Файловый менеджер - Редактировать - /home/freeclou/app.optimyar.com/front-web/build/assets/fonts/iran-yekan/WebFonts/tests.tar
Назад
__pycache__/configuration_test.cpython-39.pyc 0000644 00000014100 15114562471 0015315 0 ustar 00 a }|�g� � @ s� d Z ddlZddlmZ ddlZddlmZ ddlmZ ddl m Z ddl m Z ddl m Z G d d � d ej�Zed kr�e�e�ejd d� eg �� dS ) z Tests for certbot.configuration.� N)�mock)�errors)� constants)�misc)�os)�utilc s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Ze� d �d d � �Z d d� Z e� d �dd� �Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Z� ZS ) �NamespaceConfigTestz0Tests for certbot.configuration.NamespaceConfig.c s. t � �� d| j_d| j_d| j_d| j_d S )N�barz https://acme-server.org:443/newi� �� )�super�setUp�config�foo�server� https_port� http01_port��self�� __class__� �N/usr/lib/python3.9/site-packages/certbot/_internal/tests/configuration_test.pyr s zNamespaceConfigTest.setUpc C sP d| j _ddlm} t�tj�� || j j� W d � n1 sB0 Y d S )Nr r ��NamespaceConfig) r r �certbot.configurationr �pytest�raisesr �Error� namespace)r r r r r �test_init_same_ports s z(NamespaceConfigTest.test_init_same_portsc C s0 | j jdksJ �| j jtj�| jd�ks,J �d S )Nr Zwork)r r �work_dirr �path�joinZtempdirr r r r �test_proxy_getattr s z&NamespaceConfigTest.test_proxy_getattrc C sH ddg| j j�tjj�ks J �d| j _g d�| j j�tjj�ksDJ �d S )Nzacme-server.org:443�newzBhttp://user:pass@acme.server:443/p/a/t/h;parameters?query#fragment)zuser:pass@acme.server:443�p�a�t�h)r Z server_path�splitr r! �sepr r r r r �test_server_path" s ��z$NamespaceConfigTest.test_server_pathz certbot.configuration.constantsc C s� d|_ d|_d|_d|_d|_t�d�}tj� | j j �tj� tj� | j j |��ksVJ �tj� | j j�tj� tj� | j jd��ks�J �tj� | j j�tj� tj� | j jd��ks�J �tj� | j j�tj� tj� | j jd��ks�J �d S )NZaccZbackupsz../p�keysr' zacc/acme-server.org:443/new)Z ACCOUNTS_DIRZ BACKUP_DIRZIN_PROGRESS_DIRZKEY_DIRZTEMP_CHECKPOINT_DIRr Z.underscores_for_unsupported_characters_in_pathr r! �normpathr � accounts_dirr" � config_dir� backup_dirr �in_progress_dir�temp_checkpoint_dir)r �mock_constantsZref_pathr r r �test_dynamic_dirs+ s( �����z%NamespaceConfigTest.test_dynamic_dirsc C s& ddl m} d}d}d}d}tjg d�d�}||_||_||_||_||�}tj � |j�s^J �|jtj � t� � |�kszJ �tj � |j�s�J �|jtj � t� � |�ks�J �tj � |j�s�J �|jtj � t� � |�ks�J �tj � |j �s�J �tj � |j�s�J �tj � |j��sJ �tj � |j��s"J �d S ) Nr r r r �bazz mock.server�r/ r �logs_dirr r �domainsr ��spec)r r r � MagicMockr/ r r7 r r r! �isabsr" �getcwdr. r0 r1 r2 )r r � config_base� work_base� logs_baser �mock_namespacer r r r �test_absolute_paths? s6 ���z'NamespaceConfigTest.test_absolute_pathsc C sp d|_ d|_d|_| jjtj�| jjd�ks0J �| jj tj�| jjd�ksNJ �| jj tj�| jjd�kslJ �d S )Nr& �lZrenewal_configs) Z ARCHIVE_DIRZLIVE_DIRZRENEWAL_CONFIGS_DIRr �default_archive_dirr r! r" r/ �live_dir�renewal_configs_dir)r r3 r r r �test_renewal_dynamic_dirs_ s �z-NamespaceConfigTest.test_renewal_dynamic_dirsc C s| ddl m} d}d}d}tjg d�d�}||_||_||_||�}tj� |j �sTJ �tj� |j �sfJ �tj� |j �sxJ �d S )Nr r r r r5 r6 r9 ) r r r r; r/ r r7 r r! r< rD rE rF )r r r> r? r@ rA r r r r �test_renewal_absolute_pathsj s z/NamespaceConfigTest.test_renewal_absolute_pathsc C s8 d| j _| j jjdksJ �d| j j_| j jdks4J �d S )N�* i9 )r r r r r r r r �test_get_and_set_attr~ s z)NamespaceConfigTest.test_get_and_set_attrc C s� | j jtj�| j jtj�ks J �| j jtj�| j jtj �ks@J �| j j tj�| j jtj �ks`J �| j j tj�| j jtj �ks�J �d S )N)r Zrenewal_hooks_dirr r! r" r/ r ZRENEWAL_HOOKS_DIRZrenewal_pre_hooks_dirZRENEWAL_PRE_HOOKS_DIRZrenewal_deploy_hooks_dirZRENEWAL_DEPLOY_HOOKS_DIRZrenewal_post_hooks_dirZRENEWAL_POST_HOOKS_DIRr r r r �test_hook_directories� s( �� �� �� ��z)NamespaceConfigTest.test_hook_directoriesc C s, | j �d�rJ �d| j _| j �d�s(J �d S )N� somethingza value)r � set_by_userrL r r r r �"test_set_by_user_runtime_overrides� s z6NamespaceConfigTest.test_set_by_user_runtime_overridesc C sh ddl m} || jj�}t�t�� |�d� W d � n1 sB0 Y |�i � |�d�rdJ �d S )Nr r Zwhatever) r r r r r r � RuntimeErrorrM Zset_argument_sources)r r r r r r �test_set_by_user_exception� s ( z.NamespaceConfigTest.test_set_by_user_exceptionc C s2 | j �d�rJ �| j j�d� | j �d�s.J �d S )Nr8 z example.org)r rM r8 �appendr r r r �test_set_by_user_mutables� s z-NamespaceConfigTest.test_set_by_user_mutables)�__name__� __module__� __qualname__�__doc__r r r# r+ r Zpatchr4 rB rG rH rJ rK rN rP rR � __classcell__r r r r r s r �__main__� )rV �sysZunittestr r Zcertbotr Zcertbot._internalr Zcertbot.compatr r Z certbot.testsr Z test_utilZConfigTestCaser rS �exit�main�argv�__file__r r r r �<module> s __pycache__/crypto_util_test.cpython-39.opt-1.pyc 0000644 00000051623 15114562471 0015775 0 ustar 00 a }|�g�J � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlZddl m Z ddl m Z ddl m Z ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ ddlm mZ e�d �Ze�d �Z e�d �Z e�d�Z e�d�Z e�d�Z e�d�Z!e�d�Z"e�d�Z#e�d�Z$e�d�Z%e�d�Z&e�d�Z'e�d�Z(G dd� dej)�Z*G dd� dej)�Z+G dd� dej,�Z-G d d � d ej,�Z.G d d � d ej,�Z/G d d!� d!ej,�Z0G d"d#� d#ej,�Z1G d$d%� d%e1�Z2G d&d'� d'e1�Z3G d(d)� d)e1�Z4G d*d+� d+e1�Z5G d,d-� d-ej,�Z6G d.d/� d/ej,�Z7G d0d1� d1ej,�Z8G d2d3� d3ej,�Z9G d4d5� d5ej,�Z:G d6d7� d7ej,�Z;G d8d9� d9ej,�Z<G d:d;� d;ej,�Z=G d<d=� d=ej,�Z>G d>d?� d?ej,�Z?e@d@k�r�e�Ae�BejCdAd� eDg �� dS )Bz Tests for certbot.crypto_util.� N)�mock)�x509)�hashes)� serialization)�ec)�errors)�util)� filesystem)�oszrsa256_key.pemzrsa512_key.pemzrsa2048_key.pem� cert_512.pemz cert_2048.pemznistp256_key.pemzcert-nosans_nistp256.pemz cert_leaf.pemzcert_intermediate_1.pemzcert_intermediate_2.pemc s\ e Zd ZdZ� fdd�Z� fdd�Zedd� �Ze� d�d d � �Z e� d�d d � �Z � Z S ) �GenerateKeyTestz+Tests for certbot.crypto_util.generate_key.c s< t � �� tj�| jd�| _tj| jdd� t � t j � d S )N�workdiri� )�mode) �super�setUpr �path�join�tempdirr r �mkdir�logging�disableZCRITICAL��self�� __class__� �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/crypto_util_test.pyr ) s zGenerateKeyTest.setUpc s t � �� t�tj� d S �N)r �tearDownr r ZNOTSETr r r r r 1 s zGenerateKeyTest.tearDownc C s ddl m} |||ddd�S )Nr )� generate_keyzkey-certbot.pemT�Zstrict_permissions)�certbot.crypto_utilr )�clsZkey_sizeZkey_dirr r r r �_call6 s zGenerateKeyTest._callz certbot.crypto_util.make_keyc C s d|_ | �d| j�}d S )Ns key_pem� )� return_valuer# r )r � mock_make�keyr r r � test_success; s z GenerateKeyTest.test_successc C sB t |_t�t �� | �d| j� W d � n1 s40 Y d S )Ni� )� ValueError� side_effect�pytest�raisesr# r )r r& r r r �test_key_failureC s z GenerateKeyTest.test_key_failure) �__name__� __module__� __qualname__�__doc__r r � classmethodr# r �patchr( r- � __classcell__r r r r r ' s r c @ s, e Zd ZdZe�d�e�d�dd� ��ZdS )�GenerateCSRTestz+Tests for certbot.crypto_util.generate_csr.zacme.crypto_util.make_csrz+certbot.crypto_util.util.make_or_verify_dirc C s0 ddl m} d|_|tjdd�d| jdd�}d S ) Nr )� generate_csrs csr_pemZ dummy_key)Zpemz example.comTr )r! r6 r% r ZMockr )r Zunused_mock_verifyZmock_csrr6 �csrr r r �test_itL s �zGenerateCSRTest.test_itN)r. r/ r0 r1 r r3 r8 r r r r r5 J s r5 c @ sD e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d d � Z dS )� ValidCSRTestz(Tests for certbot.crypto_util.valid_csr.c C s ddl m} ||�S )Nr )� valid_csr)r! r: )r" r7 r: r r r r# ] s zValidCSRTest._callc C s d S r r r r r r �test_valid_pem_trueb s z ValidCSRTest.test_valid_pem_truec C s d S r r r r r r �test_valid_pem_san_truee s z$ValidCSRTest.test_valid_pem_san_truec C s d S r r r r r r �test_valid_der_falseh s z!ValidCSRTest.test_valid_der_falsec C s d S r r r r r r �test_empty_falsek s z ValidCSRTest.test_empty_falsec C s d S r r r r r r �test_random_falsen s z ValidCSRTest.test_random_falseN) r. r/ r0 r1 r2 r# r; r< r= r> r? r r r r r9 Z s r9 c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �CSRMatchesPubkeyTestz1Tests for certbot.crypto_util.csr_matches_pubkey.c O s ddl m} ||i |��S )Nr )�csr_matches_pubkey)r! rA )r" �args�kwargsrA r r r r# u s zCSRMatchesPubkeyTest._callc C s d S r r r r r r �test_valid_truez s z$CSRMatchesPubkeyTest.test_valid_truec C s d S r r r r r r �test_invalid_false~ s z'CSRMatchesPubkeyTest.test_invalid_falseN)r. r/ r0 r1 r2 r# rD rE r r r r r@ r s r@ c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ImportCSRFileTestz/Tests for certbot.certbot_util.import_csr_file.c O s ddl m} ||i |��S )Nr )�import_csr_file)r! rG )r" rB rC rG r r r r# � s zImportCSRFileTest._callc C s" t �d�}t �d�}t �d�}d S )Nz csr_512.der� csr_512.pem�� test_util� vector_path� load_vector)r �csrfile�dataZdata_pemr r r � test_der_csr� s z ImportCSRFileTest.test_der_csrc C s t �d�}t �d�}d S )NrH rI )r rM rN r r r � test_pem_csr� s z ImportCSRFileTest.test_pem_csrc C sH t �tj��( | �t�d�t�d�� W d � n1 s:0 Y d S )Nr )r+ r, r �Errorr# rJ rK rL r r r r � test_bad_csr� s �z ImportCSRFileTest.test_bad_csrN) r. r/ r0 r1 r2 r# rO rP rR r r r r rF � s rF c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) � MakeKeyTestz'Tests for certbot.crypto_util.make_key.c C s" ddl m} tj|d�d d� d S )Nr ��make_key� ��password�r! rU r Zload_pem_private_key�r rU r r r �test_rsa� s zMakeKeyTest.test_rsac C s4 ddl m} dD ] \}}tj||dd�d d�}qd S )Nr rT ))Z secp256r1� )Z secp384r1i� )Z secp521r1i �ecdsa�Zelliptic_curve�key_typerW rY )r rU �name�bitsZpkeyr r r �test_ec� s �zMakeKeyTest.test_ecc C sL ddl m} tjtjdd�� |ddd� W d � n1 s>0 Y d S )Nr rT z Unsupported RSA key length: 1024��matchr$ Zrsa)ra r_ �r! rU r+ r, r rQ rZ r r r �test_bad_key_sizes� s z MakeKeyTest.test_bad_key_sizesc C sL ddl m} tjtjdd�� |ddd� W d � n1 s>0 Y d S )Nr rT z#Unsupported elliptic curve: nothererc Znotherer] r^ re rZ r r r � test_bad_elliptic_curve_name� s z(MakeKeyTest.test_bad_elliptic_curve_namec C sR ddl m} tjtjt�d�d�� |ddd� W d � n1 sD0 Y d S )Nr rT z1Invalid key_type specified: unf. Use [rsa|ecdsa]rc rV Zunf)r_ )r! rU r+ r, r rQ �re�escaperZ r r r �test_bad_key_type� s �z MakeKeyTest.test_bad_key_typeN) r. r/ r0 r1 r[ rb rf rg rj r r r r rS � s rS c @ s e Zd ZdZdd� ZdS )�VerifyCertSetupz#Refactoring for verification tests.c C sV t �� | _t| j_t| j_t| j_t� d�| j_ t �� | _ t| j _t| j _t| j _ d S )Nzcert_fullchain_2048.pem) r � MagicMock�renewable_cert� SS_CERT_PATH� cert_path� chain_path�RSA2048_KEY_PATH�key_pathrJ rK Zfullchain_path�bad_renewable_certr r r r r � s zVerifyCertSetup.setUpN)r. r/ r0 r1 r r r r r rk � s rk c @ s< e Zd ZdZdd� Zdd� Zejde� d�d�d d � �Z d S ) �VerifyRenewableCertTest�4Tests for certbot.crypto_util.verify_renewable_cert.c C s ddl m} ||�S )Nr )�verify_renewable_cert)r! rv )r rm rv r r r r# � s z VerifyRenewableCertTest._callc C s d S r r r r r r �test_verify_renewable_cert� s z2VerifyRenewableCertTest.test_verify_renewable_certz-certbot.crypto_util.verify_renewable_cert_sig� )r* c C s< t �tj�� | �| j� W d � n1 s.0 Y d S r �r+ r, r rQ r# rs )r Z!unused_verify_renewable_cert_signr r r �"test_verify_renewable_cert_failure� s z:VerifyRenewableCertTest.test_verify_renewable_cert_failureN) r. r/ r0 r1 r# rw r r3 r rQ rz r r r r rt � s rt c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �VerifyRenewableCertSigTestru c C s ddl m} ||�S )Nr )�verify_renewable_cert_sig)r! r| )r rm r| r r r r# � s z VerifyRenewableCertSigTest._callc C s d S r r r r r r �test_cert_sig_match� s z.VerifyRenewableCertSigTest.test_cert_sig_matchc C s t �� }t|_t|_t|_d S r )r rl �P256_CERT_PATHro rp �P256_KEYrr )r rm r r r �test_cert_sig_match_ec� s z1VerifyRenewableCertSigTest.test_cert_sig_match_ecc C sJ t �d�| j_t�tj�� | �| j� W d � n1 s<0 Y d S )Nzcert_512_bad.pem) rJ rK rs ro r+ r, r rQ r# r r r r �test_cert_sig_mismatch s z1VerifyRenewableCertSigTest.test_cert_sig_mismatchN)r. r/ r0 r1 r# r} r� r� r r r r r{ � s r{ c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �VerifyFullchainTestz/Tests for certbot.crypto_util.verify_fullchain.c C s ddl m} ||�S )Nr )�verify_fullchain)r! r� )r rm r� r r r r# s zVerifyFullchainTest._callc C s d S r r r r r r �test_fullchain_matches s z*VerifyFullchainTest.test_fullchain_matchesc C s< t �tj�� | �| j� W d � n1 s.0 Y d S r ry r r r r �test_fullchain_mismatch s z+VerifyFullchainTest.test_fullchain_mismatchc C sD d| j _t�tj�� | �| j � W d � n1 s60 Y d S )NZdog)rs �chainr+ r, r rQ r# r r r r �test_fullchain_ioerror s z*VerifyFullchainTest.test_fullchain_ioerrorN)r. r/ r0 r1 r# r� r� r� r r r r r� s r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � VerifyCertMatchesPrivKeyTestz;Tests for certbot.crypto_util.verify_cert_matches_priv_key.c C s ddl m} ||j|j�S )Nr )� verify_cert_matches_priv_key)r! r� �cert�privkey)r rm r� r r r r# ! s z"VerifyCertMatchesPrivKeyTest._callc C s t | j_t| j_d S r )rn rm r� rq r� r r r r �test_cert_priv_key_match% s z5VerifyCertMatchesPrivKeyTest.test_cert_priv_key_matchc C sL t | j_t| j_t�tj�� | � | j� W d � n1 s>0 Y d S r ) �RSA256_KEY_PATHrs r� rn r� r+ r, r rQ r# r r r r �test_cert_priv_key_mismatch* s z8VerifyCertMatchesPrivKeyTest.test_cert_priv_key_mismatchN)r. r/ r0 r1 r# r� r� r r r r r� s r� c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ValidPrivkeyTestz,Tests for certbot.crypto_util.valid_privkey.c C s ddl m} ||�S )Nr )� valid_privkey)r! r� )r" r� r� r r r r# 5 s zValidPrivkeyTest._callc C s d S r r r r r r rD : s z ValidPrivkeyTest.test_valid_truec C s d S r r r r r r r> = s z!ValidPrivkeyTest.test_empty_falsec C s d S r r r r r r r? @ s z"ValidPrivkeyTest.test_random_falseN) r. r/ r0 r1 r2 r# rD r> r? r r r r r� 2 s r� c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �GetSANsFromCertTestz1Tests for certbot.crypto_util.get_sans_from_cert.c O s ddl m} ||i |��S )Nr )�get_sans_from_cert)r! r� )r" rB rC r� r r r r# G s zGetSANsFromCertTest._callc C s d S r r r r r r � test_singleL s z GetSANsFromCertTest.test_singlec C s d S r r r r r r �test_sanO s z GetSANsFromCertTest.test_sanN)r. r/ r0 r1 r2 r# r� r� r r r r r� D s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) �GetNamesFromCertTestz2Tests for certbot.crypto_util.get_names_from_cert.c O s ddl m} ||i |��S )Nr )�get_names_from_cert)r! r� )r" rB rC r� r r r r# W s zGetNamesFromCertTest._callc C s d S r r r r r r r� \ s z GetNamesFromCertTest.test_singlec C s d S r r r r r r r� ` s z GetNamesFromCertTest.test_sanc C s d S r r r r r r �test_common_name_sans_orderd s z0GetNamesFromCertTest.test_common_name_sans_orderc C s8 t �t�� | �d� W d � n1 s*0 Y d S )Ns hello there)r+ r, r) r# r r r r �test_parse_non_certj s z(GetNamesFromCertTest.test_parse_non_certN) r. r/ r0 r1 r2 r# r� r� r� r� r r r r r� T s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) �GetNamesFromReqTestz1Tests for certbot.crypto_util.get_names_from_req.c O s ddl m} ||i |��S )Nr )�get_names_from_req)r! r� )r" rB rC r� r r r r# r s zGetNamesFromReqTest._callc C s d S r r r r r r � test_nonamesw s z GetNamesFromReqTest.test_nonamesc C s d S r r r r r r � test_nosans{ s z GetNamesFromReqTest.test_nosansc C s d S r r r r r r � test_sans s z GetNamesFromReqTest.test_sansc C s ddl m} d S )Nr )� FILETYPE_ASN1)ZOpenSSL.cryptor� )r r� r r r �test_der� s z GetNamesFromReqTest.test_derN) r. r/ r0 r1 r2 r# r� r� r� r� r r r r r� o s r� c @ s e Zd ZdZdd� Zdd� ZdS )�CertLoaderTestz8Tests for certbot.crypto_util.pyopenssl_load_certificatec C s ddl m} |t�\}}d S )Nr ��pyopenssl_load_certificate)r! r� �CERT)r r� r� Z file_typer r r �test_load_valid_cert� s z#CertLoaderTest.test_load_valid_certc C sP ddl m} t�dd�}t�tj�� ||� W d � n1 sB0 Y d S )Nr r� s BEGIN CERTIFICATEs ASDFASDFASDF!!!)r! r� r� �replacer+ r, r rQ )r r� Z bad_cert_datar r r �test_load_invalid_cert� s z%CertLoaderTest.test_load_invalid_certN)r. r/ r0 r1 r� r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� NotBeforeTestz'Tests for certbot.crypto_util.notBeforec C s ddl m} d S )Nr )� notBefore)r! r� )r r� r r r �test_notBefore� s z NotBeforeTest.test_notBeforeN)r. r/ r0 r1 r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� NotAfterTest�&Tests for certbot.crypto_util.notAfterc C s ddl m} d S )Nr )�notAfter)r! r� )r r� r r r � test_notAfter� s zNotAfterTest.test_notAfterN)r. r/ r0 r1 r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� Sha256sumTestr� c C s ddl m} d S )Nr )� sha256sum)r! r� )r r� r r r �test_sha256sum� s z Sha256sumTest.test_sha256sumN)r. r/ r0 r1 r� r r r r r� � s r� c @ s e Zd ZdZdd� Zdd� ZdS )� CertAndChainFromFullchainTestz;Tests for certbot.crypto_util.cert_and_chain_from_fullchainc C s( ddl m} |�|j|�|j|���� S )Nr )�crypto)�OpenSSLr� Zdump_certificateZ FILETYPE_PEMZload_certificate�decode)r �cert_pemr� r r r �_parse_and_reencode_pem� s �z5CertAndChainFromFullchainTest._parse_and_reencode_pemc C s� t �� }|t�� }|| }|d | }|�dd�}| �|�| �|� | �t�� � }ddlm} ||||fD ]}||�\} } qnt�t j �� ||� W d � n1 s�0 Y d S )N� z r )� cert_and_chain_from_fullchain) r� r� �SS_CERTr� r� r! r� r+ r, r rQ ) r r� Z chain_pemZ fullchain_pemZspacey_fullchain_pemZcrlf_fullchain_pemZacmev1_fullchain_pemr� Z fullchainZcert_outZ chain_outr r r �"test_cert_and_chain_from_fullchain� s$ � � � z@CertAndChainFromFullchainTest.test_cert_and_chain_from_fullchainN)r. r/ r0 r1 r� r� r r r r r� � s r� c @ sb e Zd ZdZedd� �Zdd� Zdd� Ze� d�d d � �Z e� d�d d � �Z e� d �dd� �Z dS )�FindChainWithIssuerTestz4Tests for certbot.crypto_util.find_chain_with_issuerc K s ddl m} ||||�S )Nr )�find_chain_with_issuer)r! r� )r" � fullchainsZ issuer_cnrC r� r r r r# � s z FindChainWithIssuerTest._callc C s t �� t�� t �� t�� gS r )� CERT_LEAFr� � CERT_ISSUER�CERT_ALT_ISSUERr r r r �_all_fullchains� s �z'FindChainWithIssuerTest._all_fullchainsc C s | � � }| �|d�}dS )z/Correctly pick the chain based on the root's CN�Pebble Root CA 0cc6f0N)r� r# )r r� �matchedr r r �test_positive_match� s z+FindChainWithIssuerTest.test_positive_matchz certbot.crypto_util.logger.infoc C s4 | � � }|d t�� |d< | �|d�}|�� dS )z5Don't pick a chain where only an intermediate matches� r� N)r� r� r� r# �assert_not_called�r Z mock_infor� r� r r r �test_intermediate_match� s z/FindChainWithIssuerTest.test_intermediate_matchc C s | � � }| �|d�}|�� d S )N�non-existent issuer)r� r# r� r� r r r � test_no_match� s z%FindChainWithIssuerTest.test_no_matchz"certbot.crypto_util.logger.warningc C s( | � � }| j|ddd�}|�dd� d S )Nr� T)Zwarn_on_no_matchz�Certbot has been configured to prefer certificate chains with issuer '%s', but no chain from the CA matched this issuer. Using the default certificate chain instead.)r� r# Zassert_called_once_with)r Z mock_warningr� r� r r r �test_warning_on_no_match� s ��z0FindChainWithIssuerTest.test_warning_on_no_matchN) r. r/ r0 r1 r2 r# r� r� r r3 r� r� r� r r r r r� � s r� �__main__r� )Er1 Zbinasciir rh �sysZunittestr r� r+ Z cryptographyr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr Zcertbotr r Zcertbot.compatr r Zcertbot.tests.utilZtestsrJ rL Z RSA256_KEYrK r� Z RSA512_KEYrq Z CERT_PATHr� rn r� r r~ Z P256_CERTr� r� r� ZTempDirTestCaser r5 ZTestCaser9 r@ rF rS rk rt r{ r� r� r� r� r� r� r� r� r� r� r� r� r. �exit�main�argv�__file__r r r r �<module> sl #%+ 2 __pycache__/crypto_util_test.cpython-39.pyc 0000644 00000055737 15114562471 0015050 0 ustar 00 a }|�g�J � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlZddl m Z ddl m Z ddl m Z ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ ddlm mZ e�d �Ze�d �Z e�d �Z e�d�Z e�d�Z e�d�Z e�d�Z!e�d�Z"e�d�Z#e�d�Z$e�d�Z%e�d�Z&e�d�Z'e�d�Z(G dd� dej)�Z*G dd� dej)�Z+G dd� dej,�Z-G d d � d ej,�Z.G d d � d ej,�Z/G d d!� d!ej,�Z0G d"d#� d#ej,�Z1G d$d%� d%e1�Z2G d&d'� d'e1�Z3G d(d)� d)e1�Z4G d*d+� d+e1�Z5G d,d-� d-ej,�Z6G d.d/� d/ej,�Z7G d0d1� d1ej,�Z8G d2d3� d3ej,�Z9G d4d5� d5ej,�Z:G d6d7� d7ej,�Z;G d8d9� d9ej,�Z<G d:d;� d;ej,�Z=G d<d=� d=ej,�Z>G d>d?� d?ej,�Z?e@d@k�r�e�Ae�BejCdAd� eDg �� dS )Bz Tests for certbot.crypto_util.� N)�mock)�x509)�hashes)� serialization)�ec)�errors)�util)� filesystem)�oszrsa256_key.pemzrsa512_key.pemzrsa2048_key.pem� cert_512.pemz cert_2048.pemznistp256_key.pemzcert-nosans_nistp256.pemz cert_leaf.pemzcert_intermediate_1.pemzcert_intermediate_2.pemc s\ e Zd ZdZ� fdd�Z� fdd�Zedd� �Ze� d�d d � �Z e� d�d d � �Z � Z S ) �GenerateKeyTestz+Tests for certbot.crypto_util.generate_key.c s< t � �� tj�| jd�| _tj| jdd� t � t j � d S )N�workdiri� )�mode) �super�setUpr �path�join�tempdirr r �mkdir�logging�disableZCRITICAL��self�� __class__� �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/crypto_util_test.pyr ) s zGenerateKeyTest.setUpc s t � �� t�tj� d S �N)r �tearDownr r ZNOTSETr r r r r 1 s zGenerateKeyTest.tearDownc C s ddl m} |||ddd�S )Nr )� generate_key�key-certbot.pemT�Zstrict_permissions)�certbot.crypto_utilr )�cls�key_sizeZkey_dirr r r r �_call6 s zGenerateKeyTest._callz certbot.crypto_util.make_keyc C sR d|_ | �d| j�}|jdks"J �d|jv s0J �tj�tj�| j|j��sNJ �d S )Ns key_pem� r ) � return_valuer% r �pem�filer r �existsr )r � mock_make�keyr r r � test_success; s z GenerateKeyTest.test_successc C sB t |_t�t �� | �d| j� W d � n1 s40 Y d S )Ni� )� ValueError� side_effect�pytest�raisesr% r )r r+ r r r �test_key_failureC s z GenerateKeyTest.test_key_failure) �__name__� __module__� __qualname__�__doc__r r � classmethodr% r �patchr- r2 � __classcell__r r r r r ' s r c @ s, e Zd ZdZe�d�e�d�dd� ��ZdS )�GenerateCSRTestz+Tests for certbot.crypto_util.generate_csr.zacme.crypto_util.make_csrz+certbot.crypto_util.util.make_or_verify_dirc C sL ddl m} d|_|tjdd�d| jdd�}|jdks:J �d |jv sHJ �d S ) Nr )� generate_csrs csr_pemZ dummy_key)r( � example.comTr! zcsr-certbot.pem)r" r; r' r ZMockr �datar) )r Zunused_mock_verifyZmock_csrr; �csrr r r �test_itL s �zGenerateCSRTest.test_itN)r3 r4 r5 r6 r r8 r? r r r r r: J s r: c @ sD e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d d � Z dS )� ValidCSRTestz(Tests for certbot.crypto_util.valid_csr.c C s ddl m} ||�S )Nr )� valid_csr)r" rA )r# r> rA r r r r% ] s zValidCSRTest._callc C s | � t�d��sJ �d S �N� csr_512.pem�r% � test_util� load_vectorr r r r �test_valid_pem_trueb s z ValidCSRTest.test_valid_pem_truec C s | � t�d��sJ �d S )Nzcsr-san_512.pemrD r r r r �test_valid_pem_san_truee s z$ValidCSRTest.test_valid_pem_san_truec C s | � t�d��rJ �d S )N� csr_512.derrD r r r r �test_valid_der_falseh s z!ValidCSRTest.test_valid_der_falsec C s | � d�rJ �d S �N� �r% r r r r �test_empty_falsek s z ValidCSRTest.test_empty_falsec C s | � d�rJ �d S �Nzfoo barrM r r r r �test_random_falsen s z ValidCSRTest.test_random_falseN) r3 r4 r5 r6 r7 r% rG rH rJ rN rP r r r r r@ Z s r@ c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �CSRMatchesPubkeyTestz1Tests for certbot.crypto_util.csr_matches_pubkey.c O s ddl m} ||i |��S )Nr )�csr_matches_pubkey)r" rR )r# �args�kwargsrR r r r r% u s zCSRMatchesPubkeyTest._callc C s | � t�d�t�sJ �d S rB )r% rE rF � RSA512_KEYr r r r �test_valid_truez s �z$CSRMatchesPubkeyTest.test_valid_truec C s | � t�d�t�rJ �d S rB )r% rE rF � RSA256_KEYr r r r �test_invalid_false~ s �z'CSRMatchesPubkeyTest.test_invalid_falseN)r3 r4 r5 r6 r7 r% rV rX r r r r rQ r s rQ c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ImportCSRFileTestz/Tests for certbot.certbot_util.import_csr_file.c O s ddl m} ||i |��S )Nr )�import_csr_file)r" rZ )r# rS rT rZ r r r r% � s zImportCSRFileTest._callc C sN t �d�}t �d�}t �d�}tjjtj||dd�dgf| �||�ksJJ �d S )NrI rC r( �r) r= Zform� Example.com� rE � vector_pathrF �OpenSSL�crypto� FILETYPE_PEMr ZCSRr% )r �csrfiler= Zdata_pemr r r � test_der_csr� s �� �z ImportCSRFileTest.test_der_csrc C sD t �d�}t �d�}tjjtj||dd�dgf| �||�ks@J �d S )NrC r( r[ r\ r] )r rb r= r r r � test_pem_csr� s �� �z ImportCSRFileTest.test_pem_csrc C sH t �tj��( | �t�d�t�d�� W d � n1 s:0 Y d S �Nr )r0 r1 r �Errorr% rE r^ rF r r r r � test_bad_csr� s �z ImportCSRFileTest.test_bad_csrN) r3 r4 r5 r6 r7 r% rc rd rg r r r r rY � s rY c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) � MakeKeyTestz'Tests for certbot.crypto_util.make_key.c C s" ddl m} tj|d�d d� d S )Nr ��make_key� ��password)r" rj r �load_pem_private_key�r rj r r r �test_rsa� s zMakeKeyTest.test_rsac C sT ddl m} dD ]>\}}tj||dd�d d�}t|tj�s>J �|jj|ksJ �qd S )Nr ri ))Z secp256r1� )Z secp384r1i� )Z secp521r1i �ecdsa�Zelliptic_curve�key_typerl ) r" rj r rn � isinstancer ZEllipticCurvePrivateKeyZcurver$ )r rj �name�bitsZpkeyr r r �test_ec� s �zMakeKeyTest.test_ecc C sL ddl m} tjtjdd�� |ddd� W d � n1 s>0 Y d S )Nr ri z Unsupported RSA key length: 1024��matchr& Zrsa)rw rt �r" rj r0 r1 r rf ro r r r �test_bad_key_sizes� s z MakeKeyTest.test_bad_key_sizesc C sL ddl m} tjtjdd�� |ddd� W d � n1 s>0 Y d S )Nr ri z#Unsupported elliptic curve: notherery Znothererr rs r{ ro r r r � test_bad_elliptic_curve_name� s z(MakeKeyTest.test_bad_elliptic_curve_namec C sR ddl m} tjtjt�d�d�� |ddd� W d � n1 sD0 Y d S )Nr ri z1Invalid key_type specified: unf. Use [rsa|ecdsa]ry rk Zunf)rt )r" rj r0 r1 r rf �re�escapero r r r �test_bad_key_type� s �z MakeKeyTest.test_bad_key_typeN) r3 r4 r5 r6 rp rx r| r} r� r r r r rh � s rh c @ s e Zd ZdZdd� ZdS )�VerifyCertSetupz#Refactoring for verification tests.c C sV t �� | _t| j_t| j_t| j_t� d�| j_ t �� | _ t| j _t| j _t| j _ d S )Nzcert_fullchain_2048.pem) r � MagicMock�renewable_cert� SS_CERT_PATH� cert_path� chain_path�RSA2048_KEY_PATH�key_pathrE r^ Zfullchain_path�bad_renewable_certr r r r r � s zVerifyCertSetup.setUpN)r3 r4 r5 r6 r r r r r r� � s r� c @ s< e Zd ZdZdd� Zdd� Zejde� d�d�d d � �Z d S ) �VerifyRenewableCertTest�4Tests for certbot.crypto_util.verify_renewable_cert.c C s ddl m} ||�S )Nr )�verify_renewable_cert)r" r� )r r� r� r r r r% � s z VerifyRenewableCertTest._callc C s | � | j�d u sJ �d S r �r% r� r r r r �test_verify_renewable_cert� s z2VerifyRenewableCertTest.test_verify_renewable_certz-certbot.crypto_util.verify_renewable_cert_sigrL )r/ c C s< t �tj�� | �| j� W d � n1 s.0 Y d S r �r0 r1 r rf r% r� )r Z!unused_verify_renewable_cert_signr r r �"test_verify_renewable_cert_failure� s z:VerifyRenewableCertTest.test_verify_renewable_cert_failureN) r3 r4 r5 r6 r% r� r r8 r rf r� r r r r r� � s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �VerifyRenewableCertSigTestr� c C s ddl m} ||�S )Nr )�verify_renewable_cert_sig)r" r� )r r� r� r r r r% � s z VerifyRenewableCertSigTest._callc C s | � | j�d u sJ �d S r r� r r r r �test_cert_sig_match� s z.VerifyRenewableCertSigTest.test_cert_sig_matchc C s0 t �� }t|_t|_t|_| �|�d u s,J �d S r )r r� �P256_CERT_PATHr� r� �P256_KEYr� r% )r r� r r r �test_cert_sig_match_ec� s z1VerifyRenewableCertSigTest.test_cert_sig_match_ecc C sJ t �d�| j_t�tj�� | �| j� W d � n1 s<0 Y d S )Nzcert_512_bad.pem) rE r^ r� r� r0 r1 r rf r% r r r r �test_cert_sig_mismatch s z1VerifyRenewableCertSigTest.test_cert_sig_mismatchN)r3 r4 r5 r6 r% r� r� r� r r r r r� � s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �VerifyFullchainTestz/Tests for certbot.crypto_util.verify_fullchain.c C s ddl m} ||�S )Nr )�verify_fullchain)r" r� )r r� r� r r r r% s zVerifyFullchainTest._callc C s | � | j�d u sJ �d S r r� r r r r �test_fullchain_matches s z*VerifyFullchainTest.test_fullchain_matchesc C s< t �tj�� | �| j� W d � n1 s.0 Y d S r r� r r r r �test_fullchain_mismatch s z+VerifyFullchainTest.test_fullchain_mismatchc C sD d| j _t�tj�� | �| j � W d � n1 s60 Y d S )NZdog)r� �chainr0 r1 r rf r% r r r r �test_fullchain_ioerror s z*VerifyFullchainTest.test_fullchain_ioerrorN)r3 r4 r5 r6 r% r� r� r� r r r r r� s r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � VerifyCertMatchesPrivKeyTestz;Tests for certbot.crypto_util.verify_cert_matches_priv_key.c C s ddl m} ||j|j�S )Nr )� verify_cert_matches_priv_key)r" r� �cert�privkey)r r� r� r r r r% ! s z"VerifyCertMatchesPrivKeyTest._callc C s( t | j_t| j_| �| j�d u s$J �d S r )r� r� r� r� r� r% r r r r �test_cert_priv_key_match% s z5VerifyCertMatchesPrivKeyTest.test_cert_priv_key_matchc C sL t | j_t| j_t�tj�� | � | j� W d � n1 s>0 Y d S r ) �RSA256_KEY_PATHr� r� r� r� r0 r1 r rf r% r r r r �test_cert_priv_key_mismatch* s z8VerifyCertMatchesPrivKeyTest.test_cert_priv_key_mismatchN)r3 r4 r5 r6 r% r� r� r r r r r� s r� c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ValidPrivkeyTestz,Tests for certbot.crypto_util.valid_privkey.c C s ddl m} ||�S )Nr )� valid_privkey)r" r� )r# r� r� r r r r% 5 s zValidPrivkeyTest._callc C s | � t�sJ �d S r )r% rU r r r r rV : s z ValidPrivkeyTest.test_valid_truec C s | � d�rJ �d S rK rM r r r r rN = s z!ValidPrivkeyTest.test_empty_falsec C s | � d�rJ �d S rO rM r r r r rP @ s z"ValidPrivkeyTest.test_random_falseN) r3 r4 r5 r6 r7 r% rV rN rP r r r r r� 2 s r� c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �GetSANsFromCertTestz1Tests for certbot.crypto_util.get_sans_from_cert.c O s ddl m} ||i |��S )Nr )�get_sans_from_cert)r" r� )r# rS rT r� r r r r% G s zGetSANsFromCertTest._callc C s g | � t�d��ksJ �d S re rD r r r r � test_singleL s z GetSANsFromCertTest.test_singlec C s ddg| � t�d��ks J �d S �Nr< zwww.example.comzcert-san_512.pemrD r r r r �test_sanO s �z GetSANsFromCertTest.test_sanN)r3 r4 r5 r6 r7 r% r� r� r r r r r� D s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) �GetNamesFromCertTestz2Tests for certbot.crypto_util.get_names_from_cert.c O s ddl m} ||i |��S )Nr )�get_names_from_cert)r" r� )r# rS rT r� r r r r% W s zGetNamesFromCertTest._callc C s dg| � t�d��ksJ �d S )Nr< r rD r r r r r� \ s �z GetNamesFromCertTest.test_singlec C s ddg| � t�d��ks J �d S r� rD r r r r r� ` s �z GetNamesFromCertTest.test_sanc C s, dgdd� dD � | � t�d��ks(J �d S )Nr< c S s g | ]}d � |��qS )z{0}.example.com)�format)�.0�cr r r � <listcomp>g � zDGetNamesFromCertTest.test_common_name_sans_order.<locals>.<listcomp>Zabcdzcert-5sans_512.pemrD r r r r �test_common_name_sans_orderd s �z0GetNamesFromCertTest.test_common_name_sans_orderc C s8 t �t�� | �d� W d � n1 s*0 Y d S )Ns hello there)r0 r1 r. r% r r r r �test_parse_non_certj s z(GetNamesFromCertTest.test_parse_non_certN) r3 r4 r5 r6 r7 r% r� r� r� r� r r r r r� T s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) �GetNamesFromReqTestz1Tests for certbot.crypto_util.get_names_from_req.c O s ddl m} ||i |��S )Nr )�get_names_from_req)r" r� )r# rS rT r� r r r r% r s zGetNamesFromReqTest._callc C s g | � t�d��ksJ �d S )Nzcsr-nonames_512.pemrD r r r r � test_nonamesw s �z GetNamesFromReqTest.test_nonamesc C s dg| � t�d��ksJ �d S )Nr< zcsr-nosans_512.pemrD r r r r � test_nosans{ s �z GetNamesFromReqTest.test_nosansc C s g d�| � t�d��ks J �d S )N)r< z example.orgz example.netz example.infozsubdomain.example.comzother.subdomain.example.comzcsr-6sans_512.pemrD r r r r � test_sans s �z GetNamesFromReqTest.test_sansc C s. ddl m} dg| jt�d�|d�ks*J �d S )Nr )� FILETYPE_ASN1r\ rI )�typ)ZOpenSSL.cryptor� r% rE rF )r r� r r r �test_der� s �z GetNamesFromReqTest.test_derN) r3 r4 r5 r6 r7 r% r� r� r� r� r r r r r� o s r� c @ s e Zd ZdZdd� Zdd� ZdS )�CertLoaderTestz8Tests for certbot.crypto_util.pyopenssl_load_certificatec C s\ ddl m} |t�\}}|tjjks(J �t�|�d�� dd��t � t�� t �� �ksXJ �d S )Nr ��pyopenssl_load_certificateZsha256� :r� )r" r� �CERTr_ r` ra �binasciiZ unhexlifyZdigest�replacer Zload_pem_x509_certificateZ fingerprintr ZSHA256)r r� r� Z file_typer r r �test_load_valid_cert� s ��z#CertLoaderTest.test_load_valid_certc C sP ddl m} t�dd�}t�tj�� ||� W d � n1 sB0 Y d S )Nr r� s BEGIN CERTIFICATEs ASDFASDFASDF!!!)r" r� r� r� r0 r1 r rf )r r� Z bad_cert_datar r r �test_load_invalid_cert� s z%CertLoaderTest.test_load_invalid_certN)r3 r4 r5 r6 r� r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� NotBeforeTestz'Tests for certbot.crypto_util.notBeforec C s$ ddl m} |t��� dks J �d S )Nr )� notBeforez2014-12-11T22:34:45+00:00)r" r� � CERT_PATH� isoformat)r r� r r r �test_notBefore� s �z NotBeforeTest.test_notBeforeN)r3 r4 r5 r6 r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� NotAfterTest�&Tests for certbot.crypto_util.notAfterc C s$ ddl m} |t��� dks J �d S )Nr )�notAfterz2014-12-18T22:34:45+00:00)r" r� r� r� )r r� r r r � test_notAfter� s �zNotAfterTest.test_notAfterN)r3 r4 r5 r6 r� r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� Sha256sumTestr� c C s ddl m} |t�dks J �d S )Nr )� sha256sumZ@914ffed8daf9e2c99d90ac95c77d54f32cbd556672facac380f0c063498df84e)r" r� r� )r r� r r r �test_sha256sum� s �z Sha256sumTest.test_sha256sumN)r3 r4 r5 r6 r� r r r r r� � s r� c @ s e Zd ZdZdd� Zdd� ZdS )� CertAndChainFromFullchainTestz;Tests for certbot.crypto_util.cert_and_chain_from_fullchainc C s( ddl m} |�|j|�|j|���� S )Nr )r` )r_ r` Zdump_certificatera Zload_certificate�decode)r �cert_pemr` r r r �_parse_and_reencode_pem� s �z5CertAndChainFromFullchainTest._parse_and_reencode_pemc C s� t �� }|t�� }|| }|d | }|�dd�}| �|�| �|� | �t�� � }ddlm} ||||fD ](}||�\} } | |ks�J �| |ksnJ �qnt�t j �� ||� W d � n1 s�0 Y d S )N� z r )� cert_and_chain_from_fullchain) r� r� �SS_CERTr� r� r" r� r0 r1 r rf ) r r� Z chain_pemZ fullchain_pemZspacey_fullchain_pemZcrlf_fullchain_pemZacmev1_fullchain_pemr� Z fullchainZcert_outZ chain_outr r r �"test_cert_and_chain_from_fullchain� s& � � � z@CertAndChainFromFullchainTest.test_cert_and_chain_from_fullchainN)r3 r4 r5 r6 r� r� r r r r r� � s r� c @ sb e Zd ZdZedd� �Zdd� Zdd� Ze� d�d d � �Z e� d�d d � �Z e� d �dd� �Z dS )�FindChainWithIssuerTestz4Tests for certbot.crypto_util.find_chain_with_issuerc K s ddl m} ||||�S )Nr )�find_chain_with_issuer)r" r� )r# � fullchainsZ issuer_cnrT r� r r r r% � s z FindChainWithIssuerTest._callc C s t �� t�� t �� t�� gS r )� CERT_LEAFr� � CERT_ISSUER�CERT_ALT_ISSUERr r r r �_all_fullchains� s �z'FindChainWithIssuerTest._all_fullchainsc C s( | � � }| �|d�}||d ks$J �dS )z/Correctly pick the chain based on the root's CN�Pebble Root CA 0cc6f0� N)r� r% )r r� �matchedr r r �test_positive_match� s z+FindChainWithIssuerTest.test_positive_matchz certbot.crypto_util.logger.infoc C sD | � � }|d t�� |d< | �|d�}||d ks8J �|�� dS )z5Don't pick a chain where only an intermediate matchesr� r� r N)r� r� r� r% �assert_not_called�r Z mock_infor� r� r r r �test_intermediate_match� s z/FindChainWithIssuerTest.test_intermediate_matchc C s0 | � � }| �|d�}||d ks$J �|�� d S )N�non-existent issuerr )r� r% r� r� r r r � test_no_match� s z%FindChainWithIssuerTest.test_no_matchz"certbot.crypto_util.logger.warningc C s8 | � � }| j|ddd�}||d ks(J �|�dd� d S )Nr� T)Zwarn_on_no_matchr z�Certbot has been configured to prefer certificate chains with issuer '%s', but no chain from the CA matched this issuer. Using the default certificate chain instead.)r� r% Zassert_called_once_with)r Z mock_warningr� r� r r r �test_warning_on_no_match� s ��z0FindChainWithIssuerTest.test_warning_on_no_matchN) r3 r4 r5 r6 r7 r% r� r� r r8 r� r� r� r r r r r� � s r� �__main__r� )Er6 r� r r~ �sysZunittestr r_ r0 Z cryptographyr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr Zcertbotr r Zcertbot.compatr r Zcertbot.tests.utilZtestsrE rF rW r^ r� rU r� r� r� r� r� r� r� Z P256_CERTr� r� r� ZTempDirTestCaser r: ZTestCaser@ rQ rY rh r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r3 �exit�main�argv�__file__r r r r �<module> sl #%+ 2 __pycache__/eff_test.cpython-39.opt-1.pyc 0000644 00000015543 15114562471 0014161 0 ustar 00 a }|�g � @ s d Z ddlZddlZddlZddlmZ ddlZddlZddlZddlZddl m Z ddl m Z ddl m Z ddlm mZ ej�e�d��ZG dd � d ej�ZG d d � d e�ZG d d � d e�ZG dd� dej�Ze dkr�e� e� ej dd� e g �� dS )z Tests for certbot._internal.eff.� N)�mock)�messages)�account)� constantszrsa512_key.pemc s e Zd ZdZ� fdd�Z� ZS )�SubscriptionTestz&Abstract class for subscription tests.c sb t � �� tjtjd t�� dd�ttjjdt j ddddddt j d �d �d �| _d | j _ d | j _d S ) N�hi)Zuri�bodyZnew_authzr_uriztest.certbot.orgi� � � � � )Ztzinfo)Z creation_hostZ creation_dt)Zregr�key�meta�certbot@example.org)�super�setUpr ZAccountr ZRegistrationResourceZ Registration�_KEYZMeta�datetime�pytzZUTC�config�email� eff_email��self�� __class__� �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/eff_test.pyr s ���� zSubscriptionTest.setUp)�__name__� __module__� __qualname__�__doc__r � __classcell__r r r r r s r c @ s� e Zd ZdZdd� Ze�� e�d�dd� ��Z e�� dd� �Z e�� d d � �Z e�� d d � �Z e�� d d� �Z dd� Zdd� ZdS )�PrepareSubscriptionTestz5Tests for certbot._internal.eff.prepare_subscription.c C s ddl m} || j| j� d S )Nr )�prepare_subscription)�certbot._internal.effr$ r r )r r$ r r r �_call' s z PrepareSubscriptionTest._call�)certbot._internal.eff.display_util.notifyc C s. d | j _d| j _| �� |jd d }d}d S )NTr z,because you didn't provide an e-mail address)r r r r& � call_args)r � mock_notify�mock_get_utility�actual� expected_partr r r � test_failure+ s z$PrepareSubscriptionTest.test_failurec C s d| j _| �� | �|� d S �NF�r r r& � _assert_no_get_utility_calls�r r* r r r �&test_will_not_subscribe_with_no_prompt6 s z>PrepareSubscriptionTest.test_will_not_subscribe_with_no_promptc C s d| j _| �� | �|� d S �NTr/ r1 r r r �"test_will_subscribe_with_no_prompt= s z:PrepareSubscriptionTest.test_will_subscribe_with_no_promptc C s d|� j _| �� | �|� d S r. ��yesno� return_valuer& �_assert_correct_yesno_callr1 r r r �#test_will_not_subscribe_with_promptD s z;PrepareSubscriptionTest.test_will_not_subscribe_with_promptc C s d|� j _| �� | �|� d S r3 r5 r1 r r r � test_will_subscribe_with_promptL s z7PrepareSubscriptionTest.test_will_subscribe_with_promptc C s d S �Nr r1 r r r r0 T s z4PrepareSubscriptionTest._assert_no_get_utility_callsc C s |� j j\}}|d }d}d S )Nr z Electronic Frontier Foundation)r6 r( )r r* r( � call_kwargsr+ r, r r r r8 X s z2PrepareSubscriptionTest._assert_correct_yesno_callN)r r r r! r& � test_util�patch_display_utilr �patchr- r2 r4 r9 r: r0 r8 r r r r r# % s r# c @ s< e Zd ZdZdd� Ze�d�dd� �Ze�d�dd� �Zd S ) �HandleSubscriptionTestz4Tests for certbot._internal.eff.handle_subscription.c C s ddl m} || j| j� d S )Nr )�handle_subscription)r% rA r r )r rA r r r r& c s z HandleSubscriptionTest._callz certbot._internal.eff.subscribec C s | � � d S r; �r& �r Zmock_subscriber r r �test_no_subscribeg s z(HandleSubscriptionTest.test_no_subscribec C s$ | j jj| jjd�| j _| �� d S )N)Zregister_to_eff)r r �updater r r& rC r r r �test_subscribel s z%HandleSubscriptionTest.test_subscribeN) r r r r! r& r r? rD rF r r r r r@ a s r@ c @ sj e Zd ZdZdd� Ze�d�dd� �Zdd� Zd d � Z d d � Z d d� Z dd� Z dd� Z e�� dd� �ZdS )� SubscribeTestz*Tests for certbot._internal.eff.subscribe.c C sN d| _ ddi| _tjdd�| _| j| jj_t�d�}|�� | _| � |j � d S )Nr �statusT)�okr' ) r �jsonr ZMock�responser7 r? �startr) Z addCleanup�stop)r Zpatcherr r r r v s zSubscribeTest.setUpz#certbot._internal.eff.requests.postc C s, | j |_ddlm} || j� | �|� d S )Nr )� subscribe)rK r7 r% rN r �_check_post_call)r � mock_postrN r r r r& s zSubscribeTest._callc C s |j \}}|�d�}d S )N�data)r( �get)r rP r( r< rQ r r r rO � s z SubscribeTest._check_post_callc C s" d| j d< | �� | �� }d}d S )NFrH z2because your e-mail address appears to be invalid.)rJ r& �_get_reported_message�r r+ r, r r r �test_bad_status� s z SubscribeTest.test_bad_statusc C s. d| j _tjj| j j_| �� | �� }d}d S )NFZbecause) rK rI �requests� exceptionsZ HTTPErrorZraise_for_status� side_effectr& rS )r r+ Zunexpected_partr r r � test_not_ok� s zSubscribeTest.test_not_okc C s$ t � | jj_| �� | �� }d}d S �NZproblem)� ValueErrorrK rJ rX r& rS rT r r r �test_response_not_json� s z$SubscribeTest.test_response_not_jsonc C s" | j �� | �� | �� }d}d S rZ )rJ �clearr& rS rT r r r �)test_response_json_missing_status_element� s z7SubscribeTest.test_response_json_missing_status_elementc C s | j jd d S )Nr )r) r( r r r r rS � s z#SubscribeTest._get_reported_messagec C s | � � d S r; rB r1 r r r rF � s z SubscribeTest.test_subscribeN)r r r r! r r r? r& rO rU rY r\ r^ rS r= r> rF r r r r rG t s rG �__main__� )!r! r �sysZunittestr ZjosepyZpytestr rV Zacmer Zcertbot._internalr r Zcertbot.tests.utilZtests�utilr= ZJWKRSA�loadZ load_vectorr ZConfigTestCaser r# r@ ZTestCaserG r �exit�main�argv�__file__r r r r �<module> s& <C __pycache__/eff_test.cpython-39.pyc 0000644 00000017021 15114562471 0013213 0 ustar 00 a }|�g � @ s d Z ddlZddlZddlZddlmZ ddlZddlZddlZddlZddl m Z ddl m Z ddl m Z ddlm mZ ej�e�d��ZG dd � d ej�ZG d d � d e�ZG d d � d e�ZG dd� dej�Ze dkr�e� e� ej dd� e g �� dS )z Tests for certbot._internal.eff.� N)�mock)�messages)�account)� constantszrsa512_key.pemc s e Zd ZdZ� fdd�Z� ZS )�SubscriptionTestz&Abstract class for subscription tests.c sb t � �� tjtjd t�� dd�ttjjdt j ddddddt j d �d �d �| _d | j _ d | j _d S ) N�hi)Zuri�bodyZnew_authzr_uriztest.certbot.orgi� � � � � )Ztzinfo)Z creation_hostZ creation_dt)Zregr�key�meta�certbot@example.org)�super�setUpr ZAccountr ZRegistrationResourceZ Registration�_KEYZMeta�datetime�pytzZUTC�config�email� eff_email��self�� __class__� �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/eff_test.pyr s ���� zSubscriptionTest.setUp)�__name__� __module__� __qualname__�__doc__r � __classcell__r r r r r s r c @ s� e Zd ZdZdd� Ze�� e�d�dd� ��Z e�� dd� �Z e�� d d � �Z e�� d d � �Z e�� d d� �Z dd� Zdd� ZdS )�PrepareSubscriptionTestz5Tests for certbot._internal.eff.prepare_subscription.c C s ddl m} || j| j� d S )Nr )�prepare_subscription)�certbot._internal.effr$ r r )r r$ r r r �_call' s z PrepareSubscriptionTest._call�)certbot._internal.eff.display_util.notifyc C sL d | j _d| j _| �� |jd d }d}||v s6J �| jjjd u sHJ �d S )NTr z,because you didn't provide an e-mail address)r r r r& � call_argsr r �register_to_eff)r � mock_notify�mock_get_utility�actual� expected_partr r r � test_failure+ s z$PrepareSubscriptionTest.test_failurec C s0 d| j _| �� | �|� | jjjd u s,J �d S �NF)r r r& � _assert_no_get_utility_callsr r r) �r r+ r r r �&test_will_not_subscribe_with_no_prompt6 s z>PrepareSubscriptionTest.test_will_not_subscribe_with_no_promptc C s4 d| j _| �� | �|� | jjj| j jks0J �d S �NT)r r r& r0 r r r) r r1 r r r �"test_will_subscribe_with_no_prompt= s z:PrepareSubscriptionTest.test_will_subscribe_with_no_promptc C s@ d|� j _| �� |� jjr J �| �|� | jjjd u s<J �d S r/ ) �yesno� return_valuer& � add_message�called�_assert_correct_yesno_callr r r) r1 r r r �#test_will_not_subscribe_with_promptD s z;PrepareSubscriptionTest.test_will_not_subscribe_with_promptc C sD d|� j _| �� |� jjr J �| �|� | jjj| j j ks@J �d S r3 ) r5 r6 r& r7 r8 r9 r r r) r r r1 r r r � test_will_subscribe_with_promptL s z7PrepareSubscriptionTest.test_will_subscribe_with_promptc C s |� j jrJ �|� jjr J �d S )N)r5 r8 r7 r1 r r r r0 T s z4PrepareSubscriptionTest._assert_no_get_utility_callsc C sH |� j jsJ �|� j j\}}|d }d}||v s4J �|�dd�rDJ �d S )Nr z Electronic Frontier Foundation�defaultT)r5 r8 r( �get)r r+ r( � call_kwargsr, r- r r r r9 X s z2PrepareSubscriptionTest._assert_correct_yesno_callN)r r r r! r& � test_util�patch_display_utilr �patchr. r2 r4 r: r; r0 r9 r r r r r# % s r# c @ s< e Zd ZdZdd� Ze�d�dd� �Ze�d�dd� �Zd S ) �HandleSubscriptionTestz4Tests for certbot._internal.eff.handle_subscription.c C s ddl m} || j| j� d S )Nr )�handle_subscription)r% rC r r )r rC r r r r& c s z HandleSubscriptionTest._callz certbot._internal.eff.subscribec C s | � � |jdu sJ �d S r/ �r& r8 �r Zmock_subscriber r r �test_no_subscribeg s z(HandleSubscriptionTest.test_no_subscribec C sH | j jj| jjd�| j _| �� |js*J �|jd d | jjksDJ �d S )N)r) r )r r �updater r r& r8 r( rE r r r �test_subscribel s z%HandleSubscriptionTest.test_subscribeN) r r r r! r& r rA rF rH r r r r rB a s rB c @ sj e Zd ZdZdd� Ze�d�dd� �Zdd� Zd d � Z d d � Z d d� Z dd� Z dd� Z e�� dd� �ZdS )� SubscribeTestz*Tests for certbot._internal.eff.subscribe.c C sN d| _ ddi| _tjdd�| _| j| jj_t�d�}|�� | _| � |j � d S )Nr �statusT)�okr' ) r �jsonr ZMock�responser6 rA �startr* Z addCleanup�stop)r Zpatcherr r r r v s zSubscribeTest.setUpz#certbot._internal.eff.requests.postc C s, | j |_ddlm} || j� | �|� d S )Nr )� subscribe)rM r6 r% rP r �_check_post_call)r � mock_postrP r r r r& s zSubscribeTest._callc C sX |j dksJ �|j\}}|d tjks*J �|�d�}|d us@J �|�d�| jksTJ �d S )N� r �datar )Z call_countr( r ZEFF_SUBSCRIBE_URIr= r )r rR r( r> rT r r r rQ � s z SubscribeTest._check_post_callc C s. d| j d< | �� | �� }d}||v s*J �d S )NFrJ z2because your e-mail address appears to be invalid.)rL r& �_get_reported_message�r r, r- r r r �test_bad_status� s z SubscribeTest.test_bad_statusc C s: d| j _tjj| j j_| �� | �� }d}||vs6J �d S )NFZbecause) rM rK �requests� exceptionsZ HTTPErrorZraise_for_status� side_effectr& rU )r r, Zunexpected_partr r r � test_not_ok� s zSubscribeTest.test_not_okc C s0 t � | jj_| �� | �� }d}||v s,J �d S �NZproblem)� ValueErrorrM rL rZ r& rU rV r r r �test_response_not_json� s z$SubscribeTest.test_response_not_jsonc C s. | j �� | �� | �� }d}||v s*J �d S r\ )rL �clearr& rU rV r r r �)test_response_json_missing_status_element� s z7SubscribeTest.test_response_json_missing_status_elementc C s | j js J �| j jd d S )Nr )r* r8 r( r r r r rU � s z#SubscribeTest._get_reported_messagec C s | � � |jdu sJ �d S r/ rD r1 r r r rH � s z SubscribeTest.test_subscribeN)r r r r! r r rA r& rQ rW r[ r^ r` rU r? r@ rH r r r r rI t s rI �__main__rS )!r! r �sysZunittestr ZjosepyZpytestr rX Zacmer Zcertbot._internalr r Zcertbot.tests.utilZtests�utilr? ZJWKRSA�loadZ load_vectorr ZConfigTestCaser r# rB ZTestCaserI r �exit�main�argv�__file__r r r r �<module> s& <C __pycache__/error_handler_test.cpython-39.opt-1.pyc 0000644 00000012744 15114562471 0016247 0 ustar 00 a }|�gR � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlmZ ddlZddlm Z ddl Z ddl m Z dd � Z d d � Zejd d � �Zdd� ZG dd� dej�ZG dd� de�Zedkr�e�e �ejdd� eg �� dS )z*Tests for certbot._internal.error_handler.