContext} method is raised by some reactor method. If it is not, an exception will be raised to fail the test. @param useIt: A two-argument callable which will be called with a reactor and a broken context factory and which is expected to raise the same exception as the broken context factory's C{getContext} method. N) buildReactor assertRaises ValueErrorr assertEqualmessagestr)r/useItrJexcr)r)r*_testBadContexts z$BadContextTestsMixin._testBadContextN)r$r%r&rFrZr)r)r)r*rQsrQc@seZdZdZeZdS)StartTLSClientTestsMixinz Tests for TLS connections established using L{ITLSTransport.startTLS} (as opposed to L{IReactorSSL.connectSSL} or L{IReactorSSL.listenSSL}). N)r$r%r&rFrG endpointsr)r)r)r*r[sr[c@s eZdZdZddZddZdS) SSLCreatorz Create SSL endpoints. cCst|d|S)zQ Create an SSL server endpoint on a TCP/IP-stack allocated port. rrHrIr)r)r*rKszSSLCreator.servercCst|d|jtS)z Create an SSL client endpoint which will connect localhost on the port given by C{serverAddress}. @type serverAddress: L{IPv4Address} rL)r rMrrNr)r)r*rOs zSSLCreator.clientNrPr)r)r)r*r]sr]c@s&eZdZdZeZddZddZdS)SSLClientTestsMixinz< Mixin defining tests relating to L{ITLSTransport}. cCsdd}||dS)z If the context factory passed to L{IReactorSSL.connectSSL} raises an exception from its C{getContext} method, that exception is raised by L{IReactorSSL.connectSSL}. cSs|ddt|S)NrLi) connectSSLrrJr9r)r)r*rXs z2SSLClientTestsMixin.test_badContext..useItNrZr/rXr)r)r*test_badContextsz#SSLClientTestsMixin.test_badContextcs Gdddt}|t}t|_||_||_t}t|_||_| |_|jj |j_ gt |j|jgdd}fdd}| |j d|dd }||j|j|j|}||j| fd d |dtd td S)aO L{ITCPTransport.loseConnection} ends a connection which was set up with L{ITLSTransport.startTLS} and which has recently been written to. This is intended to verify that a socket send error masked by the TLS implementation doesn't prevent the connection from being reported as closed. c@s$eZdZddZddZddZdS)zQSSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLS..ShortProtocolcSsNt|js.|jj}d|j_|tddS|j|jj|j ddS)NzNo ITLSTransport supportx) rZ providedByr;rCfinishedZerrbackrr<contextwrite)r/rer)r)r*r?s z`SSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLS..ShortProtocol.connectionMadecSs|jd|jdS)Ny)r;rgZloseConnection)r/datar)r)r* dataReceiveds z^SSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLS..ShortProtocol.dataReceivedcSs&|jj}|dk r"d|j_||dSr2)rCrecallback)r/reasonrer)r)r*connectionLostsz`SSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLS..ShortProtocol.connectionLostN)r$r%r&r?rjrmr)r)r)r* ShortProtocols rnT)Z consumeErrorscs"|dd|ddgdS)Nr)extend)results)lostConnectionResultsr)r* cbFinished"szNSSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLS..cbFinishedrrL)Z interfacecsSr2)stop)Zign)rJr)r*/zLSSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLS..roN)rrRrrrer>r1rfrr4methodrZ addCallbackZ listenTCPZ addCleanup stopListeningZ connectTCPgetHosthostrMZ disconnectZ runReactorZtrapr )r/rnZ serverFactoryZ clientFactoryrersrMZ connectorr))rrrJr*&test_disconnectAfterWriteAfterStartTLSs< !         z:SSLClientTestsMixin.test_disconnectAfterWriteAfterStartTLSN)r$r%r&rFr]r\rcr{r)r)r)r*r^sr^c@s8eZdZdZddZddZddZdd Zd d Zd S) TLSPortTestsBuilderz, Tests for L{IReactorSSL.listenSSL} cCs|d||S)z0 Get a TLS port from a reactor. r) listenSSLr1)r/rJrCr)r)r*getListeningPortAsz$TLSPortTestsBuilder.getListeningPortcCsd||jfS)zY Get the message expected to be logged when a TLS port starts listening. z%s (TLS) starting on %dryrM)r/rMrCr)r)r*#getExpectedStartListeningLogMessageGsz7TLSPortTestsBuilder.getExpectedStartListeningLogMessagecCsd|jdS)zJ Get the expected connection lost message for a TLS port. z (TLS Port z Closed)r)r/rMr)r)r*getExpectedConnectionLostLogMsgMsz3TLSPortTestsBuilder.getExpectedConnectionLostLogMsgcCsdd}||dS)z If the context factory passed to L{IReactorSSL.listenSSL} raises an exception from its C{getContext} method, that exception is raised by L{IReactorSSL.listenSSL}. cSs|dt|S)Nr)r}rr`r)r)r*rXZsz2TLSPortTestsBuilder.test_badContext..useItNrarbr)r)r*rcSsz#TLSPortTestsBuilder.test_badContextcCs||j|j||S)a Connect to the given listening TLS port, assuming the underlying transport is TCP. @param reactor: The reactor under test. @type reactor: L{IReactorSSL} @param address: The listening's address. Only the C{port} component is used; see L{ConnectToTCPListenerMixin.LISTENER_HOST}. @type address: L{IPv4Address} or L{IPv6Address} @param factory: The client factory. @type factory: L{ClientFactory} @return: The connector )r_Z LISTENER_HOSTrMr4)r/rJaddressrCr)r)r*connectToListener_s z%TLSPortTestsBuilder.connectToListenerN) r$r%r&rFr~rrrcrr)r)r)r*r|5s  r|c@s$eZdZdZefZeZddZdS)AbortSSLConnectionTestsz- C{abortConnection} tests using SSL. cCstdkrtddS)NzOpenSSL not available.)rrr3r)r)r*setUpszAbortSSLConnectionTests.setUpN) r$r%r&rFr r#r]r\rr)r)r)r*r~sr)?rFtypingrrrZzope.interfacerrZtwisted.internet.deferrrZtwisted.internet.endpointsr r r Ztwisted.internet.errorr Ztwisted.internet.interfacesr rrZtwisted.internet.protocolrrrZ&twisted.internet.test.connectionmixinsrrrZ#twisted.internet.test.reactormixinsrZtwisted.internet.test.test_tcprrrZtwisted.python.compatrZtwisted.python.filepathrZtwisted.python.runtimerZtwisted.trial.unittestrZOpenSSL.cryptor ImportErrorZtwisted.internet.sslrr r!r"r+r7rGrQr[r]r^r|globalsupdateZmakeTestCaseClassesrr)r)r)r*sf       &  j D