� N)�Callable)�Dict)�Union)�mock)�osc C s dd� | D �S )z,Get the handlers for an iterable of signums.c S s i | ]}|t �|��qS � )�signal� getsignal��.0�sr r �N/usr/lib/python3.9/site-packages/certbot/_internal/tests/error_handler_test.py� <dictcomp> � z get_signals.<locals>.<dictcomp>r )�signumsr r r � get_signals s r c C s" | � � D ]\}}t�||� qdS )zDSet the signal (keys) with the handler (values) from the input dict.N)�itemsr )Zsig_handler_dictr �hr r r � set_signals s r c # s4 g � t | �}t� fdd�| D �� � V t|� dS )z Context manager to catch signalsc s i | ]}|� fd d��qS )c s � � | �S �N)�append)r �_��signalsr r �<lambda> r z,signal_receiver.<locals>.<dictcomp>.<lambda>r r r r r r r z#signal_receiver.<locals>.<dictcomp>N)r r )r Z prev_handlersr r r �signal_receiver s r c C s t �t �� | � dS )zSend the given signalN)r �kill�getpid)�signumr r r � send_signal% s r c @ sH e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dS )�ErrorHandlerTestz7Tests for certbot._internal.error_handler.ErrorHandler.c C sT ddl m} t�� | _dh| _ddi| _|j| jg| j�R i | j��| _|j | _ d S )Nr �� error_handler�* ZfooZbar) �certbot._internalr" r � MagicMock� init_func� init_args� init_kwargsZ ErrorHandler�handlerZ_SIGNALSr ��selfr" r r r �setUp- s ��zErrorHandlerTest.setUpc C sd d}z.| j � t�W d � n1 s&0 Y W n tyH d}Y n0 | jj| ji | j�� d S )NFT)r) � ValueErrorr& �assert_called_once_withr' r( )r+ Zexception_raisedr r r �test_context_manager: s & �z%ErrorHandlerTest.test_context_managerc C s� | j s| jdd� t| j �}t| j ��P}| j�* d}t| j d � |d9 }W d � n1 s^0 Y W d � n1 s|0 Y | jj| ji | j �� | j D ]}q�d S )N�%Signals cannot be handled on Windows.��reasonr# r � ) r �skipTestr r r) r r& r. r' r( )r+ Z init_signals�signals_receivedZ should_be_42r r r r � test_context_manager_with_signalF s D � z1ErrorHandlerTest.test_context_manager_with_signalc C s~ t jtgd�}| j�|� z.| j� t�W d � n1 s<0 Y W n tyZ Y n0 | jj| ji | j�� |�� d S )N�Z side_effect) r r% r- r) �registerr& r. r' r( )r+ �bad_funcr r r �test_bad_recoveryZ s & �z"ErrorHandlerTest.test_bad_recoveryc s� | j s| jdd� | j d � | j d }tj� fdd�d�}| j�|� t| j ��>}| j� t|� W d � n1 sv0 Y W d � n1 s�0 Y | jj | j i | j �� |� � d S )Nr0 r1 r ���c s t � �S r )r r �Zsig1r r r k r z@ErrorHandlerTest.test_bad_recovery_with_signal.<locals>.<lambda>r7 ) r r4 r r% r) r8 r r r& r. r' r( )r+ Zsig2r9 r5 r r< r � test_bad_recovery_with_signalf s D �z.ErrorHandlerTest.test_bad_recovery_with_signalc C sL z4| j � t�d� W d � n1 s(0 Y W n tyF Y n0 d S )Nr )r) �sys�exit� SystemExit)r+ r r r �test_sysexit_ignoredu s , z%ErrorHandlerTest.test_sysexit_ignoredc C sP t �� }| j�|� | j� W d � n1 s00 Y | j�� |�� d S r )r r% r) r8 r& Zassert_not_called�r+ �funcr r r �test_regular_exit} s z"ErrorHandlerTest.test_regular_exitN) �__name__� __module__� __qualname__�__doc__r, r/ r6 r: r= rA rD r r r r r * s r c s( e Zd ZdZ� fdd�Zdd� Z� ZS )�ExitHandlerTestz6Tests for certbot._internal.error_handler.ExitHandler.c s: ddl m} t� �� |j| jg| j�R i | j��| _d S )Nr r! ) r$ r" �superr, Z ExitHandlerr& r' r( r) r* �� __class__r r r, � s ��zExitHandlerTest.setUpc C s\ t �� }| j�|� | j� W d � n1 s00 Y | jj| ji | j�� |�� d S r )r r% r) r8 r& r. r' r( rB r r r rD � s �z!ExitHandlerTest.test_regular_exit)rE rF rG rH r, rD � __classcell__r r rK r rI � s rI �__main__� )rH � contextlibr r> �typingr r r Zunittestr ZpytestZcertbot.compatr r r �contextmanagerr r ZTestCaser rI rE r? �main�argv�__file__r r r r �<module> s& \ __pycache__/error_handler_test.cpython-39.pyc 0000644 00000013142 15114562471 0015301 0 ustar 00 a }|�gR � @ s� d Z ddlZddlZddlZddlmZ ddlmZ ddlmZ ddlZddlm Z ddl Z ddl m Z dd � Z d d � Zejd d � �Zdd� ZG dd� dej�ZG dd� de�Zedkr�e�e �ejdd� eg �� dS )z*Tests for certbot._internal.error_handler.� N)�Callable)�Dict)�Union)�mock)�osc C s dd� | D �S )z,Get the handlers for an iterable of signums.c S s i | ]}|t �|��qS � )�signal� getsignal��.0�sr r �N/usr/lib/python3.9/site-packages/certbot/_internal/tests/error_handler_test.py� <dictcomp> � z get_signals.<locals>.<dictcomp>r )�signumsr r r � get_signals s r c C s" | � � D ]\}}t�||� qdS )zDSet the signal (keys) with the handler (values) from the input dict.N)�itemsr )Zsig_handler_dictr �hr r r � set_signals s r c # s4 g � t | �}t� fdd�| D �� � V t|� dS )z Context manager to catch signalsc s i | ]}|� fd d��qS )c s � � | �S �N)�append)r �_��signalsr r �<lambda> r z,signal_receiver.<locals>.<dictcomp>.<lambda>r r r r r r r z#signal_receiver.<locals>.<dictcomp>N)r r )r Z prev_handlersr r r �signal_receiver s r c C s t �t �� | � dS )zSend the given signalN)r �kill�getpid)�signumr r r � send_signal% s r c @ sH e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dS )�ErrorHandlerTestz7Tests for certbot._internal.error_handler.ErrorHandler.c C sT ddl m} t�� | _dh| _ddi| _|j| jg| j�R i | j��| _|j | _ d S )Nr �� error_handler�* ZfooZbar) �certbot._internalr" r � MagicMock� init_func� init_args� init_kwargsZ ErrorHandler�handlerZ_SIGNALSr ��selfr" r r r �setUp- s ��zErrorHandlerTest.setUpc C sl d}z.| j � t�W d � n1 s&0 Y W n tyH d}Y n0 |sRJ �| jj| ji | j�� d S )NFT)r) � ValueErrorr& �assert_called_once_withr' r( )r+ Zexception_raisedr r r �test_context_manager: s & �z%ErrorHandlerTest.test_context_managerc C s� | j s| jdd� t| j �}t| j ��P}| j�* d}t| j d � |d9 }W d � n1 s^0 Y W d � n1 s|0 Y d|ks�J �| j d g|ks�J �| jj| ji | j �� | j D ]}|| t � |�ks�J �q�d S )N�%Signals cannot be handled on Windows.��reasonr# r � ) r �skipTestr r r) r r& r. r' r( r r )r+ Z init_signals�signals_receivedZ should_be_42r r r r � test_context_manager_with_signalF s D � z1ErrorHandlerTest.test_context_manager_with_signalc C s~ t jtgd�}| j�|� z.| j� t�W d � n1 s<0 Y W n tyZ Y n0 | jj| ji | j�� |�� d S )N�Z side_effect) r r% r- r) �registerr& r. r' r( )r+ �bad_funcr r r �test_bad_recoveryZ s & �z"ErrorHandlerTest.test_bad_recoveryc s� | j s| jdd� | j d � | j d }tj� fdd�d�}| j�|� t| j ��>}| j� t|� W d � n1 sv0 Y W d � n1 s�0 Y |� g|ks�J �| jj | j i | j �� |� � d S )Nr0 r1 r ���c s t � �S r )r r �Zsig1r r r k r z@ErrorHandlerTest.test_bad_recovery_with_signal.<locals>.<lambda>r7 ) r r4 r r% r) r8 r r r& r. r' r( )r+ Zsig2r9 r5 r r< r � test_bad_recovery_with_signalf s D �z.ErrorHandlerTest.test_bad_recovery_with_signalc C s\ z4| j � t�d� W d � n1 s(0 Y W n tyF Y n0 | jjdu sXJ �d S )Nr F)r) �sys�exit� SystemExitr& Zcalled)r+ r r r �test_sysexit_ignoredu s , z%ErrorHandlerTest.test_sysexit_ignoredc C sP t �� }| j�|� | j� W d � n1 s00 Y | j�� |�� d S r )r r% r) r8 r& Zassert_not_called�r+ �funcr r r �test_regular_exit} s z"ErrorHandlerTest.test_regular_exitN) �__name__� __module__� __qualname__�__doc__r, r/ r6 r: r= rA rD r r r r r * s r c s( e Zd ZdZ� fdd�Zdd� Z� ZS )�ExitHandlerTestz6Tests for certbot._internal.error_handler.ExitHandler.c s: ddl m} t� �� |j| jg| j�R i | j��| _d S )Nr r! ) r$ r" �superr, Z ExitHandlerr& r' r( r) r* �� __class__r r r, � s ��zExitHandlerTest.setUpc C s\ t �� }| j�|� | j� W d � n1 s00 Y | jj| ji | j�� |�� d S r )r r% r) r8 r& r. r' r( rB r r r rD � s �z!ExitHandlerTest.test_regular_exit)rE rF rG rH r, rD � __classcell__r r rK r rI � s rI �__main__� )rH � contextlibr r> �typingr r r Zunittestr ZpytestZcertbot.compatr r r �contextmanagerr r ZTestCaser rI rE r? �main�argv�__file__r r r r �<module> s& \ __pycache__/errors_test.cpython-39.opt-1.pyc 0000644 00000004410 15114562471 0014724 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlmZ ddl m Z G dd� dej �Z G d d � d ej �Z ed kr�e�e�ejd d� eg �� dS ) zTests for certbot.errors.� N)�mock)�messages)� achallenges)� acme_utilc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �FailedChallengesTestz*Tests for certbot.errors.FailedChallenges.c C s@ ddl m} |tjdtjtjd tjj ddd�d�d�h�| _ d S ) Nr ��FailedChallenges� example.com�tls�detail�r �ZchallZuri�error��domainZchallb) �certbot.errorsr r �DNSr � ChallengeBodyr �DNS01�Error� with_coder )�selfr � r �G/usr/lib/python3.9/site-packages/certbot/_internal/tests/errors_test.py�setUp s ��zFailedChallengesTest.setUpc C s d S �Nr �r r r r �test_str s z FailedChallengesTest.test_strc C sB ddl m} d}|tjdtjtjd tjj d|d�d�d�h�}d S ) Nr r u عدالةr r r r r ) r r r r r r r r r r )r r Z arabic_detailZ arabic_errorr r r � test_unicode s �� z!FailedChallengesTest.test_unicodeN)�__name__� __module__� __qualname__�__doc__r r r r r r r r s r c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �StandaloneBindErrorTestz-Tests for certbot.errors.StandaloneBindError.c C s ddl m} |tjjd�| _d S )Nr )�StandaloneBindErrori� )r r$ r �sentinelr )r r$ r r r r , s z StandaloneBindErrorTest.setUpc C s d S r r r r r r �test_instance_args0 s z*StandaloneBindErrorTest.test_instance_argsc C s d S r r r r r r r 4 s z StandaloneBindErrorTest.test_strN)r r r! r" r r& r r r r r r# ) s r# �__main__� )r" �sysZunittestr ZpytestZacmer Zcertbotr Z certbot.testsr ZTestCaser r# r �exit�main�argv�__file__r r r r �<module> s __pycache__/errors_test.cpython-39.pyc 0000644 00000005055 15114562471 0013773 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlmZ ddl m Z G dd� dej �Z G d d � d ej �Z ed kr�e�e�ejd d� eg �� dS ) zTests for certbot.errors.� N)�mock)�messages)� achallenges)� acme_utilc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �FailedChallengesTestz*Tests for certbot.errors.FailedChallenges.c C s@ ddl m} |tjdtjtjd tjj ddd�d�d�h�| _ d S ) Nr ��FailedChallenges� example.com�tls�detail�r �ZchallZuri�error��domainZchallb) �certbot.errorsr r �DNSr � ChallengeBodyr �DNS01�Error� with_coder )�selfr � r �G/usr/lib/python3.9/site-packages/certbot/_internal/tests/errors_test.py�setUp s ��zFailedChallengesTest.setUpc C s t | j��d�sJ �d S )N�TFailed authorization procedure. example.com (dns-01): urn:ietf:params:acme:error:tls��strr � startswith�r r r r �test_str s �z FailedChallengesTest.test_strc C sT ddl m} d}|tjdtjtjd tjj d|d�d�d�h�}t |�� d �sPJ �d S ) Nr r u عدالةr r r r r r ) r r r r r r r r r r r r )r r Z arabic_detailZ arabic_errorr r r � test_unicode s �� �z!FailedChallengesTest.test_unicodeN)�__name__� __module__� __qualname__�__doc__r r r! r r r r r s r c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �StandaloneBindErrorTestz-Tests for certbot.errors.StandaloneBindError.c C s ddl m} |tjjd�| _d S )Nr )�StandaloneBindError�� )r r' r �sentinelr )r r' r r r r , s z StandaloneBindErrorTest.setUpc C s( t jj| jjksJ �d| jjks$J �d S )Nr( )r r) r Z socket_error�portr r r r �test_instance_args0 s z*StandaloneBindErrorTest.test_instance_argsc C s t | j��d�sJ �d S )Nz Problem binding to port 1234: r r r r r r 4 s �z StandaloneBindErrorTest.test_strN)r" r# r$ r% r r+ r r r r r r& ) s r& �__main__� )r% �sysZunittestr ZpytestZacmer Zcertbotr Z certbot.testsr ZTestCaser r& r" �exit�main�argv�__file__r r r r �<module> s __pycache__/helpful_test.cpython-39.opt-1.pyc 0000644 00000010167 15114562471 0015055 0 ustar 00 a }|�gw � @ s� d Z ddlZddlZddlmZ G dd� d�ZG dd� d�ZG dd � d �ZG d d � d �Ze d kr�e� e� ej d d� e g �� dS )z Tests for certbot.helpful_parser� N��HelpfulArgumentParserc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �TestScanningFlagsz9Test the prescan_for_flag method of HelpfulArgumentParserc C s. t dgi �}|�dddg�}|�ddg�}d S )N�run�--help�all�certonly�-hz all, certonly)r �prescan_for_flag��self� arg_parserZ detected_flag� r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/helpful_test.py�test_prescan_no_help_flag s ��z+TestScanningFlags.test_prescan_no_help_flagc C s. t ddgi �}|�ddg�}|�d|j�}d S )Nr r �potator �r r Z help_topicsr r r r �test_prescan_unvalid_topic s ��z,TestScanningFlags.test_prescan_unvalid_topicc C s. t ddgi �}|�d|j�}|�d|j�}d S )Nr r r r r r r r �test_prescan_valid_topic s ��z*TestScanningFlags.test_prescan_valid_topicN)�__name__� __module__� __qualname__�__doc__r r r r r r r r s r c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �TestDetermineVerbsz9Tests for determine_verb methods of HelpfulArgumentParserc C s t dgi �}d S )Nr r �r r r r r � test_determine_verb_wrong_verb( s z1TestDetermineVerbs.test_determine_verb_wrong_verbc C s t ddgi �}t g d�i �}d S )Nr � everything)z-dZ some_domainr r r r r r r �test_determine_verb_help- s �z+TestDetermineVerbs.test_determine_verb_helpc C s( t dgi �}t dgi �}t dgi �}d S )Nr �authr r r r r r �test_determine_verb7 s z&TestDetermineVerbs.test_determine_verbN)r r r r r r r r r r r r & s r c @ s e Zd ZdZdd� Zdd� ZdS )�TestAddz-Tests for add method in HelpfulArgumentParserc C s, t dgi �}|�d d� |j�ddg�}d S )Nr z --hello-worldz Hello World!�r �add�parser� parse_args�r r Z parsed_argsr r r �test_add_trivial_argumentG s �z!TestAdd.test_add_trivial_argumentc C s< t ddgi �}|jg d�dddddd � |j�dd g�}d S ) Nr r )Nr r �registerz --eab-kidZeab_kid�storeZEAB_KIDz+Key Identifier for External Account Binding)�dest�action�metavar�helpr! r% r r r �test_add_expected_argumentO s �z"TestAdd.test_add_expected_argumentN)r r r r r& r- r r r r r E s r c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � TestAddGroupz.Test add_group method of HelpfulArgumentParserc C sB t dgi �}t�t�� |�� W d � n1 s40 Y d S )Nr )r �pytest�raises� TypeError� add_groupr r r r �test_add_group_no_input] s z$TestAddGroup.test_add_group_no_inputc C s t ddgi �}|jddd� d S )Nr r r zdescription of auth�� description)r r2 r r r r � test_add_group_topic_not_visibleb s �z-TestAddGroup.test_add_group_topic_not_visiblec C sX t ddgi �}|jddd� |jddd� t�t�� W d � n1 sJ0 Y d S )Nr r zdescription of runr4 r zdescription of certonly)r r2 r/ r0 �KeyErrorr r r r �#test_add_group_topic_requested_helpj s � z0TestAddGroup.test_add_group_topic_requested_helpN)r r r r r3 r6 r8 r r r r r. [ s r. �__main__� )r �sysr/ Zcertbot._internal.clir r r r r. r �exit�main�argv�__file__r r r r �<module> s __pycache__/helpful_test.cpython-39.pyc 0000644 00000011132 15114562471 0014107 0 ustar 00 a }|�gw � @ s� d Z ddlZddlZddlmZ G dd� d�ZG dd� d�ZG dd � d �ZG d d � d �Ze d kr�e� e� ej d d� e g �� dS )z Tests for certbot.helpful_parser� N)�HelpfulArgumentParserc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �TestScanningFlagsz9Test the prescan_for_flag method of HelpfulArgumentParserc C sF t dgi �}|�dddg�}|du s(J �|�ddg�}|du sBJ �d S )N�run�--help�all�certonlyF�-hz all, certonly)r �prescan_for_flag��self� arg_parserZ detected_flag� r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/helpful_test.py�test_prescan_no_help_flag s � �z+TestScanningFlags.test_prescan_no_help_flagc C sF t ddgi �}|�ddg�}|du s(J �|�d|j�}|du sBJ �d S )Nr r �potatoTr F�r r Z help_topicsr r r r �test_prescan_unvalid_topic s � �z,TestScanningFlags.test_prescan_unvalid_topicc C sF t ddgi �}|�d|j�}|dks(J �|�d|j�}|du sBJ �d S )Nr r r Fr r r r r �test_prescan_valid_topic s � �z*TestScanningFlags.test_prescan_valid_topicN)�__name__� __module__� __qualname__�__doc__r r r r r r r r s r c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �TestDetermineVerbsz9Tests for determine_verb methods of HelpfulArgumentParserc C s. t dgi �}|jdksJ �|jdgks*J �d S )Nr r �r Zverb�args�r r r r r � test_determine_verb_wrong_verb( s z1TestDetermineVerbs.test_determine_verb_wrong_verbc C s` t ddgi �}|jdks J �|jddgks.J �t g d�i �}|jdksJJ �|jg d�ks\J �d S )Nr � everything�help)z-dZ some_domainr r r r r r r �test_determine_verb_help- s �z+TestDetermineVerbs.test_determine_verb_helpc C s| t dgi �}|jdksJ �|jg ks(J �t dgi �}|jdksBJ �|jg ksPJ �t dgi �}|jdksjJ �|jg ksxJ �d S )Nr �authr r r r r r r �test_determine_verb7 s z&TestDetermineVerbs.test_determine_verbN)r r r r r r r! r r r r r & s r c @ s e Zd ZdZdd� Zdd� ZdS )�TestAddz-Tests for add method in HelpfulArgumentParserc C sH t dgi �}|�d d� |j�ddg�}|jdks6J �t|d�rDJ �d S )Nr z --hello-worldz Hello World!r )r �add�parser� parse_argsZ hello_world�hasattr�r r Z parsed_argsr r r �test_add_trivial_argumentG s �z!TestAdd.test_add_trivial_argumentc C sX t ddgi �}|jg d�dddddd � |j�dd g�}|jd u sFJ �t|d�sTJ �d S ) Nr r )Nr r �registerz --eab-kid�eab_kid�storeZEAB_KIDz+Key Identifier for External Account Binding)�dest�action�metavarr )r r# r$ r% r* r& r' r r r �test_add_expected_argumentO s �z"TestAdd.test_add_expected_argumentN)r r r r r( r/ r r r r r" E s r" c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � TestAddGroupz.Test add_group method of HelpfulArgumentParserc C sB t dgi �}t�t�� |�� W d � n1 s40 Y d S )Nr )r �pytest�raises� TypeError� add_groupr r r r �test_add_group_no_input] s z$TestAddGroup.test_add_group_no_inputc C s. t ddgi �}|jddd� |ji ks*J �d S )Nr r r zdescription of auth�� description)r r4 �groupsr r r r � test_add_group_topic_not_visibleb s �z-TestAddGroup.test_add_group_topic_not_visiblec C sx t ddgi �}|jddd� |jd s*J �|jddd� t�t��" |jd du sVJ �W d � n1 sj0 Y d S )Nr r zdescription of runr6 r zdescription of certonlyF)r r4 r8 r1 r2 �KeyErrorr r r r �#test_add_group_topic_requested_helpj s � z0TestAddGroup.test_add_group_topic_requested_helpN)r r r r r5 r9 r; r r r r r0 [ s r0 �__main__� )r �sysr1 Zcertbot._internal.clir r r r" r0 r �exit�main�argv�__file__r r r r �<module> s __pycache__/hook_test.cpython-39.opt-1.pyc 0000644 00000045426 15114562471 0014364 0 ustar 00 a }|�g�E � @ sj d Z ddlZddlZddlmZ ddlmZ ddlZddlmZ ddlm Z ddl m Z ddl m Z ddl m Z dd lmZ eed �d d �ZG d d� dej�ZG dd� dej�ZG dd� dej�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�Z G dd � d e �Z G d d � d e �Z G d d � d ej�Z d!d"� Z e!d#k�rfe�"e�#ej$d$d� e%g �� dS )%z"Tests for certbot._internal.hooks.� N)�python_version_tuple)�mock)�errors)�util)� filesystem)�os)�List)�major�minorc C s@ t t� d �}t t� d �}|| k r(dS || kr4dS ||k S d S )Nr � TF)�intr )r r ZpymajorZpyminor� r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/hook_test.py�pyver_lt s r c @ s. e Zd ZdZedd� �Ze�d�dd� �ZdS )�ValidateHooksTestz1Tests for certbot._internal.hooks.validate_hooks.c O s ddl m} ||i |��S )Nr )�validate_hooks)�certbot._internal.hooksr )�cls�args�kwargsr r r r �_call s zValidateHooksTest._callz%certbot._internal.hooks.validate_hookc C s& t �� }| �|� dd� |jD �}d S )Nc S s g | ]}|d d �qS )r r r )�.0�callr r r � <listcomp>) � z-ValidateHooksTest.test_it.<locals>.<listcomp>)r Z MagicMockr �call_args_list)�selfZmock_validate_hook�config�typesr r r �test_it$ s zValidateHooksTest.test_itN) �__name__� __module__� __qualname__�__doc__� classmethodr r �patchr r r r r r s r c @ sH e Zd ZdZedd� �Zdd� Ze�d�dd� �Z e�d �d d � �Z d S ) �ValidateHookTestz0Tests for certbot._internal.hooks.validate_hook.c O s ddl m} ||i |��S )Nr )� validate_hook)r r' )r r r r' r r r r 2 s zValidateHookTest._callc C s� t �d��v t jddd��H t�tj�� | �dd� W d � n1 sJ0 Y W d � n1 sh0 Y W d � n1 s�0 Y d S )N�.certbot._internal.hooks.plug_util.path_surgeryz0certbot._internal.hooks.filesystem.is_executableF)� return_valueZdummy�foo)r r% �pytest�raisesr �HookCommandNotFoundr �r r r r �test_hook_not_executable7 s z)ValidateHookTest.test_hook_not_executablez'certbot._internal.hooks.util.exe_existsc C sl d|_ t�d��H}t�tj�� | �dd� W d � n1 s@0 Y W d � n1 s^0 Y d S )NFr( r* �bar)r) r r% r+ r, r r- r )r Zmock_exe_existsZmock_psr r r �test_not_foundA s Hz ValidateHookTest.test_not_foundz certbot._internal.hooks._progc C s | � d d� d S �Nr* )r )r Z mock_progr r r � test_unsetI s zValidateHookTest.test_unsetN) r r! r" r# r$ r r/ r r% r1 r3 r r r r r& / s r& c @ s( e Zd ZdZedd� �Zedd� �ZdS )�HookTestz!Common base class for hook tests.c O s t �dS )z7Calls the method being tested with the given arguments.N)�NotImplementedError)r r r r r r r R s zHookTest._callc O sD t �d��&}d|_| j|i |�� W d � n1 s60 Y |S )z�Calls self._call after mocking out certbot.compat.misc.execute_command_status. The mock execute object is returned rather than the return value of self._call. �*certbot.compat.misc.execute_command_status�r � r8 N)r r% r) r )r r r � mock_executer r r �_call_with_mock_executeW s .z HookTest._call_with_mock_executeN)r r! r" r# r$ r r: r r r r r4 O s r4 c s� e Zd ZdZedd� �Z� fdd�Z� fdd�Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Z� ZS )� PreHookTestz+Tests for certbot._internal.hooks.pre_hook.c O s ddl m} ||i |��S )Nr )�pre_hook)r r< )r r r r< r r r r h s zPreHookTest._callc sJ t � �� d| j_t�| jj� tj� | jjd�| _ t | j � | � � d S �Nr* r0 ) �super�setUpr r< r �makedirsZrenewal_pre_hooks_dirr �path�join�dir_hook� create_hook�_reset_pre_hook_alreadyr. �� __class__r r r? m s zPreHookTest.setUpc s | � � t� �� d S �N)rE r> �tearDownr. rF r r rI x s zPreHookTest.tearDownc C s ddl m} |�� d S )Nr )�executed_pre_hooks)r rJ �clear)r rJ r r r rE } s z#PreHookTest._reset_pre_hook_alreadyc C s d| j _| �� d S )N�certonly�r �verb�_test_nonrenew_commonr. r r r � test_certonly� s zPreHookTest.test_certonlyc C s d| j _| �� d S )N�runrM r. r r r �test_run� s zPreHookTest.test_runc C s. | � | j�}|jd| jjtjd� | �� d S )N�pre-hook��env)r: r �assert_called_once_withr< r �ANY�_test_no_executions_common�r r9 r r r rO � s z!PreHookTest._test_nonrenew_commonc C sV d | j _d| j _t�| j� t�d�� }| �| j �}W d � n1 sH0 Y d S )N�renew� certbot._internal.hooks.logger) r r< rN r �removerC r r% r: �r Z mock_loggerr9 r r r � test_no_hooks� s *zPreHookTest.test_no_hooksc C s6 d| j _| �| j �}|jd| j jtjd� | �� d S )NFrS rT )r �directory_hooksr: rV r< r rW rX rY r r r � test_renew_disabled_dir_hooks� s z)PreHookTest.test_renew_disabled_dir_hooksc C sJ d| j _| �| j �}|jd| jtjd� |jd| j jtjd� | � � d S �NrZ rS rT ) r rN r: �assert_any_callrC r rW �assert_called_withr< rX rY r r r �test_renew_no_overlap� s z!PreHookTest.test_renew_no_overlapc C s> | j | j_d| j_| �| j�}|jd| j tjd� | �� d S ra ) rC r r< rN r: rV r rW rX rY r r r �test_renew_with_overlap� s z#PreHookTest.test_renew_with_overlapc C s: t �d�� }| �| j�}W d � n1 s,0 Y d S )Nr[ )r r% r: r r] r r r rX � s *z&PreHookTest._test_no_executions_common)r r! r" r# r$ r r? rI rE rP rR rO r^ r` rd re rX � __classcell__r r rF r r; e s r; c s� e Zd ZdZedd� �Z� fdd�Z� fdd�Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zd d � Zd d � Z� ZS ) � PostHookTestz,Tests for certbot._internal.hooks.post_hook.c O s ddl m} ||i |��S )Nr )� post_hook)r rh )r r r rh r r r r � s zPostHookTest._callc sJ t � �� d| j_t�| jj� tj� | jjd�| _ t | j � | � � d S )Nr0 r* ) r> r? r rh r r@ Zrenewal_post_hooks_dirr rA rB rC rD �_reset_post_hook_eventuallyr. rF r r r? � s zPostHookTest.setUpc s | � � t� �� d S rH )ri r> rI r. rF r r rI � s zPostHookTest.tearDownc C s ddl m} |d d �= d S �Nr )� post_hooks�r rk �r rk r r r ri � s z(PostHookTest._reset_post_hook_eventuallyc C s: dD ]0}|| j _| �| j g �}|jd| j jtjd� qd S )N�rL rQ � post-hookrT )r rN r: rV rh r rW )r rN r9 r r r � test_certonly_and_run_with_hook� s z,PostHookTest.test_certonly_and_run_with_hookc C s d | j _dD ] }|| j _q d S )Nrn )r rh rN )r rN r r r �#test_cert_only_and_run_without_hook� s z0PostHookTest.test_cert_only_and_run_without_hookc C s d| j _| �| j dg�j}d S )NrL � success.org)r rN r: Z call_args)r r r r r �test_renew_env� s zPostHookTest.test_renew_envc C s d| j _| �| j jg� d S )NF)r r_ �_test_renew_commonrh r. r r r r` � s z*PostHookTest.test_renew_disabled_dir_hooksc C s d | j _| �| jg� d S rH )r rh rt rC r. r r r �test_renew_no_config_hook� s z&PostHookTest.test_renew_no_config_hookc C s t �| j� | �| jjg� d S rH )r r\ rC rt r rh r. r r r �test_renew_no_dir_hook� s z#PostHookTest.test_renew_no_dir_hookc C s" d | j _t�| j� | �g � d S rH )r rh r r\ rC rt r. r r r �test_renew_no_hooks� s z PostHookTest.test_renew_no_hooksc C s< | j | jjg}| �|� d| j_|�| jj� | �|� d S )N�baz)rC r rh rt �append)r �expectedr r r rd � s z"PostHookTest.test_renew_no_overlapc C s | j | j_| �| j g� d S rH )rC r rh rt r. r r r re � s z$PostHookTest.test_renew_with_overlapc C s( d| j _td�D ]}| �| j g � qd S )NrZ � )r rN �ranger )r rz �_r r r rt � s z PostHookTest._test_renew_commonc C s ddl m} |S rj rl rm r r r �_get_eventually s z PostHookTest._get_eventually)r r! r" r# r$ r r? rI ri rp rq rs r` ru rv rw rd re rt r~ rf r r rF r rg � s" rg c sT e Zd ZdZedd� �Zdd� Z� fdd�Zdd � Zd d � Z d d � Z dd� Z � Z S )�RunSavedPostHooksTestz7Tests for certbot._internal.hooks.run_saved_post_hooks.c O sF ddl m} d|v r |d n|d }d|v r4|d n|d }|||�S )Nr )�run_saved_post_hooks�renewed_domains�failed_domainsr )r r� )r r r r� r� r� r r r r s zRunSavedPostHooksTest._callc O sH d}t j|| jd�� | j|i |��W d � S 1 s:0 Y dS )z�Call run_saved_post_hooks but mock out execute and eventually certbot._internal.hooks.post_hooks is replaced with self.eventually. The mock execute object is returned rather than the return value of run_saved_post_hooks. z"certbot._internal.hooks.post_hooks)�newN)r r% � eventuallyr: )r r r Zeventually_pathr r r �&_call_with_mock_execute_and_eventually s z<RunSavedPostHooksTest._call_with_mock_execute_and_eventuallyc s t � �� g | _d S rH )r> r? r� r. rF r r r? " s zRunSavedPostHooksTest.setUpc C s d S rH r r. r r r � test_empty& s z RunSavedPostHooksTest.test_emptyc C s6 g d�| _ | �g g �}|j}t|| j �D ]\}}q(d S )N�r* r0 rx Zqux)r� r� r �zip)r r9 ZcallsZ actual_callZ expected_argr r r � test_multiple) s z#RunSavedPostHooksTest.test_multiplec C s0 dg| _ | �g g �}|jd| j d tjd� d S )Nr* ro r rT )r� r� rV r rW rY r r r � test_single1 s z!RunSavedPostHooksTest.test_singlec C s dg| _ | �dgdg�}d S )Nr* rr z failed.org)r� r� rY r r r �test_env6 s z RunSavedPostHooksTest.test_env) r r! r" r# r$ r r� r? r� r� r� r� rf r r rF r r s r c s4 e Zd ZdZdd� Z� fdd�Z� fdd�Z� ZS )�RenewalHookTestz1Common base class for testing deploy/renew hooks.c s� d|v r|d n|d � d|v r(|d n|d �� �fdd�}t �d��&}||_| j|i |�� W d � n1 st0 Y |S ) a Calls self._call after mocking out certbot.compat.misc.execute_command_status. The mock execute object is returned rather than the return value of self._call. The mock execute object asserts that environment variables were properly set. �domainsr �lineager{ c s dS )z�Assert environment variables are properly set. :returns: two strings imitating no output from the hook :rtype: `tuple` of `str` r7 r )Z unused_argsZ unused_kwargs�r� r� r r �execute_side_effectM s zDRenewalHookTest._call_with_mock_execute.<locals>.execute_side_effectr6 N)r r% Z side_effectr )r r r r� r9 r r� r r: B s .z'RenewalHookTest._call_with_mock_executec s t � �� dd� dD �| _d S )Nc S s h | ]}|t jvr|�qS r )r �environ)r �varr r r � <setcomp>_ s �z(RenewalHookTest.setUp.<locals>.<setcomp>)ZRENEWED_DOMAINSZRENEWED_LINEAGE)r> r? � vars_to_clearr. rF r r r? ] s �zRenewalHookTest.setUpc s( | j D ]}tj�|d � qt� �� d S rH )r� r r� �popr> rI )r r� rF r r rI d s zRenewalHookTest.tearDown)r r! r" r# r: r? rI rf r r rF r r� = s r� c @ sH e Zd ZdZedd� �Ze�d�dd� �Ze�d�dd� �Z d d � Z d S ) �DeployHookTestz.Tests for certbot._internal.hooks.deploy_hook.c O s ddl m} ||i |��S )Nr )� deploy_hook)r r� )r r r r� r r r r m s zDeployHookTest._callr[ c C s& d| j _d| j _| �| j dgd�}d S )Nr* T� example.org�/foo/bar)r r� �dry_runr: r] r r r � test_dry_runr s �zDeployHookTest.test_dry_runc C s d | j _| �| j dgd�}d S )Nr� r� )r r� r: r] r r r � test_no_hook{ s �zDeployHookTest.test_no_hookc C s> ddg}d}d| j _| �| j ||�}|jd| j jtjd� d S )Nr� � example.netr� r* � deploy-hookrT )r r� r: rV r rW )r r� r� r9 r r r � test_success� s �zDeployHookTest.test_successN) r r! r" r# r$ r r r% r� r� r� r r r r r� j s r� c s^ e Zd ZdZedd� �Z� fdd�Zdd� Ze� d�d d � �Z d d � Z d d� Z dd� Z � ZS )� RenewHookTestz,Tests for certbot._internal.hooks.renew_hookc O s ddl m} ||i |��S )Nr )� renew_hook)r r� )r r r r� r r r r � s zRenewHookTest._callc sB t � �� d| j_t�| jj� tj� | jjd�| _ t | j � d S r= ) r> r? r r� r r@ Zrenewal_deploy_hooks_dirr rA rB rC rD r. rF r r r? � s �zRenewHookTest.setUpc C s4 d| j _| �| j dgd�}|jd| j jtjd� d S )NFr� r� r� rT )r r_ r: rV r� r rW rY r r r �test_disabled_dir_hooks� s �z%RenewHookTest.test_disabled_dir_hooksr[ c C s d| j _| �| j dgd�}d S )NTr� r� )r r� r: r] r r r r� � s �zRenewHookTest.test_dry_runc C sT d | j _t�| j� t�d��"}| �| j dgd�}W d � n1 sF0 Y d S )Nr[ r� r� )r r� r r\ rC r r% r: r] r r r r^ � s �"zRenewHookTest.test_no_hooksc C s6 | j | j_| �| jddgd�}|jd| j tjd� d S )Nr� r� r� r� rT )rC r r� r: rV r rW rY r r r � test_overlap� s �zRenewHookTest.test_overlapc C s@ | � | jdgd�}|jd| jtjd� |jd| jjtjd� d S )Nr� r� r� rT )r: r rb rC r rW rc r� rY r r r �test_no_overlap� s �z RenewHookTest.test_no_overlap)r r! r" r# r$ r r? r� r r% r� r^ r� r� rf r r rF r r� � s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) � ListHooksTestz-Tests for certbot._internal.hooks.list_hooks.c O s ddl m} ||i |��S )Nr )� list_hooks)r r� )r r r r� r r r r � s zListHooksTest._callc C s d S rH r r. r r r r� � s zListHooksTest.test_emptyc s, t � fdd�dD ��}|D ] }t|� qd S )Nc 3 s | ]}t j�� j|�V qd S rH )r rA rB �tempdir)r �basenamer. r r � <genexpr>� s �z.ListHooksTest.test_multiple.<locals>.<genexpr>r� )�sortedrD )r �names�namer r. r r� � s � zListHooksTest.test_multiplec C s t j�| jd�}t|� d S r2 �r rA rB r� rD �r r� r r r r� � s zListHooksTest.test_singlec C s t j�| jd�}t|� d S )Nzfoo~r� r� r r r �test_ignore_tilde� s z ListHooksTest.test_ignore_tildeN) r r! r" r# r$ r r� r� r� r� r r r r r� � s r� c C s t j| ddd��� dS )zmCreates an executable file at the specified path. :param str file_path: path to create the file at �wi� )�mode�chmodN)r Z safe_open�close)Z file_pathr r r rD � s rD �__main__r )&r# �sysZunittest�platformr r r+ Zcertbotr r Zcertbot.compatr r Z certbot.testsZ test_util�typingr r r ZTestCaser ZTempDirTestCaser& ZConfigTestCaser4 r; rg r r� r� r� r� rD r �exit�main�argv�__file__r r r r �<module> s2 NX2-"6" __pycache__/hook_test.cpython-39.pyc 0000644 00000047124 15114562471 0013422 0 ustar 00 a }|�g�E � @ sj d Z ddlZddlZddlmZ ddlmZ ddlZddlmZ ddlm Z ddl m Z ddl m Z ddl m Z dd lmZ eed �d d �ZG d d� dej�ZG dd� dej�ZG dd� dej�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�Z G dd � d e �Z G d d � d e �Z G d d � d ej�Z d!d"� Z e!d#k�rfe�"e�#ej$d$d� e%g �� dS )%z"Tests for certbot._internal.hooks.� N)�python_version_tuple)�mock)�errors)�util)� filesystem)�os)�List)�major�minorc C s@ t t� d �}t t� d �}|| k r(dS || kr4dS ||k S d S )Nr � TF)�intr )r r ZpymajorZpyminor� r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/hook_test.py�pyver_lt s r c @ s. e Zd ZdZedd� �Ze�d�dd� �ZdS )�ValidateHooksTestz1Tests for certbot._internal.hooks.validate_hooks.c O s ddl m} ||i |��S )Nr )�validate_hooks)�certbot._internal.hooksr )�cls�args�kwargsr r r r �_call s zValidateHooksTest._callz%certbot._internal.hooks.validate_hookc C sR t �� }| �|� dd� |jD �}h d�t|d d� �ks>J �d|d ksNJ �d S )Nc S s g | ]}|d d �qS )r r r )�.0�callr r r � <listcomp>) � z-ValidateHooksTest.test_it.<locals>.<listcomp>> ZdeployZpostZpre����renew)r Z MagicMockr �call_args_list�set)�selfZmock_validate_hook�config�typesr r r �test_it$ s zValidateHooksTest.test_itN) �__name__� __module__� __qualname__�__doc__� classmethodr r �patchr" r r r r r s r c @ sH e Zd ZdZedd� �Zdd� Ze�d�dd� �Z e�d �d d � �Z d S ) �ValidateHookTestz0Tests for certbot._internal.hooks.validate_hook.c O s ddl m} ||i |��S )Nr )� validate_hook)r r* )r r r r* r r r r 2 s zValidateHookTest._callc C s� t �d��v t jddd��H t�tj�� | �dd� W d � n1 sJ0 Y W d � n1 sh0 Y W d � n1 s�0 Y d S )N�.certbot._internal.hooks.plug_util.path_surgeryz0certbot._internal.hooks.filesystem.is_executableF)� return_valueZdummy�foo)r r( �pytest�raisesr �HookCommandNotFoundr �r r r r �test_hook_not_executable7 s z)ValidateHookTest.test_hook_not_executablez'certbot._internal.hooks.util.exe_existsc C sv d|_ t�d��H}t�tj�� | �dd� W d � n1 s@0 Y W d � n1 s^0 Y |jsrJ �d S )NFr+ r- �bar) r, r r( r. r/ r r0 r �called)r Zmock_exe_existsZmock_psr r r �test_not_foundA s Hz ValidateHookTest.test_not_foundz certbot._internal.hooks._progc C s | � d d� |jdu sJ �d S )Nr- F)r r4 )r Z mock_progr r r � test_unsetI s zValidateHookTest.test_unsetN) r# r$ r% r& r' r r2 r r( r5 r6 r r r r r) / s r) c @ s( e Zd ZdZedd� �Zedd� �ZdS )�HookTestz!Common base class for hook tests.c O s t �dS )z7Calls the method being tested with the given arguments.N)�NotImplementedError)r r r r r r r R s zHookTest._callc O sD t �d��&}d|_| j|i |�� W d � n1 s60 Y |S )z�Calls self._call after mocking out certbot.compat.misc.execute_command_status. The mock execute object is returned rather than the return value of self._call. �*certbot.compat.misc.execute_command_status�r � r; N)r r( r, r )r r r � mock_executer r r �_call_with_mock_executeW s .z HookTest._call_with_mock_executeN)r# r$ r% r& r' r r= r r r r r7 O s r7 c s� e Zd ZdZedd� �Z� fdd�Z� fdd�Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Z� ZS )� PreHookTestz+Tests for certbot._internal.hooks.pre_hook.c O s ddl m} ||i |��S )Nr )�pre_hook)r r? )r r r r? r r r r h s zPreHookTest._callc sJ t � �� d| j_t�| jj� tj� | jjd�| _ t | j � | � � d S �Nr- r3 ) �super�setUpr r? r �makedirsZrenewal_pre_hooks_dirr �path�join�dir_hook� create_hook�_reset_pre_hook_alreadyr1 �� __class__r r rB m s zPreHookTest.setUpc s | � � t� �� d S �N)rH rA �tearDownr1 rI r r rL x s zPreHookTest.tearDownc C s ddl m} |�� d S )Nr )�executed_pre_hooks)r rM �clear)r rM r r r rH } s z#PreHookTest._reset_pre_hook_alreadyc C s d| j _| �� d S )N�certonly�r �verb�_test_nonrenew_commonr1 r r r � test_certonly� s zPreHookTest.test_certonlyc C s d| j _| �� d S )N�runrP r1 r r r �test_run� s zPreHookTest.test_runc C s. | � | j�}|jd| jjtjd� | �� d S )N�pre-hook��env)r= r �assert_called_once_withr? r �ANY�_test_no_executions_common�r r< r r r rR � s z!PreHookTest._test_nonrenew_commonc C st d | j _d| j _t�| j� t�d�� }| �| j �}W d � n1 sH0 Y |j du s`J �|j j du spJ �d S )Nr � certbot._internal.hooks.loggerF) r r? rQ r �removerF r r( r= r4 �info�r Z mock_loggerr< r r r � test_no_hooks� s *zPreHookTest.test_no_hooksc C s6 d| j _| �| j �}|jd| j jtjd� | �� d S )NFrV rW )r �directory_hooksr= rY r? r rZ r[ r\ r r r � test_renew_disabled_dir_hooks� s z)PreHookTest.test_renew_disabled_dir_hooksc C sJ d| j _| �| j �}|jd| jtjd� |jd| j jtjd� | � � d S �Nr rV rW ) r rQ r= �assert_any_callrF r rZ �assert_called_withr? r[ r\ r r r �test_renew_no_overlap� s z!PreHookTest.test_renew_no_overlapc C s> | j | j_d| j_| �| j�}|jd| j tjd� | �� d S rd ) rF r r? rQ r= rY r rZ r[ r\ r r r �test_renew_with_overlap� s z#PreHookTest.test_renew_with_overlapc C sT t �d�� }| �| j�}W d � n1 s,0 Y |jdu sDJ �|jjsPJ �d S )Nr] F)r r( r= r r4 r_ r` r r r r[ � s *z&PreHookTest._test_no_executions_common)r# r$ r% r& r' r rB rL rH rS rU rR ra rc rg rh r[ � __classcell__r r rI r r> e s r> c s� e Zd ZdZedd� �Z� fdd�Z� fdd�Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zd d � Zd d � Z� ZS ) � PostHookTestz,Tests for certbot._internal.hooks.post_hook.c O s ddl m} ||i |��S )Nr )� post_hook)r rk )r r r rk r r r r � s zPostHookTest._callc sJ t � �� d| j_t�| jj� tj� | jjd�| _ t | j � | � � d S )Nr3 r- ) rA rB r rk r rC Zrenewal_post_hooks_dirr rD rE rF rG �_reset_post_hook_eventuallyr1 rI r r rB � s zPostHookTest.setUpc s | � � t� �� d S rK )rl rA rL r1 rI r r rL � s zPostHookTest.tearDownc C s ddl m} |d d �= d S �Nr )� post_hooks�r rn �r rn r r r rl � s z(PostHookTest._reset_post_hook_eventuallyc C sF dD ]<}|| j _| �| j g �}|jd| j jtjd� | �� rJ �qd S )N�rO rT � post-hookrW )r rQ r= rY rk r rZ �_get_eventually)r rQ r< r r r � test_certonly_and_run_with_hook� s z,PostHookTest.test_certonly_and_run_with_hookc C s> d | j _dD ],}|| j _| �| j g �jr,J �| �� r J �q d S )Nrq )r rk rQ r= r4 rs )r rQ r r r �#test_cert_only_and_run_without_hook� s z0PostHookTest.test_cert_only_and_run_without_hookc C s4 d| j _| �| j dg�j}|jd d dks0J �d S )NrO � success.orgrX �RENEWED_DOMAINS)r rQ r= � call_argsr )r r r r r �test_renew_env� s zPostHookTest.test_renew_envc C s d| j _| �| j jg� d S )NF)r rb �_test_renew_commonrk r1 r r r rc � s z*PostHookTest.test_renew_disabled_dir_hooksc C s d | j _| �| jg� d S rK )r rk rz rF r1 r r r �test_renew_no_config_hook� s z&PostHookTest.test_renew_no_config_hookc C s t �| j� | �| jjg� d S rK )r r^ rF rz r rk r1 r r r �test_renew_no_dir_hook� s z#PostHookTest.test_renew_no_dir_hookc C s" d | j _t�| j� | �g � d S rK )r rk r r^ rF rz r1 r r r �test_renew_no_hooks� s z PostHookTest.test_renew_no_hooksc C s< | j | jjg}| �|� d| j_|�| jj� | �|� d S )N�baz)rF r rk rz �append)r �expectedr r r rg � s z"PostHookTest.test_renew_no_overlapc C s | j | j_| �| j g� d S rK )rF r rk rz r1 r r r rh � s z$PostHookTest.test_renew_with_overlapc C s8 d| j _td�D ]"}| �| j g � | �� |ksJ �qd S )Nr � )r rQ �ranger rs )r r� �_r r r rz � s z PostHookTest._test_renew_commonc C s ddl m} |S rm ro rp r r r rs s z PostHookTest._get_eventually)r# r$ r% r& r' r rB rL rl rt ru ry rc r{ r| r} rg rh rz rs ri r r rI r rj � s" rj c sT e Zd ZdZedd� �Zdd� Z� fdd�Zdd � Zd d � Z d d � Z dd� Z � Z S )�RunSavedPostHooksTestz7Tests for certbot._internal.hooks.run_saved_post_hooks.c O sF ddl m} d|v r |d n|d }d|v r4|d n|d }|||�S )Nr )�run_saved_post_hooks�renewed_domains�failed_domainsr )r r� )r r r r� r� r� r r r r s zRunSavedPostHooksTest._callc O sH d}t j|| jd�� | j|i |��W d � S 1 s:0 Y dS )z�Call run_saved_post_hooks but mock out execute and eventually certbot._internal.hooks.post_hooks is replaced with self.eventually. The mock execute object is returned rather than the return value of run_saved_post_hooks. z"certbot._internal.hooks.post_hooks)�newN)r r( � eventuallyr= )r r r Zeventually_pathr r r �&_call_with_mock_execute_and_eventually s z<RunSavedPostHooksTest._call_with_mock_execute_and_eventuallyc s t � �� g | _d S rK )rA rB r� r1 rI r r rB " s zRunSavedPostHooksTest.setUpc C s | � g g �jrJ �d S rK )r� r4 r1 r r r � test_empty& s z RunSavedPostHooksTest.test_emptyc C sJ g d�| _ | �g g �}|j}t|| j �D ] \}}|d d |ks(J �q(d S )N�r- r3 r~ Zquxr r )r� r� r �zip)r r< ZcallsZ actual_callZ expected_argr r r � test_multiple) s z#RunSavedPostHooksTest.test_multiplec C s0 dg| _ | �g g �}|jd| j d tjd� d S )Nr- rr r rW )r� r� rY r rZ r\ r r r � test_single1 s z!RunSavedPostHooksTest.test_singlec C sL dg| _ | �dgdg�}|jjd d dks0J �|jjd d dksHJ �d S )Nr- rv z failed.orgrX rw ZFAILED_DOMAINS)r� r� rx r r\ r r r �test_env6 s z RunSavedPostHooksTest.test_env) r# r$ r% r& r' r r� rB r� r� r� r� ri r r rI r r� s r� c s4 e Zd ZdZdd� Z� fdd�Z� fdd�Z� ZS )�RenewalHookTestz1Common base class for testing deploy/renew hooks.c s� d|v r|d n|d � d|v r(|d n|d �� �fdd�}t �d��&}||_| j|i |�� W d � n1 st0 Y |S ) a Calls self._call after mocking out certbot.compat.misc.execute_command_status. The mock execute object is returned rather than the return value of self._call. The mock execute object asserts that environment variables were properly set. �domainsr �lineager� c s. t jd d�� �ksJ �t jd �ks*J �dS )z�Assert environment variables are properly set. :returns: two strings imitating no output from the hook :rtype: `tuple` of `str` rw � �RENEWED_LINEAGEr: )r �environrE )Z unused_argsZ unused_kwargs�r� r� r r �execute_side_effectM s zDRenewalHookTest._call_with_mock_execute.<locals>.execute_side_effectr9 N)r r( Z side_effectr )r r r r� r< r r� r r= B s .z'RenewalHookTest._call_with_mock_executec s t � �� dd� dD �| _d S )Nc S s h | ]}|t jvr|�qS r )r r� )r �varr r r � <setcomp>_ s �z(RenewalHookTest.setUp.<locals>.<setcomp>)rw r� )rA rB � vars_to_clearr1 rI r r rB ] s �zRenewalHookTest.setUpc s( | j D ]}tj�|d � qt� �� d S rK )r� r r� �poprA rL )r r� rI r r rL d s zRenewalHookTest.tearDown)r# r$ r% r& r= rB rL ri r r rI r r� = s r� c @ sH e Zd ZdZedd� �Ze�d�dd� �Ze�d�dd� �Z d d � Z d S ) �DeployHookTestz.Tests for certbot._internal.hooks.deploy_hook.c O s ddl m} ||i |��S )Nr )� deploy_hook)r r� )r r r r� r r r r m s zDeployHookTest._callr] c C s@ d| j _d| j _| �| j dgd�}|jdu s0J �|jjs<J �d S )Nr- T� example.org�/foo/barF)r r� �dry_runr= r4 r_ r` r r r � test_dry_runr s �zDeployHookTest.test_dry_runc C s< d | j _| �| j dgd�}|jdu s(J �|jjdu s8J �d S )Nr� r� F)r r� r= r4 r_ r` r r r � test_no_hook{ s �zDeployHookTest.test_no_hookc C s> ddg}d}d| j _| �| j ||�}|jd| j jtjd� d S )Nr� � example.netr� r- � deploy-hookrW )r r� r= rY r rZ )r r� r� r< r r r � test_success� s �zDeployHookTest.test_successN) r# r$ r% r& r' r r r( r� r� r� r r r r r� j s r� c s^ e Zd ZdZedd� �Z� fdd�Zdd� Ze� d�d d � �Z d d � Z d d� Z dd� Z � ZS )� RenewHookTestz,Tests for certbot._internal.hooks.renew_hookc O s ddl m} ||i |��S )Nr )� renew_hook)r r� )r r r r� r r r r � s zRenewHookTest._callc sB t � �� d| j_t�| jj� tj� | jjd�| _ t | j � d S r@ ) rA rB r r� r rC Zrenewal_deploy_hooks_dirr rD rE rF rG r1 rI r r rB � s �zRenewHookTest.setUpc C s4 d| j _| �| j dgd�}|jd| j jtjd� d S )NFr� r� r� rW )r rb r= rY r� r rZ r\ r r r �test_disabled_dir_hooks� s �z%RenewHookTest.test_disabled_dir_hooksr] c C s< d| j _| �| j dgd�}|jdu s(J �|jjdks8J �d S )NTr� r� Fr� )r r� r= r4 r_ Z call_countr` r r r r� � s �zRenewHookTest.test_dry_runc C sr d | j _t�| j� t�d��"}| �| j dgd�}W d � n1 sF0 Y |jdu s^J �|j jdu snJ �d S )Nr] r� r� F) r r� r r^ rF r r( r= r4 r_ r` r r r ra � s �"zRenewHookTest.test_no_hooksc C s6 | j | j_| �| jddgd�}|jd| j tjd� d S )Nr� r� r� r� rW )rF r r� r= rY r rZ r\ r r r � test_overlap� s �zRenewHookTest.test_overlapc C s@ | � | jdgd�}|jd| jtjd� |jd| jjtjd� d S )Nr� r� r� rW )r= r re rF r rZ rf r� r\ r r r �test_no_overlap� s �z RenewHookTest.test_no_overlap)r# r$ r% r& r' r rB r� r r( r� ra r� r� ri r r rI r r� � s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) � ListHooksTestz-Tests for certbot._internal.hooks.list_hooks.c O s ddl m} ||i |��S )Nr )� list_hooks)r r� )r r r r� r r r r � s zListHooksTest._callc C s | � | j�rJ �d S rK )r �tempdirr1 r r r r� � s zListHooksTest.test_emptyc s@ t � fdd�dD ��}|D ] }t|� q� �� j�|ks<J �d S )Nc 3 s | ]}t j�� j|�V qd S rK )r rD rE r� )r �basenamer1 r r � <genexpr>� s �z.ListHooksTest.test_multiple.<locals>.<genexpr>r� )�sortedrG r r� )r �names�namer r1 r r� � s � zListHooksTest.test_multiplec C s2 t j�| jd�}t|� | �| j�|gks.J �d S )Nr- �r rD rE r� rG r �r r� r r r r� � s zListHooksTest.test_singlec C s0 t j�| jd�}t|� | �| j�g ks,J �d S )Nzfoo~r� r� r r r �test_ignore_tilde� s z ListHooksTest.test_ignore_tildeN) r# r$ r% r& r' r r� r� r� r� r r r r r� � s r� c C s t j| ddd��� dS )zmCreates an executable file at the specified path. :param str file_path: path to create the file at �wi� )�mode�chmodN)r Z safe_open�close)Z file_pathr r r rG � s rG �__main__r )&r& �sysZunittest�platformr r r. Zcertbotr r Zcertbot.compatr r Z certbot.testsZ test_util�typingr r r ZTestCaser ZTempDirTestCaser) ZConfigTestCaser7 r> rj r� r� r� r� r� rG r# �exit�main�argv�__file__r r r r �<module> s2 NX2-"6" __pycache__/lock_test.cpython-39.opt-1.pyc 0000644 00000011600 15114562471 0014337 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddl m Z ddl m Z z ddlZW n ey~ dZY n0 dZG d d � d e j�ZG d d � d e j�Zed kr�e�e�ejdd� eg �� dS )z!Tests for certbot._internal.lock.� N)�mock)�errors)�os)�utilFTc @ s$ e Zd ZdZedd� �Zdd� ZdS )� LockDirTestz*Tests for certbot._internal.lock.lock_dir.c O s ddl m} ||i |��S )Nr )�lock_dir)�certbot._internal.lockr )�cls�args�kwargsr � r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/lock_test.py�_call s zLockDirTest._callc C s8 t �| jtj| j| j�}tj� | jd�}t � ||� d S )Nz .certbot.lock) � functools�partial� assertRaisesr � LockErrorr �tempdirr �path�join� test_util� lock_and_call)�self� assert_raises� lock_pathr r r �test_it s �zLockDirTest.test_itN)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r r r s r c s~ e Zd ZdZedd� �Z� fdd�Zdd� Zdd � Zd d � Z d d � Z dd� Z e � d�dd� �Zdd� Zdd� Zdd� Z� ZS )� LockFileTestz*Tests for certbot._internal.lock.LockFile.c O s ddl m} ||i |��S )Nr )�LockFile)r r" )r r r r" r r r r ( s zLockFileTest._callc s t � �� tj�| jd�| _d S )Nz test.lock)�super�setUpr r r r r )r �� __class__r r r$ - s zLockFileTest.setUpc C s0 t j| j| jfd�}|�� |�� | �� d S )N)�targetr )�multiprocessingZProcessr r �startr � test_removed)r �childr r r � test_acquire_without_deletion1 s �z*LockFileTest.test_acquire_without_deletionc C s* t �| jtj| j| j�}t�|| j� d S �N) r r r r r r r r r )r r r r r �test_contention= s �z LockFileTest.test_contentionc C s< | � | j�}z t|�}| �||� W |�� n |�� 0 d S r- )r r �repr�_test_repr_common�release)r � lock_fileZ locked_reprr r r �test_locked_reprB s z LockFileTest.test_locked_reprc C s, | � | j�}|�� t|�}| �||� d S r- )r r r1 r/ r0 )r r2 Z released_reprr r r �test_released_reprK s z LockFileTest.test_released_reprc C s d S r- r )r r2 Z lock_reprr r r r0 R s z LockFileTest._test_repr_commonzWRace conditions on lock are specific to the non-blocking file access approach on Linux.c sd ddg�ddl m� � ��fdd�}t�d��"}||_� �� j� W d � n1 sV0 Y d S )NTFr )�statc s& | � j kr ��d�r t�| � �| �S )z-Wrap os.stat and maybe delete the file first.r )r �popr �remove)r �r Z should_deleter5 r r �delete_and_stat_ s z/LockFileTest.test_race.<locals>.delete_and_stat�)certbot._internal.lock.filesystem.os.stat)r r5 r �patch� side_effectr r )r r9 Z mock_statr r8 r � test_raceV s *zLockFileTest.test_racec C s | � | j�}|�� d S r- )r r r1 )r r2 r r r r* j s zLockFileTest.test_removedc C s� t r d}nd}d}t�|��Z}t|�|_z| �| j� W n$ ty\ } z W Y d }~nd }~0 0 | �d� W d � n1 s|0 Y d S )Nz"certbot._internal.lock.fcntl.lockf�%certbot._internal.lock.msvcrt.locking�hi therezIOError not raised�� POSIX_MODEr r; �OSErrorr< r r Zfail)r Zmocked_function�msgZ mock_lock�errr r r �$test_unexpected_lockf_or_locking_erro s z1LockFileTest.test_unexpected_lockf_or_locking_errc C s� t r d}nd}d}t�|��Z}t|�|_z| �| j� W n$ ty\ } z W Y d }~nd }~0 0 | �d� W d � n1 s|0 Y d S )Nr: r> r? zOSError not raisedr@ )r Z mock_functionrC Zmock_osrD r r r �test_unexpected_os_err~ s z#LockFileTest.test_unexpected_os_err)r r r r r r r$ r, r. r3 r4 r0 r Zskip_on_windowsr= r* rE rF � __classcell__r r r% r r! & s � r! �__main__� )r r r( �sysZunittestr ZpytestZcertbotr Zcertbot.compatr Z certbot.testsr r Zfcntl� ImportErrorrA ZTempDirTestCaser r! r �exit�main�argv�__file__r r r r �<module> s$ i __pycache__/lock_test.cpython-39.pyc 0000644 00000012164 15114562471 0013406 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddl m Z ddl m Z z ddlZW n ey~ dZY n0 dZG d d � d e j�ZG d d � d e j�Zed kr�e�e�ejdd� eg �� dS )z!Tests for certbot._internal.lock.� N)�mock)�errors)�os)�utilFTc @ s$ e Zd ZdZedd� �Zdd� ZdS )� LockDirTestz*Tests for certbot._internal.lock.lock_dir.c O s ddl m} ||i |��S )Nr )�lock_dir)�certbot._internal.lockr )�cls�args�kwargsr � r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/lock_test.py�_call s zLockDirTest._callc C s8 t �| jtj| j| j�}tj� | jd�}t � ||� d S )Nz .certbot.lock) � functools�partial� assertRaisesr � LockErrorr �tempdirr �path�join� test_util� lock_and_call)�self� assert_raises� lock_pathr r r �test_it s �zLockDirTest.test_itN)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r r r s r c s~ e Zd ZdZedd� �Z� fdd�Zdd� Zdd � Zd d � Z d d � Z dd� Z e � d�dd� �Zdd� Zdd� Zdd� Z� ZS )� LockFileTestz*Tests for certbot._internal.lock.LockFile.c O s ddl m} ||i |��S )Nr )�LockFile)r r" )r r r r" r r r r ( s zLockFileTest._callc s t � �� tj�| jd�| _d S )Nz test.lock)�super�setUpr r r r r )r �� __class__r r r$ - s zLockFileTest.setUpc C sP t j| j| jfd�}|�� |�� |jdks2J �tj� | j�sDJ �| � � d S )N)�targetr r ) �multiprocessingZProcessr r �startr Zexitcoder r �exists� test_removed)r �childr r r � test_acquire_without_deletion1 s �z*LockFileTest.test_acquire_without_deletionc C s* t �| jtj| j| j�}t�|| j� d S �N) r r r r r r r r r )r r r r r �test_contention= s �z LockFileTest.test_contentionc C sH | � | j�}z,t|�}| �||� d|v s.J �W |�� n |�� 0 d S )NZacquired)r r �repr�_test_repr_common�release)r � lock_fileZ locked_reprr r r �test_locked_reprB s z LockFileTest.test_locked_reprc C s8 | � | j�}|�� t|�}| �||� d|v s4J �d S )NZreleased)r r r2 r0 r1 )r r3 Z released_reprr r r �test_released_reprK s z LockFileTest.test_released_reprc C s" |j j|v sJ �| j|v s J �d S r. )r& r r )r r3 Z lock_reprr r r r1 R s z LockFileTest._test_repr_commonzWRace conditions on lock are specific to the non-blocking file access approach on Linux.c st ddg�ddl m� � ��fdd�}t�d��"}||_� �� j� W d � n1 sV0 Y t��dkspJ �d S )NTFr )�statc s& | � j kr ��d�r t�| � �| �S )z-Wrap os.stat and maybe delete the file first.r )r �popr �remove)r �r Z should_deleter6 r r �delete_and_stat_ s z/LockFileTest.test_race.<locals>.delete_and_stat�)certbot._internal.lock.filesystem.os.stat)r r6 r �patch� side_effectr r �len)r r: Z mock_statr r9 r � test_raceV s *zLockFileTest.test_racec C s* | � | j�}|�� tj�| j�r&J �d S r. )r r r2 r r r* )r r3 r r r r+ j s zLockFileTest.test_removedc C s� t r d}nd}d}t�|��j}t|�|_z| �| j� W n4 tyl } z |t|�v sXJ �W Y d }~nd }~0 0 | �d� W d � n1 s�0 Y d S )Nz"certbot._internal.lock.fcntl.lockf�%certbot._internal.lock.msvcrt.locking�hi therezIOError not raised� � POSIX_MODEr r< �OSErrorr= r r �strZfail)r Zmocked_function�msgZ mock_lock�errr r r �$test_unexpected_lockf_or_locking_erro s &z1LockFileTest.test_unexpected_lockf_or_locking_errc C s� t r d}nd}d}t�|��j}t|�|_z| �| j� W n4 tyl } z |t|�v sXJ �W Y d }~nd }~0 0 | �d� W d � n1 s�0 Y d S )Nr; r@ rA zOSError not raisedrB )r Z mock_functionrF Zmock_osrG r r r �test_unexpected_os_err~ s &z#LockFileTest.test_unexpected_os_err)r r r r r r r$ r- r/ r4 r5 r1 r Zskip_on_windowsr? r+ rH rI � __classcell__r r r% r r! & s � r! �__main__� )r r r( �sysZunittestr ZpytestZcertbotr Zcertbot.compatr Z certbot.testsr r Zfcntl� ImportErrorrC ZTempDirTestCaser r! r �exit�main�argv�__file__r r r r �<module> s$ i __pycache__/log_test.cpython-39.opt-1.pyc 0000644 00000040552 15114562471 0014200 0 ustar 00 a }|�gM> � @ sx d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlm Z ddl Z ddl m Z ddl mZ ddl mZ ddlmZ dd lmZ dd lmZ ddlmZ G d d � d ej�ZG d d� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G dd � d ej!�Z"e#d k�rte�$e �%ej&d d� e'g �� dS ) z Tests for certbot._internal.log.� N)�Optional)�mock)�messages)�errors)�util)� constants)� filesystem)�osc s\ e Zd ZdZedd� �Z� fdd�Ze�d�e�d�e�d�e�d �d d � ����Z � Z S ) �PreArgParseSetupTestz4Tests for certbot._internal.log.pre_arg_parse_setup.c O s ddl m} |� S )Nr )�pre_arg_parse_setup)�certbot._internal.logr )�cls�args�kwargsr � r �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/log_test.py�_call s zPreArgParseSetupTest._callc s t �� t� �� d S �N)�logging�shutdown�super�tearDown��self�� __class__r r r s z PreArgParseSetupTest.tearDown�certbot._internal.log.sysz/certbot._internal.log.pre_arg_parse_except_hook�'certbot._internal.log.logging.getLoggerz*certbot._internal.log.util.atexit_registerc C s� dg|_ tj|_| �� |� }|j�tj� d }|jj D ]2}|d d }|d u r8t |tj j �r8|}|j } q8q8|�tj� |�ddd� |j|dddddtjd� d S ) Nz--debugr � � � TF��debug�quiet�log_path)�argv�sys� version_infor �setLevel�assert_called_once_withr �DEBUG� addHandlerZcall_args_list� isinstance�handlers� MemoryHandler�targetr � excepthookr �ANY) r Z mock_registerZmock_get�mock_except_hook�mock_sysZmock_root_logger�memory_handler�call�handlerr/ r r r �test_it$ s" �z PreArgParseSetupTest.test_it) �__name__� __module__� __qualname__�__doc__� classmethodr r r �patchr7 � __classcell__r r r r r s r c sP e Zd ZdZedd� �Z� fdd�Z� fdd�Zdd � Zd d � Z d d � Z � Z S )�PostArgParseSetupTestz5Tests for certbot._internal.log.post_arg_parse_setup.c O s ddl m} ||i |��S )Nr )�post_arg_parse_setup)r r@ )r r r r@ r r r r D s zPostArgParseSetupTest._callc s� t � �� d| j_d| j_d| j_tjd | j_t t j d�| _ ddl m } |t�� �| _ddl m} ddl m} |� | _| jj| _|| j�| _tj| j| jgd �| _d S ) NFi� � verbose_count�wr ��ColoredStreamHandler�r. �� TempHandler)r- )r �setUp�configr" �max_log_backupsr# r Z CLI_DEFAULTSrA �openr �devnullr rD �io�StringIO�stream_handlerr. rG � temp_handler�pathZ temp_pathr4 r � MagicMock� root_logger)r rD r. rG r r r rH I s �zPostArgParseSetupTest.setUpc s6 | j �� | j�� | j�� | j�� t� �� d S r )r4 �closerO rP rL r r r r r r r [ s z PostArgParseSetupTest.tearDownc C s t �d���}| j|_d}t �|��N}t �d��$}tj|_| �| j� W d � n1 sX0 Y W d � n1 sv0 Y W d � n1 s�0 Y tj � | jj d�}| jj � | j� |�ddd� |j ddd| jj| jj|d� | jj}| jjr�n d S ) Nr �0certbot._internal.log.post_arg_parse_except_hookr zletsencrypt.logr r r r! )r r= rS Z return_valuer& r' r rI r rQ �join�logs_dirZ removeHandlerr) r4 r0 r" r# rO �level)r Zmock_get_loggerZexcept_hook_pathr2 r3 r$ rX r r r � test_commonb s( f� �z!PostArgParseSetupTest.test_commonc C s d| j _| �� d S �NT)rI r" rY r r r r � test_debug} s z PostArgParseSetupTest.test_debugc C s d| j _| �� d S rZ )rI r# rY r r r r � test_quiet� s z PostArgParseSetupTest.test_quiet) r8 r9 r: r; r< r rH r rY r[ r\ r> r r r r r? A s r? c sh e Zd ZdZedd� �Z� fdd�Ze�d�dd� �Z d d � Z d d � Z d d� Z e�d�dd� �Z � ZS )�SetupLogFileHandlerTestz7Tests for certbot._internal.log.setup_log_file_handler.c O s ddl m} ||i |��S )Nr )�setup_log_file_handler)r r^ )r r r r^ r r r r � s z SetupLogFileHandlerTest._callc s t � �� d| j_d S )N�* )r rH rI rJ r r r r rH � s z SetupLogFileHandlerTest.setUpz;certbot._internal.main.logging.handlers.RotatingFileHandlerc C sP t |_z| �| jdd� W n& tjy@ } z W Y d }~nd }~0 0 | �d� d S )N�test.log� %(message)szError not raised.)�IOError� side_effectr rI r �Error�fail)r � mock_handler�errr r r � test_failure� s z$SetupLogFileHandlerTest.test_failurec C s | j dd� d S )NT��should_rollover)�_test_success_commonr r r r �test_success_with_rollover� s z2SetupLogFileHandlerTest.test_success_with_rolloverc C s d| j _| jdd� d S )Nr Fri )rI rJ rk r r r r � test_success_without_rollover� s z5SetupLogFileHandlerTest.test_success_without_rolloverc C sL d}| � | j|d�\}}|�� tj�| jj|�}tj�| jj|d �}d S )Nr` ra z.1)r rI rT r rQ rV rW )r rj �log_filer6 r$ Z expected_pathZ backup_pathr r r rk � s z,SetupLogFileHandlerTest._test_success_commonz:certbot._internal.log.logging.handlers.RotatingFileHandlerc C s" | � | jdd� |jd d }d S )Nr` ra r Z backupCount)r rI � call_args)r rf Z backup_countr r r �test_max_log_backups_used� s z1SetupLogFileHandlerTest.test_max_log_backups_used)r8 r9 r: r; r< r rH r r= rh rl rm rk rp r> r r r r r] � s r] c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �ColoredStreamHandlerTestz4Tests for certbot._internal.log.ColoredStreamHandlerc C sX t �� | _dd� | j_t�� | _| j�tj� ddl m } || j�| _ | j� | j � d S )Nc S s dS rZ r r r r r �<lambda>� � z0ColoredStreamHandlerTest.setUp.<locals>.<lambda>r rC ) rM rN �stream�isattyr � getLogger�loggerr( r* r rD r6 r+ )r rD r r r rH � s z ColoredStreamHandlerTest.setUpc C s | j �� d S r �r6 rT r r r r r � s z!ColoredStreamHandlerTest.tearDownc C s d}| j �|� d S )Nz I did a thing)rw r" �r �msgr r r � test_format� s z$ColoredStreamHandlerTest.test_formatc C s d}t j| j_| j�|� d S )NzI did another thing)r r* r6 Z red_levelrw r" ry r r r �test_format_and_red_level� s z2ColoredStreamHandlerTest.test_format_and_red_levelN)r8 r9 r: r; rH r r{ r| r r r r rq � s rq c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�MemoryHandlerTestz-Tests for certbot._internal.log.MemoryHandlerc C sb t �t�| _| j�t j� d| _t�� | _ t � | j �| _ ddl m } || j �| _| j�| j� d S )Nzhi therer rE )r rv r8 rw r( r* rz rM rN rt � StreamHandlerrO r r. r6 r+ )r r. r r r rH � s zMemoryHandlerTest.setUpc C s | j �� | j�� d S r )r6 rT rO r r r r r � s zMemoryHandlerTest.tearDownc C s | � � | jjdd� d S �NT��force)�_test_log_debugr6 �flushr r r r � test_flush� s z MemoryHandlerTest.test_flushc C s | j �| j� | j�� d S r )rw Zcriticalrz r6 r� r r r r �test_not_flushed� s z"MemoryHandlerTest.test_not_flushedc C s@ | � � t�� }t�|�}| j�|� | jjdd� |�� d S r ) r� rM rN r r~ r6 Z setTargetr� rT )r Z new_streamZnew_stream_handlerr r r �test_target_reset� s z#MemoryHandlerTest.test_target_resetc C s | j �| j� d S r )rw r" rz r r r r r� s z!MemoryHandlerTest._test_log_debugN) r8 r9 r: r; rH r r� r� r� r� r r r r r} � s r} c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) �TempHandlerTestz,Tests for certbot._internal.log.TempHandler.c C s d| _ ddlm} |� | _d S )NFr rF )�closedr rG r6 )r rG r r r rH s zTempHandlerTest.setUpc C s | j �� d S r rx r r r r r s zTempHandlerTest.tearDownc C s d S r r r r r r �test_permissions s z TempHandlerTest.test_permissionsc C s | j �� d S r rx r r r r � test_delete s zTempHandlerTest.test_deletec C s, | j �t�� � | j �� t�| j j� d S r )r6 �emitr rR rT r �removerQ r r r r �test_no_delete s z TempHandlerTest.test_no_deleteN) r8 r9 r: r; rH r r� r� r� r r r r r� s r� c @ s. e Zd ZdZedd� �Ze�d�dd� �ZdS )�PreArgParseExceptHookTestz:Tests for certbot._internal.log.pre_arg_parse_except_hook.c O s ddl m} ||i |��S )Nr )�pre_arg_parse_except_hook)r r� )r r r r� r r r r s z PreArgParseExceptHookTest._callrU c C sN t �� }d}ddi}| j|g|�R i |�� |j|i |�� |jjdd� d S )N)�somer r� r Tr� )r rR r r) r� )r Z mock_post_arg_parse_except_hookr4 r r r r r r7 # s ��z!PreArgParseExceptHookTest.test_itN) r8 r9 r: r; r< r r r= r7 r r r r r� s r� c @ s~ e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z d dd�Zdd� Zdd� Zdd � Zd S ) �PostArgParseExceptHookTestz;Tests for certbot._internal.log.post_arg_parse_except_hook.c O s ddl m} ||i |��S )Nr )�post_arg_parse_except_hook)r r� )r r r r� r r r r 2 s z PostArgParseExceptHookTest._callc C s d| _ d| _d S )Nztest error messagezfoo.log)� error_msgr$ r r r r rH 7 s z PostArgParseExceptHookTest.setUpc C s2 t }| j|dd�\}}| �|j|� | �|� d S �NF�r" )� BaseException� _test_common�_assert_exception_logged�error�_assert_logfile_output�r �exc_type� mock_logger�outputr r r �test_base_exception; s z.PostArgParseExceptHookTest.test_base_exceptionc C s2 t }| j|dd�\}}| �|j|� | �|� d S )NTr� )� ValueErrorr� r� r� r� r� r r r r[ A s z%PostArgParseExceptHookTest.test_debugc C s* t }| j|ddd�\}}| �|j|� d S )NT)r" r# )r� r� r� r� r� r r r r\ G s z%PostArgParseExceptHookTest.test_quietc C s6 t j}| j|dd�\}}| �|j|� | �||� d S r� )r Z PluginErrorr� r� r" �_assert_quiet_outputr� r r r �test_custom_errorM s z,PostArgParseExceptHookTest.test_custom_errorc sL t ttj��� � fdd�}| j|dd�\}}| �|jtj� | �||� d S )Nc s t jj� | d�S )z6Wraps ACME errors so the constructor takes only a msg.)Zdetail)r rd Z with_code)rz �Z acme_coder r �get_acme_errorW s zBPostArgParseExceptHookTest.test_acme_error.<locals>.get_acme_errorFr� ) �next�iterr Z ERROR_CODESr� r� r" rd r� )r r� r� r� r r� r �test_acme_errorS s z*PostArgParseExceptHookTest.test_acme_errorc C s4 t }| j|dd�\}}| �|j|� | �||� d S r� )r� r� r� r" r� r� r r r �test_other_error` s z+PostArgParseExceptHookTest.test_other_errorc C s& t }| j|dd�\}}|j�d� d S )NFr� z Exiting due to user request.)�KeyboardInterruptr� r� r) r� r r r �test_keyboardinterruptf s z1PostArgParseExceptHookTest.test_keyboardinterruptFc s t �� � � fdd�}z|| j��W n� ty� t�� }t�d���}||j_ t�d� ��h z| j |||| j d�� W n2 t y� } z� � t|�� W Y d}~nd}~0 0 | �d� W d � n1 s�0 Y W d � n1 s�0 Y Y n0 � �� }||fS )z,Returns the mocked logger and stderr output.c s � � | d � dS )zWrite error to mock_err.r N)�write)r Z unused_kwargs�Zmock_errr r � write_erro s z:PostArgParseExceptHookTest._test_common.<locals>.write_errz certbot._internal.log.loggerz certbot._internal.log.sys.stderrr! NzSystemExit not raised.)rM rN r� r� r& �exc_infor r= r� rc r r$ � SystemExitr� �strre �getvalue) r Z error_typer" r# r� r� r� Zexit_errr� r r� r r� k s$ � $Lz'PostArgParseExceptHookTest._test_commonc C s$ |j d }|d }|tjtjf}d S )Nr r� )ro r r1 )r Zlog_funcr� Z call_kwargsZactual_exc_infoZexpected_exc_infor r r r� � s z3PostArgParseExceptHookTest._assert_exception_loggedc C s d S r r )r r� r r r r� � s z1PostArgParseExceptHookTest._assert_logfile_outputc C s d S r r )r r� r� r r r r� � s z/PostArgParseExceptHookTest._assert_quiet_outputN)F)r8 r9 r: r; r< r rH r� r[ r\ r� r� r� r� r� r� r� r� r r r r r� 0 s r� c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ExitWithAdviceTestz1Tests for certbot._internal.log.exit_with_advice.c O s ddl m} ||i |��S )Nr )�exit_with_advice)r r� )r r r r� r r r r � s zExitWithAdviceTest._callc C s, t j�| jd�}t|d��� | �|�}d S )Nr` rB )r rQ rV �tempdirrK rT r� )r rn �err_strr r r � test_log_file� s z ExitWithAdviceTest.test_log_filec C s | � | j�}d S r )r� r� )r r� r r r � test_log_dir� s z ExitWithAdviceTest.test_log_dirc O sP z| j |i |�� W n, ty@ } zt|�W Y d }~S d }~0 0 | �d� d S )NzSystemExit was not raised.)r r� r� re )r r r rg r r r r� � s z ExitWithAdviceTest._test_commonN) r8 r9 r: r; r< r r� r� r� r r r r r� � s r� �__main__r )(r; rM r Zlogging.handlersr& �time�typingr Zunittestr ZpytestZacmer Zcertbotr r Zcertbot._internalr Zcertbot.compatr r Z certbot.testsZ test_utilZTestCaser ZConfigTestCaser? r] rq r} r� r� r� ZTempDirTestCaser� r8 �exit�mainr% �__file__r r r r �<module> s6 +E3 +h __pycache__/log_test.cpython-39.pyc 0000644 00000042670 15114562471 0013244 0 ustar 00 a }|�gM> � @ sx d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlm Z ddl Z ddl m Z ddl mZ ddl mZ ddlmZ dd lmZ dd lmZ ddlmZ G d d � d ej�ZG d d� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G dd � d ej!�Z"e#d k�rte�$e �%ej&d d� e'g �� dS ) z Tests for certbot._internal.log.� N)�Optional)�mock)�messages)�errors)�util)� constants)� filesystem)�osc s\ e Zd ZdZedd� �Z� fdd�Ze�d�e�d�e�d�e�d �d d � ����Z � Z S ) �PreArgParseSetupTestz4Tests for certbot._internal.log.pre_arg_parse_setup.c O s ddl m} |� S )Nr )�pre_arg_parse_setup)�certbot._internal.logr )�cls�args�kwargsr � r �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/log_test.py�_call s zPreArgParseSetupTest._callc s t �� t� �� d S �N)�logging�shutdown�super�tearDown��self�� __class__r r r s z PreArgParseSetupTest.tearDown�certbot._internal.log.sysz/certbot._internal.log.pre_arg_parse_except_hook�'certbot._internal.log.logging.getLoggerz*certbot._internal.log.util.atexit_registerc C s� dg|_ tj|_| �� |� }|j�tj� |jj dks<J �d }|jj D ]B}|d d }|d u rzt |tj j �rz|}|j} qHt |tj�sHJ �qHt | tj�s�J �|�tj� |�ddd� |j|dddddtjd� d S ) Nz--debug� r � � TF��debug�quiet�log_path)�argv�sys� version_infor �setLevel�assert_called_once_withr �DEBUG� addHandlerZ call_countZcall_args_list� isinstance�handlers� MemoryHandler�target� StreamHandlerr � excepthookr �ANY) r Z mock_registerZmock_get�mock_except_hook�mock_sysZmock_root_logger�memory_handler�call�handlerr/ r r r �test_it$ s& �z PreArgParseSetupTest.test_it) �__name__� __module__� __qualname__�__doc__� classmethodr r r �patchr8 � __classcell__r r r r r s r c sP e Zd ZdZedd� �Z� fdd�Z� fdd�Zdd � Zd d � Z d d � Z � Z S )�PostArgParseSetupTestz5Tests for certbot._internal.log.post_arg_parse_setup.c O s ddl m} ||i |��S )Nr )�post_arg_parse_setup)r rA )r r r rA r r r r D s zPostArgParseSetupTest._callc s� t � �� d| j_d| j_d| j_tjd | j_t t j d�| _ ddl m } |t�� �| _ddl m} ddl m} |� | _| jj| _|| j�| _tj| j| jgd �| _d S ) NFi� � verbose_count�wr ��ColoredStreamHandler�r. �� TempHandler)r- )r �setUp�configr" �max_log_backupsr# r Z CLI_DEFAULTSrB �openr �devnullr rE �io�StringIO�stream_handlerr. rH � temp_handler�path� temp_pathr5 r � MagicMock� root_logger)r rE r. rH r r r rI I s �zPostArgParseSetupTest.setUpc s6 | j �� | j�� | j�� | j�� t� �� d S r )r5 �closerP rQ rM r r r r r r r [ s z PostArgParseSetupTest.tearDownc C sT t �d���}| j|_d}t �|��N}t �d��$}tj|_| �| j� W d � n1 sX0 Y W d � n1 sv0 Y W d � n1 s�0 Y tj � | jj d�}| jj � | j� | jjjs�J �tj �|�s�J �tj �| j�r�J �|�ddd� |j ddd| jj| jj|d� | jj}| jj�r@|tjk�sPJ �n|tjk�sPJ �d S ) Nr �0certbot._internal.log.post_arg_parse_except_hookr zletsencrypt.logr r r r! )r r> rU Z return_valuer& r' r rJ r rR �join�logs_dirZ removeHandlerr) r5 r+ �called�existsrS r1 r" r# rP �levelr ZQUIET_LOGGING_LEVELZDEFAULT_LOGGING_LEVEL)r Zmock_get_loggerZexcept_hook_pathr3 r4 r$ r\ r r r � test_commonb s. f� � z!PostArgParseSetupTest.test_commonc C s d| j _| �� d S �NT)rJ r" r] r r r r � test_debug} s z PostArgParseSetupTest.test_debugc C s d| j _| �� d S r^ )rJ r# r] r r r r � test_quiet� s z PostArgParseSetupTest.test_quiet) r9 r: r; r< r= r rI r r] r_ r` r? r r r r r@ A s r@ c sh e Zd ZdZedd� �Z� fdd�Ze�d�dd� �Z d d � Z d d � Z d d� Z e�d�dd� �Z � ZS )�SetupLogFileHandlerTestz7Tests for certbot._internal.log.setup_log_file_handler.c O s ddl m} ||i |��S )Nr )�setup_log_file_handler)r rb )r r r rb r r r r � s z SetupLogFileHandlerTest._callc s t � �� d| j_d S )N�* )r rI rJ rK r r r r rI � s z SetupLogFileHandlerTest.setUpz;certbot._internal.main.logging.handlers.RotatingFileHandlerc C s` t |_z| �| jdd� W n6 tjyP } z dt|�v s<J �W Y d }~nd }~0 0 | �d� d S )N�test.log� %(message)sz --logs-dirzError not raised.)�IOError� side_effectr rJ r �Error�str�fail)r � mock_handler�errr r r � test_failure� s &z$SetupLogFileHandlerTest.test_failurec C s | j dd� d S )NT��should_rollover)�_test_success_commonr r r r �test_success_with_rollover� s z2SetupLogFileHandlerTest.test_success_with_rolloverc C s d| j _| jdd� d S )Nr Frn )rJ rK rp r r r r � test_success_without_rollover� s z5SetupLogFileHandlerTest.test_success_without_rolloverc C s� d}| � | j|d�\}}|�� |jtjks0J �|jjtj ksBJ �t j � | jj |�}||ks`J �t j � | jj |d �}t j �|�|ks�J �d S )Nrd re z.1)r rJ rV r\ r r* � formatterZ converter�time� localtimer rR rX rY r[ )r ro �log_filer7 r$ Z expected_pathZ backup_pathr r r rp � s z,SetupLogFileHandlerTest._test_success_commonz:certbot._internal.log.logging.handlers.RotatingFileHandlerc C s2 | � | jdd� |jd d }| jj|ks.J �d S )Nrd re r Z backupCount)r rJ � call_argsrK )r rk Z backup_countr r r �test_max_log_backups_used� s z1SetupLogFileHandlerTest.test_max_log_backups_used)r9 r: r; r< r= r rI r r> rm rq rr rp rx r? r r r r ra � s ra c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �ColoredStreamHandlerTestz4Tests for certbot._internal.log.ColoredStreamHandlerc C sX t �� | _dd� | j_t�� | _| j�tj� ddl m } || j�| _ | j� | j � d S )Nc S s dS r^ r r r r r �<lambda>� � z0ColoredStreamHandlerTest.setUp.<locals>.<lambda>r rD ) rN rO �stream�isattyr � getLogger�loggerr( r* r rE r7 r+ )r rE r r r rI � s z ColoredStreamHandlerTest.setUpc C s | j �� d S r �r7 rV r r r r r � s z!ColoredStreamHandlerTest.tearDownc C s, d}| j �|� | j�� d�|�ks(J �d S )Nz I did a thingz{0} )r r" r| �getvalue�format�r �msgr r r � test_format� s z$ColoredStreamHandlerTest.test_formatc C s> d}t j| j_| j�|� | j�� d�t j |t j �ks:J �d S )NzI did another thingz {0}{1}{2} ) r r* r7 Z red_levelr r" r| r� r� r Z ANSI_SGR_REDZANSI_SGR_RESETr� r r r �test_format_and_red_level� s ��z2ColoredStreamHandlerTest.test_format_and_red_levelN)r9 r: r; r< rI r r� r� r r r r ry � s ry c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�MemoryHandlerTestz-Tests for certbot._internal.log.MemoryHandlerc C sb t �t�| _| j�t j� d| _t�� | _ t � | j �| _ ddl m } || j �| _| j�| j� d S )Nzhi therer rF )r r~ r9 r r( r* r� rN rO r| r0 rP r r. r7 r+ )r r. r r r rI � s zMemoryHandlerTest.setUpc C s | j �� | j�� d S r )r7 rV rP r r r r r � s zMemoryHandlerTest.tearDownc C s2 | � � | jjdd� | j�� | jd ks.J �d S )NT��force� )�_test_log_debugr7 �flushr| r� r� r r r r � test_flush� s z MemoryHandlerTest.test_flushc C s. | j �| j� | j�� | j�� dks*J �d S )N� )r Zcriticalr� r7 r� r| r� r r r r �test_not_flushed� s z"MemoryHandlerTest.test_not_flushedc C sh | � � t�� }t�|�}| j�|� | jjdd� | j� � dksFJ �|� � | j d ks\J �|� � d S )NTr� r� r� ) r� rN rO r r0 r7 Z setTargetr� r| r� r� rV )r Z new_streamZnew_stream_handlerr r r �test_target_reset� s z#MemoryHandlerTest.test_target_resetc C s | j �| j� d S r )r r" r� r r r r r� s z!MemoryHandlerTest._test_log_debugN) r9 r: r; r< rI r r� r� r� r� r r r r r� � s r� c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) �TempHandlerTestz,Tests for certbot._internal.log.TempHandler.c C s d| _ ddlm} |� | _d S )NFr rG )�closedr rH r7 )r rH r r r rI s zTempHandlerTest.setUpc C s | j �� d S r r� r r r r r s zTempHandlerTest.tearDownc C s t �| jjd�sJ �d S )Ni� )r Zcheck_permissionsr7 rR r r r r �test_permissions s z TempHandlerTest.test_permissionsc C s" | j �� tj�| j j�r J �d S r )r7 rV r rR r[ r r r r � test_delete s zTempHandlerTest.test_deletec C s@ | j �t�� � | j �� tj�| j j�s.J �t�| j j� d S r ) r7 �emitr rT rV r rR r[ �remover r r r �test_no_delete s z TempHandlerTest.test_no_deleteN) r9 r: r; r< rI r r� r� r� r r r r r� s r� c @ s. e Zd ZdZedd� �Ze�d�dd� �ZdS )�PreArgParseExceptHookTestz:Tests for certbot._internal.log.pre_arg_parse_except_hook.c O s ddl m} ||i |��S )Nr )�pre_arg_parse_except_hook)r r� )r r r r� r r r r s z PreArgParseExceptHookTest._callrW c C sN t �� }d}ddi}| j|g|�R i |�� |j|i |�� |jjdd� d S )N)�somer r� r Tr� )r rT r r) r� )r Z mock_post_arg_parse_except_hookr5 r r r r r r8 # s ��z!PreArgParseExceptHookTest.test_itN) r9 r: r; r< r= r r r> r8 r r r r r� s r� c @ s~ e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z d dd�Zdd� Zdd� Zdd � Zd S ) �PostArgParseExceptHookTestz;Tests for certbot._internal.log.post_arg_parse_except_hook.c O s ddl m} ||i |��S )Nr )�post_arg_parse_except_hook)r r� )r r r r� r r r r 2 s z PostArgParseExceptHookTest._callc C s d| _ d| _d S )Nztest error messagezfoo.log)� error_msgr$ r r r r rI 7 s z PostArgParseExceptHookTest.setUpc C s2 t }| j|dd�\}}| �|j|� | �|� d S �NF�r" )� BaseException� _test_common�_assert_exception_logged�error�_assert_logfile_output�r �exc_type� mock_logger�outputr r r �test_base_exception; s z.PostArgParseExceptHookTest.test_base_exceptionc C s2 t }| j|dd�\}}| �|j|� | �|� d S )NTr� )� ValueErrorr� r� r� r� r� r r r r_ A s z%PostArgParseExceptHookTest.test_debugc C s6 t }| j|ddd�\}}| �|j|� d|vs2J �d S )NT)r" r# �See the logfile)r� r� r� r� r� r r r r` G s z%PostArgParseExceptHookTest.test_quietc C s6 t j}| j|dd�\}}| �|j|� | �||� d S r� )r Z PluginErrorr� r� r" �_assert_quiet_outputr� r r r �test_custom_errorM s z,PostArgParseExceptHookTest.test_custom_errorc sZ t ttj��� � fdd�}| j|dd�\}}| �|jtj� | �||� tj |vsVJ �d S )Nc s t jj� | d�S )z6Wraps ACME errors so the constructor takes only a msg.)Zdetail)r rh Z with_code)r� �Z acme_coder r �get_acme_errorW s zBPostArgParseExceptHookTest.test_acme_error.<locals>.get_acme_errorFr� ) �next�iterr Z ERROR_CODESr� r� r" rh r� Z ERROR_PREFIX)r r� r� r� r r� r �test_acme_errorS s z*PostArgParseExceptHookTest.test_acme_errorc C s4 t }| j|dd�\}}| �|j|� | �||� d S r� )r� r� r� r" r� r� r r r �test_other_error` s z+PostArgParseExceptHookTest.test_other_errorc C s& t }| j|dd�\}}|j�d� d S )NFr� z Exiting due to user request.)�KeyboardInterruptr� r� r) r� r r r �test_keyboardinterruptf s z1PostArgParseExceptHookTest.test_keyboardinterruptFc s t �� � � fdd�}z|| j��W n� ty� t�� }t�d���}||j_ t�d� ��h z| j |||| j d�� W n2 t y� } z� � t|�� W Y d}~nd}~0 0 | �d� W d � n1 s�0 Y W d � n1 s�0 Y Y n0 � �� }||fS )z,Returns the mocked logger and stderr output.c s � � | d � dS )zWrite error to mock_err.r N)�write)r Z unused_kwargs�Zmock_errr r � write_erro s z:PostArgParseExceptHookTest._test_common.<locals>.write_errz certbot._internal.log.loggerz certbot._internal.log.sys.stderrr! NzSystemExit not raised.)rN rO r� r� r& �exc_infor r> r� rg r r$ � SystemExitr� ri rj r� ) r Z error_typer" r# r� r� r� Zexit_errr� r r� r r� k s$ � $Lz'PostArgParseExceptHookTest._test_commonc C sF |j s J �|jd }d|v s J �|d }|tjtjf}||ksBJ �d S )Nr r� )rZ rw r r2 )r Zlog_funcr� Z call_kwargsZactual_exc_infoZexpected_exc_infor r r r� � s z3PostArgParseExceptHookTest._assert_exception_loggedc C s d|v s J �| j |v sJ �d S )Nr� )r$ )r r� r r r r� � s z1PostArgParseExceptHookTest._assert_logfile_outputc C s. |j jdu sJ �|jjs J �| j|v s*J �d S )NF)� exceptionrZ r" r� )r r� r� r r r r� � s z/PostArgParseExceptHookTest._assert_quiet_outputN)F)r9 r: r; r< r= r rI r� r_ r` r� r� r� r� r� r� r� r� r r r r r� 0 s r� c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ExitWithAdviceTestz1Tests for certbot._internal.log.exit_with_advice.c O s ddl m} ||i |��S )Nr )�exit_with_advice)r r� )r r r r� r r r r � s zExitWithAdviceTest._callc C sD t j�| jd�}t|d��� | �|�}d|vs4J �||v s@J �d S )Nrd rC �logfiles)r rR rX �tempdirrL rV r� )r rv �err_strr r r � test_log_file� s z ExitWithAdviceTest.test_log_filec C s* | � | j�}d|v sJ �| j|v s&J �d S )Nr� )r� r� )r r� r r r � test_log_dir� s z ExitWithAdviceTest.test_log_dirc O sP z| j |i |�� W n, ty@ } zt|�W Y d }~S d }~0 0 | �d� d S )NzSystemExit was not raised.)r r� ri rj )r r r rl r r r r� � s z ExitWithAdviceTest._test_commonN) r9 r: r; r< r= r r� r� r� r r r r r� � s r� �__main__r )(r< rN r Zlogging.handlersr& rt �typingr Zunittestr ZpytestZacmer Zcertbotr r Zcertbot._internalr Zcertbot.compatr r Z certbot.testsZ test_utilZTestCaser ZConfigTestCaser@ ra ry r� r� r� r� ZTempDirTestCaser� r9 �exit�mainr% �__file__r r r r �<module> s6 +E3 +h __pycache__/main_test.cpython-39.opt-1.pyc 0000644 00000261050 15114562471 0014341 0 ustar 00 a }|�g�� � @ s2 d Z ddlZddlZddlmZ ddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl mZ ddlZddlmZ ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ dd lm Z dd lm Z dd l m Z dd l m Z dd l m!Z! ddl m"Z" ddl m#Z# ddl$m%Z% ddl$m&Z& ddl$m'Z' ddl$m(Z( ddl)m*Z* ddl)m+Z+ ddl,m-Z- ddl.m/ m Z0 e0�1d�Z2e0�1d�Z3e0�1d�Z4e0�1d�Z5ej6�7e0�8d��Z9e0�1d�Z:e0�1d �Z;G d d � d ej<�Z=G d d � d e0j>�Z?G d!d"� d"ej<�Z@G d#d$� d$ej<�ZAG d%d&� d&e0jB�ZCG d'd(� d(e0jB�ZDG d)d*� d*e0j>�ZEG d+d,� d,e0j>�ZFG d-d.� d.e0j>�ZGG d/d0� d0ej<�ZHG d1d2� d2e0j>�ZIG d3d4� d4e0j>�ZJG d5d6� d6e0j>�ZKG d7d8� d8ej<�ZLG d9d:� d:ej<�ZMG d;d<� d<e0j>�ZNG d=d>� d>e0j>�ZOG d?d@� d@�ZPeQdAk�r.e �Re�"e jSdBd� eTg �� dS )Cz!Tests for certbot._internal.main.� N)�reload)�List)�mock)�Error)� crypto_util��errors)� interfaces)�util)�account)�cli)� constants)�main)�updater)�disco)�manual)�null)� standalone)� filesystem)�os)� enhancements� cert_512.pemz csr_512.derzrsa256_key.pemzrsa512_key.pemzrsa2048_key.pemz cert_2048.pemc @ sl e Zd ZdZe�d�dd� �Ze�d�e�d�e�d�dd� ���Ze�d�d d � �Ze�d �d d � �Z dS )�TestHandleCertsz1Test for certbot._internal.main._handle_* methods�<certbot._internal.main._handle_unexpected_key_type_migrationc C s$ t �� }d|j_t�t �� |�}d S �NF)r �Mock�ensure_deployed� return_valuer � _handle_identical_cert_request)�self�mock_handle_migration� mock_lineage�ret� r# �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/main_test.py�*test_handle_identical_cert_request_pending5 s z:TestHandleCerts.test_handle_identical_cert_request_pending�&certbot._internal.renewal.should_renewzcertbot.display.util.menuc C s6 d|_ t�� }d|j_ d|_ t�tjddd�|�}d S )NTF�run)Zverb� reinstall)r r r r r r � MagicMock)r r Z mock_menuZmock_should_renewr! r" r# r# r$ �*test_handle_identical_cert_key_type_change> s �z:TestHandleCerts.test_handle_identical_cert_key_type_changec C s6 t �� }d|_t �� }ddg|j_t�|dg|�}d S )NTZdummy1Zdummy2)r r �expand�namesr r Z_handle_subset_cert_request)r r � mock_configr! r" r# r# r$ � test_handle_subset_cert_requestM s z/TestHandleCerts.test_handle_subset_cert_requestz)certbot._internal.main.display_util.yesnoc C s� t �� }t �� }||_t �� }d|_d|_t�||� |�� d|_d|_t�||� d|_d|_t�||� d|_t�||� d|_dd� |_ t j t j dd�� t�||� W d � n1 s�0 Y d d� |_ t�||� d S ) NZrsa�ecdsaTFc S s | dkS )N�certnamer# ��varr# r# r$ �<lambda>{ � zKTestHandleCerts.test_handle_unexpected_key_type_migration.<locals>.<lambda>z.Please provide both --cert-name and --key-type��matchc S s | dkS )N�key_typer# r1 r# r# r$ r3 � r4 )r r Z set_by_userr7 �private_key_typer Z%_handle_unexpected_key_type_migration�assert_not_calledr � side_effect�pytest�raisesr r )r Z mock_yesno�configZmock_set�certr# r# r$ �)test_handle_unexpected_key_type_migrationW s. * z9TestHandleCerts.test_handle_unexpected_key_type_migrationN) �__name__� __module__� __qualname__�__doc__r �patchr% r* r. r? r# r# r# r$ r 3 s r c sv e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d�dd� �Z e � d �dd� �Z � ZS )�RunTestz%Tests for certbot._internal.main.run.c s� t � �� d| _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d �t�d �g }|d �� | _|d �� | _|d �� | _|d �� | _ |d �� | _ |d �� | _ |d �� | _ |d �� | _ |d �� | _|D ]}| �|j� q�d S )Nz example.org�)certbot._internal.main._get_and_save_certz7certbot._internal.main.display_ops.success_installationz2certbot._internal.main.display_ops.success_renewal�&certbot._internal.main._init_le_client�7certbot._internal.main._suggest_donation_if_appropriate�'certbot._internal.main._report_new_cert�!certbot._internal.main._find_cert�)certbot._internal.eff.handle_subscription�)certbot._internal.main._report_next_stepsr � � � � � � � � )�super�setUp�domainr rD �start� mock_auth�mock_success_installation�mock_success_renewal� mock_initZmock_suggest_donation�mock_report_cert�mock_find_cert�mock_subscription�mock_report_next_steps� addCleanup�stop)r �patchesrD �� __class__r# r$ rV � s. � z RunTest.setUpc C s@ d� | j��� }tj�� }t�||�}ddlm } |||� d S )Nz-a webroot -i null -d {0}r )r' ) �formatrW �splitr �PluginsRegistry�find_allr �prepare_and_parse_args�certbot._internal.mainr' )r �args�pluginsr= r' r# r# r$ �_call� s z RunTest._callc C sH t �� | j_d| j_| �� | j�| jg� | j jt j d t j dd� d S )N�TNT�Znew_or_renewed_cert) r r rY r r^ rn rZ �assert_called_once_withrW r` �ANY�r r# r# r$ �test_newcert_success� s �z RunTest.test_newcert_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S r ) r r rY r r^ rn rZ rq rW rs r# r# r$ �test_reinstall_success� s z RunTest.test_reinstall_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S �NT) r r rY r r^ rn r[ rq rW rs r# r# r$ �test_renewal_success� s z RunTest.test_renewal_success�;certbot._internal.main.plug_sel.choose_configurator_pluginsc C sd t �| jd�d f|_tj�� }d| j_t� t j �� t � | j|� W d � n1 sV0 Y d S �Nr T)r � Installerr= r r rh ri � auto_hstsr; r< r �NotSupportedErrorr r' �r � mock_chooserm r# r# r$ �"test_run_enhancement_not_supported� s z*RunTest.test_run_enhancement_not_supported�$certbot._internal.main._install_certc C s| t �d�|_t�� | j_d| j_t� t j�� | � � W d � n1 sJ0 Y | j j tj |jtj dd� | j�� d S )NzFake installation errorro Trp )r Z PluginErrorr: r r rY r r^ r; r< rn r` rq rr rZ r9 )r Zmock_install_certr# r# r$ � test_cert_success_install_error� s &�z'RunTest.test_cert_success_install_errorc C sd t �| jd�d f|_tj�� }d| j_t� t j �� t � | j|� W d � n1 sV0 Y d S ry )r rz r= r r rh ri Z must_stapler; r< r r| r r' r} r# r# r$ �"test_run_must_staple_not_supported� s z*RunTest.test_run_must_staple_not_supported)r@ rA rB rC rV rn rt ru rw r rD r r� r� � __classcell__r# r# rd r$ rE � s rE c @ s� e Zd ZdZdd� Zdd� Zdd� Ze�d�e�d �e�d �d d � ���Z d d� Z e�d�e�d�e�d�e�d�e�d�e�d �dd� ������Z e�d�e�d�e�d�e�d�e�d �dd� �����Z e�d�e�d �e�d�e�d�dd� ����Z e�d�e�d �e�d�e�d �e�d �d d � �����Ze�d�e�d �e�d�e�d �e�d �d d � �����Ze�d�e�d �e�d�e�d �d!d"� ����Zd#S )$� CertonlyTestz*Tests for certbot._internal.main.certonly.c C s t �� | _| j�� | _d S �N)� test_util�patch_display_util�get_utility_patchrX �mock_get_utilityrs r# r# r$ rV � s zCertonlyTest.setUpc C s | j �� d S r� �r� rb rs r# r# r$ �tearDown� s zCertonlyTest.tearDownc C s� t j�� }t�||�}t�d��p}t�d��F t�d�� t�||� W d � n1 sZ0 Y W d � n1 sx0 Y W d � n1 s�0 Y |� S )NrG rH rK ) r rh ri r rj r rD r �certonly)r rl rm r= r\ r# r# r$ rn � s fzCertonlyTest._callrJ rF rI c C s4 | � � j}| j|_t�� |_d|_| �d�� � d S )N)FNz!certonly --webroot -d example.com) r� � notification�_assert_no_pauser: r r r rn rg )r Z unused_reportrY r^ Zmock_notificationr# r# r$ � test_no_reinstall_text_pause� s z)CertonlyTest.test_no_reinstall_text_pausec O s d S r� r# )r rl �kwargsr# r# r$ r� � s z CertonlyTest._assert_no_pauserL �3certbot._internal.cert_manager.lineage_for_certname�3certbot._internal.cert_manager.domains_for_certnamez$certbot._internal.renewal.renew_certr c C s� ddg}||_ ||j_ | �d�� � |jtjd tjdd� | �d�� � d| �� j_ t � t j �� | �d�� � W d � n1 s�0 Y d S )N� example.comztest.orgzEcertonly --webroot -d example.com -d test.org --cert-name example.comTrp �Ecertonly --webroot -d example.com -d test.com --cert-name example.comF) r r, rn rg rq r rr r� �yesnor; r< r �ConfigurationError)r r] Zmock_handle_type�mock_renew_cert� mock_domainsr! r` �domainsr# r# r$ �*test_find_lineage_for_domains_and_certname� s � z7CertonlyTest.test_find_lineage_for_domains_and_certname� certbot.display.ops.choose_namesc C s4 d |_ | �d�� � dg|_ d |_ | �d�� � d S )Nr� Zsomenamez*certonly --webroot --cert-name example.com)r rn rg )r r] r! �mock_choose_namesZmock_domains_for_certnameZ unused_mock_report_next_stepsr# r# r$ �*test_find_lineage_for_domains_new_certname# s z7CertonlyTest.test_find_lineage_for_domains_new_certnamez-certbot._internal.main._csr_get_and_save_certc C sZ d|_ d|_ dt� �dfD ]:}| �d|� d��� � |jtjtjtjdd� |�� qdS ) zLcertonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.N)z/certz/chainz /fullchainz--csr z-d example.comz certonly z, --webroot --cert-name example.com --dry-runFrp )r �CSRrn rg rq r rr Z reset_mock)r r! Zmock_csr_get_certZunused_mock_get_certr` �flagr# r# r$ �$test_dryrun_next_steps_no_cert_saved8 s �z1CertonlyTest.test_dryrun_next_steps_no_cert_saved�?certbot._internal.plugins.selection.choose_configurator_pluginsc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nro z certonly --nginx -d example.com)r r) r rn rg �restartZassert_called_once�r �mock_sel� mock_get_certr^ �unused_report_new�unused_report_nextZmock_installerr# r# r$ �test_installer_runs_restartG s z(CertonlyTest.test_installer_runs_restartc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nro z)certonly --nginx -d example.com --dry-run)r r) r rn rg r� r9 r� r# r# r$ �$test_dryrun_installer_doesnt_restartV s z1CertonlyTest.test_dryrun_installer_doesnt_restartc C s2 t �� |_d|_| �dt�� � d�d �� � d S )Nro zcertonly --webroot -w � z -i standalone -d example.com)r r) r rn �tempfile� gettempdirrg )r r� r^ r� r� r# r# r$ �test_invalid_installere s �z#CertonlyTest.test_invalid_installerN)r@ rA rB rC rV r� rn r rD r� r� r� r� r� r� r� r� r# r# r# r$ r� � sX r� c @ sF e Zd ZdZe�d�dd� �Ze�d�dd� �Ze�d�dd � �Zd S ) �FindDomainsOrCertnameTestz;Tests for certbot._internal.main._find_domains_or_certname.r� c C s t jd d d�}d|_d S )N�r� r0 Z domainname�r r r �r r� r- r# r# r$ �test_display_opst s z*FindDomainsOrCertnameTest.test_display_opsc C sP t jd d d�}g |_t�tj�� t�|d � W d � n1 sB0 Y d S )Nr� ) r r r r; r< r r r Z_find_domains_or_certnamer� r# r# r$ �test_no_results{ s z)FindDomainsOrCertnameTest.test_no_resultsr� c C s t jd dd�}ddg|_d S )Nzone.comr� ztwo.comr� )r r� r- r# r# r$ �test_grab_domains� s z+FindDomainsOrCertnameTest.test_grab_domainsN) r@ rA rB rC r rD r� r� r� r# r# r# r$ r� q s r� c s e Zd ZdZ� fdd�Zddd�Ze�d�e�d�d d � ��Ze�d�e�d �e�d �e�d �dd� ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d�dd� �Z dd� Z e�d�e�d�e�� dd� ���Z� ZS ) � RevokeTestz(Tests for certbot._internal.main.revoke.c s t � �� t�t| j� tj�tj� | jd��| _ t � d�t � d�t � d�t � d�g}|d � � j| _|d � � |d � � | _|d � � | _|D ]}| �|j� q�dd lm} t �� | _|jd tjd d ddddtjd�d�| _ || jt | j �| _ | j d f| j_ d S )Nr z$certbot._internal.client.acme_clientz certbot._internal.client.Client�)certbot._internal.main._determine_accountz5certbot._internal.main.display_ops.success_revocationr rM rN rO )�Accountztest.certbot.orgi� rS rP � � )Ztzinfo)Z creation_hostZ creation_dt) rU rV �shutil�copy� CERT_PATH�tempdirr �path�abspath�join� tmp_cert_pathr rD rX �ClientV2�mock_acme_client�mock_determine_account�mock_success_revokera rb Zcertbot._internal.accountr� r) �regrZMeta�datetime�pytzZUTC�meta�JWK�accr )r rc rD r� rd r# r$ rV � s0 � ��zRevokeTest.setUpNc C sH |sd}|� | j��� }tj�� }t�||�}ddlm } |||� d S )Nzrevoke --cert-path={0} r )�revoke) rf r� rg r rh ri r rj rk r� )r rl rm r= r� r# r# r$ rn � s zRevokeTest._call�-certbot._internal.main._delete_if_appropriate�)certbot._internal.main.client.acme_clientc C s� d|_ |�� j}g }tj�� D ]l\}}d�| j|��� }| � |� |� t � t j |�� d�| j|�� ��� }| � |� |� t � t j |�� q d S )NFz#revoke --cert-path={0} --reason {1})r r� r� r ZREVOCATION_REASONS�itemsrf r� rg rn �appendr �callrr �upper)r r� �mock_delete_if_appropriate� mock_revokeZexpected�reason�coderl r# r# r$ �test_revoke_with_reason� s � z"RevokeTest.test_revoke_with_reason�'certbot._internal.storage.RenewableCert�3certbot._internal.storage.renewal_file_for_certnamez-certbot._internal.client.acme_from_config_keyc C sD | j |_tj| jdd�|_d�� }d|_| �|� | j�| j� d S )N�https://acme.example�� cert_path�server� revoke --cert-name=example.comF) r� r r r) r� rg rn r� rq �r Zmock_acme_from_configZ%unused_mock_renewal_file_for_certnameZ mock_certr� rl r# r# r$ �test_revoke_by_certname� s � z"RevokeTest.test_revoke_by_certnamec C s< t j| jdd�|_d�� }d|_| �|� | j�| j� dS )z9Revoking with --server should use the server from the CLIr� r� z=revoke --cert-name=example.com --server https://other.exampleFN�r r) r� r rg rn r� rq r� r# r# r$ �"test_revoke_by_certname_and_server� s � z-RevokeTest.test_revoke_by_certname_and_serverc C s< t j| jdd�|_d�� }d|_| �|� | j�| j� dS )zLRevoking with --cert-name where the lineage server is empty shouldn't crash Nr� r� Fr� r� r# r# r$ �$test_revoke_by_certname_empty_server� s z/RevokeTest.test_revoke_by_certname_empty_serverc C s | � � d|_| j�| j� d S r )rn r r� rq r� )r r� r# r# r$ �test_revocation_success� s z"RevokeTest.test_revocation_successc C sZ ddl m} |�� | j_t�|j�� | �� W d � n1 sB0 Y | j� � d S )Nr r ) �acmer Z ClientErrorr� r: r; r< rn r� r9 )r Z acme_errorsr# r# r$ �test_revocation_error s &z RevokeTest.test_revocation_error�%certbot._internal.cert_manager.deletec C s d|� j _d|_| �� d S r )r� r rn )r r� � mock_deleter� r# r# r$ �test_revocation_with_prompt s z&RevokeTest.test_revocation_with_prompt)N)r@ rA rB rC rV rn r rD r� r� r� r� r� r� r� r� r� r� r# r# rd r$ r� � s8 r� c s� e Zd ZdZ� fdd�Z� fdd�Zdd� Zdd � Ze� d �d d � �Z d d� Z dd� Z e� d�dd� �Z dd� Ze� d�dd� �Zdd� Ze� d�dd � �Z� ZS ) �ReconfigureTestz,Tests for certbot._internal.main.reconfigurec sT t � �� t�� | _| j�� | _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d�d �| _ d d � | j � � D �| _ d g| j d _ t j�| jd�| _t j�| jd�}t j�|�s�t�|� t j�|d�| _d}t| jd��}|�|� W d � n1 �s0 Y t| jd��"}tj|ddd�| _W d � n1 �sF0 Y d S )Nz7certbot._internal.storage.RenewableCert._check_symlinksz-certbot._internal.storage.RenewableCert.namesz2certbot._internal.plugins.selection.pick_installerz6certbot._internal.plugins.selection.pick_authenticatorz9certbot._internal.plugins.disco.PluginsRegistry.find_initrF rG z"certbot._internal.hooks.list_hooks)Zcheck_symlinks� cert_names�pick_installer� pick_auth� find_init�_get_and_save_certZ_init_le_clientZ list_hooksc S s i | ]\}}||� � �qS r# �rX ��.0�k�vr# r# r$ � <dictcomp># r4 z)ReconfigureTest.setUp.<locals>.<dictcomp>r� r� r= �renewalzexample.com.confa� version = 1.32.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-v02.api.letsencrypt.org/directory authenticator = nginx installer = nginx key_type = rsa �w�r�utf-8��encodingZdefault_encoding)rU rV r� r� r� rX r� r rD �patchersr� �mocksr r r� r� r� � config_dir�existsr �makedirs� renewal_file�open�write� configobj� ConfigObj�original_config)r Zrenewal_configs_dirr �frd r# r$ rV s4 � *�zReconfigureTest.setUpc s0 t � �� | j�� | j�� D ] }|�� q d S r� )rU r� r� rb r� �values�r rD rd r# r$ r� B s zReconfigureTest.tearDownc C sz |d| j g }tj�� }t�||�}ddlm} |||� t| j d�� }t j |ddd�}W d � n1 sl0 Y |S )N� --config-dirr )� reconfigurer� r� r� ) r� r rh ri r rj rk r r r r r )r Z passed_argsZ full_argsrm r= r r Z updated_confr# r# r$ rn H s .zReconfigureTest._callc C s> t �tj�� | �d�� � W d � n1 s00 Y d S )Nz!--cert-name cert1 -d one.cert.com)r; r< r r� rn rg rs r# r# r$ �test_domains_setU s z ReconfigureTest.test_domains_set�,certbot._internal.cert_manager.get_certnamesc C sL t �� }d|_|| jd _|| jd _|| jd _dg|_| �d�� � d S )N�nginxr� r� r� r� �--nginx�r r �namer� r rn rg )r �mock_cert_manager� named_mockr# r# r$ �test_asks_for_certnameY s z&ReconfigureTest.test_asks_for_certnamec C sD t �� }d|_|| jd _|| jd _|| jd _| �d�� �}d S )N�apacher� r� r� � --cert-name example.com --apacher �r r � new_configr# r# r$ �test_update_configuratore s z(ReconfigureTest.test_update_configuratorc C st t �� }d|_|| jd _|| jd _|| jd _| �d�� �}d|d d< d|d d < |d d = | jd |d < d S ) zI Check that we don't accidentally modify anything that we didn't mean to r r� r� r� r r � renewalparams� authenticator� installerr� �versionN)r r r r� r rn rg r r r# r# r$ �test_only_intended_changesp s z*ReconfigureTest.test_only_intended_changesz&certbot._internal.hooks.validate_hooksc C s | � d�� dg � dS )z6 Check that we use the staging server for the dry run �"--cert-name example.com --pre-hook�echo preN�rn rg )r �unused_validate_hooksr# r# r$ �test_staging_used� s z!ReconfigureTest.test_staging_usedc C s6 | j d d }| j d d }z| �d�� � W n& tjyT } z W Y d}~n d}~0 0 t| jd�� }tj|ddd�}W d � n1 s�0 Y | �d |� ��� �}z| �d �� � W n& tjy� } z W Y d}~n d}~0 0 t| jd�� }tj|ddd�}W d � n1 �s0 Y | �d |� ��� �}dS ) zx Check that we error when attempting to change the account id or server, but not when it's the same r r r� z.--cert-name example.com --account newaccountidNr� r� r� z"--cert-name example.com --account z&--cert-name example.com --server x.comz!--cert-name example.com --server ) r rn rg r r� r r r r )r Zorig_account_idZ orig_server�errr r r# r# r$ �!test_new_account_or_server_errors� s" .0z1ReconfigureTest.test_new_account_or_server_errorsc C s@ | � d�� dg �}| � d�� dg �}| � d�� dg �}d S )Nr r z echo pre2z%--cert-name example.com --deploy-hookz echo deployr! )r r" r r# r# r$ �test_update_hooks� s z!ReconfigureTest.test_update_hooksc C sv t j| jd _z| �d�� � W n t jy4 Y n0 t| jd�� }tj |ddd�}W d � n1 sh0 Y d S )Nr� r r� r� r� ) r r r� r: rn rg r r r r )r r r r# r# r$ �test_dry_run_fails� s .z"ReconfigureTest.test_dry_run_fails�*certbot._internal.main.display_util.notifyc C s� d}t | jd��}|�|� W d � n1 s00 Y t | jd��"}tj|ddd�| _W d � n1 sn0 Y t�� }d|_|| j d _ || j d _ | � d � � �}|� d � d S ) Na version = 2.0.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-staging-v02.api.letsencrypt.org/directory authenticator = webroot installer = nginx key_type = ecdsa webroot_path = /var/www/html, [[webroot_map]] example.com = /var/www/html r� r� r� r� r r� r� z --cert-name example.com --nginxzT Successfully updated configuration. Changes will apply when the certificate renews.)r r r r r r r r r r� r rn rg �assert_called_with)r � mock_notifyr r r r r# r# r$ �test_report_results� s (�& �z#ReconfigureTest.test_report_results)r@ rA rB rC rV r� rn r r rD r r r r# r% r& r' r+ r� r# r# rd r$ r� s" - % r� c @ sR e Zd ZdZdd� Zdd� Ze�� dd� �Ze�� dd � �Z e � d �e � d �e � d �e � d �e � d�e � d�e�� dd� �������Z e � d �e � d �e � d�e � d �e � d�e�� dd� ������Z e � d �e � d �e � d�e � d�e � d �e�� dd� ������Ze � d �e � d �e � d�e � d�e � d �e�� dd� ������ZdS )�DeleteIfAppropriateTestz8Tests for certbot._internal.main._delete_if_appropriate c C s ddl m} ||� d S )Nr )�_delete_if_appropriate)rk r- )r r- r- r# r# r$ rn � s z DeleteIfAppropriateTest._callc C sB t �d�� }| �| j� W d � n1 s,0 Y |�� d S )Nr� )r rD rn r= r9 )r r� r# r# r$ �_test_delete_opt_out_common� s *z3DeleteIfAppropriateTest._test_delete_opt_out_commonc C s d| j _| �� d S r )r= �delete_after_revoker. )r Zunused_mock_get_utilityr# r# r$ �test_delete_flag_opt_out s z0DeleteIfAppropriateTest.test_delete_flag_opt_outc C s |� }d|j _| �� d S r )r� r r. )r r� � util_mockr# r# r$ �test_delete_prompt_opt_out s z2DeleteIfAppropriateTest.test_delete_prompt_opt_outz%certbot._internal.main.logger.warningr� r� z7certbot._internal.cert_manager.match_and_check_overlapsz+certbot._internal.storage.full_archive_pathz3certbot._internal.cert_manager.cert_path_to_lineagec C s8 | j }d|_d|_d|_t�� |_| �|� |�� d S )N�/some/reasonable/path� r� ) r= r� r0 r r ZOverlappingMatchFoundr: rn r9 ) r r� �mock_cert_path_to_lineage� mock_archive� mock_match_and_check_overlapsr� � mock_renewal_file_for_certnameZ mock_warningr= r# r# r$ � test_overlapping_archive_dirs s z5DeleteIfAppropriateTest.test_overlapping_archive_dirsc C s, | j }d|_d|_d|_d|_| �|� d S )Nr3 r4 r� F)r= r� r0 r rn )r r� r5 r� r6 Z mock_overlapping_archive_dirsr8 r= r# r# r$ �test_cert_path_only$ s z+DeleteIfAppropriateTest.test_cert_path_onlyc C s8 | j }d|_d|_d|_d|_d|_d|_| �|� d S �NTr3 r4 r� )r= Znoninteractive_moder� r0 r rn �r r� r� r5 Zmock_full_archive_dirr7 r8 r= r# r# r$ � test_noninteractive_deletion6 s z4DeleteIfAppropriateTest.test_noninteractive_deletionc C s8 | j }d|_d|_d|_d|_d|_d|_| �|� d S r; )r= r/ r� r0 r rn r< r# r# r$ �test_opt_in_deletionJ s z,DeleteIfAppropriateTest.test_opt_in_deletionN)r@ rA rB rC rn r. r� r� r0 r2 r rD r9 r: r= r> r# r# r# r$ r, � sH r, c s� e Zd ZdZ� fdd�Zdd� Ze�d�e�d�dd � ��Zd d � Z d d � Z e�d�dd� �Z e�d�dd� �Z e�d�e�d�dd� ��Z dd� Zdd� Zdd� Zd d � Z� ZS ) �DetermineAccountTestz4Tests for certbot._internal.main._determine_account.c s^ t � �� d | j_d | j_d| j_tjdd�tjdd�g| _t� � | _ t�� | _ d| j j _ d S )NF�x)�id�y�hi)rU rV r= r �emailZ register_unsafely_without_emailr r) �accsZAccountMemoryStorage�account_storage� mock_client� directoryZ new_authzrs rd r# r$ rV b s zDetermineAccountTest.setUpc C s� ddl m} t�d��X}t�� �0 | j|_|| j�W d � W d � S 1 sV0 Y W d � n1 st0 Y d S )Nr )�_determine_accountz1certbot._internal.main.account.AccountFileStorage) rk rI r rD r� r� rF r r= )r rI � mock_storager# r# r$ rn n s �zDetermineAccountTest._callz!certbot._internal.client.registerz.certbot._internal.client.display_ops.get_emailc C sD d|_ ||_z | �� W n& tjy> } z W Y d }~n d }~0 0 d S )N� foo@bar.baz)r r: rn r r )r �err_msg� exception�mock_get_email� mock_registerr$ r# r# r$ �_register_error_commonv s z+DetermineAccountTest._register_error_commonc C s* | j �| jd | j� | jd j| j_d S �NrM )rF �saverE rG rA r= r rs r# r# r$ �test_args_account_set� s z*DetermineAccountTest.test_args_account_setc C s | j �| jd | j� d S )Nr )rF rR rE rG rs r# r# r$ �test_single_account� s z(DetermineAccountTest.test_single_accountz3certbot._internal.client.display_ops.choose_accountc C s, | j D ]}| j�|| j� q| j d |_d S rQ )rE rF rR rG r )r �mock_choose_accountsr� r# r# r$ �test_multiple_accounts� s z+DetermineAccountTest.test_multiple_accountsc C sZ | j D ]}| j�|| j� qd |_z | �� W n& tjyT } z W Y d }~n d }~0 0 d S r� )rE rF rR rG r rn r r )r rU r� r$ r# r# r$ � test_multiple_accounts_canceled� s z4DetermineAccountTest.test_multiple_accounts_canceledr( c C sl d|_ t�d��&}| jd tjjf|j_ W d � n1 s<0 Y |jj| j| j tj d� |�d� d S )NrK � certbot._internal.main.clientr )Ztos_cbzAccount registered.) r r rD rE �sentinelr� �registerrq r= rF rr )r r* rN �clientr# r# r$ �test_no_accounts_no_email� s � �z.DetermineAccountTest.test_no_accounts_no_emailc C sT d| j _t�d��.}| jd tjjf|j_| � � W d � n1 sF0 Y d S )Nz other emailrX rM ) r= rD r rD rE rY r� rZ r rn )r r[ r# r# r$ �test_no_accounts_email� s &z+DetermineAccountTest.test_no_accounts_emailc C s d}| � |t�|�� d S )Nz$Some error message raised by Certbot)rP r r )r rL r# r# r$ �test_register_error_certbot� s z0DetermineAccountTest.test_register_error_certbotc C s d}t ddd�}| �||� d S )NzAError returned by the ACME server: must agree to terms of servicez$urn:ietf:params:acme:error:malformedz must agree to terms of service)�typZdetail�� acme_errorrP �r rL rM r# r# r$ �(test_register_error_acme_type_and_detail� s �z=DetermineAccountTest.test_register_error_acme_type_and_detailc C s d}t dd�}| �||� d S )NzKError returned by the ACME server: The server experienced an internal errorz)urn:ietf:params:acme:error:serverInternal)r_ r` rb r# r# r$ �"test_register_error_acme_type_only� s z7DetermineAccountTest.test_register_error_acme_type_only)r@ rA rB rC rV rn r rD rP rS rT rV rW r\ r] r^ rc rd r� r# r# rd r$ r? _ s& r? c s� e Zd ZdZ� fdd�Z� fdd�Zd�dd �Zd�d d �Zd d � Zdd� Z dd� Z e � d�dd� �Z e � d�e � d�e � d�e � d�e � d�e � d�dd� ������Ze � d �e � d �d d � ��Ze � d �e � d �e � d �d!d"� ���Ze � d�e � d �e � d �e � d �d#d$� ����Ze � d �e � d �d%d&� ��Ze � d �e � d �e � d'�e � d �d(d)� ����Ze � d�e � d�e � d�e � d*�d+d,� ����Ze � d�d-d.� �Ze � d/�d0d1� �Ze � d2�d3d4� �Ze � d5�e � d6�e � d�d7d8� ���Ze � d5�e � d6�d9d:� ��Ze � d5�e � d6�d;d<� ��Ze � d5�e � d6�d=d>� ��Ze � d5�e � d6�d?d@� ��Z dAdB� Z dCdD� Z dEdF� Z dGdH� Z dIdJ� Z!dKdL� Z"dMdN� Z#d�dOdP�Z$e � d�dQdR� �Z%e � d�e � dS�e � d�e � dT�dUdV� ����Z&e � d�dWdX� �Z'dddYdde(j(�)� ddfdZd[�Z*e � d�e � dS�e � dT�d\d]� ���Z+e � d^�e � d_�e � dT�d`da� ���Z,dbdc� Z-ddde� Z.dfdg� Z/e � dh�didj� �Z0e � dh�dkdl� �Z1e � dm�dndo� �Z2e � dm�dpdq� �Z3e � dr�dsdt� �Z4e � d�dudv� �Z5dwdx� Z6dydz� Z7d{d|� Z8d}d~� Z9dd�� Z:d�d�� Z;d�d�d��Z<d�d�� Z=d�d�� Z>d�d�� Z?d�d�� Z@d�d�� ZAe � d��d�d�� �ZBd�d�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHeI�J� e � d��e � d��e � d�d�d�� ����ZKd�d�d��ZLe � d��e � dS�e � d�d�d�� ���ZMe � d��d�d�� �ZNe � d��e � d��d�d�� ��ZOd�d�� ZPe � d��e � d�d�d�� ��ZQe � d�d�d�� �ZRe � d��e � d��d�d�� ��ZSe � d��e � d��e � d��e � d�d�d�� ����ZT� ZUS )��MainTestz Tests for different commands.c sL t � �� t�| jj� d| jjd| jjd| jjdg| _t � d�� � | _ d S )Nr � --work-dir� --logs-dir�--textz time.sleep) rU rV r �mkdirr= �logs_dirr� �work_dir� standard_argsr rD rX � mock_sleeprs rd r# r$ rV � s �zMainTest.setUpc s t t� t� �� d S r� )� reload_moduler rU r� rs rd r# r$ r� � s zMainTest.tearDownNFc s� |r�t jj� � fdd�}t�d��l}||_t�d��<}| �||�\}}}||||fW d � W d � S 1 sv0 Y W d � n1 s�0 Y nHt�d��.}| �||�\}}}||||fW d � S 1 s�0 Y dS )zaRun the cli with output streams, actual client and optionally os.path.isfile() mocked outc s* | � d�s | � d�s | � d�r"dS � | �S )zMock os.path.isfile()r> �chain�privkeyT)�endswith)�fnrl r� �Z orig_openr# r$ � mock_isfile� s ��z#MainTest._call.<locals>.mock_isfilez certbot.compat.os.path.isfilerX N)r r� �isfiler rD r: �_call_no_clientmock) r rl �stdout� mockisfilert Zmock_ifr[ r" �stderrr# rs r$ rn � s X zMainTest._callc C s� | j | }|r|nt�� }tjd|d��v t�d��L}t�d��" t�|dd� �}W d � n1 sh0 Y W d � n1 s�0 Y W d � n1 s�0 Y |||fS )z-Run the client with output streams mocked out�!certbot._internal.main.sys.stdout��new�!certbot._internal.main.sys.stderr�certbot.util.atexitN)rl �io�StringIOr rD r )r rl rw Z toy_stdoutry r" r# r# r$ rv � s lz MainTest._call_no_clientmockc C s8 t �d��}| �g � W d � n1 s*0 Y d S )Nzcertbot._internal.main.run)r rD rn )r �mock_runr# r# r$ � test_no_flags s zMainTest.test_no_flagsc C s� t �� }t �� }tjd|d��� tjd|d��\ z8zt�dg� W n tyT Y n0 W |�� pf|�� }n|�� px|�� }0 W d � n1 s�0 Y W d � n1 s�0 Y d S )Nrz r{ r} z --version)r r� r rD r � SystemExit�getvalue)r Ztoy_outZtoy_err�outputr# r# r$ � test_version_string_program_name s �z)MainTest.test_version_string_program_namec C sz d}zFt �d��( t�| j|dd� � W d � n1 s>0 Y W n* tjyt } z|}W Y d}~n d}~0 0 dS )zQEnsure that a particular error raises a missing cli flag error containing messageNr} )r rD r rl r ZMissingCommandlineFlag)r rl �message�excZexc_r# r# r$ �_cli_missing_flag s :zMainTest._cli_missing_flagz*certbot._internal.log.post_arg_parse_setupc C s2 ddg}| � |d� |�g d�� | � |d� d S )Nz-nr� zspecify a plugin)� --standalone�-dzeg.iszregister before running)r� �extend)r �_rl r# r# r$ �test_noninteractive s z MainTest.test_noninteractiverK rI r� zBcertbot._internal.main.client.Client.obtain_and_enroll_certificaterF c C s� g d�| j }t�� d f|_t�� |_t�d��R}|j} | �|� t�� } | j d d } dd l } | � � } d| � � v rtW d � n1 s�0 Y t�d��J}|j} d} |d| g7 }| �|� | j tj tj d | tjd � W d � n1 s�0 Y d S ) N)r� r� �-mz none@none.comr� r� z --agree-tosr� rM � user_agentr ZlinuxZ bandersnatchz --user-agentT)r Z verify_sslr� Zalg)rl r r) r rD Z ClientNetworkrv r Zget_os_info_ua� call_args�platform�lowerrq rr �joseZRS256)r ZgscZ_obtZdetr� �__�___rl Z acme_clientZacme_netZos_verZuar� Zplatr# r# r$ �test_user_agent% s, � �zMainTest.test_user_agent�5certbot._internal.main.plug_sel.record_chosen_plugins�.certbot._internal.main.plug_sel.pick_installerc C s | j g d�dd� d S )N) �installz --domains�foo.bar� --cert-pathr> � --key-pathrp � --chain-pathro T�rx )rn )r Zmock_pick_installer�_recr# r# r$ �test_installer_selectionF s �z!MainTest.test_installer_selectionr� c C s~ t jt�d�t�d�t�d�t�d�d�}t �d��6}||_| jg d�dd� |jd d }W d � n1 sp0 Y d S ) Nr> ro rp �r� � chain_path�fullchain_path�key_pathr� )r� � --cert-name�whateverTr� r )r r) r� � temp_joinrD r rn r� )r �_instr� � mock_installr! � mock_getlin� call_configr# r# r$ �test_installer_certnameM s � z MainTest.test_installer_certnamec C s� t jt�d�t�d�t�d�t�d�d�}t �d��v}||_| jdddd t�d �gd d � |jd d }|�� | jddddt�d�gd d � |jd d }W d � n1 s�0 Y d S )Nr> ro rp r� r� r� r� r� r� Zoverriding_privkeyTr� r r� Zoverriding_cert) r r) r� r� rD r rn r� �reset)r r� r� r� r� r! r� r� r# r# r$ � test_installer_param_override^ s* � �� ��z&MainTest.test_installer_param_overridec C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� Znotfoundr� Zinvalid�r; r< r r� rn )r r� r� r# r# r$ �test_installer_param_errorz s z#MainTest.test_installer_param_errorr c C sn t jt�d�t�d�t�d�t�d�d�}t �d��&}||_| jdgdd� W d � n1 s`0 Y d S ) Nr> ro rp r� r� r� Tr� )r r) r� r� rD r rn )r � mock_instZ mock_getcertr� r� r! r� r# r# r$ �test_installer_select_cert� s � .z#MainTest.test_installer_select_certzcertbot.util.exe_existsc C s d|_ tj�� }g d�}dddt�d�dt�d�dd d d d g }d |v rX| �|�\}}}}| �dgd� t� d��b}t� d��8} t� � | _ | �g d�� |j d \} } } W d � n1 s�0 Y W d � n1 s�0 Y t� d�� } | �ddg� W d � n1 �s0 Y d S )NT)z--apachez--authenticatorr r� r r� Zblahr� z--nginx-server-rootz/nonexistent/thingr� r� �--debugr r� z(With the standalone plugin, you probablyrG rF )r� z--manualr� r� r � certbot._internal.main.certonly�auth) r r rh ri r� r� rn r� r rD r) r� )r Zmock_exe_existsr� r� r� Z real_pluginsrl r" r\ Zmock_gscZ unused_configr� Zunused_installer� mock_certonlyr# r# r$ �test_configurator_selection� s( � < z$MainTest.test_configurator_selectionc C sF | � dg�\}}}}| � g d��\}}}}|j�tjdtjtj� d S )N�rollback)r� z --checkpointsZ123�{ )rn r� rq r rr )r r� r[ r# r# r$ � test_rollback� s �zMainTest.test_rollbackz+certbot._internal.cert_manager.certificatesc C s | � dg� d S )NZ certificates�rv �r r r# r# r$ �test_certificates� s zMainTest.test_certificatesr� c C s | � dg� d S )N�deleter� r� r# r# r$ � test_delete� s zMainTest.test_deletez$certbot._internal.main.plugins_discozFcertbot._internal.main.cli.HelpfulArgumentParser.determine_help_topicsc sF g d�� t j� fdd�tt� ��D �� D ]}| �dgt|� � q(d S )N)�--init� --preparez--authenticatorsz --installersc 3 s | ]}t �� |�V qd S r� )� itertools� combinations)r� r� ��flagsr# r$ � <genexpr>� s �z(MainTest.test_plugins.<locals>.<genexpr>rm )r� ro �range�lenrn �list)r r� �_det� mock_discorl r# r� r$ � test_plugins� s ��zMainTest.test_pluginsc C s� g }|j �� }t�� }tj|d��& | �dg|�\}}}}W d � n1 sN0 Y |j�� |�� j �|� |�� � � }d S )N�rw rm � rh ri r r� r� � patch_display_util_with_stdoutrn �visiblerq �ifaces�r r� r� r� rm rw r� �filteredr# r# r$ �test_plugins_no_args� s 4 z MainTest.test_plugins_no_argsc C s� g }|j �� }dd� }t�� }t�d��X}tj|d��, ||_| � dg|�\}}}}W d � n1 sh0 Y W d � n1 s�0 Y |j � � |� � j � |� |� � � � } d S )Nc S s | || }}}t �� �dS )zRaises error.Error.N)r r )rH �mode�strictr� r# r# r$ � throw_error� s z?MainTest.test_plugins_no_args_unprivileged.<locals>.throw_errorz certbot.util.set_up_core_dirr� rm ) rh ri r r� r rD r� r� r: rn r� rq r� ) r r� r� r� rm r� rw Zmock_set_up_core_dirr� r� r# r# r$ �!test_plugins_no_args_unprivileged� s R z*MainTest.test_plugins_no_args_unprivilegedc C s� g }|j �� }t�� }tj|d��( | �ddg|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }d S )Nr� rm r� r� r� r# r# r$ �test_plugins_init� s 6 zMainTest.test_plugins_initc C s� g }|j �� }t�� }tj|d��( | �g d�|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }|j �� |j �� |� � }d S )Nr� )rm r� r� ) rh ri r r� r� r� rn r� rq r� �prepare� available) r r� r� r� rm rw r� r� r� r# r# r$ �test_plugins_prepare s 6 z MainTest.test_plugins_preparec C sh d}d}d}d}t �d��,}| �dd|ddd dd dg � W d � n1 sL0 Y |jd \}}d S ) Nr> �keyro � fullchainr� r� r� r� r� z--fullchain-pathr )r rD rn r� )r r> r� ro r� r� r= �unused_pluginsr# r# r$ �test_certonly_abspath s �$z MainTest.test_certonly_abspathc C sH z | � g d�� t�d� W n& tjyB } z W Y d }~n d }~0 0 d S )N)�-aZbad_authr� z!Exception should have been raised)rn r; �failr �PluginSelectionError�r �er# r# r$ �test_certonly_bad_args/ s z MainTest.test_certonly_bad_argsc C s� t �tj�� | �ddg� W d � n1 s00 Y t �tj�� | �ddg� W d � n1 sj0 Y t �tj�� | �ddg� W d � n1 s�0 Y t �tj�� | �ddg� W d � n1 s�0 Y d S )Nr� Z@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa� aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.z 204.11.231.35z%2001:db8:ac69:3ff:b1cb:c8c6:5a84:a31br� rs r# r# r$ � test_check_config_sanity_domain6 s ,,,z(MainTest.test_check_config_sanity_domainc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz*certonly --csr {0} --allow-subset-of-names�r; r< r r rn rf r� rg rs r# r# r$ �test_csr_with_besteffortD s z!MainTest.test_csr_with_besteffortc C sJ z| � dtg� W n( tjy: } zW Y d }~d S d }~0 0 t�d� d S )Nz--csrz2Expected supplying --csr to fail with default verb)rn r� r r r; r� r� r# r# r$ �test_run_with_csrH s zMainTest.test_run_with_csrc C sJ t �tj��* | �d�t�d���� � W d � n1 s<0 Y d S )Nzcertonly --csr {0}zcsr-nonames_512.pem) r; r< r r rn rf r� � vector_pathrg rs r# r# r$ �test_csr_with_no_domainsQ s �z!MainTest.test_csr_with_no_domainsc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz!certonly -d example.org --csr {0}r� rs r# r# r$ �"test_csr_with_inconsistent_domainsV s z+MainTest.test_csr_with_inconsistent_domainsc C s� t �d��h}d|_t �d��8}||_|d u r0g }|d�� 7 }| �|� W d � n1 sZ0 Y W d � n1 sx0 Y d S )N�=certbot._internal.main._find_lineage_for_domains_and_certname)ZnewcertNrG z!-d foo.bar -a standalone certonly)r rD r rg rn )r rG rl � mock_renewalr\ r# r# r$ � _certonly_new_request_commonZ s z%MainTest._certonly_new_request_commonc C s" t �� }d |j_| �|dg� d S �N� --dry-run)r r) � obtain_and_enroll_certificater r� )r � mock_reportrG r# r# r$ �)test_certonly_dry_run_new_request_successe s z2MainTest.test_certonly_dry_run_new_request_successz+certbot._internal.main.util.atexit_registerz certbot.crypto_util.notAfterc C sr t j�t j�| jjd��}t j�t j�| jjd��}d}||� j_tj ||||d�}t� � } || j _| � | � d S )Nz live/foo.barz live/baz.quxz 1970-01-01)r> r� r� r� ) r r� �normpathr� r= r� �dater r r) r� r� ) r Z mock_notAfterr_ rO r� r� r� r� r! rG r# r# r$ �!test_certonly_new_request_successn s � z*MainTest.test_certonly_new_request_successc C sJ t �� }d|j_t�tj�� | �|� W d � n1 s<0 Y d S r ) r r) r� r r; r< r r r� )r r_ rG r# r# r$ �!test_certonly_new_request_failure� s (z*MainTest.test_certonly_new_request_failureTc s t �d�} tj�tj�| jjd��} tj | | | | d�} || j _ d| j _ dg| j _ d| _d| _| | _t� � }tj dd �}t� � }t�� � |d |d f|j_ � fd d �}�z&�z�t�d���X}| d f|_ t�d��� }||_ t�d���}|s�||� j_t�d���}||j_ t�d��� |�s g d�}|�r,||7 }z0| �|� �\}� }}|�rZtd|� t|��W n" |�sztdt� � ��Y n0 W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s0 Y |�rp| �r\| �s\|j� tj gtj�tj�| jjd��� n|j� tj gd � n W n | � � � Y n0 W |�r t tj�| jj!d���}W d � n1 �s�0 Y n@|�r t tj�| jj!d���}W d � n1 �s 0 Y 0 | |� fS )Nr zlive/foo.bar/fullchain.pem)r> r� r� r� F� isnot.orgr/ Z secp256r1Zpem_key)Zpemro �csrc s � � | � dS )zWrite message to stdout.N)r )r� rl r� r� r# r$ � write_msg� s z0MainTest._test_renewal_common.<locals>.write_msgz5certbot._internal.cert_manager.find_duplicative_certsrG z)certbot._internal.display.obj.get_displayz*certbot._internal.main.renewal.crypto_utilrK )r� r� r� r r� ZReturnedzUnexpected renewal error: z live/sample-renewal/privkey.pem�letsencrypt.log)"r� r� r r� r� r� r= r� r r) Zshould_autorenewr Zhas_pending_deploymentr, r8 Zelliptic_curve� reuse_keyr r� Zobtain_certificaterD r� r: ZnotAfterrn �print�AssertionError� traceback� format_excrq rr � _dump_logr rj )r �due_for_renewal� extra_args�log_outrl � should_renew�error_expected� quiet_mode� expiry_dater� �new_keyr� r� r! Z mock_certrZmock_keyrG r� Zmock_fdcr\ Z mock_displayZmock_crypto_utilr" r� �lfr# r� r$ �_test_renewal_common� s� �� � ��� �� "�"z MainTest._test_renewal_commonc C s& | � dg �\}}}|j�|�� � d S rv )r Zupdate_all_links_torq Zlatest_common_version)r r� rO r� Zlineager# r# r$ �test_certonly_renewal� s �z MainTest.test_certonly_renewalr( zEcertbot._internal.log.logging.handlers.RotatingFileHandler.doRolloverc C sV | j dddgdd�\}}}|�d� | j dg d�dd� | j dg d �dd �\}}}d S ) NFr� �--keepzsimulating renewal)r �The dry run was successful.)z--renew-by-default�-tvvr� zAuto-renewal forced)r r� r )r )r �assert_any_call)r r� r� r* Zmock_displayerr# r# r$ � test_certonly_renewal_triggers� s � � � z'MainTest.test_certonly_renewal_triggersc C s^ t d� tj�| jjd�}tj�|�rZt|�� }t |�� � W d � n1 sP0 Y d S )NzLogs:r� ) r r r� r� r= rj r� r �read)r Zlog_pathr r# r# r$ r � s zMainTest._dump_logc C s. t �| jjd� g d�}| jdg |dd� d S )N�sample-renewal.conf��renewr� r T�rl r �r� � make_lineager= r� r �r rl r# r# r$ �test_renew_verb� s zMainTest.test_renew_verbc C s4 t j| jjddd� g d�}| jdg |ddd� d S )Nr F�Zec)r r� � --reuse-keyT�rl r r� r r r# r# r$ �test_reuse_key s zMainTest.test_reuse_keyz6certbot._internal.storage.RenewableCert.save_successorc C s4 t j| jjddd� ddg}| jdg |ddd� d S )Nr Fr r r Tr r �r Zunused_save_successorrl r# r# r$ �test_reuse_key_no_dry_run s z"MainTest.test_reuse_key_no_dry_runc C s2 t �| jjd� g d�}| jdg |dddd� d S )Nr )r r z --new-keyT)rl r r� r r r" r# r# r$ � test_new_key s �zMainTest.test_new_keyz sys.stdinc C sF d|j _t�| jjd� g d�}| jdg |dd� | jjd d }d S )NFr r Tr r ) �isattyr r� r r= r� r rm r� )r �stdinrl Zsleep_call_argr# r# r$ �!test_noninteractive_renewal_delay s z*MainTest.test_noninteractive_renewal_delayc C s6 d|j _t�| jjd� g d�}| jdg |dd� d S )NTr r r )r% r r� r r= r� r )r r& rl r# r# r$ �!test_interactive_no_renewal_delay s z*MainTest.test_interactive_no_renewal_delayr& c C sL d|_ t�| jjd� tj�� tjdd� }| jdd ddg|d�\}}}d S )NFr �Z )Zdaysr )r r rl r ) r r� r r= r� r� �nowZ timedeltar )r r Zexpiryr� rw r# r# r$ � test_renew_skips_recent_certs& s � z&MainTest.test_renew_skips_recent_certsc C sf t �| jjd� ddg}| jdg |dd�\}}}|�� }g d�}| jdg |ddd�\}}}|�� }d S )Nr r r� Tr )r r� z-q)rl r r )r� r r= r� r r� )r r� rl rw �outr# r# r$ �test_quiet_renew0 s � zMainTest.test_quiet_renewc C s0 t �| jjd� g d�}| jdg |ddd� d S )Nr )r r� �--post-hook=no-such-commandTF�rl r r r r r# r# r$ �test_renew_hook_validation> s �z#MainTest.test_renew_hook_validationc C sZ t �| jjd� g d�}t�d��$ | jdg |ddd� W d � n1 sL0 Y d S )Nr )r r� r. z--disable-hook-validationz!certbot._internal.hooks.post_hookTFr/ )r� r r= r� r rD r r r# r# r$ � test_renew_no_hook_validationD s �z&MainTest.test_renew_no_hook_validationc C s| t j�| jjd�}t j�|�s(t�|� tt j�|d�d�� W d � n1 sR0 Y g d�}| j dg |ddd� d S )Nr� z empty.confr� r FTr/ ) r r� r� r= r� r� r r r r )r Zrdrl r# r# r$ � test_renew_verb_empty_configL s z%MainTest.test_renew_verb_empty_configc C s* t �| jjd� | jdg dg d�d� d S )Nr T�r r� r� zsample-renewal)r rl r rs r# r# r$ �test_renew_with_certnameU s �z!MainTest.test_renew_with_certnamec C s | j dg dg d�dd� d S )NTFr3 )r rl r )r rs r# r# r$ � test_renew_with_bad_certnameZ s �z%MainTest.test_renew_with_bad_certnamec C s^ t j�| jjd�}t�|� tt j�|d�d��}|�d� W d � n1 sP0 Y d S )Nr� z test.confr� zMy contents don't matter) r r� r� r= r� r r r r )r Zrenewer_configs_dirr r# r# r$ �_make_dummy_renewal_config_ s z#MainTest._make_dummy_renewal_configc K s� | � � t�d���}t�� }d|_|d ur4d|i|_|d urD||j_||_t�d��2}|�ddg� | j d dd i|�� W d � n1 s�0 Y |d ur�|r�n W d � n1 s�0 Y d S ) Nr� zsomepath/fullchain.pemr �!certbot._internal.main.renew_certrl r Tr F)TN) r6 r rD r) r� � configurationr, r � setdefaultr )r r r, �assert_oc_calledr� �mock_rcr! r� r# r# r$ �_test_renew_commone s 2zMainTest._test_renew_commonc C s | j ddd� d S )NFT�r: r �r< rs r# r# r$ �test_renew_no_renewalparamsz s z$MainTest.test_renew_no_renewalparamsc C s | j i ddd� d S )NFT)r r: r r> rs r# r# r$ �test_renew_no_authenticator} s �z$MainTest.test_renew_no_authenticatorc C s ddd�}| j |ddd� d S )N�webrootz over 9000)r Z rsa_key_sizeTF)r r r: r> �r r r# r# r$ �test_renew_with_bad_int� s ��z MainTest.test_renew_with_bad_intc C s ddd�}| j |dd� d S )NrA �None)r Z http01_portT�r r: r> rB r# r# r$ � test_renew_with_nonetype_http01� s ��z(MainTest.test_renew_with_nonetype_http01c C s$ ddi}dg}| j |d|dd� d S )Nr rA u uniçodé.comTF)r r r, r: r> )r r r, r# r# r$ �test_renew_with_bad_domain� s �z#MainTest.test_renew_with_bad_domainr� c C s2 t �� t �� f|_ddi}| j|dd�� d� d S )Nr rA Tzrenew --configurator apache�r r: rl )r r) r r< rg )r r� r r# r# r$ � test_renew_with_configurator� s �z%MainTest.test_renew_with_configuratorc C s dddd�}| j |dd� d S )NrA rD Z42)r Z webroot_pathZwebroot_imaginary_flagTrE r> rB r# r# r$ �$test_renew_plugin_config_restoration� s ��z-MainTest.test_renew_plugin_config_restorationc C s0 ddi}| j |dddt�dt�� i�gd� d S )Nr rA Tr z --webroot-mapr� rH )r< �json�dumpsr� r� rB r# r# r$ �test_renew_with_webroot_map� s �z$MainTest.test_renew_with_webroot_mapc C sB t �d��$}t|_| jddd� W d � n1 s40 Y d S )Nz+certbot._internal.main.renewal.reconstituteFTr= )r rD � Exceptionr: r< )r Zmock_reconstituter# r# r$ � test_renew_reconstitute_error� s z&MainTest.test_renew_reconstitute_errorc C s� | � � t�d��x}t�� }d|_||_dddii|_t�d��,}t|_| j dd ddgd d � W d � n1 sr0 Y W d � n1 s�0 Y d S ) Nr� zsomewhere/fullchain.pemr r rA r7 Tr F)r rl r ) r6 r rD r) r� r r8 rN r: r )r r; r! r� r# r# r$ � test_renew_obtain_cert_error� s � �z%MainTest.test_renew_obtain_cert_errorc C s: | j dd d�� ddd� | j dd d�t��� ddd� d S )NTzrenew -d example.comFr/ zrenew --csr {0})r rg rf r� rs r# r# r$ � test_renew_with_bad_cli_args� s ��z%MainTest.test_renew_with_bad_cli_argsc C s* | j dd dddd�tj�gd�\}}}d S )NFr z --post-hookz {0} -c "print('hello world');")r r r rl )r rf �sys� executable)r r� rw r# r# r$ �test_no_renewal_with_hooks� s ��� z#MainTest.test_no_renewal_with_hooksr� rG c C s6 dt �� f|_t �� |_}| �g d�� |�� d S )Nr( )r� r� r� r r� )r r) r rn r9 )r Zmock_report_new_certr\ r� r� rG r# r# r$ �test_certonly_reinstall� s z MainTest.test_certonly_reinstallc C s d}d}t �� }||f|j_tj�tj�| jj d��}tj�tj�| jj d��}|d |f|j _t � d���}||_tj�tj�| jj d��}d� t |||��� } |r�| |7 } t � d�� | �| � W d � n1 s�0 Y W d � n1 s�0 Y d | v �rn|j �|||||� d S ) N�certrro z live/example.com/cert_512.pemz live/example.com/fullchain.pemrG zlive/example.com/chain.pemzV-a standalone certonly --csr {0} --cert-path {1} --chain-path {2} --fullchain-path {3}z"certbot._internal.main.crypto_utilr� )r r) Zobtain_certificate_from_csrr r r� r� r� r= r� Zsave_certificaterD rf r� rg rn rq ) r r rV ro rG r� � full_pathr\ r� rl r# r# r$ �_test_certonly_csr_common� s> � � �� F �z"MainTest._test_certonly_csr_commonz+certbot._internal.main._csr_report_new_certc C s | � � d S r� �rX )r r_ rO �mock_csr_reportr# r# r$ �test_certonly_csr� s zMainTest.test_certonly_csrc C s | � dg� d S r� rY )r rZ r# r# r$ �test_certonly_csr_dry_run s z"MainTest.test_certonly_csr_dry_runr� r� c C s� d|_ d}| �dtdtd|dg� ttd��}W d � n1 sB0 Y ttd��@}t�|�� �d }|�� j }|� t � |�t j� W d � n1 s�0 Y d S ) NFr� r� r� �--serverr� �rbr )r rv � SS_CERT_PATH�RSA2048_KEY_PATHr r �pyopenssl_load_certificater r� r� rq r� �ComparableX509r rr )r r� r� r� r r> r� r# r# r$ �test_revoke_with_key s � �z MainTest.test_revoke_with_keyc C sL d}t �tj��( | �dtdtd|dg� W d � n1 s>0 Y d S )Nr� r� r� r] r� )r; r< r r rv �CERT�KEY)r r� r# r# r$ � test_revoke_with_key_mismatch s �z&MainTest.test_revoke_with_key_mismatchc C s� d|_ t�� d f|_ | �dtdg�\}}}}tt��@}t�|�� �d }|� � j }|� t � |�tj� W d � n1 sz0 Y d S )NFr� r� r )r r r) rn rd r r ra r Zacme_from_config_keyr� rq r� rb rr )r r� r� r� r[ r r> r� r# r# r$ �test_revoke_without_key" s �z MainTest.test_revoke_without_keyc C s� t �d���}t �� }d|_|df|j_| �g d�� t �d��8}t �� }||j_dg|j_| �g d��}W d � n1 s|0 Y W d � n1 s�0 Y d S )NrX Zimaginary_accountZworked)rZ z--emailzuser@example.org� certbot._internal.main.account� an account) r rD r) rA rZ r rv �AccountFileStorageri )r r� Z mocked_clientr� Zmocked_account�mocked_storager@ r# r# r$ � test_register0 s zMainTest.test_registerz'certbot._internal.updater._run_updatersc C s^ t j|_t�t j�� t�d d d � W d � n1 s80 Y d| j_t � | jd d � d S r ) r r� r: r; r< r � renew_certr= �dry_runr Zrun_generic_updaters)r r� r~ r# r# r$ �test_plugin_selection_errorA s ,z$MainTest.test_plugin_selection_errorz3certbot._internal.main.updater.run_renewal_deployerc C sD d| j _t�� }|t�� f|_t�| j dd� |j�� |�� dS )z8A dry-run renewal shouldn't try to restart the installerTN) r= rn r r) r r rm r� r9 )r r� r\ r~ Zmock_run_renewal_deployerr r# r# r$ �#test_renew_doesnt_restart_on_dryrunN s z,MainTest.test_renew_doesnt_restart_on_dryrun)NF)N)N)NNN)N)Vr@ rA rB rC rV r� rn rv r� r� r� r rD r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r* r r r r r r! r# r$ r' r( r+ r- r0 r1 r2 r4 r5 r6 r< r? r@ rC rF rG rI rJ rM rO rP rQ rT r� r� rU rX r[ r\ rc rf rg rl ro rp r� r# r# rd r$ re � s@ % � K � re c @ s> e Zd Zdd� Zdd� Zdd� Ze�d�dd � �Zd d � Z d S ) �UnregisterTestc C s@ t �d�t �d�t �d�t�� d�| _dd� | j�� D �| _d S )Nr� rh rX )rI r r[ � get_utilityc S s i | ]\}}||� � �qS r# r� r� r# r# r$ r� h r4 z(UnregisterTest.setUp.<locals>.<dictcomp>)r rD r� r� r� r� r� rs r# r# r$ rV b s �zUnregisterTest.setUpc C s | j �� D ] }|�� q d S r� )r� r rb r r# r# r$ r� j s zUnregisterTest.tearDownc C sF t �� | jd j_| jd � }d|j_t �� }t �� }t�||�}d S )Nr rr F)r r r� rj r r� r � unregister)r r1 r= r� �resr# r# r$ �test_abort_unregistern s z$UnregisterTest.test_abort_unregisterr( c C st t �� }dg|j_|| jd j_t �� df| jd _t �� }|| jd j_t �� }t �� }t�||�}|� d� d S )Nri r ZfoorI r[ zAccount deactivated.) r r) ri r r� rj �Clientr rs rq )r r* rk � cb_clientr= r� rt r# r# r$ �test_unregisterz s z UnregisterTest.test_unregisterc C s^ t �� }g |j_|| jd j_t �� }|| jd j_t �� }d|_t �� }t� ||�}d}d S )Nr r[ z"https://acme.example.com/directoryzNCould not find existing account for server https://acme.example.com/directory.) r r) ri r r� rj rv r� r rs )r rk rw r= r� rt �mr# r# r$ �test_unregister_no_account� s z)UnregisterTest.test_unregister_no_accountN) r@ rA rB rV r� ru r rD rx rz r# r# r# r$ rq a s rq c @ s" e Zd ZdZe�d�dd� �ZdS )�MakeOrVerifyNeededDirsz<Tests for certbot._internal.main.make_or_verify_needed_dirs.zcertbot._internal.main.utilc C sp t �| j� | jj| jjfD ]}|j�|tj| jj � q | jj | jj | jj f}|D ]}|j j|| jj d� qRd S )N)r� )r Zmake_or_verify_needed_dirsr= r� rk Zset_up_core_dirr r ZCONFIG_DIRS_MODEZstrict_permissionsZrenewal_pre_hooks_dirZrenewal_deploy_hooks_dirZrenewal_post_hooks_dirZmake_or_verify_dir)r Z mock_utilZcore_dirZ hook_dirsZhook_dirr# r# r$ �test_it� s ���z MakeOrVerifyNeededDirs.test_itN)r@ rA rB rC r rD r| r# r# r# r$ r{ � s r{ c s� e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�e�d �e�d �e�d �d d � ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d �e�d �e�d�dd� ���Z e�d �e�d �e�d�dd� ���Z e�d �e�d�dd� ��Z dd� Ze�d�e�d �e�d�dd� ���Ze�d �e�d �e�d�e�d�e�� d d � �����Ze�d �e�d �e�d�e�d�e�� d d � �����Zd d!� Z� ZS )"� EnhanceTestz)Tests for certbot._internal.main.enhance.c s4 t � �� t�� | _| j�� | _tjt j d�| _ d S �N)�spec) rU rV r� r� r� rX r� r r) r �AutoHSTSEnhancement� mockinstallerrs rd r# r$ rV � s zEnhanceTest.setUpc C s | j �� d S r� r� rs r# r# r$ r� � s zEnhanceTest.tearDownc C s� t j�� }t�||�}t�d���}dg|_t�d���}dg|_t�d��P}t�� }||_ ||_t � ||� |W d � W d � W d � S 1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr r� r� rG ) r rh ri r rj r rD r r) r= r �enhance)r rl rm r= Z mock_certsZmock_domr\ rG r# r# r$ rn � s zEnhanceTest._callr� r� z0certbot._internal.main.display_ops.choose_valuesz0certbot._internal.main._find_domains_or_certnamec C sX t jdd�|_dg|_d|_t �d�� }| �ddg� W d � n1 sJ0 Y d S )N�/tmp/nonexistent�r� r� �NNr� r� � --redirect�r r) r rD rn )r � mock_findr~ r! r� � mock_pickr# r# r$ �test_selection_question� s z#EnhanceTest.test_selection_questionc C s� t jdd�|_dg|_d|_t �d��H t �d�� }| �g d��}W d � n1 sV0 Y W d � n1 st0 Y d S )Nr� r� r� r� r� z.certbot._internal.main.plug_sel.logger.warning)r� r� rA r� r� )r r� r~ r! r� Zmock_logrG r# r# r$ �test_selection_auth_warning� s z'EnhanceTest.test_selection_auth_warningc s` t jdd�|_dg|_t �d��, | �g d��� ddg}dg}W d � n1 sR0 Y d S ) Nr� r� r� r� �r� r� �--hstsZredirectZhstsZuirr� )r r� r~ r! Zreq_enhZ not_req_enhr# )rG r$ �test_enhance_config_call� s z$EnhanceTest.test_enhance_config_callc C sR t jdd�|_dg|_t �d�� | �g d��}W d � n1 sD0 Y d S )Nr� r� r� r� )r� r� r� z--non-interactiver� )r r� r~ r! rG r# r# r$ �test_enhance_noninteractive� s � z'EnhanceTest.test_enhance_noninteractivec C sn g |_ t�d��J t�tj�� | �g d�� W d � n1 sB0 Y W d � n1 s`0 Y d S )Nr� r� )r r rD r; r< r r rn )r r� r~ r# r# r$ �test_user_abort_domains s z#EnhanceTest.test_user_abort_domainsc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r )r; r< r ZMisconfigurationErrorrn rs r# r# r$ � test_no_enhancements_defined s z(EnhanceTest.test_no_enhancements_definedrx c C s* dg|_ d|_ t�� |_| �ddg�}d S )Nr� r� r� r� )r r r� r: rn )r r� r~ r� rG r# r# r$ ro s z'EnhanceTest.test_plugin_selection_errorr� c C s2 | j |_ddg|_tjdd�|_| �ddg� d S )Nr� � another.tldr� r� r� � --auto-hsts)r� r r r) rn �r r� r� r� r~ r! r# r# r$ �test_enhancement_enable s z#EnhanceTest.test_enhancement_enablec C sf t �| jd�|_ddg|_tjdd�|_t�tj �� | � ddg� W d � n1 sX0 Y d S )Nr r� r� r� r� r� r� ) r rz r= r r r) r; r< r r| rn r� r# r# r$ �%test_enhancement_enable_not_supported, s z1EnhanceTest.test_enhancement_enable_not_supportedc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r� )r; r< r r rn rs r# r# r$ � test_enhancement_enable_conflict8 s z,EnhanceTest.test_enhancement_enable_conflict)r@ rA rB rC rV r� rn r rD r� r� r� r� r� r� ro r� r� r� r� r� r� r# r# rd r$ r} � sV r} c sX e Zd ZdZ� fdd�Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Z� Z S ) � InstallTestz)Tests for certbot._internal.main.install.c s t � �� tjtjd�| _d S r~ )rU rV r r) r r� r� rs rd r# r$ rV @ s zInstallTest.setUpr� r� c C sh t �| jd�|_tj�� }d| j_d| j_t � t j �� t �| j|� W d � n1 sZ0 Y d S )Nr TZ nonexistent)r rz r= r r rh ri r{ r0 r; r< r r| r r� �r r� r� rm r# r# r$ �&test_install_enhancement_not_supportedD s z2InstallTest.test_install_enhancement_not_supportedc C sp | j |_tj�� }d| j_d | j_d| j_d| j_ t � t j �� t�| j|� W d � n1 sb0 Y d S )NTr� )r� r r rh ri r= r{ r0 r� r� r; r< r r� r r� r� r# r# r$ �$test_install_enhancement_no_certnameN s z0InstallTest.test_install_enhancement_no_certname) r@ rA rB rC rV r rD r� r� r� r# r# rd r$ r� = s r� c @ sx e Zd ZdZdd� Zdd� Zedd� �Zedd � �Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� ZdS )�ReportNewCertTestznTests for certbot._internal.main._report_new_cert and certbot._internal.main._csr_report_new_cert. c C sJ t �d�| _| j�� | _t �d�| _| j�� | _t�ddddd�| j_d S )Nr( z+certbot._internal.main.crypto_util.notAfteri� rM r ) r rD � notify_patchrX r* �notafter_patchZ mock_notafterr� r rs r# r# r$ rV ` s zReportNewCertTest.setUpc C s | j �� | j�� d S r� )r� rb r� rs r# r# r$ r� h s zReportNewCertTest.tearDownc O s ddl m} ||i |��S )Nr )�_report_new_cert)rk r� )�clsrl r� r� r# r# r$ rn l s zReportNewCertTest._callc O s ddl m} ||i |��S )Nr )�_csr_report_new_cert)rk r� )r� rl r� r� r# r# r$ � _call_csrq s zReportNewCertTest._call_csrc C s( | � tjdd�d d d � | j�d� d S �NT�rn r �rn r r r* r) rs r# r# r$ �test_report_dry_runv s z%ReportNewCertTest.test_report_dry_runc C s( | � tjdd�d d d � | j�d� d S r� �r� r r r* r) rs r# r# r$ �test_csr_report_dry_runz s z)ReportNewCertTest.test_csr_report_dry_runc C s� t �t��( | �tjdd�d d d � W d � n1 s80 Y t �t��( | �tjdd�d d d � W d � n1 sz0 Y d S )NFr� )r; r< r rn r r r� rs r# r# r$ �test_report_no_paths~ s 6 z&ReportNewCertTest.test_report_no_pathsc C s( | � tjdd�ddd� | j�d� d S )NFr� �/path/to/cert.pem�/path/to/fullchain.pem�/path/to/privkey.pemaA Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem Key is saved at: /path/to/privkey.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background.r� rs r# r# r$ � test_report� s ��z ReportNewCertTest.test_reportc C s( | � tjdd�ddd � | j�d� d S )NFr� r� r� a Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background.r� rs r# r# r$ �test_report_no_key� s ��z$ReportNewCertTest.test_report_no_keyc C s* | � tjddd�ddd� | j�d� d S )NF)rn �preconfigured_renewalr� r� r� �� Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem Key is saved at: /path/to/privkey.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews.r� rs r# r# r$ �$test_report_no_preconfigured_renewal� s ��z6ReportNewCertTest.test_report_no_preconfigured_renewalc C s( | � tjdd�ddd� | j�d� d S )NFr� r� z/path/to/chain.pemr� z� Successfully received certificate. Certificate is saved at: /path/to/cert.pem Intermediate CA chain is saved at: /path/to/chain.pem Full certificate chain is saved at: /path/to/fullchain.pem This certificate expires on 1970-01-01.r� rs r# r# r$ �test_csr_report� s ��z!ReportNewCertTest.test_csr_reportc C s, | � tjdddd�ddd� | j�d� dS ) zBShouldn't get a message about autorenewal if no --manual-auth-hookFr N)rn r �manual_auth_hookr� r� r� r� r� rs r# r# r$ �test_manual_no_hooks_report� s ��z-ReportNewCertTest.test_manual_no_hooks_reportN)r@ rA rB rC rV r� � classmethodrn r� r� r� r� r� r� r� r� r� r# r# r# r$ r� [ s r� c @ sZ e Zd ZdZdd� Zdd� Zedd� �Zed�d d �Z d d � Z d d� Z dd� Z dd� Z dS )�ReportNextStepsTestz3Tests for certbot._internal.main._report_next_stepsc C sL t jddd dd d�| _t �d�}|�� | _| �|j� tj | _ t � � t_ d S )Nr� Tr )Z cert_namer� r� r r� r( ) r r) r= rD rX r* ra rb rR rw � old_stdoutr r� )r r� r# r# r$ rV � s � zReportNextStepsTest.setUpc C s | j t_d S r� )r� rR rw rs r# r# r$ r� � s z ReportNextStepsTest.tearDownc O s ddl m} ||i |�� d S )Nr )�_report_next_steps)rk r� )r� rl r� r� r# r# r$ rn � s zReportNextStepsTest._call)�returnc C s | j jd d d S )NrM r )r* �call_args_listrs r# r# r$ �_output� s zReportNextStepsTest._outputc C s. d| j _d| j _| �| j dd� | j�� dS )z No steps for a normal renewalr z /bin/trueN)r= r r� rn r* r9 rs r# r# r$ r� � s z ReportNextStepsTest.test_reportc C s d| j _| �| j dd� dS )z --csr requires manual renewalzfoo.csrN)r= r� rn rs r# r# r$ r� � s z#ReportNextStepsTest.test_csr_reportc C s d| j _| �| j dd� dS )z/--manual without a hook requires manual renewalr N)r= r rn rs r# r# r$ �test_manual_no_hook_renewal� s z/ReportNextStepsTest.test_manual_no_hook_renewalc C s d| j _| �| j dd� dS )z2No --preconfigured-renewal needs manual cron setupFN)r= r� rn rs r# r# r$ � test_no_preconfigured_renewal� s z1ReportNextStepsTest.test_no_preconfigured_renewalN)r@ rA rB rC rV r� r� rn �strr� r� r� r� r� r# r# r# r$ r� � s r� c sj e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z e � d�dd� �Z dd� Z� ZS )�UpdateAccountTestz/Tests for certbot._internal.main.update_accountc st t �d�t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd �� D �| _� �� D ]}| �|j� qXt� � � S ) Nrh r~ rX r� r( z*certbot._internal.eff.prepare_subscription)r �atexitr[ �determine_account�notify� prepare_subr c s i | ]}|� | � � �qS r# r� �r� r� �rc r# r$ r� r4 z+UpdateAccountTest.setUp.<locals>.<dictcomp>� r rD r� r� r� r ra rb rU rV r rd r� r$ rV s � zUpdateAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S �Nrz r} r rf rg rh �r rD r= r� rk rj r r r# r# r$ rn s � ��zUpdateAccountTest._callc C sX t �� }t �� }t �� }|g|j_|| jd j_|j|j_|t �� f| jd _|||fS )Nr r� )r r) ri r r� rj �bodyr� �r rJ Z mock_account� mock_regrr# r# r$ �_prepare_mock_account s z'UpdateAccountTest._prepare_mock_accountc C sJ | � � \}}}| �|�}|jjjdd� | jd �d� | jd �� dS )z9Utility to assert that email removal is handled correctlyr# ��contactr� zFAny contact information associated with this account has been removed.r� N)r� rn r� �updater) r� r9 )r rl r� rJ r� �resultr# r# r$ �_test_update_no_contact# s �z)UpdateAccountTest._test_update_no_contactc C s" t �� }g |j_|| jd j_dS �z2Test that no existing account is handled correctlyr N�r r) ri r r� rj �r rJ r# r# r$ �test_no_existing_accounts5 s z+UpdateAccountTest.test_no_existing_accountsc C s | � ddg� dS )zBTest that --register-unsafely-without-email is handled as no email�update_accountz!--register-unsafely-without-emailN�r� rs r# r# r$ � test_update_account_remove_email> s z2UpdateAccountTest.test_update_account_remove_emailc C s | � g d�� dS )z9Test that providing an empty email is handled as no email)r� r� r4 Nr� rs r# r# r$ � test_update_account_empty_emailB s z1UpdateAccountTest.test_update_account_empty_emailz,certbot._internal.main.display_ops.get_emailc C sJ d|_ | �� \}}}t�� }|| jd j_ | �dg�}| jd �d� dS )z=Test that updating with a singular email is handled correctlyzuser@example.comr[ r� r� z4Your e-mail address was updated to user@example.com.N)r r� r r) r� rv rn r) )r Z mock_emailr� rJ rG r� r# r# r$ � test_update_account_with_emailF s �z0UpdateAccountTest.test_update_account_with_emailc C s6 | � � \}}}|jjjddgd� | jd �d� dS )z8Test that multiple email addresses are handled correctlyzmailto:user@example.comzmailto:user@example.orgr� r� zEYour e-mail address was updated to user@example.com,user@example.org.N)r� r� r� r) r� )r r� rJ r� r# r# r$ �(test_update_account_with_multiple_emails[ s � �z:UpdateAccountTest.test_update_account_with_multiple_emails)r@ rA rB rC rV rn r� r� r� r� r� r rD r� r� r� r# r# rd r$ r� � s r� c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�ShowAccountTestz-Tests for certbot._internal.main.show_accountc sl t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd�� D �| _� �� D ]}| �|j� qPt� � � S ) Nrh r~ rX r� r( )r r� r[ r� r� r c s i | ]}|� | � � �qS r# r� r� r� r# r$ r� s r4 z)ShowAccountTest.setUp.<locals>.<dictcomp>r� r rd r� r$ rV j s � zShowAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S r� r� r r# r# r$ rn y s � ��zShowAccountTest._callc C s\ t �� }t �� }t �� }|g|j_|| jd j_|j|j_d|jj _|t �� f| jd _d S )Nr s foobarbazr� ) r r) ri r r� rj r� r� r� Z thumbprintr� r# r# r$ r� � s z%ShowAccountTest._prepare_mock_accountc C sR | � � t�� }t�� }||j_d|_||jj_|| j d j _dg}| � |� d S )Nz+https://www.letsencrypt-demo.org/acme/reg/1r[ � show_account) r� r r) r� r� Zurir� Zquery_registrationr r� rv rn )r r� rG r� rl r# r# r$ �_test_show_account� s z"ShowAccountTest._test_show_accountc C s" t �� }g |j_|| jd j_dS r� r� r� r# r# r$ r� � s z)ShowAccountTest.test_no_existing_accountsc C s` | � � t�� }d|_|| jd j_z| �dg� W n& tj yZ } z W Y d}~n d}~0 0 dS )z;Test that issues with the ACME client are handled correctlyNr[ r� ) r� r r) r� r� rv r rn r r )r rG r� r# r# r$ �test_no_existing_client� s z'ShowAccountTest.test_no_existing_clientc C s& | � d� | jd �t�d�g� d S )Nr# r� z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contact: none�r� r� Zassert_has_callsr r� rs r# r# r$ �test_no_contacts� s �z ShowAccountTest.test_no_contactsc C s* d}| � |� | jd �t�d�g� d S )N)�mailto:foo@example.comr� z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contact: foo@example.comr� �r r� r# r# r$ �test_single_email� s �z!ShowAccountTest.test_single_emailc C s* d}| � |� | jd �t�d�g� d S )N)r� zmailto:bar@example.comr� z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contacts: foo@example.com, bar@example.comr� r� r# r# r$ �test_double_email� s �z!ShowAccountTest.test_double_email)r@ rA rB rC rV rn r� r� r� r� r� r� r� r� r# r# rd r$ r� g s r� c @ s` e Zd ZdZejZdZe� d�Ze j dd� �Z e j dd� �Ze j d�� d �d d � �Zd d � ZdS )� TestLockOrderzFTests that Certbot's directory locks were acquired in the right order.z Expected TestLockOrder errorz|1 renew failurec c s4 t �d��}|V W d � n1 s&0 Y d S )Nz certbot._internal.lock.lock_dir)r rD )r � mock_lock_dirr# r# r$ r� � s zTestLockOrder.mock_lock_dirc # s� � ��fdd�}����fdd�}t j�tjd|��H t j�tjd|�� dV W d � n1 sd0 Y W d � n1 s�0 Y dS )zJPatches plugin prepare to call mock_lock_dir and raise the expected error.c s �� � �� �j��d S r� ��EXPECTED_ERROR_TYPE�EXPECTED_ERROR_STR�Z unused_self)�authenticator_dirr� r r# r$ �authenticator_lock� s z=TestLockOrder.mock_plugin_prepare.<locals>.authenticator_lockc s �� � �dkr �� �j��d S )Nr� r� r� )� installer_dirr� r � subcommandr# r$ �installer_lock� s z9TestLockOrder.mock_plugin_prepare.<locals>.installer_lockr� N)r rD �objectr Z Authenticatorr rz )r r� r� r� r� r� r� r# )r� r� r� r r� r$ �mock_plugin_prepare� s z!TestLockOrder.mock_plugin_preparezcertonly install renew run)�paramsc c s� t |d �}t |d �}t |d �}t |d �}t |d �}|j} | dddd d d |d |d |g } t�|d� | �|||| ��@ ||||g} | dkr�| | fV n| | |g fV W d � n1 s�0 Y dS )aR Sets up Certbot with args and mocks to error after acquiring the last lock. This fixture yields the CLI arguments that should be given to Certbot and the expected order of directories to be locked. An error is raised after acquiring the last lock just as a means of stopping Certbot's execution. r r= r ZlogsZworkr� r z-ir z--no-random-sleep-on-renewr rg rf r r� N)r� Zparamr� r r� ) r r� ZrequestZtmp_pathr� r� r� rj rk r� rl � lock_orderr# r# r$ �args_and_lock_order� s � z!TestLockOrder.args_and_lock_orderc C s^ |\}}t j| j| jd�� t�|� W d � n1 s:0 Y t|j|�D ]\}}qPd S )Nr5 )r; r< r� �EXPECTED_ERROR_STR_REGEXr �zipr� )r r� r� rl r� r� Z locked_dirr# r# r$ �test_lock_order s (z TestLockOrder.test_lock_orderN)r@ rA rB rC r r r� r� r� r; Zfixturer� � contextlib�contextmanagerr� rg r� r� r# r# r# r$ r� � s r� �__main__rM )UrC r� r� � importlibr rn r r� rK r� rR r� r �typingr Zunittestr r Zjosepyr� r; r� Z acme.messagesr ra Zcertbotr r r r Zcertbot._internalr r r r r Zcertbot._internal.pluginsr r r r Zcertbot.compatr r Zcertbot.pluginsr Zcertbot.tests.utilZtestsr� r� r� rd r� re ZJWKRSA�loadZ load_vectorr� r` r_ ZTestCaser ZConfigTestCaserE r� r� ZTempDirTestCaser� r� r, r? re rq r{ r} r� r� r� r� r� r� r@ �exit�argv�__file__r# r# r# r$ �<module> s� RX ggk > o4ihK __pycache__/main_test.cpython-39.pyc 0000644 00000276153 15114562471 0013414 0 ustar 00 a }|�g�� � @ s2 d Z ddlZddlZddlmZ ddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl mZ ddlZddlmZ ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ dd lm Z dd lm Z dd l m Z dd l m Z dd l m!Z! ddl m"Z" ddl m#Z# ddl$m%Z% ddl$m&Z& ddl$m'Z' ddl$m(Z( ddl)m*Z* ddl)m+Z+ ddl,m-Z- ddl.m/ m Z0 e0�1d�Z2e0�1d�Z3e0�1d�Z4e0�1d�Z5ej6�7e0�8d��Z9e0�1d�Z:e0�1d �Z;G d d � d ej<�Z=G d d � d e0j>�Z?G d!d"� d"ej<�Z@G d#d$� d$ej<�ZAG d%d&� d&e0jB�ZCG d'd(� d(e0jB�ZDG d)d*� d*e0j>�ZEG d+d,� d,e0j>�ZFG d-d.� d.e0j>�ZGG d/d0� d0ej<�ZHG d1d2� d2e0j>�ZIG d3d4� d4e0j>�ZJG d5d6� d6e0j>�ZKG d7d8� d8ej<�ZLG d9d:� d:ej<�ZMG d;d<� d<e0j>�ZNG d=d>� d>e0j>�ZOG d?d@� d@�ZPeQdAk�r.e �Re�"e jSdBd� eTg �� dS )Cz!Tests for certbot._internal.main.� N)�reload)�List)�mock)�Error)� crypto_util��errors)� interfaces)�util)�account)�cli)� constants)�main)�updater)�disco)�manual)�null)� standalone)� filesystem)�os)� enhancements� cert_512.pemz csr_512.derzrsa256_key.pemzrsa512_key.pemzrsa2048_key.pemz cert_2048.pemc @ sl e Zd ZdZe�d�dd� �Ze�d�e�d�e�d�dd� ���Ze�d�d d � �Ze�d �d d � �Z dS )�TestHandleCertsz1Test for certbot._internal.main._handle_* methods�<certbot._internal.main._handle_unexpected_key_type_migrationc C s> t �� }d|j_t�t �� |�}|d|fks0J �|js:J �d S )NF� reinstall)r �Mock�ensure_deployed� return_valuer � _handle_identical_cert_request�called)�self�mock_handle_migration� mock_lineage�ret� r$ �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/main_test.py�*test_handle_identical_cert_request_pending5 s z:TestHandleCerts.test_handle_identical_cert_request_pending�&certbot._internal.renewal.should_renewzcertbot.display.util.menuc C sZ d|_ t�� }d|j_ d|_ t�tjddd�|�}|js<J �|jrFJ �|d|fksVJ �d S )NTF�run)Zverbr �renew)r r r r r r � MagicMockr )r r! Z mock_menuZmock_should_renewr" r# r$ r$ r% �*test_handle_identical_cert_key_type_change> s � z:TestHandleCerts.test_handle_identical_cert_key_type_changec C sP t �� }d|_t �� }ddg|j_t�|dg|�}|d|fksBJ �|jsLJ �d S )NTZdummy1Zdummy2r) )r r �expand�namesr r Z_handle_subset_cert_requestr )r r! � mock_configr" r# r$ r$ r% � test_handle_subset_cert_requestM s z/TestHandleCerts.test_handle_subset_cert_requestz)certbot._internal.main.display_util.yesnoc C s@ t �� }t �� }||_t �� }d|_d|_t�||� |�� |j|jksNJ �d|_d|_t�||� |j dkstJ �|jdks�J �d|_d|_t�||� |jdks�J �d|_t�||� |jdks�J �d|_dd� |_ t j t jdd �� t�||� W d � n1 �s 0 Y d d� |_ t�||� |jdk�s<J �d S ) NZrsa�ecdsaT� Fc S s | dkS )N�certnamer$ ��varr$ r$ r% �<lambda>{ � zKTestHandleCerts.test_handle_unexpected_key_type_migration.<locals>.<lambda>z.Please provide both --cert-name and --key-type��matchc S s | dkS )N�key_typer$ r3 r$ r$ r% r5 � r6 )r r Z set_by_userr9 �private_key_typer Z%_handle_unexpected_key_type_migration�assert_not_calledr � call_count� side_effect�pytest�raisesr r )r Z mock_yesno�configZmock_set�certr$ r$ r% �)test_handle_unexpected_key_type_migrationW s8 , z9TestHandleCerts.test_handle_unexpected_key_type_migrationN) �__name__� __module__� __qualname__�__doc__r �patchr& r+ r/ rB r$ r$ r$ r% r 3 s r c sv e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d�dd� �Z e � d �dd� �Z � ZS )�RunTestz%Tests for certbot._internal.main.run.c s� t � �� d| _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d �t�d �g }|d �� | _|d �� | _|d �� | _|d �� | _ |d �� | _ |d �� | _ |d �� | _ |d �� | _ |d �� | _|D ]}| �|j� q�d S )Nz example.org�)certbot._internal.main._get_and_save_certz7certbot._internal.main.display_ops.success_installationz2certbot._internal.main.display_ops.success_renewal�&certbot._internal.main._init_le_client�7certbot._internal.main._suggest_donation_if_appropriate�'certbot._internal.main._report_new_cert�!certbot._internal.main._find_cert�)certbot._internal.eff.handle_subscription�)certbot._internal.main._report_next_stepsr � r1 � � � � � � )�super�setUp�domainr rG �start� mock_auth�mock_success_installation�mock_success_renewal� mock_initZmock_suggest_donation�mock_report_cert�mock_find_cert�mock_subscription�mock_report_next_steps� addCleanup�stop)r �patchesrG �� __class__r$ r% rX � s. � z RunTest.setUpc C s@ d� | j��� }tj�� }t�||�}ddlm } |||� d S )Nz-a webroot -i null -d {0}r )r( ) �formatrY �splitr �PluginsRegistry�find_allr �prepare_and_parse_args�certbot._internal.mainr( )r �args�pluginsr@ r( r$ r$ r% �_call� s z RunTest._callc C sH t �� | j_d| j_| �� | j�| jg� | j jt j d t j dd� d S )N�TNT�Znew_or_renewed_cert) r r r[ r r` rp r\ �assert_called_once_withrY rb �ANY�r r$ r$ r% �test_newcert_success� s �z RunTest.test_newcert_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S �NF) r r r[ r r` rp r\ rs rY ru r$ r$ r% �test_reinstall_success� s z RunTest.test_reinstall_successc C s8 t �� | j_dt �� f| j_| �� | j�| jg� d S )NT) r r r[ r r` rp r] rs rY ru r$ r$ r% �test_renewal_success� s z RunTest.test_renewal_success�;certbot._internal.main.plug_sel.choose_configurator_pluginsc C sd t �| jd�d f|_tj�� }d| j_t� t j �� t � | j|� W d � n1 sV0 Y d S �Nr T)r � Installerr@ r r rj rk � auto_hstsr> r? r �NotSupportedErrorr r( �r � mock_choosero r$ r$ r% �"test_run_enhancement_not_supported� s z*RunTest.test_run_enhancement_not_supported�$certbot._internal.main._install_certc C s| t �d�|_t�� | j_d| j_t� t j�� | � � W d � n1 sJ0 Y | j j tj |jtj dd� | j�� d S )NzFake installation errorrq Trr )r Z PluginErrorr= r r r[ r r` r> r? rp rb rs rt r\ r; )r Zmock_install_certr$ r$ r% � test_cert_success_install_error� s &�z'RunTest.test_cert_success_install_errorc C sd t �| jd�d f|_tj�� }d| j_t� t j �� t � | j|� W d � n1 sV0 Y d S r{ )r r| r@ r r rj rk Z must_stapler> r? r r~ r r( r r$ r$ r% �"test_run_must_staple_not_supported� s z*RunTest.test_run_must_staple_not_supported)rC rD rE rF rX rp rv rx ry r rG r� r� r� � __classcell__r$ r$ rf r% rH � s rH c @ s� e Zd ZdZdd� Zdd� Zdd� Ze�d�e�d �e�d �d d � ���Z d d� Z e�d�e�d�e�d�e�d�e�d�e�d �dd� ������Z e�d�e�d�e�d�e�d�e�d �dd� �����Z e�d�e�d �e�d�e�d�dd� ����Z e�d�e�d �e�d�e�d �e�d �d d � �����Ze�d�e�d �e�d�e�d �e�d �d d � �����Ze�d�e�d �e�d�e�d �d!d"� ����Zd#S )$� CertonlyTestz*Tests for certbot._internal.main.certonly.c C s t �� | _| j�� | _d S �N)� test_util�patch_display_util�get_utility_patchrZ �mock_get_utilityru r$ r$ r% rX � s zCertonlyTest.setUpc C s | j �� d S r� �r� rd ru r$ r$ r% �tearDown� s zCertonlyTest.tearDownc C s� t j�� }t�||�}t�d��p}t�d��F t�d�� t�||� W d � n1 sZ0 Y W d � n1 sx0 Y W d � n1 s�0 Y |� S )NrJ rK rN ) r rj rk r rl r rG r �certonly)r rn ro r@ r^ r$ r$ r% rp � s fzCertonlyTest._callrM rI rL c C s4 | � � j}| j|_t�� |_d|_| �d�� � d S )N)FNz!certonly --webroot -d example.com) r� � notification�_assert_no_pauser= r r r rp ri )r Z unused_reportr[ r` Zmock_notificationr$ r$ r% � test_no_reinstall_text_pause� s z)CertonlyTest.test_no_reinstall_text_pausec O s |� d�du sJ �d S )N�pauseF)�get)r rn �kwargsr$ r$ r% r� � s z CertonlyTest._assert_no_pauserO �3certbot._internal.cert_manager.lineage_for_certname�3certbot._internal.cert_manager.domains_for_certnamez$certbot._internal.renewal.renew_certr c C s ddg}||_ ||j_ | �d�� � |jdks2J �|jdks@J �|jdksNJ �|jdks\J �|jdksjJ �|jtjd tjdd� | �d�� � |jdks�J �|jdks�J �|jdks�J �|jdks�J �|jdks�J �d | �� j _ t � t j �� | �d�� � W d � n1 �s0 Y d S ) N� example.comztest.orgzEcertonly --webroot -d example.com -d test.org --cert-name example.comrP Trr �Ecertonly --webroot -d example.com -d test.com --cert-name example.comr1 F)r r- rp ri r< rs r rt r� �yesnor> r? r �ConfigurationError)r r_ Zmock_handle_type�mock_renew_cert� mock_domainsr" rb �domainsr$ r$ r% �*test_find_lineage_for_domains_and_certname� s* � z7CertonlyTest.test_find_lineage_for_domains_and_certname� certbot.display.ops.choose_namesc C s^ d |_ | �d�� � |jdks"J �|jdks0J �dg|_ d |_ | �d�� � |jdu sZJ �d S )Nr� rP Zsomenamez*certonly --webroot --cert-name example.comT)r rp ri r< r )r r_ r" �mock_choose_namesZmock_domains_for_certnameZ unused_mock_report_next_stepsr$ r$ r% �*test_find_lineage_for_domains_new_certname# s z7CertonlyTest.test_find_lineage_for_domains_new_certnamez-certbot._internal.main._csr_get_and_save_certc C sZ d|_ d|_ dt� �dfD ]:}| �d|� d��� � |jtjtjtjdd� |�� qdS ) zLcertonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.N)z/certz/chainz /fullchainz--csr z-d example.comz certonly z, --webroot --cert-name example.com --dry-runFrr )r �CSRrp ri rs r rt Z reset_mock)r r" Zmock_csr_get_certZunused_mock_get_certrb �flagr$ r$ r% �$test_dryrun_next_steps_no_cert_saved8 s �z1CertonlyTest.test_dryrun_next_steps_no_cert_saved�?certbot._internal.plugins.selection.choose_configurator_pluginsc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nrq z certonly --nginx -d example.com)r r* r rp ri �restartZassert_called_once�r �mock_sel� mock_get_certr` �unused_report_new�unused_report_nextZmock_installerr$ r$ r% �test_installer_runs_restartG s z(CertonlyTest.test_installer_runs_restartc C s> t �� }|d f|_t �� |_d|_| �d�� � |j�� d S )Nrq z)certonly --nginx -d example.com --dry-run)r r* r rp ri r� r; r� r$ r$ r% �$test_dryrun_installer_doesnt_restartV s z1CertonlyTest.test_dryrun_installer_doesnt_restartc C s2 t �� |_d|_| �dt�� � d�d �� � d S )Nrq zcertonly --webroot -w � z -i standalone -d example.com)r r* r rp �tempfile� gettempdirri )r r� r` r� r� r$ r$ r% �test_invalid_installere s �z#CertonlyTest.test_invalid_installerN)rC rD rE rF rX r� rp r rG r� r� r� r� r� r� r� r� r$ r$ r$ r% r� � sX r� c @ sF e Zd ZdZe�d�dd� �Ze�d�dd� �Ze�d�dd � �Zd S ) �FindDomainsOrCertnameTestz;Tests for certbot._internal.main._find_domains_or_certname.r� c C s, t jd d d�}d|_t�|d �dks(J �d S )N�r� r2 � domainname)r� N�r r r r �_find_domains_or_certname�r r� r. r$ r$ r% �test_display_opst s z*FindDomainsOrCertnameTest.test_display_opsc C sP t jd d d�}g |_t�tj�� t�|d � W d � n1 sB0 Y d S )Nr� ) r r r r> r? r r r r� r� r$ r$ r% �test_no_results{ s z)FindDomainsOrCertnameTest.test_no_resultsr� c C s8 t jd dd�}ddg|_t�|d �ddgdfks4J �d S )Nzone.comr� ztwo.comr� )r r� r. r$ r$ r% �test_grab_domains� s �z+FindDomainsOrCertnameTest.test_grab_domainsN) rC rD rE rF r rG r� r� r� r$ r$ r$ r% r� q s r� c s e Zd ZdZ� fdd�Zddd�Ze�d�e�d�d d � ��Ze�d�e�d �e�d �e�d �dd� ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d�dd� �Z dd� Z e�d�e�d�e�� dd� ���Z� ZS ) � RevokeTestz(Tests for certbot._internal.main.revoke.c s t � �� t�t| j� tj�tj� | jd��| _ t � d�t � d�t � d�t � d�g}|d � � j| _|d � � |d � � | _|d � � | _|D ]}| �|j� q�dd lm} t �� | _|jd tjd d ddddtjd�d�| _ || jt | j �| _ | j d f| j_ d S )Nr z$certbot._internal.client.acme_clientz certbot._internal.client.Client�)certbot._internal.main._determine_accountz5certbot._internal.main.display_ops.success_revocationr rP r1 rQ )�Accountztest.certbot.orgi� rU rR � � )Ztzinfo)Z creation_hostZ creation_dt) rW rX �shutil�copy� CERT_PATH�tempdirr �path�abspath�join� tmp_cert_pathr rG rZ �ClientV2�mock_acme_client�mock_determine_account�mock_success_revokerc rd Zcertbot._internal.accountr� r* �regrZMeta�datetime�pytzZUTC�meta�JWK�accr )r re rG r� rf r$ r% rX � s0 � ��zRevokeTest.setUpNc C sH |sd}|� | j��� }tj�� }t�||�}ddlm } |||� d S )Nzrevoke --cert-path={0} r )�revoke) rh r� ri r rj rk r rl rm r� )r rn ro r@ r� r$ r$ r% rp � s zRevokeTest._call�-certbot._internal.main._delete_if_appropriate�)certbot._internal.main.client.acme_clientc C s� d|_ |�� j}g }tj�� D ]l\}}d�| j|��� }| � |� |� t � t j |�� d�| j|�� ��� }| � |� |� t � t j |�� q ||jks�J �d S )NFz#revoke --cert-path={0} --reason {1})r r� r� r ZREVOCATION_REASONS�itemsrh r� ri rp �appendr �callrt �upper�call_args_list)r r� �mock_delete_if_appropriate� mock_revokeZexpected�reason�codern r$ r$ r% �test_revoke_with_reason� s � z"RevokeTest.test_revoke_with_reason�'certbot._internal.storage.RenewableCert�3certbot._internal.storage.renewal_file_for_certnamez-certbot._internal.client.acme_from_config_keyc C s` | j |_tj| jdd�|_d�� }d|_| �|� |jd d d jdksNJ �| j � | j� d S )N�https://acme.example�� cert_path�server� revoke --cert-name=example.comFr ) r� r r r* r� ri rp r� r� r� rs �r Zmock_acme_from_configZ%unused_mock_renewal_file_for_certnameZ mock_certr� rn r$ r$ r% �test_revoke_by_certname� s � �z"RevokeTest.test_revoke_by_certnamec C sX t j| jdd�|_d�� }d|_| �|� |jd d d jdksFJ �| j� | j� dS )z9Revoking with --server should use the server from the CLIr� r� z=revoke --cert-name=example.com --server https://other.exampleFr zhttps://other.exampleN) r r* r� r ri rp r� r� r� rs r� r$ r$ r% �"test_revoke_by_certname_and_server� s � �z-RevokeTest.test_revoke_by_certname_and_serverc C s^ t j| jdd�|_d�� }d|_| �|� |jd d d jtj d ksLJ �| j � | j� dS )zLRevoking with --cert-name where the lineage server is empty shouldn't crash Nr� r� Fr r� ) r r* r� r ri rp r� r� r Z CLI_DEFAULTSr� rs r� r$ r$ r% �$test_revoke_by_certname_empty_server� s �z/RevokeTest.test_revoke_by_certname_empty_serverc C s | � � d|_| j�| j� d S rw )rp r r� rs r� )r r� r$ r$ r% �test_revocation_success� s z"RevokeTest.test_revocation_successc C sZ ddl m} |�� | j_t�|j�� | �� W d � n1 sB0 Y | j� � d S )Nr r ) �acmer Z ClientErrorr� r= r> r? rp r� r; )r Z acme_errorsr$ r$ r% �test_revocation_error s &z RevokeTest.test_revocation_error�%certbot._internal.cert_manager.deletec C s* d|� j _d|_| �� |jdu s&J �d S rw )r� r rp r )r r� � mock_deleter� r$ r$ r% �test_revocation_with_prompt s z&RevokeTest.test_revocation_with_prompt)N)rC rD rE rF rX rp r rG r� r� r� r� r� r� r� r� r� r� r$ r$ rf r% r� � s8 r� c s� e Zd ZdZ� fdd�Z� fdd�Zdd� Zdd � Ze� d �d d � �Z d d� Z dd� Z e� d�dd� �Z dd� Ze� d�dd� �Zdd� Ze� d�dd � �Z� ZS ) �ReconfigureTestz,Tests for certbot._internal.main.reconfigurec sT t � �� t�� | _| j�� | _t�d�t�d�t�d�t�d�t�d�t�d�t�d�t�d�d �| _ d d � | j � � D �| _ d g| j d _ t j�| jd�| _t j�| jd�}t j�|�s�t�|� t j�|d�| _d}t| jd��}|�|� W d � n1 �s0 Y t| jd��"}tj|ddd�| _W d � n1 �sF0 Y d S )Nz7certbot._internal.storage.RenewableCert._check_symlinksz-certbot._internal.storage.RenewableCert.namesz2certbot._internal.plugins.selection.pick_installerz6certbot._internal.plugins.selection.pick_authenticatorz9certbot._internal.plugins.disco.PluginsRegistry.find_initrI rJ z"certbot._internal.hooks.list_hooks)Zcheck_symlinks� cert_names�pick_installer� pick_auth� find_init�_get_and_save_cert�_init_le_clientZ list_hooksc S s i | ]\}}||� � �qS r$ �rZ ��.0�k�vr$ r$ r% � <dictcomp># r6 z)ReconfigureTest.setUp.<locals>.<dictcomp>r� r� r@ �renewalzexample.com.confa� version = 1.32.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-v02.api.letsencrypt.org/directory authenticator = nginx installer = nginx key_type = rsa �w�r�utf-8��encodingZdefault_encoding)rW rX r� r� r� rZ r� r rG �patchersr� �mocksr r r� r� r� � config_dir�existsr �makedirs� renewal_file�open�write� configobj� ConfigObj�original_config)r Zrenewal_configs_dirr �frf r$ r% rX s4 � *�zReconfigureTest.setUpc s0 t � �� | j�� | j�� D ] }|�� q d S r� )rW r� r� rd r �values�r rG rf r$ r% r� B s zReconfigureTest.tearDownc C sz |d| j g }tj�� }t�||�}ddlm} |||� t| j d�� }t j |ddd�}W d � n1 sl0 Y |S )N� --config-dirr )� reconfigurer� r r ) r r rj rk r rl rm r r r r r )r Z passed_argsZ full_argsro r@ r r Z updated_confr$ r$ r% rp H s .zReconfigureTest._callc C s> t �tj�� | �d�� � W d � n1 s00 Y d S )Nz!--cert-name cert1 -d one.cert.com)r> r? r r� rp ri ru r$ r$ r% �test_domains_setU s z ReconfigureTest.test_domains_set�,certbot._internal.cert_manager.get_certnamesc C sZ t �� }d|_|| jd _|| jd _|| jd _dg|_| �d�� � |jdksVJ �d S )N�nginxr� r� r� r� �--nginxrP )r r �namer r rp ri r< )r �mock_cert_manager� named_mockr$ r$ r% �test_asks_for_certnameY s z&ReconfigureTest.test_asks_for_certnamec C sX t �� }d|_|| jd _|| jd _|| jd _| �d�� �}|d d dksTJ �d S )N�apacher� r� r� � --cert-name example.com --apache� renewalparams� authenticator)r r r r r rp ri �r r � new_configr$ r$ r% �test_update_configuratore s z(ReconfigureTest.test_update_configuratorc C s� t �� }d|_|| jd _|| jd _|| jd _| �d�� �}d|d d< d|d d < |d d = | jd |d < || jks~J �d S ) zI Check that we don't accidentally modify anything that we didn't mean to r r� r� r� r r r r � installerr �versionN)r r r r r rp ri r r r$ r$ r% �test_only_intended_changesp s z*ReconfigureTest.test_only_intended_changesz&certbot._internal.hooks.validate_hooksc C sf | j d d dksJ �| �d�� dg � d| jd jjd jv sFJ �d| jd jjd jv sbJ �d S ) z6 Check that we use the staging server for the dry run r r� z.https://acme-v02.api.letsencrypt.org/directory�"--cert-name example.com --pre-hook�echo preZstagingr� r r� rP N)r rp ri r � call_argsrn r� )r �unused_validate_hooksr$ r$ r% �test_staging_used� s � z!ReconfigureTest.test_staging_usedc C s� | j d d }| j d d }z| �d�� � W n6 tjyd } z dt|�v sPJ �W Y d}~n d}~0 0 t| jd�� }tj |ddd �}W d � n1 s�0 Y |d d |ks�J �| �d |� ��� �}|d d |ks�J �z| �d �� � W n: tj�y* } z dt|�v �sJ �W Y d}~n d}~0 0 t| jd�� }tj |ddd �}W d � n1 �s`0 Y |d d |k�s�J �| �d |� ��� �}|d d |k�s�J �dS ) zx Check that we error when attempting to change the account id or server, but not when it's the same r r r� z.--cert-name example.com --account newaccountidz,Using reconfigure to change the ACME accountNr� r r z"--cert-name example.com --account z&--cert-name example.com --server x.comz!--cert-name example.com --server ) r rp ri r r� �strr r r r )r Zorig_account_idZ orig_server�errr r r$ r$ r% �!test_new_account_or_server_errors� s( &.(0z1ReconfigureTest.test_new_account_or_server_errorsc C s� d| j vsJ �| �d�� dg �}|d d dks6J �| �d�� dg �}|d d dks^J �d| j vslJ �| �d�� dg �}|d d dks�J �d S ) NZpre_hookr% r& r z echo pre2Z renew_hookz%--cert-name example.com --deploy-hookz echo deploy)r rp ri )r r( r r$ r$ r% �test_update_hooks� s z!ReconfigureTest.test_update_hooksc C s� t j| jd _z| �d�� � W n t jy4 Y n0 t| jd�� }tj |ddd�}W d � n1 sh0 Y |d d dks�J �d S ) Nr� r r� r r r r r ) r r r r= rp ri r r r r )r r r r$ r$ r% �test_dry_run_fails� s .z"ReconfigureTest.test_dry_run_fails�*certbot._internal.main.display_util.notifyc C s� d}t | jd��}|�|� W d � n1 s00 Y t | jd��"}tj|ddd�| _W d � n1 sn0 Y t�� }d|_|| j d _ || j d _ | � d � � �}|d d dks�J �|� d � d S ) Na version = 2.0.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-staging-v02.api.letsencrypt.org/directory authenticator = webroot installer = nginx key_type = ecdsa webroot_path = /var/www/html, [[webroot_map]] example.com = /var/www/html r� r� r r r r� r� z --cert-name example.com --nginxr r zT Successfully updated configuration. Changes will apply when the certificate renews.)r r r r r r r r r r r rp ri �assert_called_with)r � mock_notifyr r r r r$ r$ r% �test_report_results� s (�& �z#ReconfigureTest.test_report_results)rC rD rE rF rX r� rp r r rG r r! r$ r) r, r- r. r2 r� r$ r$ rf r% r� s" - % r� c @ sR e Zd ZdZdd� Zdd� Ze�� dd� �Ze�� dd � �Z e � d �e � d �e � d �e � d �e � d�e � d�e�� dd� �������Z e � d �e � d �e � d�e � d �e � d�e�� dd� ������Z e � d �e � d �e � d�e � d�e � d �e�� dd� ������Ze � d �e � d �e � d�e � d�e � d �e�� dd� ������ZdS )�DeleteIfAppropriateTestz8Tests for certbot._internal.main._delete_if_appropriate c C s ddl m} ||� d S )Nr )�_delete_if_appropriate)rm r4 )r r. r4 r$ r$ r% rp � s z DeleteIfAppropriateTest._callc C sB t �d�� }| �| j� W d � n1 s,0 Y |�� d S )Nr� )r rG rp r@ r; )r r� r$ r$ r% �_test_delete_opt_out_common� s *z3DeleteIfAppropriateTest._test_delete_opt_out_commonc C s d| j _| �� d S rw )r@ �delete_after_revoker5 )r Zunused_mock_get_utilityr$ r$ r% �test_delete_flag_opt_out s z0DeleteIfAppropriateTest.test_delete_flag_opt_outc C s |� }d|j _| �� d S rw )r� r r5 )r r� � util_mockr$ r$ r% �test_delete_prompt_opt_out s z2DeleteIfAppropriateTest.test_delete_prompt_opt_outz%certbot._internal.main.logger.warningr� r� z7certbot._internal.cert_manager.match_and_check_overlapsz+certbot._internal.storage.full_archive_pathz3certbot._internal.cert_manager.cert_path_to_lineagec C sF | j }d|_d|_d|_t�� |_| �|� |�� |j dksBJ �d S )N�/some/reasonable/path� r� rP ) r@ r� r2 r r ZOverlappingMatchFoundr= rp r; r< ) r r� �mock_cert_path_to_lineage� mock_archive� mock_match_and_check_overlapsr� � mock_renewal_file_for_certnameZ mock_warningr@ r$ r$ r% � test_overlapping_archive_dirs s z5DeleteIfAppropriateTest.test_overlapping_archive_dirsc C s: | j }d|_d|_d|_d|_| �|� |jdks6J �d S )Nr: r; r� FrP )r@ r� r2 r rp r< )r r� r< r� r= Z mock_overlapping_archive_dirsr? r@ r$ r$ r% �test_cert_path_only$ s z+DeleteIfAppropriateTest.test_cert_path_onlyc C sF | j }d|_d|_d|_d|_d|_d|_| �|� |jdksBJ �d S �NTr: r; r� rP )r@ Znoninteractive_moder� r2 r rp r< �r r� r� r< Zmock_full_archive_dirr> r? r@ r$ r$ r% � test_noninteractive_deletion6 s z4DeleteIfAppropriateTest.test_noninteractive_deletionc C sT | j }d|_d|_d|_d|_d|_d|_| �|� |jdksBJ �|� jjrPJ �d S rB ) r@ r6 r� r2 r rp r< r� r rC r$ r$ r% �test_opt_in_deletionJ s z,DeleteIfAppropriateTest.test_opt_in_deletionN)rC rD rE rF rp r5 r� r� r7 r9 r rG r@ rA rD rE r$ r$ r$ r% r3 � sH r3 c s� e Zd ZdZ� fdd�Zdd� Ze�d�e�d�dd � ��Zd d � Z d d � Z e�d�dd� �Z e�d�dd� �Z e�d�e�d�dd� ��Z dd� Zdd� Zdd� Zd d � Z� ZS ) �DetermineAccountTestz4Tests for certbot._internal.main._determine_account.c s^ t � �� d | j_d | j_d| j_tjdd�tjdd�g| _t� � | _ t�� | _ d| j j _ d S )NF�x)�id�y�hi)rW rX r@ r �emailZ register_unsafely_without_emailr r* �accsZAccountMemoryStorage�account_storage� mock_client� directoryZ new_authzru rf r$ r% rX b s zDetermineAccountTest.setUpc C s� ddl m} t�d��X}t�� �0 | j|_|| j�W d � W d � S 1 sV0 Y W d � n1 st0 Y d S )Nr )�_determine_accountz1certbot._internal.main.account.AccountFileStorage) rm rP r rG r� r� rM r r@ )r rP � mock_storager$ r$ r% rp n s �zDetermineAccountTest._callz!certbot._internal.client.registerz.certbot._internal.client.display_ops.get_emailc C sZ d|_ ||_z | �� W n< tjyT } z"d|� �t|�ks@J �W Y d }~n d }~0 0 d S )N� foo@bar.bazz0Unable to register an account with ACME server. )r r= rp r r r* )r �err_msg� exception�mock_get_email� mock_registerr+ r$ r$ r% �_register_error_commonv s �z+DetermineAccountTest._register_error_commonc C sl | j �| jd | j� | jd j| j_| jd d f| �� ks@J �| jd j| jjksXJ �| jjd u shJ �d S )NrP ) rM �saverL rN rH r@ r rp rK ru r$ r$ r% �test_args_account_set� s z*DetermineAccountTest.test_args_account_setc C s\ | j �| jd | j� | jd d f| �� ks0J �| jd j| jjksHJ �| jjd u sXJ �d S )Nr ) rM rX rL rN rp rH r@ r rK ru r$ r$ r% �test_single_account� s z(DetermineAccountTest.test_single_accountz3certbot._internal.client.display_ops.choose_accountc C s� | j D ]}| j�|| j� q| j d |_| j d d f| �� ksBJ �t|jd d �t| j �ksbJ �| j d j| j j kszJ �| j j d u s�J �d S )NrP r ) rL rM rX rN r rp �setr' rH r@ r rK )r �mock_choose_accountsr� r$ r$ r% �test_multiple_accounts� s z+DetermineAccountTest.test_multiple_accountsc C sj | j D ]}| j�|| j� qd |_z | �� W n6 tjyd } z dt|�v sPJ �W Y d }~n d }~0 0 d S )NzNo account has been chosen) rL rM rX rN r rp r r r* )r r\ r� r+ r$ r$ r% � test_multiple_accounts_canceled� s z4DetermineAccountTest.test_multiple_accounts_canceledr/ c C s� d|_ t�d��D}| jd tjjf|j_ | jd tjjf| �� ksFJ �W d � n1 sZ0 Y |jj| j | j tj d� | jd j | j j ks�J �d| j jks�J �|�d� d S )NrR � certbot._internal.main.clientr )Ztos_cbzAccount registered.)r r rG rL �sentinelr� �registerrp rs r@ rM rt rH r rK )r r1 rU �clientr$ r$ r% �test_no_accounts_no_email� s �< �z.DetermineAccountTest.test_no_accounts_no_emailc C s| d| j _t�d��.}| jd tjjf|j_| � � W d � n1 sF0 Y | jd j | j j kshJ �d| j jksxJ �d S )Nz other emailr_ rP ) r@ rK r rG rL r` r� ra r rp rH r )r rb r$ r$ r% �test_no_accounts_email� s &z+DetermineAccountTest.test_no_accounts_emailc C s d}| � |t�|�� d S )Nz$Some error message raised by Certbot)rW r r )r rS r$ r$ r% �test_register_error_certbot� s z0DetermineAccountTest.test_register_error_certbotc C s d}t ddd�}| �||� d S )NzAError returned by the ACME server: must agree to terms of servicez$urn:ietf:params:acme:error:malformedz must agree to terms of service)�typZdetail�� acme_errorrW �r rS rT r$ r$ r% �(test_register_error_acme_type_and_detail� s �z=DetermineAccountTest.test_register_error_acme_type_and_detailc C s d}t dd�}| �||� d S )NzKError returned by the ACME server: The server experienced an internal errorz)urn:ietf:params:acme:error:serverInternal)rf rg ri r$ r$ r% �"test_register_error_acme_type_only� s z7DetermineAccountTest.test_register_error_acme_type_only)rC rD rE rF rX rp r rG rW rY rZ r] r^ rc rd re rj rk r� r$ r$ rf r% rF _ s& rF c s� e Zd ZdZ� fdd�Z� fdd�Zd�dd �Zd�d d �Zd d � Zdd� Z dd� Z e � d�dd� �Z e � d�e � d�e � d�e � d�e � d�e � d�dd� ������Ze � d �e � d �d d � ��Ze � d �e � d �e � d �d!d"� ���Ze � d�e � d �e � d �e � d �d#d$� ����Ze � d �e � d �d%d&� ��Ze � d �e � d �e � d'�e � d �d(d)� ����Ze � d�e � d�e � d�e � d*�d+d,� ����Ze � d�d-d.� �Ze � d/�d0d1� �Ze � d2�d3d4� �Ze � d5�e � d6�e � d�d7d8� ���Ze � d5�e � d6�d9d:� ��Ze � d5�e � d6�d;d<� ��Ze � d5�e � d6�d=d>� ��Ze � d5�e � d6�d?d@� ��Z dAdB� Z dCdD� Z dEdF� Z dGdH� Z dIdJ� Z!dKdL� Z"dMdN� Z#d�dOdP�Z$e � d�dQdR� �Z%e � d�e � dS�e � d�e � dT�dUdV� ����Z&e � d�dWdX� �Z'dddYdde(j(�)� ddfdZd[�Z*e � d�e � dS�e � dT�d\d]� ���Z+e � d^�e � d_�e � dT�d`da� ���Z,dbdc� Z-ddde� Z.dfdg� Z/e � dh�didj� �Z0e � dh�dkdl� �Z1e � dm�dndo� �Z2e � dm�dpdq� �Z3e � dr�dsdt� �Z4e � d�dudv� �Z5dwdx� Z6dydz� Z7d{d|� Z8d}d~� Z9dd�� Z:d�d�� Z;d�d�d��Z<d�d�� Z=d�d�� Z>d�d�� Z?d�d�� Z@d�d�� ZAe � d��d�d�� �ZBd�d�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHeI�J� e � d��e � d��e � d�d�d�� ����ZKd�d�d��ZLe � d��e � dS�e � d�d�d�� ���ZMe � d��d�d�� �ZNe � d��e � d��d�d�� ��ZOd�d�� ZPe � d��e � d�d�d�� ��ZQe � d�d�d�� �ZRe � d��e � d��d�d�� ��ZSe � d��e � d��e � d��e � d�d�d�� ����ZT� ZUS )��MainTestz Tests for different commands.c sL t � �� t�| jj� d| jjd| jjd| jjdg| _t � d�� � | _ d S )Nr � --work-dir� --logs-dir�--textz time.sleep) rW rX r �mkdirr@ �logs_dirr �work_dir� standard_argsr rG rZ � mock_sleepru rf r$ r% rX � s �zMainTest.setUpc s t t� t� �� d S r� )� reload_moduler rW r� ru rf r$ r% r� � s zMainTest.tearDownNFc s� |r�t jj� � fdd�}t�d��l}||_t�d��<}| �||�\}}}||||fW d � W d � S 1 sv0 Y W d � n1 s�0 Y nHt�d��.}| �||�\}}}||||fW d � S 1 s�0 Y dS )zaRun the cli with output streams, actual client and optionally os.path.isfile() mocked outc s* | � d�s | � d�s | � d�r"dS � | �S )zMock os.path.isfile()rA �chain�privkeyT)�endswith)�fnrn r� �Z orig_openr$ r% � mock_isfile� s ��z#MainTest._call.<locals>.mock_isfilez certbot.compat.os.path.isfiler_ N)r r� �isfiler rG r= �_call_no_clientmock) r rn �stdout� mockisfiler{ Zmock_ifrb r# �stderrr$ rz r% rp � s X zMainTest._callc C s� | j | }|r|nt�� }tjd|d��v t�d��L}t�d��" t�|dd� �}W d � n1 sh0 Y W d � n1 s�0 Y W d � n1 s�0 Y |||fS )z-Run the client with output streams mocked out�!certbot._internal.main.sys.stdout��new�!certbot._internal.main.sys.stderr�certbot.util.atexitN)rs �io�StringIOr rG r )r rn r~ Z toy_stdoutr� r# r$ r$ r% r} � s lz MainTest._call_no_clientmockc C sF t �d��(}| �g � d|jks$J �W d � n1 s80 Y d S )Nzcertbot._internal.main.runrP )r rG rp r< )r �mock_runr$ r$ r% � test_no_flags s zMainTest.test_no_flagsc C s� t �� }t �� }tjd|d��� tjd|d��� zNzt�dg� W n tyT Y n0 W |�� pf|�� }d|v s�J d�|���n(|�� p�|�� }d|v s�J d�|���0 W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr� r� r� z --version�certbotz Output is {0})r� r� r rG r � SystemExit�getvaluerh )r Ztoy_outZtoy_err�outputr$ r$ r% � test_version_string_program_name s �z)MainTest.test_version_string_program_namec C s� d}zFt �d��( t�| j|dd� � W d � n1 s>0 Y W n: tjy� } z |}|t|�v spJ �W Y d}~n d}~0 0 |dus�J �dS )zQEnsure that a particular error raises a missing cli flag error containing messageNr� )r rG r rs r ZMissingCommandlineFlagr* )r rn �message�excZexc_r$ r$ r% �_cli_missing_flag s :&zMainTest._cli_missing_flagz*certbot._internal.log.post_arg_parse_setupc C s2 ddg}| � |d� |�g d�� | � |d� d S )Nz-nr� zspecify a plugin)� --standalone�-dzeg.iszregister before running)r� �extend)r �_rn r$ r$ r% �test_noninteractive s z MainTest.test_noninteractiverN rL r� zBcertbot._internal.main.client.Client.obtain_and_enroll_certificaterI c C s g d�| j }t�� d f|_t�� |_t�d��n}|j} | �|� t�� } | j d d } | | v sdJ �dd l } | � � } d| � � v r�t�� | v s�J �W d � n1 s�0 Y t�d��J}|j} d} |d| g7 }| �|� | j tj tj d | tjd � W d � n1 �s 0 Y d S ) N)r� r� �-mz none@none.comr� r� z --agree-tosr� rP � user_agentr ZlinuxZ bandersnatchz --user-agentT)r Z verify_sslr� Zalg)rs r r* r rG � ClientNetworkr} r Zget_os_info_uar' �platform�lowerrs rt �joseZRS256)r ZgscZ_obtZdetr� �__�___rn Z acme_clientZacme_netZos_verZuar� Zplatr$ r$ r% �test_user_agent% s. � . �zMainTest.test_user_agent�5certbot._internal.main.plug_sel.record_chosen_plugins�.certbot._internal.main.plug_sel.pick_installerc C s$ | j g d�dd� |jdks J �d S )N) �installz --domains�foo.bar� --cert-pathrA � --key-pathrw � --chain-pathrv T�r rP )rp r< )r Zmock_pick_installer�_recr$ r$ r% �test_installer_selectionF s �z!MainTest.test_installer_selectionr� c C s� t jt�d�t�d�t�d�t�d�d�}t �d��r}||_| jg d�dd� |jd d }|jt�d�kspJ �|j t�d�ks�J �|j t�d�ks�J �W d � n1 s�0 Y d S ) NrA rv rw �r� � chain_path�fullchain_path�key_pathr� )r� � --cert-name�whateverTr� r ) r r* r� � temp_joinrG r rp r' r� r� r� )r �_instr� � mock_installr" � mock_getlin� call_configr$ r$ r% �test_installer_certnameM s � z MainTest.test_installer_certnamec C sT t jt�d�t�d�t�d�t�d�d�}t �d���}||_| jdddd t�d �gd d � |jd d }|jt�d�ks~J �|j t�d�ks�J �|j t�d�ks�J �|j t�d �ks�J �|� � | jddddt�d�gd d � |jd d }|jt�d�k�sJ �|j t�d�k�sJ �|j t�d�k�s0J �W d � n1 �sF0 Y d S )NrA rv rw r� r� r� r� r� r� Zoverriding_privkeyTr� r r� Zoverriding_cert) r r* r� r� rG r rp r' r� r� r� r� �reset)r r� r� r� r� r" r� r� r$ r$ r% � test_installer_param_override^ s6 � �� ��z&MainTest.test_installer_param_overridec C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� Znotfoundr� Zinvalid�r> r? r r� rp )r r� r� r$ r$ r% �test_installer_param_errorz s z#MainTest.test_installer_param_errorr c C s� t jt�d�t�d�t�d�t�d�d�}t �d��&}||_| jdgdd� W d � n1 s`0 Y |jstJ �|js~J �d S ) NrA rv rw r� r� r� Tr� )r r* r� r� rG r rp r )r � mock_instZ mock_getcertr� r� r" r� r$ r$ r% �test_installer_select_cert� s � . z#MainTest.test_installer_select_certzcertbot.util.exe_existsc C sZ d|_ tj�� }g d�}dddt�d�dt�d�dd d d d g }d |v rp| �|�\}}}}d|v sdJ �d|v spJ �| �dgd� t� d��r}t� d��H} t� � | _ | �g d�� |j d \} } } t | t j�s�J �W d � n1 s�0 Y W d � n1 �s0 Y t� d��.} | �ddg� d| jk�s6J �W d � n1 �sL0 Y d S )NT)z--apachez--authenticatorr r� r r� Zblahr� z--nginx-server-rootz/nonexistent/thingr� r� �--debugr z The nginx plugin is not working�MisconfigurationErrorr� z(With the standalone plugin, you probablyrJ rI )r� z--manualr� r� r � certbot._internal.main.certonly�authrP )r r rj rk r� r� rp r� r rG r* r' � isinstancer � Authenticatorr< )r Zmock_exe_existsr� r� r� Z real_pluginsrn r# r^ Zmock_gscZ unused_configr� Zunused_installer� mock_certonlyr$ r$ r% �test_configurator_selection� s, � N z$MainTest.test_configurator_selectionc C sV | � dg�\}}}}d|jjks$J �| � g d��\}}}}|j�tjdtjtj� d S )N�rollbackrP )r� z --checkpointsZ123�{ )rp r� r< rs r rt )r r� rb r$ r$ r% � test_rollback� s �zMainTest.test_rollbackz+certbot._internal.cert_manager.certificatesc C s | � dg� d|jksJ �d S )NZ certificatesrP �r} r< �r r r$ r$ r% �test_certificates� s zMainTest.test_certificatesr� c C s | � dg� d|jksJ �d S )N�deleterP r� r� r$ r$ r% � test_delete� s zMainTest.test_deletez$certbot._internal.main.plugins_discozFcertbot._internal.main.cli.HelpfulArgumentParser.determine_help_topicsc sF g d�� t j� fdd�tt� ��D �� D ]}| �dgt|� � q(d S )N)�--init� --preparez--authenticatorsz --installersc 3 s | ]}t �� |�V qd S r� )� itertools� combinations)r� r� ��flagsr$ r% � <genexpr>� s �z(MainTest.test_plugins.<locals>.<genexpr>ro )r� rv �range�lenrp �list)r r� �_det� mock_discorn r$ r� r% � test_plugins� s ��zMainTest.test_pluginsc C s� g }|j �� }t�� }tj|d��& | �dg|�\}}}}W d � n1 sN0 Y |j�� |�� j �|� |�� � � }|� � � � t |�ks�J �d S )N�r~ ro ) rj rk r� r� r� � patch_display_util_with_stdoutrp �visiblers �ifacesr� �stripr* �r r� r� r� ro r~ r� �filteredr$ r$ r% �test_plugins_no_args� s 4 z MainTest.test_plugins_no_argsc C s� g }|j �� }dd� }t�� }t�d��X}tj|d��, ||_| � dg|�\}}}}W d � n1 sh0 Y W d � n1 s�0 Y |j � � |� � j � |� |� � � � } |� � �� t| �ks�J �d S )Nc S s | || }}}t �� �dS )zRaises error.Error.N)r r )rO �mode�strictr� r$ r$ r% � throw_error� s z?MainTest.test_plugins_no_args_unprivileged.<locals>.throw_errorz certbot.util.set_up_core_dirr� ro )rj rk r� r� r rG r� r� r= rp r� rs r� r� r� r* ) r r� r� r� ro r� r~ Zmock_set_up_core_dirr� r� r$ r$ r% �!test_plugins_no_args_unprivileged� s R z*MainTest.test_plugins_no_args_unprivilegedc C s� g }|j �� }t�� }tj|d��( | �ddg|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }|j j dks�J �|� � � � t|�ks�J �d S )Nr� ro r� rP )rj rk r� r� r� r� rp r� rs r� �initr< r� r� r* r� r$ r$ r% �test_plugins_init� s 6 zMainTest.test_plugins_initc C s� g }|j �� }t�� }tj|d��( | �g d�|�\}}}}W d � n1 sP0 Y |j�� |�� j �|� |�� � � }|j j dks�J �|j �� |j �� |� � }|�� �� t|�ks�J �d S )Nr� )ro r� r� rP )rj rk r� r� r� r� rp r� rs r� r� r< �prepare� availabler� r� r* ) r r� r� r� ro r~ r� r� r� r$ r$ r% �test_plugins_prepare s 6 z MainTest.test_plugins_preparec C s� d}d}d}d}t �d��,}| �dd|ddd dd dg � W d � n1 sL0 Y |jd \}}|jtj�|�kszJ �|jtj�|�ks�J �|j tj�|�ks�J �|j tj�|�ks�J �d S ) NrA �keyrv � fullchainr� r� r� r� r� z--fullchain-pathr ) r rG rp r' r� r r� r� r� r� r� )r rA r� rv r� r� r@ �unused_pluginsr$ r$ r% �test_certonly_abspath s �$z MainTest.test_certonly_abspathc C sX z | � g d�� t�d� W n6 tjyR } z dt|�v s>J �W Y d }~n d }~0 0 d S )N)�-aZbad_authr� z!Exception should have been raisedz-The requested bad_auth plugin does not appear)rp r> �failr �PluginSelectionErrorr* �r �er$ r$ r% �test_certonly_bad_args/ s z MainTest.test_certonly_bad_argsc C s� t �tj�� | �ddg� W d � n1 s00 Y t �tj�� | �ddg� W d � n1 sj0 Y t �tj�� | �ddg� W d � n1 s�0 Y t �tj�� | �ddg� W d � n1 s�0 Y d S )Nr� Z@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa� aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.z 204.11.231.35z%2001:db8:ac69:3ff:b1cb:c8c6:5a84:a31br� ru r$ r$ r% � test_check_config_sanity_domain6 s ,,,z(MainTest.test_check_config_sanity_domainc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz*certonly --csr {0} --allow-subset-of-names�r> r? r r rp rh r� ri ru r$ r$ r% �test_csr_with_besteffortD s z!MainTest.test_csr_with_besteffortc C sZ z| � dtg� W n8 tjyJ } z dt|�v s4J �W Y d }~d S d }~0 0 t�d� d S )Nz--csrzPlease try the certonlyz2Expected supplying --csr to fail with default verb)rp r� r r �reprr> r� r� r$ r$ r% �test_run_with_csrH s zMainTest.test_run_with_csrc C sJ t �tj��* | �d�t�d���� � W d � n1 s<0 Y d S )Nzcertonly --csr {0}zcsr-nonames_512.pem) r> r? r r rp rh r� � vector_pathri ru r$ r$ r% �test_csr_with_no_domainsQ s �z!MainTest.test_csr_with_no_domainsc C sD t �tj��$ | �d�t��� � W d � n1 s60 Y d S )Nz!certonly -d example.org --csr {0}r� ru r$ r$ r% �"test_csr_with_inconsistent_domainsV s z+MainTest.test_csr_with_inconsistent_domainsc C s� t �d��h}d|_t �d��8}||_|d u r0g }|d�� 7 }| �|� W d � n1 sZ0 Y W d � n1 sx0 Y d S )N�=certbot._internal.main._find_lineage_for_domains_and_certname)ZnewcertNrJ z!-d foo.bar -a standalone certonly)r rG r ri rp )r rN rn � mock_renewalr^ r$ r$ r% � _certonly_new_request_commonZ s z%MainTest._certonly_new_request_commonc C sX t �� }d |j_| �|dg� |jjdks.J �|jdks<J �|jd d jdu sTJ �d S �N� --dry-runrP r T)r r* � obtain_and_enroll_certificater r� r< r' �dry_run)r � mock_reportrN r$ r$ r% �)test_certonly_dry_run_new_request_successe s z2MainTest.test_certonly_dry_run_new_request_successz+certbot._internal.main.util.atexit_registerz certbot.crypto_util.notAfterc C s� t j�t j�| jjd��}t j�t j�| jjd��}d}||� j_tj ||||d�}t� � } || j _| � | � | j j dks~J �|j dks�J �||j d d v s�J �||j d d v s�J �d |j d d v s�J �|jd u s�J �d S ) Nz live/foo.barz live/baz.quxz 1970-01-01)rA r� r� r� rP r r1 rQ �donateT)r r� �normpathr� r@ r �dater r r* r r� r< r' r ) r Z mock_notAfterra rV r r� r� r r" rN r$ r$ r% �!test_certonly_new_request_successn s � z*MainTest.test_certonly_new_request_successc C sX t �� }d|j_t�tj�� | �|� W d � n1 s<0 Y |j du sTJ �d S rw ) r r* r r r> r? r r r� r )r ra rN r$ r$ r% �!test_certonly_new_request_failure� s (z*MainTest.test_certonly_new_request_failureTc sZ t �d�} tj�tj�| jjd��} tj | | | | d�} || j _ d| j _ dg| j _ d| _d| _| | _t� � }tj dd �}t� � }t�� � |d |d f|j_ � fd d �}�zX�z�t�d���f}| d f|_ t�d���.}||_ t�d���}|s�||� j_t�d���}||j_ t�d��� |�s g d�}|�r,||7 }z>| �|� �\}� }}|�rZtd|� t|��|�rhJ d��W n" |�s�tdt� � ��Y n0 W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s0 Y W d � n1 �s$0 Y |�r~| �rj| �sj|j� tj gtj�tj�| jjd��� n|j� tj gd � n|jj dk�s�J �W n | � � � Y n0 W |�rPt!tj�| jj"d���"}||�#� v �s�J �W d � n1 �s�0 Y nR|�rNt!tj�| jj"d���"}||�#� v �s.J �W d � n1 �sD0 Y 0 | |� fS )Nr zlive/foo.bar/fullchain.pem)rA r� r� r� F� isnot.orgr0 Z secp256r1Zpem_key)Zpemrv �csrc s � � | � dS )zWrite message to stdout.N)r )r� rn r� r� r$ r% � write_msg� s z0MainTest._test_renewal_common.<locals>.write_msgz5certbot._internal.cert_manager.find_duplicative_certsrJ z)certbot._internal.display.obj.get_displayz*certbot._internal.main.renewal.crypto_utilrN )r� r r� r r� ZReturnedzrenewal should have erroredzUnexpected renewal error: z live/sample-renewal/privkey.pemr �letsencrypt.log)$r� r� r r� r r� r@ r r r* Zshould_autorenewr Zhas_pending_deploymentr- r: Zelliptic_curve� reuse_keyr� r� �obtain_certificaterG r� r= ZnotAfterrp �print�AssertionError� traceback� format_excrs rt r< � _dump_logr rq �read)r �due_for_renewal� extra_args�log_outrn � should_renew�error_expected� quiet_mode� expiry_dater �new_keyr� r� r" Z mock_certrZmock_keyrN r Zmock_fdcr^ Z mock_displayZmock_crypto_utilr# r� �lfr$ r� r% �_test_renewal_common� s� �� � ��� �� 4�4z MainTest._test_renewal_commonc C sp | � dg �\}}}|jjdks"J �|j�|�� � |jdks@J �d|jd d v sVJ �d|jd d v slJ �d S )NTrP � fullchain.pemr r1 r )r Zsave_successorr< Zupdate_all_links_tors Zlatest_common_versionr' )r r� rV r Zlineager$ r$ r% �test_certonly_renewal� s �z MainTest.test_certonly_renewalr/ zEcertbot._internal.log.logging.handlers.RotatingFileHandler.doRolloverc C sp | j dddgdd�\}}}|�d� | j dg d�dd� | j dg d �dd �\}}}d |� jjd d v slJ �d S ) NFr �--keepzsimulating renewal)r �The dry run was successful.)z--renew-by-default�-tvvr� zAuto-renewal forced)r$ r� r" )r z not yet duer )r �assert_any_callr� r' )r r� r� r1 Zmock_displayerr$ r$ r% � test_certonly_renewal_triggers� s � � � z'MainTest.test_certonly_renewal_triggersc C s^ t d� tj�| jjd�}tj�|�rZt|�� }t |�� � W d � n1 sP0 Y d S )NzLogs:r ) r r r� r� r@ rq r r r )r Zlog_pathr r$ r$ r% r � s zMainTest._dump_logc C s. t �| jjd� g d�}| jdg |dd� d S )N�sample-renewal.conf�r) r r$ T�rn r �r� � make_lineager@ r r �r rn r$ r$ r% �test_renew_verb� s zMainTest.test_renew_verbc C s4 t j| jjddd� g d�}| jdg |ddd� d S )Nr' F�Zec)r) r � --reuse-keyT�rn r r r* r, r$ r$ r% �test_reuse_key s zMainTest.test_reuse_keyz6certbot._internal.storage.RenewableCert.save_successorc C s4 t j| jjddd� ddg}| jdg |ddd� d S )Nr' Fr. r) r/ Tr0 r* �r Zunused_save_successorrn r$ r$ r% �test_reuse_key_no_dry_run s z"MainTest.test_reuse_key_no_dry_runc C s2 t �| jjd� g d�}| jdg |dddd� d S )Nr' )r) r/ z --new-keyT)rn r r r r* r2 r$ r$ r% � test_new_key s �zMainTest.test_new_keyz sys.stdinc C sp d|j _t�| jjd� g d�}| jdg |dd� | jjdksBJ �| jj d d }d| krfdksln J �d S ) NFr' r( Tr) rP r i� ) �isattyr r� r+ r@ r r rt r< r' )r �stdinrn Zsleep_call_argr$ r$ r% �!test_noninteractive_renewal_delay s z*MainTest.test_noninteractive_renewal_delayc C sF d|j _t�| jjd� g d�}| jdg |dd� | jjdksBJ �d S )NTr' r( r) r ) r5 r r� r+ r@ r r rt r< )r r6 rn r$ r$ r% �!test_interactive_no_renewal_delay s z*MainTest.test_interactive_no_renewal_delayr' c C sl d|_ t�| jjd� tj�� tjdd� }| jdd ddg|d�\}}}d|� � v sXJ �d|� � v shJ �d S ) NFr' �Z )Zdaysr) )r r rn r zNo renewals were attempted.z7The following certificates are not due for renewal yet:) r r� r+ r@ r r� �nowZ timedeltar r� )r r Zexpiryr� r~ r$ r$ r% � test_renew_skips_recent_certs& s � z&MainTest.test_renew_skips_recent_certsc C s~ t �| jjd� ddg}| jdg |dd�\}}}|�� }d|v sDJ �g d�}| jdg |ddd�\}}}|�� }d|kszJ �d S ) Nr' r) r Tr) )r) r z-q)rn r r r; )r� r+ r@ r r r� )r r� rn r~ �outr$ r$ r% �test_quiet_renew0 s � zMainTest.test_quiet_renewc C s0 t �| jjd� g d�}| jdg |ddd� d S )Nr' )r) r �--post-hook=no-such-commandTF�rn r r r* r, r$ r$ r% �test_renew_hook_validation> s �z#MainTest.test_renew_hook_validationc C sZ t �| jjd� g d�}t�d��$ | jdg |ddd� W d � n1 sL0 Y d S )Nr' )r) r r> z--disable-hook-validationz!certbot._internal.hooks.post_hookTFr? )r� r+ r@ r r rG r r, r$ r$ r% � test_renew_no_hook_validationD s �z&MainTest.test_renew_no_hook_validationc C s| t j�| jjd�}t j�|�s(t�|� tt j�|d�d�� W d � n1 sR0 Y g d�}| j dg |ddd� d S )Nr� z empty.confr� r( FTr? ) r r� r� r@ r r r r r r )r Zrdrn r$ r$ r% � test_renew_verb_empty_configL s z%MainTest.test_renew_verb_empty_configc C s* t �| jjd� | jdg dg d�d� d S )Nr' T�r) r r� zsample-renewal)r rn r* ru r$ r$ r% �test_renew_with_certnameU s �z!MainTest.test_renew_with_certnamec C s | j dg dg d�dd� d S )NTFrC )r rn r )r ru r$ r$ r% � test_renew_with_bad_certnameZ s �z%MainTest.test_renew_with_bad_certnamec C s^ t j�| jjd�}t�|� tt j�|d�d��}|�d� W d � n1 sP0 Y d S )Nr� z test.confr� zMy contents don't matter) r r� r� r@ r r r r r )r Zrenewer_configs_dirr r$ r$ r% �_make_dummy_renewal_config_ s z#MainTest._make_dummy_renewal_configc K s� | � � t�d���}t�� }d|_|d ur4d|i|_|d urD||j_||_t�d��2}|�ddg� | j d dd i|�� W d � n1 s�0 Y |d ur�|r�|j s�J �n|j d u s�J �W d � n1 s�0 Y d S ) Nr� zsomepath/fullchain.pemr �!certbot._internal.main.renew_certrn r) Tr F)TN) rF r rG r* r� � configurationr- r � setdefaultr r )r r r- �assert_oc_calledr� �mock_rcr" r� r$ r$ r% �_test_renew_commone s 2 zMainTest._test_renew_commonc C s | j ddd� d S )NFT�rJ r �rL ru r$ r$ r% �test_renew_no_renewalparamsz s z$MainTest.test_renew_no_renewalparamsc C s | j i ddd� d S )NFT)r rJ r rN ru r$ r$ r% �test_renew_no_authenticator} s �z$MainTest.test_renew_no_authenticatorc C s ddd�}| j |ddd� d S )N�webrootz over 9000)r Z rsa_key_sizeTF)r r rJ rN �r r r$ r$ r% �test_renew_with_bad_int� s ��z MainTest.test_renew_with_bad_intc C s ddd�}| j |dd� d S )NrQ �None)r Z http01_portT�r rJ rN rR r$ r$ r% � test_renew_with_nonetype_http01� s ��z(MainTest.test_renew_with_nonetype_http01c C s$ ddi}dg}| j |d|dd� d S )Nr rQ u uniçodé.comTF)r r r- rJ rN )r r r- r$ r$ r% �test_renew_with_bad_domain� s �z#MainTest.test_renew_with_bad_domainr� c C s2 t �� t �� f|_ddi}| j|dd�� d� d S )Nr rQ Tzrenew --configurator apache�r rJ rn )r r* r rL ri )r r� r r$ r$ r% � test_renew_with_configurator� s �z%MainTest.test_renew_with_configuratorc C s dddd�}| j |dd� d S )NrQ rT Z42)r Z webroot_pathZwebroot_imaginary_flagTrU rN rR r$ r$ r% �$test_renew_plugin_config_restoration� s ��z-MainTest.test_renew_plugin_config_restorationc C s0 ddi}| j |dddt�dt�� i�gd� d S )Nr rQ Tr) z --webroot-mapr� rX )rL �json�dumpsr� r� rR r$ r$ r% �test_renew_with_webroot_map� s �z$MainTest.test_renew_with_webroot_mapc C sB t �d��$}t|_| jddd� W d � n1 s40 Y d S )Nz+certbot._internal.main.renewal.reconstituteFTrM )r rG � Exceptionr= rL )r Zmock_reconstituter$ r$ r% � test_renew_reconstitute_error� s z&MainTest.test_renew_reconstitute_errorc C s� | � � t�d��x}t�� }d|_||_dddii|_t�d��,}t|_| j dd ddgd d � W d � n1 sr0 Y W d � n1 s�0 Y d S ) Nr� zsomewhere/fullchain.pemr r rQ rG Tr) F)r rn r ) rF r rG r* r� r rH r^ r= r )r rK r" r� r$ r$ r% � test_renew_obtain_cert_error� s � �z%MainTest.test_renew_obtain_cert_errorc C s: | j dd d�� ddd� | j dd d�t��� ddd� d S )NTzrenew -d example.comFr? zrenew --csr {0})r ri rh r� ru r$ r$ r% � test_renew_with_bad_cli_args� s ��z%MainTest.test_renew_with_bad_cli_argsc C s: | j dd dddd�tj�gd�\}}}d|�� v s6J �d S )NFr) z --post-hookz {0} -c "print('hello world');")r r r rn zNo hooks were run.)r rh �sys� executabler� )r r� r~ r$ r$ r% �test_no_renewal_with_hooks� s ��� z#MainTest.test_no_renewal_with_hooksr� rJ c C sh dt �� f|_t �� |_}| �g d�� |jjdu s:J �|jjdu sJJ �|� jjdks\J �|� � d S )Nr )r� r� r� r r� Fr ) r r* r rp r r r Z add_messager< r; )r Zmock_report_new_certr^ r� r� rN r$ r$ r% �test_certonly_reinstall� s z MainTest.test_certonly_reinstallc C s2 d}d}t �� }||f|j_tj�tj�| jj d��}tj�tj�| jj d��}|d |f|j _t � d���}||_tj�tj�| jj d��}d� t |||��� } |r�| |7 } t � d�� | �| � W d � n1 s�0 Y W d � n1 s�0 Y d | v �r|j jd u �s.J �n|j �|||||� d S ) N�certrrv z live/example.com/cert_512.pemz live/example.com/fullchain.pemrJ zlive/example.com/chain.pemzV-a standalone certonly --csr {0} --cert-path {1} --chain-path {2} --fullchain-path {3}z"certbot._internal.main.crypto_utilr F)r r* Zobtain_certificate_from_csrr r r� r r� r@ r Zsave_certificaterG rh r� ri rp r rs ) r r rf rv rN r� � full_pathr^ r� rn r$ r$ r% �_test_certonly_csr_common� s> � � �� F �z"MainTest._test_certonly_csr_commonz+certbot._internal.main._csr_report_new_certc C s� | � � |jdksJ �d|jd d v s,J �|jd d d u sBJ �d|jd d v sXJ �d|jd d v snJ �|jdu s|J �d S ) NrP r r r1 r rQ r T)rh r< r' r )r ra rV �mock_csr_reportr$ r$ r% �test_certonly_csr� s zMainTest.test_certonly_csrc C s6 | � dg� |jdksJ �|jd d jdu s2J �d S r� )rh r< r' r )r ri r$ r$ r% �test_certonly_csr_dry_run s z"MainTest.test_certonly_csr_dry_runr� r� c C s� d|_ d}| �dtdtd|dg� ttd��D}|jjdks>J �|jjd d t j � |� � �ksbJ �W d � n1 sv0 Y ttd��@}t �|� � �d }|�� j}|�t �|�tj� W d � n1 s�0 Y d S ) NFr� r� r� �--serverr� �rbrP r )r r} � SS_CERT_PATH�RSA2048_KEY_PATHr r� r< r� r' r� r� �loadr r �pyopenssl_load_certificater� rs �ComparableX509r rt )r r� r� r� r rA r� r$ r$ r% �test_revoke_with_key s" � �& �z MainTest.test_revoke_with_keyc C sL d}t �tj��( | �dtdtd|dg� W d � n1 s>0 Y d S )Nr� r� r� rl r� )r> r? r r r} �CERT�KEY)r r� r$ r$ r% � test_revoke_with_key_mismatch s �z&MainTest.test_revoke_with_key_mismatchc C s� d|_ t�� d f|_ | �dtdg�\}}}}tt��@}t�|�� �d }|� � j }|� t � |�tj� W d � n1 sz0 Y d S )NFr� r� r )r r r* rp rt r r rq r Zacme_from_config_keyr� rs r� rr rt )r r� r� r� rb r rA r� r$ r$ r% �test_revoke_without_key" s �z MainTest.test_revoke_without_keyc C s� t �d���}t �� }d|_|df|j_| �g d�� t �d��H}t �� }||j_dg|j_| �g d��}d|d v sxJ �W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nr_ Zimaginary_accountZworked)ra �--email�user@example.org� certbot._internal.main.account� an accountz There is an existing accountr ) r rG r* rH ra r r} �AccountFileStoragerk )r r� Z mocked_clientr� Zmocked_account�mocked_storagerG r$ r$ r% � test_register0 s zMainTest.test_registerz'certbot._internal.updater._run_updatersc C sl t j|_t�t j�� t�d d d � W d � n1 s80 Y d| j_t � | jd d � |j du shJ �d S rw ) r r� r= r> r? r � renew_certr@ r r Zrun_generic_updatersr )r r� r� r$ r$ r% �test_plugin_selection_errorA s ,z$MainTest.test_plugin_selection_errorz3certbot._internal.main.updater.run_renewal_deployerc C s` d| j _t�� }|t�� f|_t�| j dd� |jdks<J �|jdksJJ �|j� � |� � dS )z8A dry-run renewal shouldn't try to restart the installerTNrP ) r@ r r r* r r r r< r� r; )r r� r^ r� Zmock_run_renewal_deployerr" r$ r$ r% �#test_renew_doesnt_restart_on_dryrunN s z,MainTest.test_renew_doesnt_restart_on_dryrun)NF)N)N)NNN)N)VrC rD rE rF rX r� rp r} r� r� r� r rG r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r� r: r r! r& r r- r1 r3 r4 r7 r8 r; r= r@ rA rB rD rE rF rL rO rP rS rV rW rY rZ r] r_ r` ra rd r� r� re rh rj rk rs rv rw r~ r� r� r� r$ r$ rf r% rl � s@ % � K � rl c @ s> e Zd Zdd� Zdd� Zdd� Ze�d�dd � �Zd d � Z d S ) �UnregisterTestc C s@ t �d�t �d�t �d�t�� d�| _dd� | j�� D �| _d S )Nr� rz r_ )rP r rb � get_utilityc S s i | ]\}}||� � �qS r$ r� r� r$ r$ r% r� h r6 z(UnregisterTest.setUp.<locals>.<dictcomp>)r rG r� r� r r� r ru r$ r$ r% rX b s �zUnregisterTest.setUpc C s | j �� D ] }|�� q d S r� )r r rd r r$ r$ r% r� j s zUnregisterTest.tearDownc C sR t �� | jd j_| jd � }d|j_t �� }t �� }t�||�}|dksNJ �d S )Nr r� FzDeactivation aborted.)r r r r| r r� r � unregister)r r8 r@ r� �resr$ r$ r% �test_abort_unregistern s z$UnregisterTest.test_abort_unregisterr/ c C s� t �� }dg|j_|| jd j_t �� df| jd _t �� }|| jd j_t �� }t �� }t�||�}|d u srJ �|� d� d S )Nr{ r ZfoorP rb zAccount deactivated.) r r* rk r r r| �Clientr r� rs )r r1 r} � cb_clientr@ r� r� r$ r$ r% �test_unregisterz s z UnregisterTest.test_unregisterc C s| t �� }g |j_|| jd j_t �� }|| jd j_t �� }d|_t �� }t� ||�}d}||ksfJ �|j j j du sxJ �d S )Nr rb z"https://acme.example.com/directoryzNCould not find existing account for server https://acme.example.com/directory.F) r r* rk r r r| r� r� r r� r� Zdeactivate_registrationr )r r} r� r@ r� r� �mr$ r$ r% �test_unregister_no_account� s z)UnregisterTest.test_unregister_no_accountN) rC rD rE rX r� r� r rG r� r� r$ r$ r$ r% r� a s r� c @ s" e Zd ZdZe�d�dd� �ZdS )�MakeOrVerifyNeededDirsz<Tests for certbot._internal.main.make_or_verify_needed_dirs.zcertbot._internal.main.utilc C sp t �| j� | jj| jjfD ]}|j�|tj| jj � q | jj | jj | jj f}|D ]}|j j|| jj d� qRd S )N)r� )r Zmake_or_verify_needed_dirsr@ r rr Zset_up_core_dirr% r ZCONFIG_DIRS_MODEZstrict_permissionsZrenewal_pre_hooks_dirZrenewal_deploy_hooks_dirZrenewal_post_hooks_dirZmake_or_verify_dir)r Z mock_utilZcore_dirZ hook_dirsZhook_dirr$ r$ r% �test_it� s ���z MakeOrVerifyNeededDirs.test_itN)rC rD rE rF r rG r� r$ r$ r$ r% r� � s r� c s� e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�e�d �e�d �e�d �d d � ����Z e�d�e�d �e�d �e�d �dd� ����Z e�d �e�d �e�d�dd� ���Z e�d �e�d �e�d�dd� ���Z e�d �e�d�dd� ��Z dd� Ze�d�e�d �e�d�dd� ���Ze�d �e�d �e�d�e�d�e�� d d � �����Ze�d �e�d �e�d�e�d�e�� d d � �����Zd d!� Z� ZS )"� EnhanceTestz)Tests for certbot._internal.main.enhance.c s4 t � �� t�� | _| j�� | _tjt j d�| _ d S �N)�spec) rW rX r� r� r� rZ r� r r* r �AutoHSTSEnhancement� mockinstallerru rf r$ r% rX � s zEnhanceTest.setUpc C s | j �� d S r� r� ru r$ r$ r% r� � s zEnhanceTest.tearDownc C s� t j�� }t�||�}t�d���}dg|_t�d���}dg|_t�d��P}t�� }||_ ||_t � ||� |W d � W d � W d � S 1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr r� r� rJ ) r rj rk r rl r rG r r* r@ r �enhance)r rn ro r@ Z mock_certsZmock_domr^ rN r$ r$ r% rp � s zEnhanceTest._callr� r� z0certbot._internal.main.display_ops.choose_valuesz0certbot._internal.main._find_domains_or_certnamec C sx t jdd�|_dg|_d|_t �d��>}| �ddg� |js@J �d|jd d v sVJ �W d � n1 sj0 Y d S ) N�/tmp/nonexistent�r� r� �NNr� r� � --redirectr r rQ )r r* r rG rp r r' )r � mock_findr� r" r� � mock_pickr$ r$ r% �test_selection_question� s z#EnhanceTest.test_selection_questionc C s� t jdd�|_dg|_d|_t �d��t t �d��J}| �g d��}|jsLJ �d|jd d v sbJ �|jjsnJ �W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nr� r� r� r� r� z.certbot._internal.main.plug_sel.logger.warning)r� r� rQ r� z make senser )r r* r rG rp r r' �enhance_config)r r� r� r" r� Zmock_logrN r$ r$ r% �test_selection_auth_warning� s z'EnhanceTest.test_selection_auth_warningc s� t jdd�|_dg|_t �d��� | �g d��� ddg}dg}� jjsJJ �t� fd d �|D ��sdJ �t� fd d �|D ��r~J �d� jj d d v s�J �W d � n1 s�0 Y d S ) Nr� r� r� r� �r� r� �--hstsZredirectZhstsZuirc 3 s | ]}t � j|�V qd S r� ��getattrr@ �r� r� �rN r$ r% r� � r6 z7EnhanceTest.test_enhance_config_call.<locals>.<genexpr>c 3 s | ]}t � j|�V qd S r� r� r� r� r$ r% r� � r6 r ) r r* r rG rp r� r �all�anyr' )r r� r� r" Zreq_enhZ not_req_enhr$ r� r% �test_enhance_config_call� s z$EnhanceTest.test_enhance_config_callc C sl t jdd�|_dg|_t �d��8 | �g d��}|jjs<J �|jdu sJJ �W d � n1 s^0 Y d S )Nr� r� r� r� )r� r� r� z--non-interactiveF)r r* r rG rp r� r )r r� r� r" rN r$ r$ r% �test_enhance_noninteractive� s � z'EnhanceTest.test_enhance_noninteractivec C sn g |_ t�d��J t�tj�� | �g d�� W d � n1 sB0 Y W d � n1 s`0 Y d S )Nr� r� )r r rG r> r? r r rp )r r� r� r$ r$ r% �test_user_abort_domains s z#EnhanceTest.test_user_abort_domainsc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r )r> r? r r� rp ru r$ r$ r% � test_no_enhancements_defined s z(EnhanceTest.test_no_enhancements_definedrz c C s: dg|_ d|_ t�� |_| �ddg�}|jjdu s6J �d S )Nr� r� r� r� F)r r r� r= rp r� r )r r� r� r� rN r$ r$ r% r� s z'EnhanceTest.test_plugin_selection_errorr� c C s^ | j |_ddg|_tjdd�|_| �ddg� | j jjs<J �| j jjd d ddgksZJ �d S ) Nr� � another.tldr� r� r� � --auto-hstsr rP )r� r r r* rp Zenable_autohstsr r' �r r� r� r� r� r" r$ r$ r% �test_enhancement_enable s �z#EnhanceTest.test_enhancement_enablec C sf t �| jd�|_ddg|_tjdd�|_t�tj �� | � ddg� W d � n1 sX0 Y d S )Nr r� r� r� r� r� r� ) r r| r@ r r r* r> r? r r~ rp r� r$ r$ r% �%test_enhancement_enable_not_supported, s z1EnhanceTest.test_enhancement_enable_not_supportedc C s> t �tj�� | �g d�� W d � n1 s00 Y d S )N)r� r� r� )r> r? r r rp ru r$ r$ r% � test_enhancement_enable_conflict8 s z,EnhanceTest.test_enhancement_enable_conflict)rC rD rE rF rX r� rp r rG r� r� r� r� r� r� r� r� r� r� r� r� r� r$ r$ rf r% r� � sV r� c sX e Zd ZdZ� fdd�Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Z� Z S ) � InstallTestz)Tests for certbot._internal.main.install.c s t � �� tjtjd�| _d S r� )rW rX r r* r r� r� ru rf r$ r% rX @ s zInstallTest.setUpr� r� c C sh t �| jd�|_tj�� }d| j_d| j_t � t j �� t �| j|� W d � n1 sZ0 Y d S )Nr TZ nonexistent)r r| r@ r r rj rk r} r2 r> r? r r~ r r� �r r� r� ro r$ r$ r% �&test_install_enhancement_not_supportedD s z2InstallTest.test_install_enhancement_not_supportedc C sp | j |_tj�� }d| j_d | j_d| j_d| j_ t � t j �� t�| j|� W d � n1 sb0 Y d S )NTr� )r� r r rj rk r@ r} r2 r� r� r> r? r r� r r� r� r$ r$ r% �$test_install_enhancement_no_certnameN s z0InstallTest.test_install_enhancement_no_certname) rC rD rE rF rX r rG r� r� r� r$ r$ rf r% r� = s r� c @ sx e Zd ZdZdd� Zdd� Zedd� �Zedd � �Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� ZdS )�ReportNewCertTestznTests for certbot._internal.main._report_new_cert and certbot._internal.main._csr_report_new_cert. c C sJ t �d�| _| j�� | _t �d�| _| j�� | _t�ddddd�| j_d S )Nr/ z+certbot._internal.main.crypto_util.notAfteri� rP r ) r rG � notify_patchrZ r1 �notafter_patchZ mock_notafterr� r ru r$ r$ r% rX ` s zReportNewCertTest.setUpc C s | j �� | j�� d S r� )r� rd r� ru r$ r$ r% r� h s zReportNewCertTest.tearDownc O s ddl m} ||i |��S )Nr )�_report_new_cert)rm r� )�clsrn r� r� r$ r$ r% rp l s zReportNewCertTest._callc O s ddl m} ||i |��S )Nr )�_csr_report_new_cert)rm r� )r� rn r� r� r$ r$ r% � _call_csrq s zReportNewCertTest._call_csrc C s( | � tjdd�d d d � | j�d� d S �NT�r r# �rp r r r1 r0 ru r$ r$ r% �test_report_dry_runv s z%ReportNewCertTest.test_report_dry_runc C s( | � tjdd�d d d � | j�d� d S r� �r� r r r1 r0 ru r$ r$ r% �test_csr_report_dry_runz s z)ReportNewCertTest.test_csr_report_dry_runc C s� t �t��( | �tjdd�d d d � W d � n1 s80 Y t �t��( | �tjdd�d d d � W d � n1 sz0 Y d S )NFr� )r> r? r rp r r r� ru r$ r$ r% �test_report_no_paths~ s 6 z&ReportNewCertTest.test_report_no_pathsc C s( | � tjdd�ddd� | j�d� d S )NFr� �/path/to/cert.pem�/path/to/fullchain.pem�/path/to/privkey.pemaA Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem Key is saved at: /path/to/privkey.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background.r� ru r$ r$ r% � test_report� s ��z ReportNewCertTest.test_reportc C s( | � tjdd�ddd � | j�d� d S )NFr� r� r� a Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background.r� ru r$ r$ r% �test_report_no_key� s ��z$ReportNewCertTest.test_report_no_keyc C s* | � tjddd�ddd� | j�d� d S )NF)r �preconfigured_renewalr� r� r� �� Successfully received certificate. Certificate is saved at: /path/to/fullchain.pem Key is saved at: /path/to/privkey.pem This certificate expires on 1970-01-01. These files will be updated when the certificate renews.r� ru r$ r$ r% �$test_report_no_preconfigured_renewal� s ��z6ReportNewCertTest.test_report_no_preconfigured_renewalc C s( | � tjdd�ddd� | j�d� d S )NFr� r� z/path/to/chain.pemr� z� Successfully received certificate. Certificate is saved at: /path/to/cert.pem Intermediate CA chain is saved at: /path/to/chain.pem Full certificate chain is saved at: /path/to/fullchain.pem This certificate expires on 1970-01-01.r� ru r$ r$ r% �test_csr_report� s ��z!ReportNewCertTest.test_csr_reportc C s, | � tjdddd�ddd� | j�d� dS ) zBShouldn't get a message about autorenewal if no --manual-auth-hookFr N)r r �manual_auth_hookr� r� r� r� r� ru r$ r$ r% �test_manual_no_hooks_report� s ��z-ReportNewCertTest.test_manual_no_hooks_reportN)rC rD rE rF rX r� � classmethodrp r� r� r� r� r� r� r� r� r� r$ r$ r$ r% r� [ s r� c @ sZ e Zd ZdZdd� Zdd� Zedd� �Zed�d d �Z d d � Z d d� Z dd� Z dd� Z dS )�ReportNextStepsTestz3Tests for certbot._internal.main._report_next_stepsc C sL t jddd dd d�| _t �d�}|�� | _| �|j� tj | _ t � � t_ d S )Nr� Tr )Z cert_namer� r r r� r/ ) r r* r@ rG rZ r1 rc rd rb r~ � old_stdoutr� r� )r r� r$ r$ r% rX � s � zReportNextStepsTest.setUpc C s | j t_d S r� )r� rb r~ ru r$ r$ r% r� � s z ReportNextStepsTest.tearDownc O s ddl m} ||i |�� d S )Nr )�_report_next_steps)rm r� )r� rn r� r� r$ r$ r% rp � s zReportNextStepsTest._call)�returnc C s@ | j jdksJ �| j jd d d dks,J �| j jd d d S )Nr1 r z NEXT STEPS:rP )r1 r< r� ru r$ r$ r% �_output� s zReportNextStepsTest._outputc C s. d| j _d| j _| �| j dd� | j�� dS )z No steps for a normal renewalr z /bin/trueN)r@ r r� rp r1 r; ru r$ r$ r% r� � s z ReportNextStepsTest.test_reportc C s, d| j _| �| j dd� d| �� v s(J �dS )z --csr requires manual renewalzfoo.csrNz--csr will not be renewed)r@ r rp r� ru r$ r$ r% r� � s z#ReportNextStepsTest.test_csr_reportc C s, d| j _| �| j dd� d| �� v s(J �dS )z/--manual without a hook requires manual renewalr Nz --manual certificates requires)r@ r rp r� ru r$ r$ r% �test_manual_no_hook_renewal� s z/ReportNextStepsTest.test_manual_no_hook_renewalc C s, d| j _| �| j dd� d| �� v s(J �dS )z2No --preconfigured-renewal needs manual cron setupFNz!https://certbot.org/renewal-setup)r@ r� rp r� ru r$ r$ r% � test_no_preconfigured_renewal� s z1ReportNextStepsTest.test_no_preconfigured_renewalN)rC rD rE rF rX r� r� rp r* r� r� r� r� r� r$ r$ r$ r% r� � s r� c sj e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z e � d�dd� �Z dd� Z� ZS )�UpdateAccountTestz/Tests for certbot._internal.main.update_accountc st t �d�t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd �� D �| _� �� D ]}| �|j� qXt� � � S ) Nrz r� r_ r� r/ z*certbot._internal.eff.prepare_subscription)r �atexitrb �determine_account�notify� prepare_subr c s i | ]}|� | � � �qS r$ r� �r� r� �re r$ r% r� r6 z+UpdateAccountTest.setUp.<locals>.<dictcomp>� r rG r� r� r r rc rd rW rX r rf r� r% rX s � zUpdateAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S �Nr� r� r rm rn ro �r rG r@ r rr rq r r, r$ r$ r% rp s � ��zUpdateAccountTest._callc C sX t �� }t �� }t �� }|g|j_|| jd j_|j|j_|t �� f| jd _|||fS )Nr r� )r r* rk r r r| �bodyr� �r rQ Z mock_account� mock_regrr$ r$ r% �_prepare_mock_account s z'UpdateAccountTest._prepare_mock_accountc C s� | � � \}}}| �|�}|du s$J �| jd �� jjjdks@J �|jjj dd� |j jdks`J �| jd � d� | jd � � dS ) z9Utility to assert that email removal is handled correctlyNrb rP r$ ��contactr� zFAny contact information associated with this account has been removed.r� ) r� rp r r� r� �update_registrationr< r� �updater0 � update_regrr; )r rn r� rQ r� �resultr$ r$ r% �_test_update_no_contact# s �z)UpdateAccountTest._test_update_no_contactc C s8 t �� }g |j_|| jd j_| �g d��dks4J �dS )�2Test that no existing account is handled correctlyr )�update_accountrx ry �]Could not find an existing account for server https://acme-v02.api.letsencrypt.org/directory.N�r r* rk r r r| rp �r rQ r$ r$ r% �test_no_existing_accounts5 s �z+UpdateAccountTest.test_no_existing_accountsc C s | � ddg� dS )zBTest that --register-unsafely-without-email is handled as no emailr� z!--register-unsafely-without-emailN�r� ru r$ r$ r% � test_update_account_remove_email> s z2UpdateAccountTest.test_update_account_remove_emailc C s | � g d�� dS )z9Test that providing an empty email is handled as no email)r� r� r; Nr� ru r$ r$ r% � test_update_account_empty_emailB s z1UpdateAccountTest.test_update_account_empty_emailz,certbot._internal.main.display_ops.get_emailc C s� d|_ | �� \}}}t�� }|| jd j_ | �dg�}|du sBJ �|jjj dksTJ �|j j dksdJ �| jd j dksxJ �| jd � d� dS ) z=Test that updating with a singular email is handled correctlyzuser@example.comrb r� NrP r� r� z4Your e-mail address was updated to user@example.com.) r r� r r* r r� rp r� r� r< r� r0 )r Z mock_emailr� rQ rN r� r$ r$ r% � test_update_account_with_emailF s �z0UpdateAccountTest.test_update_account_with_emailc C s\ | � � \}}}| �g d��du s$J �|jjjddgd� |jjdksHJ �| jd �d� dS ) z8Test that multiple email addresses are handled correctly)r� r� z!user@example.com,user@example.orgNzmailto:user@example.comzmailto:user@example.orgr� rP r� zEYour e-mail address was updated to user@example.com,user@example.org.)r� rp r� r� r0 r� r< r )r r� rQ r� r$ r$ r% �(test_update_account_with_multiple_emails[ s � �z:UpdateAccountTest.test_update_account_with_multiple_emails)rC rD rE rF rX rp r� r� r� r� r� r rG r� r� r� r$ r$ rf r% r� � s r� c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�ShowAccountTestz-Tests for certbot._internal.main.show_accountc sl t �d�t �d�t �d�t �d�t �d�t�� d�� � fdd�� D �| _� �� D ]}| �|j� qPt� � � S ) Nrz r� r_ r� r/ )r r� rb r� r� r c s i | ]}|� | � � �qS r$ r� r� r� r$ r% r� s r6 z)ShowAccountTest.setUp.<locals>.<dictcomp>r� r rf r� r% rX j s � zShowAccountTest.setUpc C s� t �d��| t �d��R d| jjd| jjd| jjdg| }t�|d d � �W d � W d � S 1 sn0 Y W d � n1 s�0 Y d S r� r� r, r$ r$ r% rp y s � ��zShowAccountTest._callc C s\ t �� }t �� }t �� }|g|j_|| jd j_|j|j_d|jj _|t �� f| jd _d S )Nr s foobarbazr� ) r r* rk r r r| r� r� r� Z thumbprintr� r$ r$ r% r� � s z%ShowAccountTest._prepare_mock_accountc C sd | � � t�� }t�� }||j_d|_||jj_|| j d j _dg}| � |� |jjj dks`J �d S )Nz+https://www.letsencrypt-demo.org/acme/reg/1rb � show_accountrP ) r� r r* r� r� Zurir� Zquery_registrationr r r� rp r< )r r� rN r� rn r$ r$ r% �_test_show_account� s z"ShowAccountTest._test_show_accountc C s6 t �� }g |j_|| jd j_| �dg�dks2J �dS )r� r r� r� Nr� r� r$ r$ r% r� � s �z)ShowAccountTest.test_no_existing_accountsc C sp | � � t�� }d|_|| jd j_z| �dg� W n6 tj yj } z dt |�ksVJ �W Y d}~n d}~0 0 dS )z;Test that issues with the ACME client are handled correctlyNrb r� zACME client is not set.) r� r r* r� r r� r rp r r r* )r rN r� r$ r$ r% �test_no_existing_client� s z'ShowAccountTest.test_no_existing_clientc C s: | � d� | jd jdks J �| jd �t�d�g� d S )Nr$ r� rP z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contact: none�r� r r< Zassert_has_callsr r� ru r$ r$ r% �test_no_contacts� s �z ShowAccountTest.test_no_contactsc C s> d}| � |� | jd jdks"J �| jd �t�d�g� d S )N)�mailto:foo@example.comr� rP z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contact: foo@example.comr� �r r� r$ r$ r% �test_single_email� s �z!ShowAccountTest.test_single_emailc C s> d}| � |� | jd jdks"J �| jd �t�d�g� d S )N)r� zmailto:bar@example.comr� rP z�Account details for server https://acme-v02.api.letsencrypt.org/directory: Account URL: https://www.letsencrypt-demo.org/acme/reg/1 Account Thumbprint: Zm9vYmFyYmF6 Email contacts: foo@example.com, bar@example.comr� r� r$ r$ r% �test_double_email� s �z!ShowAccountTest.test_double_email)rC rD rE rF rX rp r� r� r� r� r� r� r� r� r$ r$ rf r% r� g s r� c @ s` e Zd ZdZejZdZe� d�Ze j dd� �Z e j dd� �Ze j d�� d �d d � �Zd d � ZdS )� TestLockOrderzFTests that Certbot's directory locks were acquired in the right order.z Expected TestLockOrder errorz|1 renew failurec c s4 t �d��}|V W d � n1 s&0 Y d S )Nz certbot._internal.lock.lock_dir)r rG )r � mock_lock_dirr$ r$ r% r� � s zTestLockOrder.mock_lock_dirc # s� � ��fdd�}����fdd�}t j�tjd|��H t j�tjd|�� dV W d � n1 sd0 Y W d � n1 s�0 Y dS )zJPatches plugin prepare to call mock_lock_dir and raise the expected error.c s �� � �� �j��d S r� ��EXPECTED_ERROR_TYPE�EXPECTED_ERROR_STR�Z unused_self)�authenticator_dirr� r r$ r% �authenticator_lock� s z=TestLockOrder.mock_plugin_prepare.<locals>.authenticator_lockc s �� � �dkr �� �j��d S )Nr� r r )� installer_dirr� r � subcommandr$ r% �installer_lock� s z9TestLockOrder.mock_plugin_prepare.<locals>.installer_lockr� N)r rG �objectr r� r r| )r r r r� r r r r$ )r r r� r r r% �mock_plugin_prepare� s z!TestLockOrder.mock_plugin_preparezcertonly install renew run)�paramsc c s� t |d �}t |d �}t |d �}t |d �}t |d �}|j} | dddd d d |d |d |g } t�|d� | �|||| ��@ ||||g} | dkr�| | fV n| | |g fV W d � n1 s�0 Y dS )aR Sets up Certbot with args and mocks to error after acquiring the last lock. This fixture yields the CLI arguments that should be given to Certbot and the expected order of directories to be locked. An error is raised after acquiring the last lock just as a means of stopping Certbot's execution. r r@ r" ZlogsZworkr� r z-ir z--no-random-sleep-on-renewr rn rm r' r� N)r* Zparamr� r+ r ) r r� ZrequestZtmp_pathr r r rq rr r rn � lock_orderr$ r$ r% �args_and_lock_order� s � z!TestLockOrder.args_and_lock_orderc C s� |\}}t j| j| jd�� t�|� W d � n1 s:0 Y |jt|�ksVJ �t|j|�D ] \}}|d d |ksbJ �qbd S )Nr7 r ) r> r? r �EXPECTED_ERROR_STR_REGEXr r< r� �zipr� )r r r� rn r r� Z locked_dirr$ r$ r% �test_lock_order s (z TestLockOrder.test_lock_orderN)rC rD rE rF r r r r r r> Zfixturer� � contextlib�contextmanagerr ri r r r$ r$ r$ r% r� � s r� �__main__rP )UrF r r� � importlibr ru r� r� r[ r� rb r� r �typingr Zunittestr r Zjosepyr� r> r� Z acme.messagesr rh r� r r r r Zcertbot._internalr r r r r Zcertbot._internal.pluginsr r r r Zcertbot.compatr r Zcertbot.pluginsr Zcertbot.tests.utilZtestsr� r� r� rt r� ru ZJWKRSArp Z load_vectorr� ro rn ZTestCaser ZConfigTestCaserH r� r� ZTempDirTestCaser� r� r3 rF rl r� r� r� r� r� r� r� r� r� rC �exit�argv�__file__r$ r$ r$ r% �<module> s� RX ggk > o4ihK __pycache__/ocsp_test.cpython-39.opt-1.pyc 0000644 00000025430 15114562471 0014361 0 ustar 00 a }|�g}H � @ sN d Z ddlZddlmZ ddlmZ ddlZddlZddlmZ ddlZddlm Z ddl m Z ddl m Z dd l mZ dd lmZ dd lmZ dd lmZ ddlZddlZdd lmZ ddlmZ dZ G dd� dej �Z G dd� dej �Z ej!d"dd��Z"dd� Z#dZ$dZ%dZ&d Z'd Z(d Z)d Z*e+d k�rJe�,e�-ej.d!d� e/g �� dS )#zTests for ocsp.py� N)�datetime)� timedelta)�mock)�x509)�InvalidSignature)�UnsupportedAlgorithm)�default_backend)�hashes)� CryptographyDeprecationWarning��ocsp)�errors)�utilz;Missing = in header key=value ocsp: Use -help for summary. c @ s� e Zd ZdZdd� Ze�d�e�d�e�d�dd� ���Ze�d �e�d �e�d �d d � ���Zdd� Z e�d�e�d �dd� ��Z dS )�OCSPTestOpenSSLz5 OCSP revocation tests using OpenSSL binary. c C s~ ddl m} t�d��T}t�d��*}t|_d|_|jdd�| _W d � n1 sR0 Y W d � n1 sp0 Y d S )Nr r �certbot.ocsp.subprocess.run�certbot.util.exe_existsT�Z enforce_openssl_binary_usage) �certbotr r �patch�out�stderr� return_value�RevocationChecker�checker)�selfr �mock_run� mock_exists� r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/ocsp_test.py�setUp" s zOCSPTestOpenSSL.setUpzcertbot.ocsp.logger.infor r c C s` t |j_d|_ddlm} |jdd�}t �d�d |j_|jdd�}d|_d|_|jdd�}d S )NTr r r � � F)r r r r r r � partition� call_count)r r r �mock_logr r r r r � test_init* s zOCSPTestOpenSSL.test_init�#certbot.ocsp._determine_ocsp_server�!certbot.ocsp.crypto_util.notAfterzcertbot.util.run_scriptc C s� t �tj�}t�� }d|_d|_|tdd� |_ d| j _ d|_ d| j _ t t dd � �|_ d |_ t�d �|_||_ d|_ |j}d S ) N�x�yr! �ZhoursT)� r+ F� )z http://x.cozx.coz#Unable to load certificate launcher)r �now�pytz�UTCr � MagicMock� cert_path� chain_pathr r r �broken�tuple� openssl_happyr ZSubprocessError� side_effectr# )r r Zmock_na�mock_determiner- �cert_objZ count_beforer r r �test_ocsp_revokedB s z!OCSPTestOpenSSL.test_ocsp_revokedc C s$ t �d�}ddlm} |�|�}d S )N�ocsp_certificate.pemr r )� test_util� vector_pathr r Z_determine_ocsp_server)r r1 r �resultr r r �test_determine_ocsp_serverb s z*OCSPTestOpenSSL.test_determine_ocsp_serverzcertbot.ocsp.loggerc C s& t |_ddlm} d|j_d|j_d S )Nr r )�openssl_confusedr r r �debugr# �info)r r r$ r r r r �test_translate_ocspi s z#OCSPTestOpenSSL.test_translate_ocspN) �__name__� __module__� __qualname__�__doc__r r r r% r9 r> rB r r r r r s r c @ s\ e Zd ZdZdd� Ze�d�e�d�dd� ��Zdd � Zd d � Z d d � Z dd� Z dd� Z dS )�OSCPTestCryptographyz; OCSP revokation tests using Cryptography >= 2.4.0 c C s� ddl m} |�� | _t�d�| _t�d�| _t� � | _ | j| j _| j| j _t � t j�}tjd|tdd� d�| _| j�� | �| jj� d S ) Nr r r: �ocsp_issuer_certificate.pemr' r! r* )r )r r r r r; r< r1 r2 r r0 r8 r r- r. r/ r r Z mock_notAfter�startZ addCleanup�stop)r r r- r r r r � s � zOSCPTestCryptography.setUpr& z%certbot.ocsp._check_ocsp_cryptographyc C s, d|_ | j�| j� |�| j| jdd� d S )N)�http://example.com� example.comrK � )r r � ocsp_revokedr8 Zassert_called_once_withr1 r2 )r � mock_checkr7 r r r � test_ensure_cryptography_toggled� s z5OSCPTestCryptography.test_ensure_cryptography_toggledc C sD t tjjtjj�� | j�| j�}W d � n1 s60 Y d S )N) � _ocsp_mock�ocsp_lib�OCSPCertStatus�REVOKED�OCSPResponseStatus� SUCCESSFULr rN r8 )r �revokedr r r � test_revoke� s ,z OSCPTestCryptography.test_revokec C s� t �t�d�t� �}ttjjtj j ��p}|j |d j _ d |d j _| j�| j� t j�|�� �j}d |d j _ ||d j _| j�| j� W d � n1 s�0 Y d S )NrH � mock_response�r �load_pem_x509_certificater; � load_vectorr rQ rR rS rT rU rV �subjectr �responder_nameZresponder_key_hashr rN r8 ZSubjectKeyIdentifierZfrom_public_keyZ public_keyZdigest)r �issuer�mocks�key_hashr r r �test_responder_is_issuer� s �� ,z-OSCPTestCryptography.test_responder_is_issuerc C s� t �t�d�t� �}t �t�d�t� �}ttjjtj j ��p}|j |d j _ d |d j _| j�| j� t j�|�� �j}d |d j _ ||d j _| j�| j� W d � n1 s�0 Y d S )NrH � ocsp_responder_certificate.pemrY rZ )r r_ � responderr` ra r r r �%test_responder_is_authorized_delegate� s$ � �� , z:OSCPTestCryptography.test_responder_is_authorized_delegatec C s� t tjjtjjdd�� | j�| j�}W d � n1 s:0 Y t tjjtjj �� | j�| j�}W d � n1 sz0 Y t tjjtjj�� | j�| j�}W d � n1 s�0 Y t tjj tjj��Z t j dt �dt jj�d�� | j�| j�}W d � n1 �s0 Y W d � n1 �s80 Y t tjj tjjtd�d�� | j�| j�}W d � n1 �s�0 Y t tjj tjjtd�d�� | j�| j�}W d � n1 �s�0 Y t tjj tjjtd�d�� | j�| j�}W d � n1 �s0 Y t tjj tjj��*}g |d j_| j�| j�}W d � n1 �sd0 Y t tjj tjj��J}|d jjd }t jd |jd �|d jjd < | j�| j�}W d � n1 �s�0 Y t tjj tjj��� t � d ��`}d |_t j dt �dt jj�d�� | j�| j�}W d � n1 �sB0 Y W d � n1 �sb0 Y W d � n1 �s�0 Y d S )Ni� )�http_status_codez4cryptography.x509.Extensions.get_extension_for_classz Not found�r6 Zfoo)�check_signature_side_effectrY r Zfake)r_ r] r& )zhttps://example.comrL )rQ rR rS ZUNKNOWNrU rV r rN r8 Z UNAUTHORIZEDrT r r r ZExtensionNotFoundZ AuthorityInformationAccessOIDZOCSPr r �AssertionErrorr � certificates�Mockr] )r rW r` �certZ mock_serverr r r �test_revoke_resiliency� sh �,,,��N�.�.�.� .��. ��nz+OSCPTestCryptography.test_revoke_resiliencyc sx t tjjtjj��R}|d jj� � fdd�}tj |d�}|t |d j�_| j � | j �}W d � n1 sj0 Y d S )NrY c s d} t �| t� � S )Nug Properties that return a naïve datetime object have been deprecated. Please switch to this_update_utc.)�warnings�warnr )�msg��valuer r � warn_first& s zAOSCPTestCryptography.test_this_update_warning.<locals>.warn_firstrg )rQ rR rS ZGOODrU rV r � this_updater Z PropertyMock�typer rN r8 )r r` rs Z property_mockrW r rq r �test_this_update_warning! s � ,z-OSCPTestCryptography.test_this_update_warningN) rC rD rE rF r r r rP rX rb re rm rv r r r r rG � s GrG �� c c s� t �d���}t| |�|_t �d��`}t j|d�|_t �d��(}|rH||_|||d�V W d � n1 sj0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nz(certbot.ocsp.ocsp.load_der_ocsp_responsezcertbot.ocsp.requests.post)Z status_codez.certbot.ocsp.crypto_util.verify_signed_payload)rY � mock_postrO )r r � _construct_mock_ocsp_responser rk r6 )�certificate_status�response_statusrf rh rY rx rO r r r rQ 5 s � �rQ c C s� t �t�d�t� �}t �t�d�t� �}t �t�d�t� �}t�� }|�||t� � �}|� � }t j || |j |j|j|j|gt� � t�tj�jd d�tdd� t�tj�jd d�tdd� t jjjd� S )Nr: rH rc )Ztzinfor, )Zdays) r{ rz � serial_number�issuer_key_hash�issuer_name_hashr^ rj Zhash_algorithmZ next_updatert Zsignature_algorithm_oid)r r[ r; r\ r rR ZOCSPRequestBuilderZadd_certificater ZSHA1Zbuildr rk r| r} r~ r] r r- r. r/ �replacer ZoidZSignatureAlgorithmOIDZ RSA_WITH_SHA1)rz r{ rl r_ rd ZbuilderZrequestr r r ry H s2 � � � �ry )r+ z� /etc/letsencrypt/live/example.org/cert.pem: good This Update: Dec 17 00:00:00 2016 GMT Next Update: Dec 24 00:00:00 2016 GMT z� Response Verify Failure 139903674214048:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:138:Verify error:unable to get local issuer certificate )�blah.pemz^ blah.pem: good This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT �Response verify OK)r� z� blah.pem: revoked This Update: Dec 20 01:00:00 2016 GMT Next Update: Dec 27 01:00:00 2016 GMT Revocation Time: Dec 20 01:46:34 2016 GMT r� )r� za blah.pem: unknown This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT r� )r+ Z tentaclesr� )r� z� blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: good This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT r� )r� z� blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: revoked This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT r� �__main__r, )rw N)0rF � contextlibr r �sysZunittestr rn Z cryptographyr Zcryptography.exceptionsr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Zcryptography.utilsr Zcryptography.x509r rR Zpytestr. r r Z certbot.testsr r; r ZTestCaser rG �contextmanagerrQ ry r? r5 Zopenssl_revokedZopenssl_unknownZopenssl_brokenZopenssl_expired_ocspZ openssl_expired_ocsp_revokedrC �exit�main�argv�__file__r r r r �<module> sF e 4 � __pycache__/ocsp_test.cpython-39.pyc 0000644 00000030142 15114562471 0013416 0 ustar 00 a }|�g}H � @ sN d Z ddlZddlmZ ddlmZ ddlZddlZddlmZ ddlZddlm Z ddl m Z ddl m Z dd l mZ dd lmZ dd lmZ dd lmZ ddlZddlZdd lmZ ddlmZ dZ G dd� dej �Z G dd� dej �Z ej!d"dd��Z"dd� Z#dZ$dZ%dZ&d Z'd Z(d Z)d Z*e+d k�rJe�,e�-ej.d!d� e/g �� dS )#zTests for ocsp.py� N)�datetime)� timedelta)�mock)�x509)�InvalidSignature)�UnsupportedAlgorithm)�default_backend)�hashes)� CryptographyDeprecationWarning��ocsp)�errors)�utilz;Missing = in header key=value ocsp: Use -help for summary. c @ s� e Zd ZdZdd� Ze�d�e�d�e�d�dd� ���Ze�d �e�d �e�d �d d � ���Zdd� Z e�d�e�d �dd� ��Z dS )�OCSPTestOpenSSLz5 OCSP revocation tests using OpenSSL binary. c C s~ ddl m} t�d��T}t�d��*}t|_d|_|jdd�| _W d � n1 sR0 Y W d � n1 sp0 Y d S )Nr r �certbot.ocsp.subprocess.run�certbot.util.exe_existsT�Z enforce_openssl_binary_usage) �certbotr r �patch�out�stderr� return_value�RevocationChecker�checker)�selfr �mock_run� mock_exists� r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/ocsp_test.py�setUp" s zOCSPTestOpenSSL.setUpzcertbot.ocsp.logger.infor r c C s� t |j_d|_ddlm} |jdd�}|jdks4J �|�d�dgksHJ �t �d�d |j_|jdd�}|�d�d dgks|J �|j d u s�J �d |_d|_|jdd�}|jdks�J �|jdks�J �|j du s�J �d S ) NTr r r � �xzHost=x� � ZHostF) r r r r r r � call_countZ host_args� partition�broken)r r r �mock_logr r r r r � test_init* s zOCSPTestOpenSSL.test_init�#certbot.ocsp._determine_ocsp_server�!certbot.ocsp.crypto_util.notAfterzcertbot.util.run_scriptc C s t �tj�}t�� }d|_d|_|tdd� |_ d| j _ d|_ | j � |�du sRJ �d| j _ t tdd � �|_ | j � |�du s�J �|jd ks�J �d |_ | j � |�du s�J �t�d �|_| j � |�du s�J �|jdks�J �||_ d|_ |j}| j � |�du s�J �|j|k�s J �d S ) Nr! �yr# �ZhoursT)� r- Fr r )z http://x.cozx.coz#Unable to load certificate launcher)r �now�pytz�UTCr � MagicMock� cert_path� chain_pathr r r r& � ocsp_revoked�tuple� openssl_happyr$ r ZSubprocessError� side_effect)r r Zmock_na�mock_determiner. �cert_objZ count_beforer r r �test_ocsp_revokedB s, z!OCSPTestOpenSSL.test_ocsp_revokedc C s0 t �d�}ddlm} |�|�}d|ks,J �d S )N�ocsp_certificate.pemr r )z http://ocsp.test4.buypass.comzocsp.test4.buypass.com)� test_util� vector_pathr r Z_determine_ocsp_server)r r2 r �resultr r r �test_determine_ocsp_serverb s z*OCSPTestOpenSSL.test_determine_ocsp_serverzcertbot.ocsp.loggerc C s( t |_ddlm} |jt� du s$J �|jt � du s6J �|jjdksFJ �|jjdksVJ �d|j_|jt � du spJ �|jjdks�J �|jjdks�J �|jt � du s�J �|jjdks�J �|jt � du s�J �|jjdks�J �d|j _|jt � du s�J �|j jdks�J �|jt� du �sJ �|j jdk�s$J �d S )Nr r Fr r# T)�openssl_confusedr r r Z_translate_ocsp_queryr6 �debugr$ Zwarning�openssl_unknown�openssl_expired_ocsp�openssl_broken�info�openssl_revoked� openssl_expired_ocsp_revoked)r r r' r r r r �test_translate_ocspi s& z#OCSPTestOpenSSL.test_translate_ocspN) �__name__� __module__� __qualname__�__doc__r r r r( r: r? rH r r r r r s r c @ s\ e Zd ZdZdd� Ze�d�e�d�dd� ��Zdd � Zd d � Z d d � Z dd� Z dd� Z dS )�OSCPTestCryptographyz; OCSP revokation tests using Cryptography >= 2.4.0 c C s� ddl m} |�� | _t�d�| _t�d�| _t� � | _ | j| j _| j| j _t � t j�}tjd|tdd� d�| _| j�� | �| jj� d S ) Nr r r; �ocsp_issuer_certificate.pemr* r# r, )r )r r r r r< r= r2 r3 r r1 r9 r r. r/ r0 r r Z mock_notAfter�startZ addCleanup�stop)r r r. r r r r � s � zOSCPTestCryptography.setUpr) z%certbot.ocsp._check_ocsp_cryptographyc C s, d|_ | j�| j� |�| j| jdd� d S )N)�http://example.com� example.comrQ � )r r r4 r9 Zassert_called_once_withr2 r3 )r � mock_checkr8 r r r � test_ensure_cryptography_toggled� s z5OSCPTestCryptography.test_ensure_cryptography_toggledc C sL t tjjtjj�� | j�| j�}W d � n1 s60 Y |sHJ �d S )N) � _ocsp_mock�ocsp_lib�OCSPCertStatus�REVOKED�OCSPResponseStatus� SUCCESSFULr r4 r9 )r �revokedr r r � test_revoke� s ,z OSCPTestCryptography.test_revokec C s t �t�d�t� �}ttjjtj j ��p}|j |d j _ d |d j _| j�| j� t j�|�� �j}d |d j _ ||d j _| j�| j� W d � n1 s�0 Y |d jdks�J �|d jd d d �� |�� �� ks�J �|d jd d d �� |�� �� k�sJ �d S )NrN � mock_responserT r# r r �r �load_pem_x509_certificater< � load_vectorr rV rW rX rY rZ r[ �subjectr �responder_nameZresponder_key_hashr r4 r9 ZSubjectKeyIdentifierZfrom_public_keyZ public_keyZdigestr$ Zcall_args_listZpublic_numbers)r �issuer�mocks�key_hashr r r �test_responder_is_issuer� s* �� , � �z-OSCPTestCryptography.test_responder_is_issuerc C s~ t �t�d�t� �}t �t�d�t� �}ttjjtj j ��p}|j |d j _ d |d j _| j�| j� t j�|�� �j}d |d j _ ||d j _| j�| j� W d � n1 s�0 Y |d jdks�J �|d jd d d �� |�� �� ks�J �|d jd d d �� |�� �� k�s"J �|d jd d d �� |�� �� k�sNJ �|d jd d d �� |�� �� k�szJ �d S ) NrN � ocsp_responder_certificate.pemr^ rT � r r r# � r_ )r rd � responderre rf r r r �%test_responder_is_authorized_delegate� s< � �� , � � � �z:OSCPTestCryptography.test_responder_is_authorized_delegatec C s t tjjtjjdd�� | j�| j�}W d � n1 s:0 Y |du sPJ �t tjjtjj �� | j�| j�}W d � n1 s�0 Y |du s�J �t tjjtjj�� | j�| j�}W d � n1 s�0 Y |du s�J �t tjj tjj��Z t j dt �dt jj�d�� | j�| j�}W d � n1 �s<0 Y W d � n1 �s\0 Y |du �stJ �t tjj tjjtd�d�� | j�| j�}W d � n1 �s�0 Y |du �s�J �t tjj tjjtd�d�� | j�| j�}W d � n1 �s 0 Y |du �s$J �t tjj tjjtd�d�� | j�| j�}W d � n1 �sd0 Y |du �s|J �t tjj tjj��*}g |d j_| j�| j�}W d � n1 �s�0 Y |du �s�J �t tjj tjj��J}|d jjd }t jd |jd �|d jjd < | j�| j�}W d � n1 �s<0 Y |du �sTJ �t tjj tjj��� t � d ��`}d|_t j dt �dt jj�d�� | j�| j�}W d � n1 �s�0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y |du �sJ �d S )Ni� )�http_status_codeFz4cryptography.x509.Extensions.get_extension_for_classz Not found�r7 Zfoo)�check_signature_side_effectr^ r Zfake)rd rb r) )zhttps://example.comrR )rV rW rX ZUNKNOWNrZ r[ r r4 r9 Z UNAUTHORIZEDrY r r r ZExtensionNotFoundZ AuthorityInformationAccessOIDZOCSPr r �AssertionErrorr � certificates�Mockrb )r r\ re �certZ mock_serverr r r �test_revoke_resiliency� sz �, , , ��N�.�.�.� .��. ��nz+OSCPTestCryptography.test_revoke_resiliencyc s� t tjjtjj��R}|d jj� � fdd�}tj |d�}|t |d j�_| j � | j �}W d � n1 sj0 Y |du s�J �d S )Nr^ c s d} t �| t� � S )Nug Properties that return a naïve datetime object have been deprecated. Please switch to this_update_utc.)�warnings�warnr )�msg��valuer r � warn_first& s zAOSCPTestCryptography.test_this_update_warning.<locals>.warn_firstrn F)rV rW rX ZGOODrZ r[ r � this_updater Z PropertyMock�typer r4 r9 )r re rz Z property_mockr\ r rx r �test_this_update_warning! s � ,z-OSCPTestCryptography.test_this_update_warningN) rI rJ rK rL r r r rU r] rg rl rt r} r r r r rM � s GrM �� c c s� t �d���}t| |�|_t �d��`}t j|d�|_t �d��(}|rH||_|||d�V W d � n1 sj0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nz(certbot.ocsp.ocsp.load_der_ocsp_responsezcertbot.ocsp.requests.post)Z status_codez.certbot.ocsp.crypto_util.verify_signed_payload)r^ � mock_postrT )r r � _construct_mock_ocsp_responser rr r7 )�certificate_status�response_statusrm ro r^ r rT r r r rV 5 s � �rV c C s� t �t�d�t� �}t �t�d�t� �}t �t�d�t� �}t�� }|�||t� � �}|� � }t j || |j |j|j|j|gt� � t�tj�jd d�tdd� t�tj�jd d�tdd� t jjjd� S )Nr; rN rh )Ztzinfor )Zdays) r� r� � serial_number�issuer_key_hash�issuer_name_hashrc rq Zhash_algorithmZ next_updater{ Zsignature_algorithm_oid)r r` r< ra r rW ZOCSPRequestBuilderZadd_certificater ZSHA1Zbuildr rr r� r� r� rb r r. r/ r0 �replacer ZoidZSignatureAlgorithmOIDZ RSA_WITH_SHA1)r� r� rs rd rk ZbuilderZrequestr r r r� H s2 � � � �r� )r- z� /etc/letsencrypt/live/example.org/cert.pem: good This Update: Dec 17 00:00:00 2016 GMT Next Update: Dec 24 00:00:00 2016 GMT z� Response Verify Failure 139903674214048:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:138:Verify error:unable to get local issuer certificate )�blah.pemz^ blah.pem: good This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT �Response verify OK)r� z� blah.pem: revoked This Update: Dec 20 01:00:00 2016 GMT Next Update: Dec 27 01:00:00 2016 GMT Revocation Time: Dec 20 01:46:34 2016 GMT r� )r� za blah.pem: unknown This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT r� )r- Z tentaclesr� )r� z� blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: good This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT r� )r� z� blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: revoked This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT r� �__main__r )r~ N)0rL � contextlibr r �sysZunittestr ru Z cryptographyr Zcryptography.exceptionsr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Zcryptography.utilsr Zcryptography.x509r rW Zpytestr/ r r Z certbot.testsr r< r ZTestCaser rM �contextmanagerrV r� r@ r6 rF rB rD rC rG rI �exit�main�argv�__file__r r r r �<module> sF e 4 � __pycache__/renewal_test.cpython-39.opt-1.pyc 0000644 00000027043 15114562471 0015054 0 ustar 00 a }|�gX: � @ s� d Z ddlZddlZddlZddlmZ ddlZddlmZ ddlm Z ddlm Z ddl m Z ddl m mZ G dd � d ej�ZG d d � d ej�ZG d d � d ej�Zedkr�e�e�ejdd� eg �� dS )z#Tests for certbot._internal.renewal� N)�mock)� challenges)� configuration)�errors)�storagec @ s� e Zd Zej�ejd�dd� �Zej�ejd�dd� �Z e�d�dd� �Z e�d�d d � �Z ej�ejd�d d � �Z e�d �ej�ejd�dd� ��Z e�� ej�ejd�dd� ��Zej�ejd�dd� �ZdS )� RenewalTest� set_by_userc C sl d|_ t�| jjd�}d | j_d | j_d | j_t� | j�}t � ||�}|jd }ddl m } |�||� d S )NFzsample-renewal-ancient.conf� renewalparamsr ��renewal)� return_value� test_util� make_lineage�config� config_dir�accountZemail� webroot_pathr �NamespaceConfigr � RenewableCert�certbot._internalr �_restore_webroot_config)�self�mock_set_by_user�rc_pathr �lineager r � r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/renewal_test.py�!test_ancient_webroot_renewal_conf s � z-RenewalTest.test_ancient_webroot_renewal_confc C sN ddl m} d|_ddiddgd�}|�| j|� i dd�}|�| j|� d S )Nr r Fztest.example.comz /var/www/testz/var/www/other)Z webroot_mapr )r r r r r )r r r r r r r � test_webroot_params_conservation! s ��z,RenewalTest.test_webroot_params_conservationz4certbot._internal.renewal._avoid_reuse_key_conflictsc C s� d| j _d| j _d| j _t�| j �}t�| j jd�}t � ||�}t � � }d|j _ddlm} t �d��" |�| j d ||� W d � n1 s�0 Y d S )NZ INVALID_VALUET�sample-renewal.conf�NNNNr r �*certbot._internal.renewal.hooks.renew_hook)r �elliptic_curve� reuse_key�dry_runr r r r r r r r � MagicMock�obtain_certificater r r �patch� renew_cert�r Z!unused_mock_avoid_reuse_conflictsr r r � le_clientr r r r � test_reuse_key_renewal_params9 s � 0z)RenewalTest.test_reuse_key_renewal_paramsc C s� d| j _d| j _d| j _d| j _t�| j �}tj| j j ddd�}t � ||�}t � � }d|j_ddlm} t �d ��" |�| j d ||� W d � n1 s�0 Y d S ) NZ INVALID_CURVETZecdsazsample-renewal-ec.conf�Zecr r r r! )r r" r# r$ �key_typer r r r r r r r r% r& r r r r' r( r) r r r � test_reuse_ec_key_renewal_paramsN s" � 0z,RenewalTest.test_reuse_ec_key_renewal_paramsc C s� d|_ d| j_d| j_d| j_t�| j�}t�| jj d�}t � ||�}t � � }d|j_ ddlm} t �d��" |�| jd ||� W d � n1 s�0 Y |j�t jd � d S )NFTr r r r r! )r r r# Znew_keyr$ r r r r r r r r r% r& r r r' r( Zassert_called_with�ANY)r r r r r r* r r r r � test_new_keyg s � 0zRenewalTest.test_new_keyr! c C s� d|_ d| j_d| j_d| j_d| j_t�| j�}t� | jj d�}t � ||�}d|jd d< t �� }d|j_ d d lm} tjtjd d ��" |�| jd ||� W d � n1 s�0 Y d d� |_d| j_|�| jd ||� d S )NFTZrsai r r r# r r r z Unable to change the --key-type)�matchc S s | dkS )Nr# r )�varr r r �<lambda>� � z6RenewalTest.test_reuse_key_conflicts.<locals>.<lambda>)r r r# r- Z rsa_key_sizer$ r r r r r r r r r% r& r r �pytest�raisesr �Errorr( Z side_effect)r r Zunused_mock_renew_hookr r r r* r r r r �test_reuse_key_conflicts� s& � 0 z$RenewalTest.test_reuse_key_conflictsc C sP d|_ t�| j�}d|_t�| jjd�}ddlm } t � | j�}|� ||�}d S )NFz sample-renewal-deprecated-optionz%sample-renewal-deprecated-option.confr r ) r r r r Zcertnamer r r r r �copy�deepcopy� reconstitute)r r Zunused_mock_get_utilityr r r �lineage_configZrenewal_candidater r r �&test_remove_deprecated_config_elements� s � z2RenewalTest.test_remove_deprecated_config_elementsc C sB d|_ tj| jjddd�}ddlm} t�| j�}|� ||� d S )NFr r, r r ) r r r r r r r r9 r: r; )r r r r r< r r r � test_absent_key_type_restored� s z)RenewalTest.test_absent_key_type_restoredN)�__name__� __module__� __qualname__r r' �objectr r r r r+ r. r0 r8 r Zpatch_display_utilr= r> r r r r r s$ r c @ s� e Zd ZdZedd� �Zej�e j d�dd� �Z ej�e j d�dd� �Z ej�e j d�d d � �Z ej�e j d�d d � �Zej�e j d�d d� �Zej�e j d�dd� �Zej�e j d�dd� �Zej�e j d�dd� �Zdd� ZdS )�!RestoreRequiredConfigElementsTestzETests for certbot._internal.renewal.restore_required_config_elements.c O s ddl m} ||i |��S )Nr )� restore_required_config_elements)�certbot._internal.renewalrD )�cls�args�kwargsrD r r r �_call� s z'RestoreRequiredConfigElementsTest._callr c C s d|_ | �| jddi� d S )NF�allow_subset_of_names�True�r rI r �r r r r r �"test_allow_subset_of_names_success� s zDRestoreRequiredConfigElementsTest.test_allow_subset_of_names_successc C sL d|_ ddi}t�tj�� | �| j|� W d � n1 s>0 Y d S )NFrJ �maybe�r r5 r6 r r7 rI r �r r r r r r �"test_allow_subset_of_names_failure� s zDRestoreRequiredConfigElementsTest.test_allow_subset_of_names_failurec C s6 d|_ dd�d�i}| �| j|� tjjtjjg}d S )NF� pref_challsz http-01, dns�,)r �splitrI r r ZHTTP01�typ�DNS01�r r r Zexpectedr r r �test_pref_challs_list� s z7RestoreRequiredConfigElementsTest.test_pref_challs_listc C s* d|_ ddi}| �| j|� tjjg}d S )NFrS Zdns)r rI r r rW rV rX r r r �test_pref_challs_str� s z6RestoreRequiredConfigElementsTest.test_pref_challs_strc C sL d|_ ddi}t�tj�� | �| j|� W d � n1 s>0 Y d S )NFrS zfinding-a-shrubberyrP rQ r r r �test_pref_challs_failure� s z:RestoreRequiredConfigElementsTest.test_pref_challs_failurec C s d|_ | �| jddi� d S )NF� must_staplerK rL rM r r r �test_must_staple_success� s z:RestoreRequiredConfigElementsTest.test_must_staple_successc C sL d|_ ddi}t�tj�� | �| j|� W d � n1 s>0 Y d S )NFr\ rO rP rQ r r r �test_must_staple_failure� s z:RestoreRequiredConfigElementsTest.test_must_staple_failurec C s2 ddl m} d | j_d|_| �| jd|ji� d S )Nr )� constantsF�server)r r_ r r` r rI ZV1_URI)r r r_ r r r � test_ancient_server_renewal_conf� s zBRestoreRequiredConfigElementsTest.test_ancient_server_renewal_confc C s0 ddd�}| � | j|� | �| jj|d � d S )Nzhttps://example.orgZsomehash)r` r r )rI r Z assertEqualr )r r r r r �test_related_values s �z5RestoreRequiredConfigElementsTest.test_related_valuesN)r? r@ rA �__doc__� classmethodrI r r' rB r r rN rR rY rZ r[ r] r^ ra rb r r r r rC � s( rC c @ sT e Zd ZdZdd� Zdd� Zedd� �Zdd � Zd d � Z d d � Z dd� Z dd� Z dS )�DescribeResultsTestz<Tests for certbot._internal.renewal._renew_describe_results.c C s< t �d�t �d�d�| _| jd �� | _| jd �� | _d S )Nz&certbot._internal.renewal.logger.errorz-certbot._internal.renewal.display_util.notify)� log_error�notifyrg rf )r r' �patchers�start� mock_notify� mock_error�r r r r �setUp s �zDescribeResultsTest.setUpc C s | j �� D ] }|�� q d S )N)rh �values�stop)r r' r r r �tearDown s z DescribeResultsTest.tearDownc O s ddl m} ||i |�� d S )Nr )�_renew_describe_results)rE rq )rF rG rH rq r r r rI s zDescribeResultsTest._callc C s | j �dd� |D �� d S )Nc S s g | ]}t �|��qS r )r �call)�.0�lr r r � <listcomp> r4 z>DescribeResultsTest._assert_success_output.<locals>.<listcomp>)rj �assert_has_calls)r �linesr r r �_assert_success_output s z*DescribeResultsTest._assert_success_outputc C s* | � tjdd�g g g g � | �dg� d S )NT�r$ z%No simulated renewals were attempted.�rI r r% rx rl r r r �test_no_renewal_attempts" s z,DescribeResultsTest.test_no_renewal_attemptsc C s. | � tjdd�dgd d d � | �g d�� d S )NFry �good.pem)�P - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -z)Congratulations, all renewals succeeded: z good.pem (success)�O- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -rz rl r r r �test_successful_renewal& s z+DescribeResultsTest.test_successful_renewalc C sL | � tjdd�g dgg g � | �ddg� | j�t�dd�t�d�g� d S ) NFry �bad.pemr} r~ z@All %ss failed. The following certificates could not be renewed:r z bad.pem (failure)�rI r r% rx rk rv rr rl r r r �test_failed_renewal/ s � �z'DescribeResultsTest.test_failed_renewalc C sV | � tjdd�ddgddgdgdg� | �g d �� | j�t�d d �t�d �g� d S ) NTry r| z good2.pemr� zbad2.pemzfoo.pem expires on 123z errored.conf)r} z7The following certificates are not due for renewal yet:z" foo.pem expires on 123 (skipped)z+The following simulated renewals succeeded:z+ good.pem (success) good2.pem (success) zB Additionally, the following renewal configurations were invalid: z errored.conf (parsefail)r~ zThe following %ss failed:zsimulated renewalz( bad.pem (failure) bad2.pem (failure)r� rl r r r �test_all_renewal: s � �z$DescribeResultsTest.test_all_renewalN) r? r@ rA rc rm rp rd rI rx r{ r r� r� r r r r re s re �__main__� )rc r9 �sysZunittestr r5 Zacmer Zcertbotr r r r Zcertbot.tests.utilZtests�utilr ZConfigTestCaser rC ZTestCasere r? �exit�main�argv�__file__r r r r �<module> s 1MA __pycache__/renewal_test.cpython-39.pyc 0000644 00000027761 15114562471 0014124 0 ustar 00 a }|�gX: � @ s� d Z ddlZddlZddlZddlmZ ddlZddlmZ ddlm Z ddlm Z ddl m Z ddl m mZ G dd � d ej�ZG d d � d ej�ZG d d � d ej�Zedkr�e�e�ejdd� eg �� dS )z#Tests for certbot._internal.renewal� N)�mock)� challenges)� configuration)�errors)�storagec @ s� e Zd Zej�ejd�dd� �Zej�ejd�dd� �Z e�d�dd� �Z e�d�d d � �Z ej�ejd�d d � �Z e�d �ej�ejd�dd� ��Z e�� ej�ejd�dd� ��Zej�ejd�dd� �ZdS )� RenewalTest� set_by_userc C s| d|_ t�| jjd�}d | j_d | j_d | j_t� | j�}t � ||�}|jd }ddl m } |�||� |jdgksxJ �d S )NFzsample-renewal-ancient.conf� renewalparamsr ��renewalz /var/www/)� return_value� test_util� make_lineage�config� config_dir�accountZemail� webroot_pathr �NamespaceConfigr � RenewableCert�certbot._internalr �_restore_webroot_config)�self�mock_set_by_user�rc_pathr �lineager r � r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/renewal_test.py�!test_ancient_webroot_renewal_conf s � z-RenewalTest.test_ancient_webroot_renewal_confc C s� ddl m} d|_ddiddgd�}|�| j|� | jjddiksFJ �| jjddgksZJ �i dd�}|�| j|� | jji ks�J �| jjdgks�J �d S )Nr r Fztest.example.comz /var/www/testz/var/www/other)� webroot_mapr )r r r r r r r )r r r r r r r � test_webroot_params_conservation! s ��z,RenewalTest.test_webroot_params_conservationz4certbot._internal.renewal._avoid_reuse_key_conflictsc C s� d| j _d| j _d| j _t�| j �}t�| j jd�}t � ||�}t � � }d|j _ddlm} t �d��" |�| j d ||� W d � n1 s�0 Y | j jdks�J �d S ) NZ INVALID_VALUET�sample-renewal.conf�NNNNr r �*certbot._internal.renewal.hooks.renew_hook� secp256r1)r �elliptic_curve� reuse_key�dry_runr r r r r r r r � MagicMock�obtain_certificater r r �patch� renew_cert�r Z!unused_mock_avoid_reuse_conflictsr r r � le_clientr r r r � test_reuse_key_renewal_params9 s � 0z)RenewalTest.test_reuse_key_renewal_paramsc C s� d| j _d| j _d| j _d| j _t�| j �}tj| j j ddd�}t � ||�}t � � }d|j_ddlm} t �d ��" |�| j d ||� W d � n1 s�0 Y | j jd ks�J �d S ) NZ INVALID_CURVET�ecdsazsample-renewal-ec.conf�Zecr! r r r" r# )r r$ r% r& �key_typer r r r r r r r r' r( r r r r) r* r+ r r r � test_reuse_ec_key_renewal_paramsN s" � 0z,RenewalTest.test_reuse_ec_key_renewal_paramsc C s� d|_ d| j_d| j_d| j_t�| j�}t�| jj d�}t � ||�}t � � }d|j_ ddlm} t �d��" |�| jd ||� W d � n1 s�0 Y | jjdks�J �| jjd ks�J �| jjs�J �|j�t jd � d S ) NFTr r! r r r" r# r. )r r r% Znew_keyr& r r r r r r r r r' r( r r r) r* r$ r0 Zassert_called_with�ANY)r r r r r r, r r r r � test_new_keyg s$ � 0 zRenewalTest.test_new_keyr" c C s� d|_ d| j_d| j_d| j_d| j_t�| j�}t� | jj d�}t � ||�}d|jd d< t �� }d|j_ d d lm} tjtjd d ��" |�| jd ||� W d � n1 s�0 Y d d� |_d| j_|�| jd ||� d S )NFT�rsai r r r% r! r r z Unable to change the --key-type)�matchc S s | dkS )Nr% r )�varr r r �<lambda>� � z6RenewalTest.test_reuse_key_conflicts.<locals>.<lambda>)r r r% r0 Z rsa_key_sizer& r r r r r r r r r' r( r r �pytest�raisesr �Errorr* Z side_effect)r r Zunused_mock_renew_hookr r r r, r r r r �test_reuse_key_conflicts� s& � 0 z$RenewalTest.test_reuse_key_conflictsc C sb d|_ t�| j�}d|_t�| jjd�}ddlm } t � | j�}|� ||�}t |jtj�s^J �d S )NFz sample-renewal-deprecated-optionz%sample-renewal-deprecated-option.confr r )r r r r Zcertnamer r r r r �copy�deepcopy� reconstitute� isinstanceZmanual_public_ip_logging_okr r' )r r Zunused_mock_get_utilityr r r �lineage_configZrenewal_candidater r r �&test_remove_deprecated_config_elements� s � z2RenewalTest.test_remove_deprecated_config_elementsc C sP d|_ tj| jjddd�}ddlm} t�| j�}|� ||� |j dksLJ �d S )NFr r/ r r r4 ) r r r r r r r r= r> r? r0 )r r r r rA r r r � test_absent_key_type_restored� s z)RenewalTest.test_absent_key_type_restoredN)�__name__� __module__� __qualname__r r) �objectr r r r r- r1 r3 r< r Zpatch_display_utilrB rC r r r r r s$ r c @ s� e Zd ZdZedd� �Zej�e j d�dd� �Z ej�e j d�dd� �Z ej�e j d�d d � �Z ej�e j d�d d � �Zej�e j d�d d� �Zej�e j d�dd� �Zej�e j d�dd� �Zej�e j d�dd� �Zdd� ZdS )�!RestoreRequiredConfigElementsTestzETests for certbot._internal.renewal.restore_required_config_elements.c O s ddl m} ||i |��S )Nr )� restore_required_config_elements)�certbot._internal.renewalrI )�cls�args�kwargsrI r r r �_call� s z'RestoreRequiredConfigElementsTest._callr c C s, d|_ | �| jddi� | jjdu s(J �d S )NF�allow_subset_of_names�TrueT)r rN r rO �r r r r r �"test_allow_subset_of_names_success� s zDRestoreRequiredConfigElementsTest.test_allow_subset_of_names_successc C sL d|_ ddi}t�tj�� | �| j|� W d � n1 s>0 Y d S )NFrO �maybe�r r9 r: r r; rN r �r r r r r r �"test_allow_subset_of_names_failure� s zDRestoreRequiredConfigElementsTest.test_allow_subset_of_names_failurec C sF d|_ dd�d�i}| �| j|� tjjtjjg}| jj|ksBJ �d S )NF� pref_challsz http-01, dns�,) r �splitrN r r ZHTTP01�typ�DNS01rW �r r r Zexpectedr r r �test_pref_challs_list� s z7RestoreRequiredConfigElementsTest.test_pref_challs_listc C s: d|_ ddi}| �| j|� tjjg}| jj|ks6J �d S )NFrW Zdns)r rN r r r[ rZ rW r\ r r r �test_pref_challs_str� s z6RestoreRequiredConfigElementsTest.test_pref_challs_strc C sL d|_ ddi}t�tj�� | �| j|� W d � n1 s>0 Y d S )NFrW zfinding-a-shrubberyrT rU r r r �test_pref_challs_failure� s z:RestoreRequiredConfigElementsTest.test_pref_challs_failurec C s, d|_ | �| jddi� | jjdu s(J �d S )NF� must_staplerP T)r rN r r` rQ r r r �test_must_staple_success� s z:RestoreRequiredConfigElementsTest.test_must_staple_successc C sL d|_ ddi}t�tj�� | �| j|� W d � n1 s>0 Y d S )NFr` rS rT rU r r r �test_must_staple_failure� s z:RestoreRequiredConfigElementsTest.test_must_staple_failurec C sH ddl m} d | j_d|_| �| jd|ji� | jj|jd ksDJ �d S )Nr )� constantsF�server)r rc r rd r rN ZV1_URIZ CLI_DEFAULTS)r r rc r r r � test_ancient_server_renewal_conf� s zBRestoreRequiredConfigElementsTest.test_ancient_server_renewal_confc C s0 ddd�}| � | j|� | �| jj|d � d S )Nzhttps://example.orgZsomehash)rd r r )rN r Z assertEqualr )r r r r r �test_related_values s �z5RestoreRequiredConfigElementsTest.test_related_valuesN)rD rE rF �__doc__� classmethodrN r r) rG r r rR rV r] r^ r_ ra rb re rf r r r r rH � s( rH c @ sT e Zd ZdZdd� Zdd� Zedd� �Zdd � Zd d � Z d d � Z dd� Z dd� Z dS )�DescribeResultsTestz<Tests for certbot._internal.renewal._renew_describe_results.c C s< t �d�t �d�d�| _| jd �� | _| jd �� | _d S )Nz&certbot._internal.renewal.logger.errorz-certbot._internal.renewal.display_util.notify)� log_error�notifyrk rj )r r) �patchers�start� mock_notify� mock_error�r r r r �setUp s �zDescribeResultsTest.setUpc C s | j �� D ] }|�� q d S )N)rl �values�stop)r r) r r r �tearDown s z DescribeResultsTest.tearDownc O s ddl m} ||i |�� d S )Nr )�_renew_describe_results)rJ ru )rK rL rM ru r r r rN s zDescribeResultsTest._callc C s | j �dd� |D �� d S )Nc S s g | ]}t �|��qS r )r �call)�.0�lr r r � <listcomp> r8 z>DescribeResultsTest._assert_success_output.<locals>.<listcomp>)rn �assert_has_calls)r �linesr r r �_assert_success_output s z*DescribeResultsTest._assert_success_outputc C s* | � tjdd�g g g g � | �dg� d S )NT�r& z%No simulated renewals were attempted.�rN r r' r| rp r r r �test_no_renewal_attempts" s z,DescribeResultsTest.test_no_renewal_attemptsc C s. | � tjdd�dgd d d � | �g d�� d S )NFr} �good.pem)�P - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -z)Congratulations, all renewals succeeded: z good.pem (success)�O- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -r~ rp r r r �test_successful_renewal& s z+DescribeResultsTest.test_successful_renewalc C sL | � tjdd�g dgg g � | �ddg� | j�t�dd�t�d�g� d S ) NFr} �bad.pemr� r� z@All %ss failed. The following certificates could not be renewed:r z bad.pem (failure)�rN r r' r| ro rz rv rp r r r �test_failed_renewal/ s � �z'DescribeResultsTest.test_failed_renewalc C sV | � tjdd�ddgddgdgdg� | �g d �� | j�t�d d �t�d �g� d S ) NTr} r� z good2.pemr� zbad2.pemzfoo.pem expires on 123z errored.conf)r� z7The following certificates are not due for renewal yet:z" foo.pem expires on 123 (skipped)z+The following simulated renewals succeeded:z+ good.pem (success) good2.pem (success) zB Additionally, the following renewal configurations were invalid: z errored.conf (parsefail)r� zThe following %ss failed:zsimulated renewalz( bad.pem (failure) bad2.pem (failure)r� rp r r r �test_all_renewal: s � �z$DescribeResultsTest.test_all_renewalN) rD rE rF rg rq rt rh rN r| r r� r� r� r r r r ri s ri �__main__� )rg r= �sysZunittestr r9 Zacmer Zcertbotr r r r Zcertbot.tests.utilZtests�utilr ZConfigTestCaser rH ZTestCaseri rD �exit�main�argv�__file__r r r r �<module> s 1MA __pycache__/renewupdater_test.cpython-39.opt-1.pyc 0000644 00000011052 15114562471 0016115 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlmZ ddlm Z ddl m Z ddl m mZ G dd � d ej�Zed kr�e�e�ejd d� eg �� dS ) z$Tests for renewal updater interfaces� N)�mock)� interfaces)�main)�updater)� enhancementsc s� e Zd ZdZ� fdd�Ze�d�e�d�e�d�e�� dd� ����Z d d � Z e�d �d d � �Z e�d �dd� �Z e�d�dd� �Z dd� Ze�d�dd� �Zdd� Ze�d�dd� �Zdd� Z� ZS ) �RenewUpdaterTestz@Tests for interfaces.RenewDeployer and interfaces.GenericUpdaterc sJ t � �� tjtjd�| _t�� | j_tjtjd�| _ tjt j d�| _ d S )N)�spec) �super�setUpr � MagicMockr ZGenericUpdater�generic_updater�restartZ RenewDeployer�renew_deployerr �AutoHSTSEnhancement� mockinstaller��self�� __class__� �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/renewupdater_test.pyr s zRenewUpdaterTest.setUpz)certbot._internal.main._get_and_save_certz?certbot._internal.plugins.selection.choose_configurator_pluginsz<certbot._internal.plugins.selection.get_unprepared_installerc C s� t �� |_| j}|d f|_||_t �d��$ t�| jd t �� � W d � n1 sT0 Y |j� � |j � � t � | jt �� d � d S )Nz&certbot._internal.main._init_le_client) r r � return_valuer �patchr Z renew_cert�configr Z reset_mockZgeneric_updatesr �run_generic_updaters)r �_� mock_getiZ mock_selectZ mock_getsaveZmock_generic_updaterr r r �test_server_updates s 2 z$RenewUpdaterTest.test_server_updatesc C s. t �� }| j}t�| j||� |j�|� d S �N)r r r r �run_renewal_deployerr Z renew_deployZassert_called_with)r ZlineageZ mock_deployerr r r �test_renew_deployer. s z$RenewUpdaterTest.test_renew_deployerz&certbot._internal.updater.logger.debugc C s d| j _t�| j d d � d S �NT)r �dry_runr r �r Zmock_logr r r �test_updater_skip_dry_run4 s z*RenewUpdaterTest.test_updater_skip_dry_runc C s d| j _t�| j d d � d S r! )r r" r r r# r r r �test_deployer_skip_dry_run< s z+RenewUpdaterTest.test_deployer_skip_dry_runc C s | j |_t�| jt�� d � d S r )r r r r r r r �r r r r r �test_enhancement_updatesD s z)RenewUpdaterTest.test_enhancement_updatesc C s t �| jt�� | j� d S r )r r r r r r r r r r �test_enhancement_deployerK s �z*RenewUpdaterTest.test_enhancement_deployerc C s( d| j _| j|_t�| j t�� d � d S r! )r �disable_renew_updatesr r r r r r r& r r r �#test_enhancement_updates_not_calledP s z4RenewUpdaterTest.test_enhancement_updates_not_calledc C s" d| j _t�| j t�� | j� d S r! )r r) r r r r r r r r r �$test_enhancement_deployer_not_calledW s �z5RenewUpdaterTest.test_enhancement_deployer_not_calledc C s` dt jd ddd�g}| j|_t�d|��$ t�| jt� � d � W d � n1 sR0 Y d S �NZTestZdeploy_autohstsZenable_autohsts)�name�classZupdater_functionZdeployer_functionZenable_functionz#certbot.plugins.enhancements._INDEX) r r r r r r r r r r )r r � FAKEINDEXr r r �test_enhancement_no_updater] s �� 2z,RenewUpdaterTest.test_enhancement_no_updaterc C sZ dt jdd dd�g}t�d|��& t�| jt�� | j� W d � n1 sL0 Y d S r, ) r r r r r r r r r )r r/ r r r � test_enhancement_no_deployerm s �� �"z-RenewUpdaterTest.test_enhancement_no_deployer)�__name__� __module__� __qualname__�__doc__r r r � test_utilZpatch_display_utilr r r$ r% r' r( r* r+ r0 r1 � __classcell__r r r r r s* r �__main__� )r5 �sysZunittestr ZpytestZcertbotr Zcertbot._internalr r Zcertbot.pluginsr Zcertbot.tests.utilZtests�utilr6 ZConfigTestCaser r2 �exit�argv�__file__r r r r �<module> s n __pycache__/renewupdater_test.cpython-39.pyc 0000644 00000011774 15114562471 0015171 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlmZ ddlm Z ddl m Z ddl m mZ G dd � d ej�Zed kr�e�e�ejd d� eg �� dS ) z$Tests for renewal updater interfaces� N)�mock)� interfaces)�main)�updater)� enhancementsc s� e Zd ZdZ� fdd�Ze�d�e�d�e�d�e�� dd� ����Z d d � Z e�d �d d � �Z e�d �dd� �Z e�d�dd� �Z dd� Ze�d�dd� �Zdd� Ze�d�dd� �Zdd� Z� ZS ) �RenewUpdaterTestz@Tests for interfaces.RenewDeployer and interfaces.GenericUpdaterc sJ t � �� tjtjd�| _t�� | j_tjtjd�| _ tjt j d�| _ d S )N)�spec) �super�setUpr � MagicMockr ZGenericUpdater�generic_updater�restartZ RenewDeployer�renew_deployerr �AutoHSTSEnhancement� mockinstaller��self�� __class__� �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/renewupdater_test.pyr s zRenewUpdaterTest.setUpz)certbot._internal.main._get_and_save_certz?certbot._internal.plugins.selection.choose_configurator_pluginsz<certbot._internal.plugins.selection.get_unprepared_installerc C s� t �� |_| j}|d f|_||_t �d��$ t�| jd t �� � W d � n1 sT0 Y |jj sjJ �|j� � |j � � t � | jt �� d � |j jdks�J �|jj du s�J �d S )Nz&certbot._internal.main._init_le_client� F)r r � return_valuer �patchr Z renew_cert�configr �calledZ reset_mockZgeneric_updatesr �run_generic_updaters� call_count)r �_� mock_getiZ mock_selectZ mock_getsaveZmock_generic_updaterr r r �test_server_updates s 2 z$RenewUpdaterTest.test_server_updatesc C s. t �� }| j}t�| j||� |j�|� d S �N)r r r r �run_renewal_deployerr Z renew_deployZassert_called_with)r ZlineageZ mock_deployerr r r �test_renew_deployer. s z$RenewUpdaterTest.test_renew_deployerz&certbot._internal.updater.logger.debugc C s< d| j _t�| j d d � |js"J �|jd d dks8J �d S )NTr z"Skipping updaters in dry-run mode.)r �dry_runr r r � call_args�r Zmock_logr r r �test_updater_skip_dry_run4 s �z*RenewUpdaterTest.test_updater_skip_dry_runc C s< d| j _t�| j d d � |js"J �|jd d dks8J �d S )NTr z*Skipping renewal deployer in dry-run mode.)r r$ r r" r r% r& r r r �test_deployer_skip_dry_run< s �z+RenewUpdaterTest.test_deployer_skip_dry_runc C s@ | j |_t�| jt�� d � | j jjs*J �| j jj dks<J �d S )Nr ) r r r r r r r �update_autohstsr r �r r r r r �test_enhancement_updatesD s z)RenewUpdaterTest.test_enhancement_updatesc C s( t �| jt�� | j� | jjjs$J �d S r! )r r" r r r r �deploy_autohstsr r r r r �test_enhancement_deployerK s �z*RenewUpdaterTest.test_enhancement_deployerc C s: d| j _| j|_t�| j t�� d � | jjj du s6J �d S �NTF) r �disable_renew_updatesr r r r r r r) r r* r r r �#test_enhancement_updates_not_calledP s z4RenewUpdaterTest.test_enhancement_updates_not_calledc C s4 d| j _t�| j t�� | j� | jjjdu s0J �d S r. ) r r/ r r" r r r r, r r r r r �$test_enhancement_deployer_not_calledW s �z5RenewUpdaterTest.test_enhancement_deployer_not_calledc C sr dt jd ddd�g}| j|_t�d|��$ t�| jt� � d � W d � n1 sR0 Y | jj j du snJ �d S �NZTestr, Zenable_autohsts)�name�classZupdater_functionZdeployer_functionZenable_functionz#certbot.plugins.enhancements._INDEXF) r r r r r r r r r r r) r )r r � FAKEINDEXr r r �test_enhancement_no_updater] s �� 2z,RenewUpdaterTest.test_enhancement_no_updaterc C sl dt jdd dd�g}t�d|��& t�| jt�� | j� W d � n1 sL0 Y | jj j du shJ �d S r2 ) r r r r r r" r r r r, r )r r5 r r r � test_enhancement_no_deployerm s �� �"z-RenewUpdaterTest.test_enhancement_no_deployer)�__name__� __module__� __qualname__�__doc__r r r � test_utilZpatch_display_utilr r# r' r( r+ r- r0 r1 r6 r7 � __classcell__r r r r r s* r �__main__r )r; �sysZunittestr ZpytestZcertbotr Zcertbot._internalr r Zcertbot.pluginsr Zcertbot.tests.utilZtests�utilr< ZConfigTestCaser r8 �exit�argv�__file__r r r r �<module> s n __pycache__/reverter_test.cpython-39.opt-1.pyc 0000644 00000035573 15114562471 0015264 0 ustar 00 a }|�giB � @ s� d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlZddl m Z ddl m Z ddl mZ G dd� dej�ZG d d � d ej�Zd d � Zd d� Zdd� Zdd� Zdd� Zdd� Zdd� Zedkr�e�e� ej dd� e g �� dS )zTest certbot.reverter.� N)�mock)�errors)�os)�utilc s� e Zd ZdZ� fdd�Zdd� Ze�d�dd� �Zd d � Z d d � Z d d� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Ze�d �d d � �Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Ze�d*�d+d,� �Ze�d-�d.d/� �Zd0d1� Z� Z S )2�ReverterCheckpointLocalTestzTest the Reverter Class.c sP t � �� ddlm} t�tj� || j�| _t � }|\| _ | _ | _ | _ | _d S �Nr )�Reverter��super�setUpZcertbot.reverterr �logging�disableZCRITICAL�config�reverter�setup_test_files�config1�config2�dir1�dir2�sets��selfr �tup�� __class__� �I/usr/lib/python3.9/site-packages/certbot/_internal/tests/reverter_test.pyr s z!ReverterCheckpointLocalTest.setUpc C s6 t �| jj� t �| j� t �| j� t�tj� d S �N� �shutil�rmtreer Zwork_dirr r r r ZNOTSET�r r r r �tearDown s z$ReverterCheckpointLocalTest.tearDownz*certbot.reverter.Reverter._read_and_appendc C s� t d�|_z| j�| jd d� W n t y4 Y n0 | j�d� t�| jjj �d }tj � | jjj |d�}t |d��}|� � }W d � n1 s�0 Y d S )Nz cannot evenr �save1Zblah� CHANGES_SINCE�r)�OSError� side_effectr �add_to_checkpointr �finalize_checkpointr �listdirr � backup_dir�path�join�open�read)r Z mock_readr, Z no_change�f�xr r r �test_no_change& s &z*ReverterCheckpointLocalTest.test_no_changec C s, | j �| jd d� | j �| jd d� d S )Nr r# � �save2)r �add_to_temp_checkpointr r! r r r �!test_basic_add_to_temp_checkpoint4 s z=ReverterCheckpointLocalTest.test_basic_add_to_temp_checkpointc C sx t �d��Z}td�|_t�tj��$ | j� | j d d� W d � n1 sL0 Y W d � n1 sj0 Y d S )N� certbot.reverter.shutil.copy2�bad copyr r# ) r �patchr& r' �pytest�raisesr � ReverterErrorr r( r �r Z mock_copy2r r r �#test_add_to_checkpoint_copy_failureB s z?ReverterCheckpointLocalTest.test_add_to_checkpoint_copy_failurec C s� t j�| jd�}| j�d|� t|d� | j�| jd d� | j� | jd d� t � t j ��$ | j�| jd d� W d � n1 s�0 Y | j�| jd d � t � t j �� | j�|hd � W d � n1 s�0 Y d S ) z:Make sure that checkpoint errors are thrown appropriately.� config3.txtTzThis is a new file!� r# r r4 Zsave3Nr3 Zsave4z invalid save)r r, r- r r �register_file_creation� update_filer( r r5 r: r; r r< �r �config3r r r �test_checkpoint_conflictH s 2z4ReverterCheckpointLocalTest.test_checkpoint_conflictc C sN | j �| jd d� t| jd� | j �| jd d� t| jd� | j �� d S )Nr r# zupdated-directivezsave2-updated dirz'new directive change that we won't keep)r r5 r rB r �revert_temporary_configr! r r r �#test_multiple_saves_and_temp_revert[ s z?ReverterCheckpointLocalTest.test_multiple_saves_and_temp_revertc C sr t j�| jd�}t|d� t j�| jd�}t|d� | j�d| j� | j�d| j � | j�d||� | j� � d S )Nr? ZConfig3� config4.txtZConfig4T) r r, r- r rB r r rA r r �recovery_routine�r rD Zconfig4r r r �*test_multiple_registration_fail_and_revertd s zFReverterCheckpointLocalTest.test_multiple_registration_fail_and_revertc C sP | j �d| j� | j �d| j� | j �d| j� | j �d| j� t| jj�}d S )NT)r rA r � get_new_filesr �temp_checkpoint_dir)r �filesr r r �$test_multiple_registration_same_filex s z@ReverterCheckpointLocalTest.test_multiple_registration_same_filec C s� t �� }t jd|dd��V td�|_t�tj�� | j � d| j � W d � n1 sV0 Y W d � n1 st0 Y d S )N�certbot.reverter.openT�Zcreate�bad open) r � mock_openr9 r& r' r: r; r r< r rA r �r Zm_openr r r �'test_register_file_creation_write_error� s zCReverterCheckpointLocalTest.test_register_file_creation_write_errorc C s< t �tj�� | j�d� W d � n1 s.0 Y d S )N�filepath)r: r; r r< r rA r! r r r �test_bad_registration� s z1ReverterCheckpointLocalTest.test_bad_registrationc C sP ddgddgdgg}|D ]}| j �d|� qt| jj�}t||�D ]\}}qBd S )N�a2dismod�sslZrewriteZ cleanslateT)r �register_undo_command�get_undo_commandsr rM �zip)r �coms�comZact_comsZa_comr r r �test_register_undo_command� s � z6ReverterCheckpointLocalTest.test_register_undo_commandc C s� t �� }t jd|dd��V td�|_t�tj�� | j � ddg� W d � n1 sV0 Y W d � n1 st0 Y d S )NrP TrQ rR Zcommand) r rS r9 r& r' r: r; r r< r rZ rT r r r � test_bad_register_undo_command� s z:ReverterCheckpointLocalTest.test_bad_register_undo_commandzcertbot.util.run_scriptc C s@ dt jg|_dgddgg}|D ]}| j�d|� q | j�� d S )N� Zinvalid_commandrX rY T)r ZSubprocessErrorr' r rZ rF )r Zmock_runr] r^ r r r �test_run_undo_commands� s � z2ReverterCheckpointLocalTest.test_run_undo_commandsc C s` | j �| jd d� tjtjd�| j _t� tj�� | j � � W d � n1 sR0 Y d S )Nr � perm save�r' ) r r( r r � MagicMockr r< �_recover_checkpointr: r; rI r! r r r �)test_recovery_routine_in_progress_failure� s � zEReverterCheckpointLocalTest.test_recovery_routine_in_progress_failurec C sh t jt�d�d�}|| j_| j�| jd d� t� tj�� | j� � W d � n1 sZ0 Y d S )N�erd r � config1 save) r re r r< r rf r5 r r: r; rF �r Z mock_recoverr r r �,test_recover_checkpoint_revert_temp_failures� s �zHReverterCheckpointLocalTest.test_recover_checkpoint_revert_temp_failuresc C sv t jt�d�d�}|| j_| j�| jd d� | j�d� t � tj�� | j� d� W d � n1 sh0 Y d S )Nrh rd r ri �Titler3 ) r re r r< r rf r( r r) r: r; �rollback_checkpointsrj r r r �(test_recover_checkpoint_rollback_failure� s � zDReverterCheckpointLocalTest.test_recover_checkpoint_rollback_failurec C s� | j �| jd d� t�d��P}td�|_t�t j �� | j � � W d � n1 sV0 Y W d � n1 st0 Y d S )Nr r# r7 r8 � r r5 r r r9 r& r' r: r; r r< rF r= r r r �$test_recover_checkpoint_copy_failure� s z@ReverterCheckpointLocalTest.test_recover_checkpoint_copy_failurec C s� | j �| jd d� t�d��P}td�|_t�t j �� | j � � W d � n1 sV0 Y W d � n1 st0 Y d S )Nr z temp savez certbot.reverter.shutil.rmtreezCannot remove treero )r Z mock_rmtreer r r �"test_recover_checkpoint_rm_failure� s z>ReverterCheckpointLocalTest.test_recover_checkpoint_rm_failurez certbot.reverter.logger.warningc C s( | j �dtj�| jd�� | j �� d S )NTzmissing_file.txt)r rA r r, r- r rF )r Z mock_warnr r r �)test_recover_checkpoint_missing_new_files� s � zEReverterCheckpointLocalTest.test_recover_checkpoint_missing_new_fileszcertbot.reverter.os.removec C sT | j �d| j� td�|_t�tj�� | j � � W d � n1 sF0 Y d S )NTz Can't remove) r rA r r& r' r: r; r r< rF )r Z mock_remover r r �&test_recover_checkpoint_remove_failure� s zBReverterCheckpointLocalTest.test_recover_checkpoint_remove_failurec C s� t j�| jd�}| j�d|� t|d� | j�| jd d� t| j d� | j�| jd d� t| j d � | j� | jd d � t| j d � t j�| j d �}| j�d |� t|d� | j� � d S )Nr? FzThis is a new perm file!r z perm save1zupdated perm config1r3 z perm save2zupdated perm config2z temp save1z second update now temp config1rH TzNew temporary file!)r r, r- r r rA rB r( r r r r5 r rI rJ r r r �#test_recovery_routine_temp_and_perm� s z?ReverterCheckpointLocalTest.test_recovery_routine_temp_and_perm) �__name__� __module__� __qualname__�__doc__r r" r r9 r2 r6 r> rE rG rK rO rU rW r_ r` rb rg rk rn rp rq rr rs rt � __classcell__r r r r r s6 r c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d�dd� �Z e � d�dd� �Z dd� Zdd� Z� ZS )�TestFullCheckpointsReverterz5Tests functions having to deal with full checkpoints.c sP t � �� ddlm} t�tj� || j�| _t � }|\| _ | _ | _ | _ | _d S r r r r r r r s z!TestFullCheckpointsReverter.setUpc C s6 t �| jj� t �| j� t �| j� t�tj� d S r r r! r r r r" ! s z$TestFullCheckpointsReverter.tearDownc C s� t �tj�� | j�d� W d � n1 s.0 Y t �tj�� | j�d� W d � n1 sf0 Y t �tj�� | j�d� W d � n1 s�0 Y d S )Nz-1i���Zone)r: r; r r< r rm r! r r r � test_rollback_improper_inputs( s **z9TestFullCheckpointsReverter.test_rollback_improper_inputsc C s> | � � }| j�d� | j�d� t�| jj�}| j�d� d S )Nr3 )�_setup_three_checkpointsr rm r r* r r+ )r rD Zall_dirsr r r �.test_rollback_finalize_checkpoint_valid_inputs0 s zJTestFullCheckpointsReverter.test_rollback_finalize_checkpoint_valid_inputsc C s | j �d� d S )NzNo checkpoint...)r r) r! r r r �'test_finalize_checkpoint_no_in_progressM s zCTestFullCheckpointsReverter.test_finalize_checkpoint_no_in_progressz certbot.reverter.shutil.movec C sZ | j �| jd d� td�|_t�tj�� | j � d� W d � n1 sL0 Y d S )Nr rc z cannot moverl � r r( r r& r' r: r; r r< r) )r Z mock_mover r r �%test_finalize_checkpoint_cannot_titleQ s zATestFullCheckpointsReverter.test_finalize_checkpoint_cannot_titlez#certbot.reverter.filesystem.replacec C sV | j �| jd d� t|_t�tj�� | j � d� W d � n1 sH0 Y d S )Nr rc rl r )r Z mock_replacer r r �,test_finalize_checkpoint_no_rename_directoryY s zHTestFullCheckpointsReverter.test_finalize_checkpoint_no_rename_directoryzcertbot.reverter.loggerc C s, | j �d� | �� d|j_| j �d� d S )Nr3 r � )r rm r| ZwarningZ call_count)r Z mock_loggerr r r �test_rollback_too_manyb s z2TestFullCheckpointsReverter.test_rollback_too_manyc C s | � � }| j�d� d S )N� )r| r rm rC r r r �test_multi_rollbackn s z/TestFullCheckpointsReverter.test_multi_rollbackc C s� | j �| jd d� | j �d� t| jd� tj�| j d�}| j � d|� t|d� | j �| jd d � | j �d � t| j d � t|d � | j �| jd d� | j �d� t| jd� t| j d� t|d� |S )z$Generate some finalized checkpoints.r z first savezFirst Checkpointzupdate config1r? Fzdirective-config3r3 z second savezSecond Checkpointzupdate config2zupdate config3r@ z third savez Third Checkpoint - Save bothzFinal form config1zFinal form config2zFinal form config3) r r( r r) rB r r r, r- r rA r rC r r r r| v s z4TestFullCheckpointsReverter._setup_three_checkpoints)ru rv rw rx r r" r{ r} r~ r r9 r� r� r� r� r| ry r r r r rz s rz c C s� t �d�} t �d�}tj�| d�}tj�|d�}t|d��}|�d� W d � n1 sZ0 Y t|d��}|�d� W d � n1 s�0 Y |h|h||hg}||| ||fS )z!Setup sample configuration files.r r z config.txt�wzdirective-dir1Nzdirective-dir2)�tempfileZmkdtempr r, r- r. �write)r r r r �file_fdr r r r r � s ( (�r c C s t tj�| d��S )zRead save notesr$ ��read_inr r, r- ��direr r r �get_save_notes� s r� c C s t tj�| d��S )z Get FilepathsZ FILEPATHSr� r� r r r � get_filepaths� s r� c C s t tj�| d���� S )�Get new files.Z NEW_FILES)r� r r, r- � splitlinesr� r r r rL � s rL c C sD t tj�| d��� }tt�|��W d � S 1 s60 Y dS )r� ZCOMMANDSN)r. r r, r- �list�csv�reader)r� Zcsvfiler r r r[ � s r[ c C s6 t | d��}|�� W d � S 1 s(0 Y dS )z Read in a file, return the strr% N)r. r/ )r, r� r r r r� � s r� c C s8 t | d��}|�|� W d � n1 s*0 Y dS )z Update a file with a new value.r� N)r. r� )�filename�stringr� r r r rB � s rB �__main__r3 ) rx r� r r �sysr� Zunittestr r: Zcertbotr Zcertbot.compatr Z certbot.testsr Z test_utilZConfigTestCaser rz r r� r� rL r[ r� rB ru �exit�main�argv�__file__r r r r �<module> s2 __pycache__/reverter_test.cpython-39.pyc 0000644 00000037475 15114562471 0014330 0 ustar 00 a }|�giB � @ s� d Z ddlZddlZddlZddlZddlZddlZddlmZ ddlZddl m Z ddl m Z ddl mZ G dd� dej�ZG d d � d ej�Zd d � Zd d� Zdd� Zdd� Zdd� Zdd� Zdd� Zedkr�e�e� ej dd� e g �� dS )zTest certbot.reverter.� N)�mock)�errors)�os)�utilc s� e Zd ZdZ� fdd�Zdd� Ze�d�dd� �Zd d � Z d d � Z d d� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Ze�d �d d � �Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Ze�d*�d+d,� �Ze�d-�d.d/� �Zd0d1� Z� Z S )2�ReverterCheckpointLocalTestzTest the Reverter Class.c sP t � �� ddlm} t�tj� || j�| _t � }|\| _ | _ | _ | _ | _d S �Nr )�Reverter��super�setUpZcertbot.reverterr �logging�disableZCRITICAL�config�reverter�setup_test_files�config1�config2�dir1�dir2�sets��selfr �tup�� __class__� �I/usr/lib/python3.9/site-packages/certbot/_internal/tests/reverter_test.pyr s z!ReverterCheckpointLocalTest.setUpc C s6 t �| jj� t �| j� t �| j� t�tj� d S �N� �shutil�rmtreer Zwork_dirr r r r ZNOTSET�r r r r �tearDown s z$ReverterCheckpointLocalTest.tearDownz*certbot.reverter.Reverter._read_and_appendc C s� t d�|_z| j�| jd d� W n t y4 Y n0 | j�d� t�| jjj �d }tj � | jjj |d�}t |d��}|� � }W d � n1 s�0 Y d|v s�J �d S )Nz cannot evenr �save1Zblah� CHANGES_SINCE�rz No changes)�OSError� side_effectr �add_to_checkpointr �finalize_checkpointr �listdirr � backup_dir�path�join�open�read)r Z mock_readr, Z no_change�f�xr r r �test_no_change& s &z*ReverterCheckpointLocalTest.test_no_changec C s� | j �| jd d� | j �| jd d� tj�| jj�s<J �t| jj�dksPJ �tj� tj� | jjd��rnJ �t | jj�d� | j | j�ks�J �d S )Nr r# � �save2Z save1save2� NEW_FILESz{0} {1} )r �add_to_temp_checkpointr r r, �isdirr �temp_checkpoint_dir�get_save_notes�isfiler- � get_filepaths�formatr r r! r r r �!test_basic_add_to_temp_checkpoint4 s ��� �z=ReverterCheckpointLocalTest.test_basic_add_to_temp_checkpointc C sx t �d��Z}td�|_t�tj��$ | j� | j d d� W d � n1 sL0 Y W d � n1 sj0 Y d S )N� certbot.reverter.shutil.copy2�bad copyr r# ) r �patchr& r' �pytest�raisesr � ReverterErrorr r( r �r Z mock_copy2r r r �#test_add_to_checkpoint_copy_failureB s z?ReverterCheckpointLocalTest.test_add_to_checkpoint_copy_failurec C s� t j�| jd�}| j�d|� t|d� | j�| jd d� | j� | jd d� t � t j ��$ | j�| jd d� W d � n1 s�0 Y | j�| jd d � t � t j �� | j�|hd � W d � n1 s�0 Y d S ) z:Make sure that checkpoint errors are thrown appropriately.� config3.txtTzThis is a new file!� r# r r4 Zsave3Nr3 Zsave4z invalid save)r r, r- r r �register_file_creation� update_filer( r r6 rA rB r rC �r �config3r r r �test_checkpoint_conflictH s 2z4ReverterCheckpointLocalTest.test_checkpoint_conflictc C s` | j �| jd d� t| jd� | j �| jd d� t| jd� | j �� t| j�dks\J �d S )Nr r# zupdated-directivezsave2-updated dirz'new directive change that we won't keep�directive-dir1)r r6 r rI r �revert_temporary_config�read_inr! r r r �#test_multiple_saves_and_temp_revert[ s z?ReverterCheckpointLocalTest.test_multiple_saves_and_temp_revertc C s� t j�| jd�}t|d� t j�| jd�}t|d� | j�d| j� | j�d| j � | j�d||� | j� � t j� | j�r�J �t j� | j �r�J �t j� |�r�J �t j� |�r�J �d S )NrF ZConfig3� config4.txtZConfig4T) r r, r- r rI r r rH r r �recovery_routiner: �r rK Zconfig4r r r �*test_multiple_registration_fail_and_revertd s zFReverterCheckpointLocalTest.test_multiple_registration_fail_and_revertc C s` | j �d| j� | j �d| j� | j �d| j� | j �d| j� t| jj�}t|�dks\J �d S )NTr3 )r rH r � get_new_filesr r8 �len)r �filesr r r �$test_multiple_registration_same_filex s z@ReverterCheckpointLocalTest.test_multiple_registration_same_filec C s� t �� }t jd|dd��V td�|_t�tj�� | j � d| j � W d � n1 sV0 Y W d � n1 st0 Y d S )N�certbot.reverter.openT�Zcreate�bad open) r � mock_openr@ r& r' rA rB r rC r rH r �r Zm_openr r r �'test_register_file_creation_write_error� s zCReverterCheckpointLocalTest.test_register_file_creation_write_errorc C s< t �tj�� | j�d� W d � n1 s.0 Y d S )N�filepath)rA rB r rC r rH r! r r r �test_bad_registration� s z1ReverterCheckpointLocalTest.test_bad_registrationc C s\ ddgddgdgg}|D ]}| j �d|� qt| jj�}t||�D ]\}}||ksBJ �qBd S )N�a2dismod�sslZrewriteZ cleanslateT)r �register_undo_command�get_undo_commandsr r8 �zip)r �coms�comZact_comsZa_comr r r �test_register_undo_command� s � z6ReverterCheckpointLocalTest.test_register_undo_commandc C s� t �� }t jd|dd��V td�|_t�tj�� | j � ddg� W d � n1 sV0 Y W d � n1 st0 Y d S )NrY TrZ r[ Zcommand) r r\ r@ r& r' rA rB r rC r rc r] r r r � test_bad_register_undo_command� s z:ReverterCheckpointLocalTest.test_bad_register_undo_commandzcertbot.util.run_scriptc C sN dt jg|_dgddgg}|D ]}| j�d|� q | j�� |jdksJJ �d S )N� Zinvalid_commandra rb TrG )r ZSubprocessErrorr' r rc rN � call_count)r Zmock_runrf rg r r r �test_run_undo_commands� s � z2ReverterCheckpointLocalTest.test_run_undo_commandsc C s` | j �| jd d� tjtjd�| j _t� tj�� | j � � W d � n1 sR0 Y d S )Nr � perm save�r' ) r r( r r � MagicMockr rC �_recover_checkpointrA rB rR r! r r r �)test_recovery_routine_in_progress_failure� s � zEReverterCheckpointLocalTest.test_recovery_routine_in_progress_failurec C sh t jt�d�d�}|| j_| j�| jd d� t� tj�� | j� � W d � n1 sZ0 Y d S )N�ern r � config1 save) r ro r rC r rp r6 r rA rB rN �r Z mock_recoverr r r �,test_recover_checkpoint_revert_temp_failures� s �zHReverterCheckpointLocalTest.test_recover_checkpoint_revert_temp_failuresc C sv t jt�d�d�}|| j_| j�| jd d� | j�d� t � tj�� | j� d� W d � n1 sh0 Y d S )Nrr rn r rs �Titler3 ) r ro r rC r rp r( r r) rA rB �rollback_checkpointsrt r r r �(test_recover_checkpoint_rollback_failure� s � zDReverterCheckpointLocalTest.test_recover_checkpoint_rollback_failurec C s� | j �| jd d� t�d��P}td�|_t�t j �� | j � � W d � n1 sV0 Y W d � n1 st0 Y d S )Nr r# r> r? � r r6 r r r@ r& r' rA rB r rC rN rD r r r �$test_recover_checkpoint_copy_failure� s z@ReverterCheckpointLocalTest.test_recover_checkpoint_copy_failurec C s� | j �| jd d� t�d��P}td�|_t�t j �� | j � � W d � n1 sV0 Y W d � n1 st0 Y d S )Nr z temp savez certbot.reverter.shutil.rmtreezCannot remove treery )r Z mock_rmtreer r r �"test_recover_checkpoint_rm_failure� s z>ReverterCheckpointLocalTest.test_recover_checkpoint_rm_failurez certbot.reverter.logger.warningc C s6 | j �dtj�| jd�� | j �� |jdks2J �d S )NTzmissing_file.txtr3 )r rH r r, r- r rN rk )r Z mock_warnr r r �)test_recover_checkpoint_missing_new_files� s � zEReverterCheckpointLocalTest.test_recover_checkpoint_missing_new_fileszcertbot.reverter.os.removec C sT | j �d| j� td�|_t�tj�� | j � � W d � n1 sF0 Y d S )NTz Can't remove) r rH r r& r' rA rB r rC rN )r Z mock_remover r r �&test_recover_checkpoint_remove_failure� s zBReverterCheckpointLocalTest.test_recover_checkpoint_remove_failurec C s t j�| jd�}| j�d|� t|d� | j�| jd d� t| j d� | j�| jd d� t| j d � | j� | jd d � t| j d � t j�| j d �}| j�d |� t|d� | j� � t j�|�r�J �t j�|�r�J �t| j �dks�J �t| j �dks�J �d S )NrF FzThis is a new perm file!r z perm save1zupdated perm config1r3 z perm save2zupdated perm config2z temp save1z second update now temp config1rQ TzNew temporary file!rM �directive-dir2)r r, r- r r rH rI r( r r r r6 r rR r: rO rS r r r �#test_recovery_routine_temp_and_perm� s" z?ReverterCheckpointLocalTest.test_recovery_routine_temp_and_perm) �__name__� __module__� __qualname__�__doc__r r" r r@ r2 r= rE rL rP rT rX r^ r` rh ri rl rq ru rx rz r{ r| r} r � __classcell__r r r r r s6 r c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d�dd� �Z e � d�dd� �Z dd� Zdd� Z� ZS )�TestFullCheckpointsReverterz5Tests functions having to deal with full checkpoints.c sP t � �� ddlm} t�tj� || j�| _t � }|\| _ | _ | _ | _ | _d S r r r r r r r s z!TestFullCheckpointsReverter.setUpc C s6 t �| jj� t �| j� t �| j� t�tj� d S r r r! r r r r" ! s z$TestFullCheckpointsReverter.tearDownc C s� t �tj�� | j�d� W d � n1 s.0 Y t �tj�� | j�d� W d � n1 sf0 Y t �tj�� | j�d� W d � n1 s�0 Y d S )Nz-1i���Zone)rA rB r rC r rw r! r r r � test_rollback_improper_inputs( s **z9TestFullCheckpointsReverter.test_rollback_improper_inputsc C s | � � }tt�| jj��dks"J �| j�d� t| j �dks@J �t| j �dksRJ �t|�dksbJ �| j�d� t| j �dks�J �t| j �dks�J �tj � |�r�J �t�| jj�}t|�dks�J �dt tj �| jj|d ��v s�J �| j�d� t| j �d k�sJ �d S ) N� r3 �update config1�update config2�Final form config3r~ �First Checkpointr rM )�_setup_three_checkpointsrV r r* r r+ r rw rO r r r, r: r9 r- )r rK Zall_dirsr r r �.test_rollback_finalize_checkpoint_valid_inputs0 s" � zJTestFullCheckpointsReverter.test_rollback_finalize_checkpoint_valid_inputsc C s | j �d� d S )NzNo checkpoint...)r r) r! r r r �'test_finalize_checkpoint_no_in_progressM s zCTestFullCheckpointsReverter.test_finalize_checkpoint_no_in_progressz certbot.reverter.shutil.movec C sZ | j �| jd d� td�|_t�tj�� | j � d� W d � n1 sL0 Y d S )Nr rm z cannot moverv � r r( r r& r' rA rB r rC r) )r Z mock_mover r r �%test_finalize_checkpoint_cannot_titleQ s zATestFullCheckpointsReverter.test_finalize_checkpoint_cannot_titlez#certbot.reverter.filesystem.replacec C sV | j �| jd d� t|_t�tj�� | j � d� W d � n1 sH0 Y d S )Nr rm rv r� )r Z mock_replacer r r �,test_finalize_checkpoint_no_rename_directoryY s zHTestFullCheckpointsReverter.test_finalize_checkpoint_no_rename_directoryzcertbot.reverter.loggerc C sL | j �d� |jjdks J �| �� d|j_| j �d� |jjdksHJ �d S )Nr3 r � )r rw Zwarningrk r� )r Z mock_loggerr r r �test_rollback_too_manyb s z2TestFullCheckpointsReverter.test_rollback_too_manyc C sL | � � }| j�d� t| j�dks&J �t| j�dks8J �tj�|�rHJ �d S )Nr� rM r~ ) r� r rw rO r r r r, r: rJ r r r �test_multi_rollbackn s z/TestFullCheckpointsReverter.test_multi_rollbackc C s� | j �| jd d� | j �d� t| jd� tj�| j d�}| j � d|� t|d� | j �| jd d � | j �d � t| j d � t|d � | j �| jd d� | j �d� t| jd� t| j d� t|d� |S )z$Generate some finalized checkpoints.r z first saver� r� rF Fzdirective-config3r3 z second savezSecond Checkpointr� zupdate config3rG z third savez Third Checkpoint - Save bothzFinal form config1zFinal form config2r� ) r r( r r) rI r r r, r- r rH r rJ r r r r� v s z4TestFullCheckpointsReverter._setup_three_checkpoints)r� r� r� r� r r" r� r� r� r r@ r� r� r� r� r� r� r r r r r� s r� c C s� t �d�} t �d�}tj�| d�}tj�|d�}t|d��}|�d� W d � n1 sZ0 Y t|d��}|�d� W d � n1 s�0 Y |h|h||hg}||| ||fS )z!Setup sample configuration files.r r z config.txt�wrM Nr~ )�tempfileZmkdtempr r, r- r. �write)r r r r �file_fdr r r r r � s ( (�r c C s t tj�| d��S )zRead save notesr$ �rO r r, r- ��direr r r r9 � s r9 c C s t tj�| d��S )z Get FilepathsZ FILEPATHSr� r� r r r r; � s r; c C s t tj�| d���� S )�Get new files.r5 )rO r r, r- � splitlinesr� r r r rU � s rU c C sD t tj�| d��� }tt�|��W d � S 1 s60 Y dS )r� ZCOMMANDSN)r. r r, r- �list�csv�reader)r� Zcsvfiler r r rd � s rd c C s6 t | d��}|�� W d � S 1 s(0 Y dS )z Read in a file, return the strr% N)r. r/ )r, r� r r r rO � s rO c C s8 t | d��}|�|� W d � n1 s*0 Y dS )z Update a file with a new value.r� N)r. r� )�filename�stringr� r r r rI � s rI �__main__r3 ) r� r� r r �sysr� Zunittestr rA Zcertbotr Zcertbot.compatr Z certbot.testsr Z test_utilZConfigTestCaser r� r r9 r; rU rd rO rI r� �exit�main�argv�__file__r r r r �<module> s2 __pycache__/storage_test.cpython-39.opt-1.pyc 0000644 00000066654 15114562471 0015076 0 ustar 00 a }|�gm� � @ sB d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlZddl Z ddl Z ddl m Z ddl m Z ddl mZ ddlmZ ddlmZ ddlm mZ e�d �Zd d � Zd d � ZG dd� dej�ZG dd� dej �Z G dd� de �Z G dd� de �Z G dd� de �Z e!dk�r>e�"e�#ej$dd� e%g �� dS )�$Tests for certbot._internal.storage.� N)�mock)� configuration)�errors��ALL_FOUR)� filesystem)�os� cert_512.pemc C s t D ]}t�t| |�� qdS )z9Unlink all four items associated with this RenewableCert.N)r r �unlink�getattr)� rc_object�kind� r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/storage_test.py� unlink_all s r c C sH t D ]>}tt| |�d��}|�|� W d � q1 s80 Y qdS )z9Put dummy data into all four files of this RenewableCert.�wN)r �openr �write)r r �fr r r �fill_with_sample_data s r c @ sR e Zd ZdZdd� Zdd� Ze�d�dd� �Zd d � Z d d � Z d d� Z dd� Z dS )�RelevantValuesTestz4Tests for certbot._internal.storage.relevant_values.c C s& ddd�| _ t�� | _t�� | j_d S )N� example.orgZrsa)�server�key_type)�valuesr Z MagicMock� mock_config� set_by_user��selfr r r �setUp) s zRelevantValuesTest.setUpc C s ddl m} || jj_|| j�S )Nr ��relevant_values)�certbot._internal.storager" r �to_dict� return_value)r r r" r r r �_call. s zRelevantValuesTest._callz8certbot._internal.plugins.disco.PluginsRegistry.find_allc C s dg|_ d| jj_ d| jd< d S )Nzcertbot-foo:barT�* zcertbot_foo:bar_baz)r% r r r )r Z mock_find_allr r r �test_namespace3 s z!RelevantValuesTest.test_namespacec C s@ d| j j_d| jd< d| jd< d| jd< | j�� }d| jd< d S ) NT�allow_subset_of_names�apache� authenticatori9 � rsa_key_sizeZthereZhello�r r r% r �copy�r �expected_relevant_valuesr r r �test_option_set; s z"RelevantValuesTest.test_option_setc C s" d| j j_| j�� }d| jd< d S )NFi r, r- r/ r r r �test_option_unsetF s z$RelevantValuesTest.test_option_unsetc s@ d� � fdd�| j _| j�� }d | j� < d| j� < d| j� < d S )NZmanual_public_ip_logging_okc s | � kr dS dS �NFTr )�v�Zdeprected_optionr r �<lambda>P � z9RelevantValuesTest.test_deprecated_item.<locals>.<lambda>TF)r r r r. r/ r r5 r �test_deprecated_itemN s z'RelevantValuesTest.test_deprecated_itemc C sb ddl m} ddlm} ddlm} ddlm} |j�� }|� |g d��}|j d dd d d �}d S ) Nr r! )�disco)�cli)� constants)z--allow-subset-of-namesz--authenticatorr* r ZecdsaTr* )r r r) r+ ) r# r" Zcertbot._internal.pluginsr9 �certbot._internalr: r; ZPluginsRegistryZfind_allZprepare_and_parse_argsZ CLI_DEFAULTS)r r" r9 r: r; ZPLUGINS� namespacer0 r r r �test_with_real_parserZ s �z(RelevantValuesTest.test_with_real_parserN) �__name__� __module__� __qualname__�__doc__r r& r �patchr( r1 r2 r8 r> r r r r r & s r c s2 e Zd ZdZ� fdd�Zd dd�Zdd� Z� ZS ) �BaseRenewableCertTestz�Base class for setting up Renewable Cert tests. .. note:: It may be required to write out self.config for your test. Check :class:`.cli_test.DuplicateCertTest` for an example. c s� ddl m} t� �� t�tj�| j j dd�� tj�| j j dd�}t�|� t�tj�| j j d�� t � � }t D ]&}tj�| j j dd|d �}|||< qrttj�| j j ddd�d �� W d � n1 s�0 Y ||d< tj�| j j dd �|_|�� || _ttj�| j j dd �d ��}|�d � W d � n1 �s>0 Y t � � | _t�d��(}d|_|�|j| j �| _W d � n1 �s�0 Y d S )Nr ��storage�liver �archiveZrenewal�.pem�README�azexample.org.confz IGNORE.THISr z This file should be ignored!z7certbot._internal.storage.RenewableCert._check_symlinksT)r< rF �superr r �makedirsr �path�join�config� config_dir� configobj� ConfigObjr r �filenamer � config_file�defaultsr rC r% � RenewableCert�test_rc)r rF Z archive_pathrU r � kind_pathZjunk�check�� __class__r r r w s< � �� � * zBaseRenewableCertTest.setUpNc C s� t | j|�}tj�|�r"t�|� t�tj�tjjtjjddd� ||��|� t |d��,}|� |d u rp|� d�n|� W d � n1 s�0 Y |dkr�t �|d� d S )NrH r z {0}{1}.pem�wb�ascii�privkeyi� )r rX r rN �lexistsr �symlinkrO �pardir�formatr r �encoder �chmod)r r �ver�value�linkr r r r �_write_out_kind� s �� :z%BaseRenewableCertTest._write_out_kindc C s& t D ] }| �|d� | �|d� qd S )N� � )r ri �r r r r r �_write_out_ex_kinds� s z)BaseRenewableCertTest._write_out_ex_kinds)N)r? r@ rA rB r ri rm � __classcell__r r r[ r rD o s & rD c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z e�d�dd� �Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zej�ejd'�e�d(�d)d*� ��Zd+d,� Z ej�ejd'�e�d-�d.d/� ��Z e�d0�d1d2� �Z e � d3�e�d0�d4d5� ��Z!e�d0�e�d6�d7d8� ��Z"e�d0�d9d:� �Z#e�d0�d;d<� �Z$e�d=�d>d?� �Z%d@dA� Z&e�dB�dCdD� �Z'dEdF� Z(dGdH� Z)dIdJ� Z*dKdL� Z+dMdN� Z,dOdP� Z-dQS )R�RenewableCertTestsr c C s t D ]}qd S �Nr rl r r r �test_initialization� s z&RenewableCertTests.test_initializationc C s� ddl m} tj�| jjd�}t|d��}|�d� W d � n1 sH0 Y t � t j �� |� || j� W d � n1 s�0 Y t�|� t � t j �� |� d| j� W d � n1 s�0 Y dS )z�Test that the RenewableCert constructor will complain if the renewal configuration file doesn't end in ".conf" r rE z broken.confr z [No closing bracket for you!NZfun)r< rF r rN rO rP rQ r r �pytest�raisesr �CertStorageErrorrW r )r rF �brokenr r r r �test_renewal_bad_config� s (, z*RenewableCertTests.test_renewal_bad_configc C s� ddl m} t�� }d|d< d|d< d|d< tj�| jjd �|_ |� � t � t j�� |�|j | j� W d � n1 sz0 Y d S ) z�Test that the RenewableCert constructor will complain if the renewal configuration file is missing a required file element.r rE zimaginary_cert.pem�certzimaginary_chain.pem�chainzimaginary_fullchain.pem� fullchainzimaginary_config.confN)r< rF rR rS r rN rO rP rQ rT r rr rs r rt rW )r rF rP r r r � test_renewal_incomplete_config� s z1RenewableCertTests.test_renewal_incomplete_configc C sT ddl m} | �� t�d��"}|�| jj| j� W d � n1 sF0 Y d S )Nr rE � certbot._internal.storage.logger) r< rF rm r rC rW rU rT rP �r rF � mock_loggerr r r �test_no_renewal_version� s 0z*RenewableCertTests.test_no_renewal_versionc C sh ddl m} | �� d| jd< | j�� t�d��"}|�| jj| j � W d � n1 sZ0 Y d S )Nr rE z99.99.99�versionr{ ) r< rF rm rU r r rC rW rT rP r| r r r �test_renewal_newer_version� s 0z-RenewableCertTests.test_renewal_newer_versionc C sD | j j}d| j _|| j _t| j � t| j � tD ]&}t�tj�d|d �t | j |�� q0t| j � tD ]*}t�tj�| j j |d �t | j |�� qft| j � tD ],}t�tj�dddd|d �t | j |�� q�t| j � t� | j j � t�tj�ddddd�| j j � t| j j d��}|�d� W d � n1 �s60 Y d S ) Nz relative/path�..z17.pemrH r zfullchain_17.pemr zwrongly-named fullchain)rX rw r r r r ra rN rO r rP rQ r ry r r )r Zoldcertr r r r r �test_consistent� s> � � � � ��*z"RenewableCertTests.test_consistentc C sx | � dd� t�| jj� t�tj�| jj ddd�| jj� t | jjd��}|� d� W d � n1 sj0 Y d S )Nrw � rH r z cert17.pemr ) ri r r rX rw ra rN rO rP rQ r r )r r r r r �test_current_target s ��(z&RenewableCertTests.test_current_targetc C sH dD ]}| � d|� qt�| jj� t�tj�ddddd�| jj� d S )N)� � � � rw r� rH r z cert10.pem)ri r r rX rw ra rN rO )r rf r r r �test_current_version' s ��z'RenewableCertTests.test_current_versionc C s d S rp r r r r r �test_no_current_version/ s z*RenewableCertTests.test_no_current_versionc C sd t dd�D ]}tD ]}| �||� qq | �dd� | �dd� | �dd� tD ]}| �|d� qNd S )Nr� � r_ � rw ry r� )�ranger ri �r rf r r r r � test_latest_and_next_versions2 s z0RenewableCertTests.test_latest_and_next_versionsr{ c C s< t �� }| j_t �� }| j_t �� | j_d|_d|_d S r3 )r ZMockrX �update_all_links_toZhas_pending_deployment�latest_common_versionr% )r r} Z mock_updateZmock_has_pendingr r r �test_ensure_deployedI s z'RenewableCertTests.test_ensure_deployedc C sT t dd�D ]}tD ]}| �||� qq | j�dd� | j�dd� | j�dd� d S ) Nr� r� rw � r_ � rx i� )r� r ri rX �_update_link_tor� r r r �test_update_link_toZ s z&RenewableCertTests.test_update_link_toc C s | � dd� d S )Nrw rj )ri r r r r � test_versionm s z RenewableCertTests.test_versionc C sP t dd�D ]}tD ]}| �||� qq t dd�D ]}| j�|� tD ]}qDq0d S )Nr� r� �r� r ri rX r� r� r r r � test_update_all_links_to_successu s z3RenewableCertTests.test_update_all_links_to_successc C s� t jfdd�}| �� t�d��L}||_t�t�� | j � d� W d � n1 sT0 Y W d � n1 sr0 Y t D ]}q�d S )Nc S s. t j�| �}d|v r"|�d�r"t�|| � d S )Nry �prev)r rN �basename� startswith� ValueError)rN � real_unlinkr� r r r �unlink_or_raise� s zTRenewableCertTests.test_update_all_links_to_partial_failure.<locals>.unlink_or_raise�#certbot._internal.storage.os.unlinkrj � r r rm r rC � side_effectrr rs r� rX r� r �r r� � mock_unlinkr r r r �(test_update_all_links_to_partial_failure� s Hz;RenewableCertTests.test_update_all_links_to_partial_failurec C s� t jfdd�}| �� t�d��L}||_t�t�� | j � d� W d � n1 sT0 Y W d � n1 sr0 Y t D ]}q�d S )Nc S s dt j�| �v rt�|| � d S )Nry )r rN r� r� )rN r� r r r r� � s zQRenewableCertTests.test_update_all_links_to_full_failure.<locals>.unlink_or_raiser� rj r� r� r r r �%test_update_all_links_to_full_failure� s Hz8RenewableCertTests.test_update_all_links_to_full_failurec C sZ t dd�D ]}tD ]}| �||� qq t dd�D ]$}| j�|� tD ]}qD|dk r0q0q0d S )Nr� r� r� r� r� r r r �test_has_pending_deployment� s z.RenewableCertTests.test_has_pending_deploymentc C s\ | � ddt�d�� t�| jj� t�t j �� | j� � W d � n1 sN0 Y d S )Nrw rj zcert-san_512.pem) ri � test_util� load_vectorr r rX rw rr rs r rt �namesr r r r � test_names� s z RenewableCertTests.test_namesr z"certbot._internal.storage.datetimec C s� t �d�}| �� | j�d� t| jjd��}|�|� W d � n1 sL0 Y | j�d� t| jjd��}|�|� W d � n1 s�0 Y tj |_ d|_ i | jj d< dD ]0\}}}tj� |t j�}||jj_ || jj d < q�dS ) z<Test should_autorenew() on the basis of expiry time windows.r rj r] Nrk F� renewalparams))�@*�Tz2 monthsT)r� z1 weekT)r� z4 daysF)r� �2 daysF)�@�Iz7 yearsT)r� z11 years 2 monthsT)r� z8 hoursF)r� r� F)r� z40 daysF)r� z9 monthsF)� ��Tz 0 secondsT)r� z 10 secondsT)r� z 10 minutesT)r� z10 weeksT)r� z 10 monthsT)r� z10 yearsT)r� z 99 monthsTZrenew_before_expiry)r� r� rm rX r� r rw r �datetime� timedeltar% r Z fromtimestamp�pytz�UTCZnow) r Z mock_datetime�mock_set_by_userZ test_certr Z current_time�interval�resultZsometimer r r � test_time_interval_judgments� s ( ( z/RenewableCertTests.test_time_interval_judgmentsc C s0 i | j jd< d| j jd d< d| j jd d< d S )Nr� �True� autorenew�False�rX r r r r r �test_autorenewal_is_enabled� s z.RenewableCertTests.test_autorenewal_is_enabledz4certbot._internal.storage.RenewableCert.ocsp_revokedc C sL d|_ ddi| jjd< d| jjd d< tD ]}| �|d� q*d|_ d|_ dS ) zTTest should_autorenew on the basis of reasons other than expiry time window.Fr� r� r� r� rj TN)r% rX r r ri )r Z mock_ocspr� r r r r �test_should_autorenew� s z(RenewableCertTests.test_should_autorenewz)certbot._internal.storage.relevant_valuesc C s� dd� |_ tdd�D ]}tD ]}| �||� q q| j�d� t| j�dd���}W d � n1 sd0 Y t| j�dd���}W d � n1 s�0 Y t| j�dd���}W d � n1 s�0 Y d D ]}q�tD ]}q�| j�d � tD ]}q�t| j�dd ���}W d � n1 �s&0 Y tj � | j j | jj �d }t|d ��}|�d� W d � n1 �sv0 Y d S )Nc S s | � � S rp �r$ ��xr r r r6 r7 z8RenewableCertTests.test_save_successor.<locals>.<lambda>r� r� r� rw rx ry )r� r� � r� � z .conf.newr z)We previously crashed while writing me :()r� r� r ri rX r� r r r rN rO rP �renewal_configs_dirZ lineagenamer )r �mock_rvrf r r �iZtemp_config_filer r r �test_save_successor s8 �� *z&RenewableCertTests.test_save_successorz:Group/everybody permissions are not maintained on Windows.c C s� dd� |_ tD ]}| �|d� q| j�d� t�| j�dd�d� | j�ddd d| j � | j�ddd d| j � t�| j�dd �d � | j�d dd d| j � d S ) Nc S s | � � S rp r� r� r r r r6 B r7 zMRenewableCertTests.test_save_successor_maintains_group_mode.<locals>.<lambda>r� r_ i$ � newcert� new chainr� � new_privkeyr� � ) r� r ri rX r� r re r �save_successorrP )r r� r r r r �(test_save_successor_maintains_group_mode= s z;RenewableCertTests.test_save_successor_maintains_group_modezBcertbot._internal.storage.filesystem.copy_ownership_and_apply_modec C s\ dd� |_ tD ]}| �|d� q| j�d� | j�ddd d| j� | j�dddd| j� d S )Nc S s | � � S rp r� r� r r r r6 X r7 zFRenewableCertTests.test_save_successor_maintains_gid.<locals>.<lambda>r� r� r� r� r� )r� r ri rX r� r� rP )r Zmock_ownershipr� r r r r �!test_save_successor_maintains_gidS s z4RenewableCertTests.test_save_successor_maintains_gidc C s� dd� |_ ddlm} |j�dddd| j�}t|jd ��}W d � n1 sN0 Y |j�dd d d | j�}t� t j � | jj d�� |j�dddd| j�}t�t j � | jjd�t j � | jjd�� t�tj��& |j�dddd| j� W d � n1 s�0 Y t�t j � | jjd�t j � | jjd�� t�tj��& |j�dddd| j� W d � n1 �sh0 Y |j�dd d d | j�}d S )z$Test for new_lineage() class method.c S s | � � S rp r� r� r r r r6 f r7 z5RenewableCertTests.test_new_lineage.<locals>.<lambda>r rE �the-lineage.coms certs privkeys chain�rbN� cert2� privkey2� chain2zthe-lineage.com-0002s cert3s privkey3s chain3zthe-lineage.com-0003s cert4s privkey4s chain4zother-example.coms cert5s privkey5s chain5)r� r< rF rW � new_lineagerP r ry r �mkdirr rN rO �default_archive_dir�shutil�copytree�live_dirrr rs r rt )r r� rF r� r r r r �test_new_lineagea s> � � �� �"� �$ �z#RenewableCertTests.test_new_lineagec C sZ dd� |_ ddlm} t�| jj� t�| jj� t�| jj� |j � dddd| j� d S ) z9Test that directories can be created if they don't exist.c S s | � � S rp r� r� r r r r6 � r7 zFRenewableCertTests.test_new_lineage_nonexistent_dirs.<locals>.<lambda>r rE r� r� r� r� N) r� r< rF r� �rmtreerP r� r� r� rW r� )r r� rF r r r �!test_new_lineage_nonexistent_dirs� s �z4RenewableCertTests.test_new_lineage_nonexistent_dirsz2certbot._internal.storage.util.unique_lineage_namec C sX ddl m} d|_t�tj��& |j�dddd| j � W d � n1 sJ0 Y d S )Nr rE )Z this_does_not_end_with_dot_confZyikesz example.comrw r_ rx ) r< rF r% rr rs r rt rW r� rP )r Zmock_ulnrF r r r � test_invalid_config_filename� s �z/RenewableCertTests.test_invalid_config_filenamec C s\ t �tj�� | j�d� W d � n1 s.0 Y t �tj�� | j�d� W d � n1 sf0 Y t �tj�� | j�dd� W d � n1 s�0 Y t �tj�� | j�d� W d � n1 s�0 Y t �tj�� | j� d� W d � n1 �s0 Y t �tj�� | j� dd� W d � n1 �sN0 Y d S )NZelephantr� ) rr rs r rt rX Zcurrent_targetZcurrent_versionr Zavailable_versionsZnewest_available_versionr� r r r r � test_bad_kind� s **,*,z RenewableCertTests.test_bad_kindz4certbot.ocsp.RevocationChecker.ocsp_revoked_by_pathsc C s� t D ]}| �|d� q| j�� }| j�d|�}| j�d|�}d|_d|_t|_t� d��}W d � n1 sn0 Y |j d d }d S )Nr� rw rx TFz(certbot._internal.storage.logger.warningr ) r ri rX r� r r% r� r� r rC Z call_args)r Z mock_checkerr r Zexpected_cert_pathZexpected_chain_path�loggerZlog_msgr r r �test_ocsp_revoked� s z$RenewableCertTests.test_ocsp_revokedc ) C s� ddl m} tjddddddtjd�}tjd d d dd d tjd�}t�d��t�dd dddd��}|df||df||df||df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d � |d f|t�d � |d f|t�d � |d f|t�d � |d f|t�d � |d!f|t�d � |d!f|t�d"� |d#f|t�d$� |d#f|t�d$� i}|�� D ]\}}|\}} �q�d S )%Nr rE i� rk r� �; � )Ztzinfoi� r� � � � z Asia/Shanghaii� � � � �) � z17 daysr� Z30� z7 weeks�1 z1 monthz1 yearin im z 1 year 1 dayio z 1 year-1 dayil z4 yearsi� ) r< rF r� r� r� �timezoneZfromutcr� �items) r rF Ztime_1Ztime_2Ztime_3Zintended� parametersZexceptedZ base_timer� r r r �test_add_time_interval� s: ��z)RenewableCertTests.test_add_time_intervalc C s$ i | j jd< | j jd }d|d< d S )Nr� zhttps://acme.example/dirr r� �r Zrpr r r � test_server s z RenewableCertTests.test_serverc C s< i | j jd< | j jd }d|d< d|d< d|d< d|d< d S )Nr� z6https://acme-staging-v02.api.letsencrypt.org/directoryr z)https://staging.someotherca.com/directoryz.https://acme-v01.api.letsencrypt.org/directoryz.https://acme-v02.api.letsencrypt.org/directoryr� r� r r r �test_is_test_cert s z$RenewableCertTests.test_is_test_certc C s� ddl m} t�tj��" |�| jj| j � W d � n1 s@0 Y t � d| jt d � t�tj��" |�| jj| j � W d � n1 s�0 Y d S )Nr rE �missing) r< rF rr rs r rt rW rU rT rP r ra r �r rF r r r �test_missing_cert s 0z$RenewableCertTests.test_missing_certc C s� t j�| jjd�}t j�| jjd�}t|d��}|�d� W d � n1 sN0 Y t�|d� i }t D ] }d||< qld}dd i}d d l m } |� |||||� t|d ��}|� � } W d � n1 s�0 Y d S ) Nz sample-filezsample-file.newr zM[renewalparams] useful = value # A useful value useless = value # Not needed i� Z somewhereZ the_archiveZusefulZ new_valuer rE �r)r rN rO rP rQ r r r re r r< rF Zwrite_renewal_config�read) r ZtempZtemp2r �targetr� � archive_dirZ relevant_datarF Zcontentr r r �test_write_renewal_config( s ( & z,RenewableCertTests.test_write_renewal_configc C s� t D ]}| �|d� qt�d��"}| j�� |�� W d � n1 sH0 Y t D ] }tdd�D ]}| �||� qdqVt�d��}| j�� W d � n1 s�0 Y d S )Nr� zcertbot.compat.os.unlinkr� r� )r ri r rC rX �truncateZassert_not_calledr� )r r r� r� r r r � test_truncateI s & z RenewableCertTests.test_truncateN).r? r@ rA rB rq rv rz r~ r� r� r� r� r� r� r rC r� r� r� r� r� r� r� r� �objectr ZNamespaceConfigr� r� r� r� r� Zskip_on_windowsr� r� r� r� r� r� r� r� r� r� r� r� r� r r r r ro � sd * + 9 5 * !ro c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�DeleteFilesTestz0Tests for certbot._internal.storage.delete_filesc sf t � �� tD ]H}tj�| jjdd|d �}t|d�� W d � q1 sL0 Y q| j � � d S )NrG r rI rK ) rL r r r rN rO rP rQ r rU r )r r rY r[ r r r \ s � zDeleteFilesTest.setUpc C sH ddl m} t�d�� |�| jd� W d � n1 s:0 Y d S )Nr rE r{ r )r< rF r rC Z delete_filesrP r� r r r r& l s zDeleteFilesTest._callc C s | � � d S rp )r& r r r r �test_delete_all_filesq s z%DeleteFilesTest.test_delete_all_filesc C sp t | jjd��}|�d� W d � n1 s.0 Y t�tj�� | �� W d � n1 sb0 Y d S )NrK Zasdfasfasdfasdf) r rU rT r rr rs r rt r& )r rU r r r �test_bad_renewal_config{ s (&z'DeleteFilesTest.test_bad_renewal_configc C sF t �| jj� t�tj�� | �� W d � n1 s80 Y d S rp ) r �removerU rT rr rs r rt r& r r r r �test_no_renewal_config� s &z&DeleteFilesTest.test_no_renewal_configc C s& t �t j�| jjdd�� | �� d S )Nr zcert.pem�r r rN rO rP r� r& r r r r �test_no_cert_file� s �z!DeleteFilesTest.test_no_cert_filec C s& t �t j�| jjdd�� | �� d S )Nr rJ r r r r r �test_no_readme_file� s �z#DeleteFilesTest.test_no_readme_filec C sF t tj�| jjdd�d�� W d � n1 s00 Y | �� d S )Nr Z other_filerK )r r rN rO rP r� r& r r r r �test_livedir_not_empty� s �� z&DeleteFilesTest.test_livedir_not_emptyc C s* t j�| jjdd�}t �|� | �� d S )NrH r )r rN rO rP rQ �rmdirr& )r r� r r r �test_no_archive� s z DeleteFilesTest.test_no_archive)r? r@ rA rB r r& r r r r r r r rn r r r[ r r� Z s r� c s8 e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Z� ZS ) �CertPathForCertNameTestz:Test for certbot._internal.storage.cert_path_for_cert_namec sB t � �� | j�� | �� tj�| jj ddd�| _ | j | j_ d S )NrG r z fullchain.pem) rL r rU r rm r rN rO rP rQ ry Z cert_pathr r[ r r r � s �z CertPathForCertNameTest.setUpc C s ddl m} |||�S )Nr )�cert_path_for_cert_name)r# r )r Z cli_configZcertnamer r r r r& � s z CertPathForCertNameTest._callc C s d S rp r r r r r �test_simple_cert_name� s z-CertPathForCertNameTest.test_simple_cert_namec C s> t �tj�� | �| jd� W d � n1 s00 Y d S )Nzfake-example.org)rr rs r rt r& rP r r r r �test_no_such_cert_name� s z.CertPathForCertNameTest.test_no_such_cert_name) r? r@ rA rB r r& r r rn r r r[ r r � s r �__main__r� )&rB r� r� �stat�sysZunittestr rR rr r� Zcertbotr r r# r Zcertbot.compatr r Zcertbot.tests.utilZtests�utilr� Z load_certZCERTr r ZTestCaser ZConfigTestCaserD ro r� r r? �exit�main�argv�__file__r r r r �<module> s> I@ 0\ __pycache__/storage_test.cpython-39.pyc 0000644 00000100657 15114562471 0014127 0 ustar 00 a }|�gm� � @ sB d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlZddl Z ddl Z ddl m Z ddl m Z ddl mZ ddlmZ ddlmZ ddlm mZ e�d �Zd d � Zd d � ZG dd� dej�ZG dd� dej �Z G dd� de �Z G dd� de �Z G dd� de �Z e!dk�r>e�"e�#ej$dd� e%g �� dS )�$Tests for certbot._internal.storage.� N)�mock)� configuration)�errors)�ALL_FOUR)� filesystem)�os� cert_512.pemc C s t D ]}t�t| |�� qdS )z9Unlink all four items associated with this RenewableCert.N)r r �unlink�getattr)� rc_object�kind� r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/storage_test.py� unlink_all s r c C sH t D ]>}tt| |�d��}|�|� W d � q1 s80 Y qdS )z9Put dummy data into all four files of this RenewableCert.�wN)r �openr �write)r r �fr r r �fill_with_sample_data s r c @ sR e Zd ZdZdd� Zdd� Ze�d�dd� �Zd d � Z d d � Z d d� Z dd� Z dS )�RelevantValuesTestz4Tests for certbot._internal.storage.relevant_values.c C s& ddd�| _ t�� | _t�� | j_d S )N� example.orgZrsa)�server�key_type)�valuesr Z MagicMock� mock_config� set_by_user��selfr r r �setUp) s zRelevantValuesTest.setUpc C s ddl m} || jj_|| j�S )Nr ��relevant_values)�certbot._internal.storager! r �to_dict� return_value)r r r! r r r �_call. s zRelevantValuesTest._callz8certbot._internal.plugins.disco.PluginsRegistry.find_allc C s: dg|_ d| jj_ d| jd< | �| j�� �| jks6J �d S )Nzcertbot-foo:barT�* zcertbot_foo:bar_baz)r$ r r r r% �copy)r Z mock_find_allr r r �test_namespace3 s z!RelevantValuesTest.test_namespacec C sT d| j j_d| jd< d| jd< d| jd< | j�� }d| jd< | �| j�|ksPJ �d S ) NT�allow_subset_of_names�apache� authenticatori9 � rsa_key_sizeZthereZhello�r r r$ r r' r% �r �expected_relevant_valuesr r r �test_option_set; s z"RelevantValuesTest.test_option_setc C s6 d| j j_| j�� }d| jd< | �| j�|ks2J �d S )NFi r, r- r. r r r �test_option_unsetF s z$RelevantValuesTest.test_option_unsetc s| d� � fdd�| j _| j�� }d | j� < | �| j�|ks<J �d| j� < | �| j�|ksZJ �d| j� < | �| j�|ksxJ �d S )NZmanual_public_ip_logging_okc s | � kr dS dS )NFTr )�v�Zdeprected_optionr r �<lambda>P � z9RelevantValuesTest.test_deprecated_item.<locals>.<lambda>TF)r r r r' r% r. r r3 r �test_deprecated_itemN s z'RelevantValuesTest.test_deprecated_itemc C sr ddl m} ddlm} ddlm} ddlm} |j�� }|� |g d��}|j d dd d d �}||�|ksnJ �d S ) Nr r )�disco)�cli)� constants)z--allow-subset-of-namesz--authenticatorr* r ZecdsaTr* )r r r) r+ ) r" r! Zcertbot._internal.pluginsr7 �certbot._internalr8 r9 ZPluginsRegistryZfind_allZprepare_and_parse_argsZ CLI_DEFAULTS)r r! r7 r8 r9 ZPLUGINS� namespacer/ r r r �test_with_real_parserZ s �z(RelevantValuesTest.test_with_real_parserN) �__name__� __module__� __qualname__�__doc__r r% r �patchr( r0 r1 r6 r< r r r r r & s r c s2 e Zd ZdZ� fdd�Zd dd�Zdd� Z� ZS ) �BaseRenewableCertTestz�Base class for setting up Renewable Cert tests. .. note:: It may be required to write out self.config for your test. Check :class:`.cli_test.DuplicateCertTest` for an example. c s� ddl m} t� �� t�tj�| j j dd�� tj�| j j dd�}t�|� t�tj�| j j d�� t � � }t D ]&}tj�| j j dd|d �}|||< qrttj�| j j ddd�d �� W d � n1 s�0 Y ||d< tj�| j j dd �|_|�� || _ttj�| j j dd �d ��}|�d � W d � n1 �s>0 Y t � � | _t�d��(}d|_|�|j| j �| _W d � n1 �s�0 Y d S )Nr ��storage�liver �archiveZrenewal�.pem�README�a�example.org.confz IGNORE.THISr z This file should be ignored!z7certbot._internal.storage.RenewableCert._check_symlinksT)r: rD �superr r �makedirsr �path�join�config� config_dir� configobj� ConfigObjr r �filenamer � config_file�defaultsr rA r$ � RenewableCert�test_rc)r rD Z archive_pathrT r � kind_pathZjunk�check�� __class__r r r w s< � �� � * zBaseRenewableCertTest.setUpNc C s� t | j|�}tj�|�r"t�|� t�tj�tjjtjjddd� ||��|� t |d��,}|� |d u rp|� d�n|� W d � n1 s�0 Y |dkr�t �|d� d S )NrF r z {0}{1}.pem�wb�ascii�privkey� )r rW r rM �lexistsr �symlinkrN �pardir�formatr r �encoder �chmod)r r �ver�value�linkr r r r �_write_out_kind� s �� :z%BaseRenewableCertTest._write_out_kindc C s& t D ] }| �|d� | �|d� qd S )N� � )r ri �r r r r r �_write_out_ex_kinds� s z)BaseRenewableCertTest._write_out_ex_kinds)N)r= r> r? r@ r ri rm � __classcell__r r rZ r rB o s & rB c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z e�d�dd� �Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zej�ejd'�e�d(�d)d*� ��Zd+d,� Z ej�ejd'�e�d-�d.d/� ��Z e�d0�d1d2� �Z e � d3�e�d0�d4d5� ��Z!e�d0�e�d6�d7d8� ��Z"e�d0�d9d:� �Z#e�d0�d;d<� �Z$e�d=�d>d?� �Z%d@dA� Z&e�dB�dCdD� �Z'dEdF� Z(dGdH� Z)dIdJ� Z*dKdL� Z+dMdN� Z,dOdP� Z-dQS )R�RenewableCertTestsr c C sH | j jdksJ �tD ].}t| j |�tj�| jjdd|d �ksJ �qd S )Nr rE rG ) rW � lineagenamer r r rM rN rO rP rl r r r �test_initialization� s �z&RenewableCertTests.test_initializationc C s� ddl m} tj�| jjd�}t|d��}|�d� W d � n1 sH0 Y t � t j �� |� || j� W d � n1 s�0 Y t�|� t � t j �� |� d| j� W d � n1 s�0 Y dS )z�Test that the RenewableCert constructor will complain if the renewal configuration file doesn't end in ".conf" r rC z broken.confr z [No closing bracket for you!NZfun)r: rD r rM rN rO rP r r �pytest�raisesr �CertStorageErrorrV r )r rD �brokenr r r r �test_renewal_bad_config� s (, z*RenewableCertTests.test_renewal_bad_configc C s� ddl m} t�� }d|d< d|d< d|d< tj�| jjd �|_ |� � t � t j�� |�|j | j� W d � n1 sz0 Y d S ) z�Test that the RenewableCert constructor will complain if the renewal configuration file is missing a required file element.r rC zimaginary_cert.pem�certzimaginary_chain.pem�chainzimaginary_fullchain.pem� fullchainzimaginary_config.confN)r: rD rQ rR r rM rN rO rP rS r rr rs r rt rV )r rD rO r r r � test_renewal_incomplete_config� s z1RenewableCertTests.test_renewal_incomplete_configc C sr ddl m} | �� d| jvs"J �t�d��"}|�| jj| j� W d � n1 sT0 Y |j j du snJ �d S )Nr rC �version� certbot._internal.storage.loggerF) r: rD rm rT r rA rV rS rO �warning�called�r rD � mock_loggerr r r �test_no_renewal_version� s 0z*RenewableCertTests.test_no_renewal_versionc C s� ddl m} | �� d| jd< | j�� t�d��"}|�| jj| j � W d � n1 sZ0 Y |j j spJ �d|j j d d v s�J �d S )Nr rC z99.99.99r{ r| ) r: rD rm rT r r rA rV rS rO �infor~ � call_argsr r r r �test_renewal_newer_version� s 0 z-RenewableCertTests.test_renewal_newer_versionc C s� | j j}d| j _| j �� r J �|| j _| j �� r4J �t| j � | j �� rLJ �t| j � tD ]&}t�tj� d|d �t | j |�� qZ| j �� r�J �t| j � tD ]*}t�tj� | j j |d �t | j |�� q�| j �� r�J �t| j � tD ],}t�tj� dddd|d �t | j |�� q�| j �� �r$J �t| j � | j �� �s>J �t� | j j� t�tj� ddddd�| j j� t| j jd��}|�d� W d � n1 �s�0 Y | j �� �r�J �d S ) Nz relative/path�..z17.pemrF r zfullchain_17.pemr zwrongly-named fullchain)rW rw � _consistentr r r r ra rM rN r rO rP r ry r r )r Zoldcertr r r r r �test_consistent� sL � � � � ��*z"RenewableCertTests.test_consistentc C s� | � dd� tj�| j�d�tj�| jjddd��s8J �t� | jj � t� tj�| jjddd�| jj � t | jj d��}|� d� W d � n1 s�0 Y tj�| j�d�tj�| jjddd��s�J �d S )Nrw � rF r z cert17.pemr )ri r rM �samefilerW �current_targetrN rO rP r rw ra r r )r r r r r �test_current_target s* ����(��z&RenewableCertTests.test_current_targetc C s\ dD ]}| � d|� qt�| jj� t�tj�ddddd�| jj� | j�d�dksXJ �d S )N)� � � � rw r� rF r z cert10.pemr� ) ri r r rW rw ra rM rN �current_version)r rf r r r �test_current_version' s ��z'RenewableCertTests.test_current_versionc C s | j �d�d u sJ �d S )Nrw )rW r� r r r r �test_no_current_version/ s z*RenewableCertTests.test_no_current_versionc C s� t dd�D ]}tD ]}| �||� qq | j�� dks8J �| j�� dksJJ �| �dd� | j�� dkshJ �| j�� dkszJ �| �dd� | �dd� | j�� dks�J �tD ]}| �|d � q�| j�� d ks�J �| j�� d ks�J �d S ) Nr� � r� r^ � � rw ry r� � )�ranger ri rW �latest_common_versionZnext_free_version�r rf r r r r � test_latest_and_next_versions2 s z0RenewableCertTests.test_latest_and_next_versionsr| c C s� t �� }| j_t �� }| j_t �� | j_d|_| j�� du sDJ �|jdksRJ �|j jdksbJ �d|_| j�� du szJ �|jdks�J �|j jdks�J �d S )NFTr r� ) r ZMockrW �update_all_links_to�has_pending_deploymentr� r$ Zensure_deployed� call_countr} )r r� Z mock_updateZmock_has_pendingr r r �test_ensure_deployedI s z'RenewableCertTests.test_ensure_deployedc C s� t dd�D ].}tD ]$}| �||� || j�|�ksJ �qq | j�dd� | j�dd� d| j�d�ksjJ �d| j�d�ks~J �d| j�d�ks�J �d| j�d �ks�J �| j�dd � tj�t � | jj ��d ks�J �d S ) Nr� r� rw � r^ � r� rx ry i� z chain3000.pem) r� r ri rW r� �_update_link_tor rM �basenamer �readlinkrx r� r r r �test_update_link_toZ s �z&RenewableCertTests.test_update_link_toc C s. | � dd� dtj�| j�dd��ks*J �d S )Nrw rj z cert8.pemr� )ri r rM r� rW r{ r r r r � test_versionm s �z RenewableCertTests.test_versionc C s� t dd�D ].}tD ]$}| �||� || j�|�ksJ �qq | j�� dksLJ �t dd�D ]@}| j�|� tD ]}|| j�|�ksjJ �qj| j�� dksVJ �qVd S �Nr� r� r� )r� r ri rW r� r� r� r� r r r � test_update_all_links_to_successu s z3RenewableCertTests.test_update_all_links_to_successc C s� t jfdd�}| �� t�d��L}||_t�t�� | j � d� W d � n1 sT0 Y W d � n1 sr0 Y t D ]}| j � |�dks�J �q�d S )Nc S s. t j�| �}d|v r"|�d�r"t�|| � d S )Nry �prev)r rM r� � startswith� ValueError)rM � real_unlinkr� r r r �unlink_or_raise� s zTRenewableCertTests.test_update_all_links_to_partial_failure.<locals>.unlink_or_raise�#certbot._internal.storage.os.unlinkrj � r r rm r rA � side_effectrr rs r� rW r� r r� �r r� � mock_unlinkr r r r �(test_update_all_links_to_partial_failure� s Hz;RenewableCertTests.test_update_all_links_to_partial_failurec C s� t jfdd�}| �� t�d��L}||_t�t�� | j � d� W d � n1 sT0 Y W d � n1 sr0 Y t D ]}| j � |�dks�J �q�d S )Nc S s dt j�| �v rt�|| � d S )Nry )r rM r� r� )rM r� r r r r� � s zQRenewableCertTests.test_update_all_links_to_full_failure.<locals>.unlink_or_raiser� rj rk r� r� r r r �%test_update_all_links_to_full_failure� s Hz8RenewableCertTests.test_update_all_links_to_full_failurec C s� t dd�D ].}tD ]$}| �||� || j�|�ksJ �qq t dd�D ]T}| j�|� tD ]}|| j�|�ksXJ �qX|dk r�| j�� s�J �qD| j�� rDJ �qDd S r� )r� r ri rW r� r� r� r� r r r �test_has_pending_deployment� s z.RenewableCertTests.test_has_pending_deploymentc C sr | � ddt�d�� | j�� ddgks*J �t�| jj� t� t j �� | j�� W d � n1 sd0 Y d S )Nrw rj zcert-san_512.pem� example.comzwww.example.com) ri � test_util� load_vectorrW �namesr r rw rr rs r rt r r r r � test_names� s �z RenewableCertTests.test_namesr z"certbot._internal.storage.datetimec C s t �d�}| �� | j�d� t| jjd��}|�|� W d � n1 sL0 Y | j�d� t| jjd��}|�|� W d � n1 s�0 Y tj |_ d|_ i | jj d< dD ]B\}}}tj� |t j�}||jj_ || jj d < | j�� |ks�J �q�dS ) z<Test should_autorenew() on the basis of expiry time windows.r rj r\ Nrk F� renewalparams))�@*�Tz2 monthsT)r� z1 weekT)r� z4 daysF)r� �2 daysF)�@�Iz7 yearsT)r� z11 years 2 monthsT)r� z8 hoursF)r� r� F)r� z40 daysF)r� z9 monthsF)� ��Tz 0 secondsT)r� z 10 secondsT)r� z 10 minutesT)r� z10 weeksT)r� z 10 monthsT)r� z10 yearsT)r� z 99 monthsTZrenew_before_expiry)r� r� rm rW r� r rw r �datetime� timedeltar$ r Z fromtimestamp�pytz�UTCZnow�should_autorenew) r Z mock_datetime�mock_set_by_userZ test_certr Z current_time�interval�resultZsometimer r r � test_time_interval_judgments� s ( ( z/RenewableCertTests.test_time_interval_judgmentsc C sZ i | j jd< | j �� sJ �d| j jd d< | j �� s8J �d| j jd d< | j �� rVJ �d S )Nr� �True� autorenew�False)rW r Zautorenewal_is_enabledr r r r �test_autorenewal_is_enabled� s z.RenewableCertTests.test_autorenewal_is_enabledz4certbot._internal.storage.RenewableCert.ocsp_revokedc C sh d|_ ddi| jjd< | j�� r$J �d| jjd d< tD ]}| �|d� q8d|_ | j�� s^J �d|_ dS ) zTTest should_autorenew on the basis of reasons other than expiry time window.Fr� r� r� r� rj TN)r$ rW r r� r ri )r Z mock_ocspr� r r r r �test_should_autorenew� s z(RenewableCertTests.test_should_autorenewz)certbot._internal.storage.relevant_valuesc C s� dd� |_ tdd�D ]}tD ]}| �||� q q| j�d� d| j�ddd d| j�ksZJ �t| j� dd��� }|� � d ks~J �W d � n1 s�0 Y t| j� d d��� }|� � d ks�J �W d � n1 s�0 Y t| j� d d���"}|� � d k�sJ �W d � n1 �s0 Y t j � | j� dd���r@J �t j � | j� dd���s\J �d| j�ddd d| j�k�s|J �d| j�ddd d| j�k�s�J �dD ]H}t j � | j� d|���s�J �dt j �t�| j� d|���k�s�J ��q�tD ]<}| j�|�ttdd��k�sJ �| j�|�dk�s�J ��q�| j�d� d| j�ddd d| j�k�sXJ �tD ]<}| j�|�ttdd��k�s�J �| j�|�dk�s\J ��q\t| j� d d���"}|� � dk�s�J �W d � n1 �s�0 Y t j �| jj| jj�d }t|d ��}|�d � W d � n1 �s&0 Y d| j�dd d d!| j�k�sPJ �t j �| j� dd���slJ �t j � | j� dd���r�J �t j �|��r�J �d S )"Nc S s | � � S �N�r# ��xr r r r4 r5 z8RenewableCertTests.test_save_successor.<locals>.<lambda>r� r� r� s new cert� new chainrw znew certrx z new chainry znew certnew chainr^ r� s agains newer chainr� s hellos other chain)r� r� r� z privkey3.pem� s lasts attemptr� Z lastattemptz .conf.newr z)We previously crashed while writing me :(s with� as key)r� r� r ri rW r� �save_successorrO r r{ �readr rM �islinkr� r r� �available_versions�listr� rN �renewal_configs_dirrp r �exists)r �mock_rvrf r r �iZtemp_config_filer r r �test_save_successor sl � ..2 � � � � � 2 �� *� z&RenewableCertTests.test_save_successorz:Group/everybody permissions are not maintained on Windows.c C s dd� |_ tD ]}| �|d� q| j�d� t�| j�dd�d�sFJ �t�| j�dd�d� | j� ddd d| j � t�| j�dd �d�s�J �| j� d dd d| j � t�| j�dd �d �s�J �t�| j�dd �d � | j� d dd d| j � t�| j�dd�d��sJ �d S )Nc S s | � � S r� r� r� r r r r4 B r5 zMRenewableCertTests.test_save_successor_maintains_group_mode.<locals>.<lambda>r� r^ r_ i$ � newcertr� r� � new_privkeyr� i� � � ) r� r ri rW r� r � check_moder{ re r� rO )r r� r r r r �(test_save_successor_maintains_group_mode= s z;RenewableCertTests.test_save_successor_maintains_group_modezBcertbot._internal.storage.filesystem.copy_ownership_and_apply_modec C st dd� |_ tD ]}| �|d� q| j�d� | j�ddd d| j� |jdu sPJ �| j�dddd| j� |jspJ �d S ) Nc S s | � � S r� r� r� r r r r4 X r5 zFRenewableCertTests.test_save_successor_maintains_gid.<locals>.<lambda>r� r� r� Fr� r� )r� r ri rW r� r� rO r~ )r Zmock_ownershipr� r r r r �!test_save_successor_maintains_gidS s z4RenewableCertTests.test_save_successor_maintains_gidc C s� dd� |_ ddlm} |j�dddd| j�}|�� s8J �tj� tj� | jj d ��sVJ �tj� tj� | jj d ��stJ �tj� tj� | jj dd ��s�J �t �|jd �s�J �t|jd �� }|�� d ks�J �W d � n1 s�0 Y |j�dddd| j�}tj� tj� | jj d���sJ �tj� tj� | jj dd ���s:J �t �tj� | jjd�� |j�dddd| j�}tj� tj� | jj dd ���s�J �t �|jd ��s�J �t�tj� | jj d�tj� | jj d�� t�tj��& |j�dddd| j� W d � n1 �s 0 Y t�tj� | jj d�tj� | jj d �� t�tj��& |j�d d d d | j� W d � n1 �sl0 Y |j�dddd| j�}dS ) z$Test for new_lineage() class method.c S s | � � S r� r� r� r r r r4 f r5 z5RenewableCertTests.test_new_lineage.<locals>.<lambda>r rC �the-lineage.coms certs privkeys chain�the-lineage.com.confrH r_ �rbs certchainN� cert2� privkey2� chain2zthe-lineage.com-0001.confzthe-lineage.com-0001zthe-lineage.com-0002s cert3s privkey3s chain3zthe-lineage.com-0003s cert4s privkey4s chain4zother-example.coms cert5s privkey5s chain5)r� r: rD rV � new_lineagerO r� r rM r� rN r� �live_dirr r� Zkey_pathr ry r� �mkdir�default_archive_dir�shutil�copytreerr rs r rt )r r� rD r� r r r r �test_new_lineagea sh � � � � . � � � � � � �$� �$ �z#RenewableCertTests.test_new_lineagec C s� dd� |_ ddlm} t�| jj� t�| jj� t�| jj� |j � dddd| j� t j � t j �| jjd ��stJ �t j � t j �| jjdd ��s�J �t j � t j �| jjdd ��s�J �d S ) z9Test that directories can be created if they don't exist.c S s | � � S r� r� r� r r r r4 � r5 zFRenewableCertTests.test_new_lineage_nonexistent_dirs.<locals>.<lambda>r rC r� r� r� r� r� z privkey.pemz privkey1.pemN)r� r: rD r� �rmtreerO r� r� r� rV r� r rM r� rN )r r� rD r r r �!test_new_lineage_nonexistent_dirs� s& ��� � �z4RenewableCertTests.test_new_lineage_nonexistent_dirsz2certbot._internal.storage.util.unique_lineage_namec C sX ddl m} d|_t�tj��& |j�dddd| j � W d � n1 sJ0 Y d S )Nr rC )Z this_does_not_end_with_dot_confZyikesr� rw r^ rx ) r: rD r$ rr rs r rt rV r� rO )r Zmock_ulnrD r r r � test_invalid_config_filename� s �z/RenewableCertTests.test_invalid_config_filenamec C s\ t �tj�� | j�d� W d � n1 s.0 Y t �tj�� | j�d� W d � n1 sf0 Y t �tj�� | j�dd� W d � n1 s�0 Y t �tj�� | j�d� W d � n1 s�0 Y t �tj�� | j� d� W d � n1 �s0 Y t �tj�� | j� dd� W d � n1 �sN0 Y d S )NZelephantr� ) rr rs r rt rW r� r� r{ r� Znewest_available_versionr� r r r r � test_bad_kind� s **,*,z RenewableCertTests.test_bad_kindz4certbot.ocsp.RevocationChecker.ocsp_revoked_by_pathsc C sP t D ]}| �|d� q| j�� }| j�d|�}| j�d|�}d|_| j�|�sRJ �|jd d |kshJ �|jd d |ks~J �d|_| j�|�r�J �|jd d |ks�J �|jd d |ks�J �t|_ t � d�� }| j�|�r�J �W d � n1 s�0 Y |jd d |k�sJ �|jd d |k�s0J �|jd d }d|v �sLJ �d S ) Nr� rw rx Tr Fz(certbot._internal.storage.logger.warningz-An error occurred determining the OCSP status) r ri rW r� r{ r$ Z ocsp_revokedr� r� r� r rA )r Z mock_checkerr r{ Zexpected_cert_pathZexpected_chain_path�loggerZlog_msgr r r �test_ocsp_revoked� s( .z$RenewableCertTests.test_ocsp_revokedc ) C s� ddl m} tjddddddtjd�}tjd d d dd d tjd�}t�d��t�dd dddd��}|df||df||df||df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d� |df|t�d � |d f|t�d � |d f|t�d � |d f|t�d � |d f|t�d � |d!f|t�d � |d!f|t�d"� |d#f|t�d$� |d#f|t�d$� i}|�� D ](\}}|\}} |� || �|k�s�J ��q�d S )%Nr rC i� rk r� �; � )Ztzinfoi� r� r� � � z Asia/Shanghaii� � � � �) � z17 daysr� Z30� z7 weeks�1 z1 monthz1 yearin im z 1 year 1 dayio z 1 year-1 dayil z4 yearsi� ) r: rD r� r� r� �timezoneZfromutcr� �itemsZadd_time_interval) r rD Ztime_1Ztime_2Ztime_3Zintended� parametersZexceptedZ base_timer� r r r �test_add_time_interval� s> �� �z)RenewableCertTests.test_add_time_intervalc C sD i | j jd< | j jd u s J �| j jd }d|d< | j jdks@J �d S )Nr� zhttps://acme.example/dirr )rW r r �r Zrpr r r � test_server s z RenewableCertTests.test_serverc C s� i | j jd< | j jd }| j jdu s(J �d|d< | j jdu s@J �d|d< | j jdu sXJ �d|d< | j jdu spJ �d|d< | j jdu s�J �d S ) Nr� Fz6https://acme-staging-v02.api.letsencrypt.org/directoryr Tz)https://staging.someotherca.com/directoryz.https://acme-v01.api.letsencrypt.org/directoryz.https://acme-v02.api.letsencrypt.org/directory)rW r Z is_test_certr r r r �test_is_test_cert s z$RenewableCertTests.test_is_test_certc C s� ddl m} t�tj��" |�| jj| j � W d � n1 s@0 Y t � d| jt d � t�tj��" |�| jj| j � W d � n1 s�0 Y d S )Nr rC �missing) r: rD rr rs r rt rV rT rS rO r ra r �r rD r r r �test_missing_cert s 0z$RenewableCertTests.test_missing_certc C s> t j�| jjd�}t j�| jjd�}t|d��}|�d� W d � n1 sN0 Y t�|d� i }t D ] }d||< qld}dd i}d d l m } |� |||||� t|d ��}|� � } W d � n1 s�0 Y d | v s�J �d| v s�J �d| vs�J �d�tj�| v �sJ �t�t �|�j�t�t �|�j�k�s:J �d S )Nz sample-filezsample-file.newr zM[renewalparams] useful = value # A useful value useless = value # Not needed i� Z somewhereZ the_archiveZusefulZ new_valuer rC �rzuseful = new_valuezA useful valueZuselessz version = {0})r rM rN rO rP r r r re r r: rD Zwrite_renewal_configr� rc �certbot� __version__�stat�S_IMODE�lstat�st_mode) r ZtempZtemp2r �targetr� � archive_dirZ relevant_datarD Zcontentr r r �test_write_renewal_config( s* ( & �z,RenewableCertTests.test_write_renewal_configc C s� t D ]}| �|d� qt�d��"}| j�� |�� W d � n1 sH0 Y t D ] }tdd�D ]}| �||� qdqVt�d��J}| j�� |jdt t � ks�J �d|j d d d v s�J �W d � n1 s�0 Y d S )Nr� zcertbot.compat.os.unlinkr� r� z1.pemr ) r ri r rA rW �truncateZassert_not_calledr� r� �lenZcall_args_list)r r r� r� r r r � test_truncateI s & z RenewableCertTests.test_truncateN).r= r> r? r@ rq rv rz r� r� r� r� r� r� r� r rA r� r� r� r� r� r� r� r� �objectr ZNamespaceConfigr� r� r� r� r� Zskip_on_windowsr� r� r� r� r� r� r� r r r r r r r r r r ro � sd * + 9 5 * !ro c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�DeleteFilesTestz0Tests for certbot._internal.storage.delete_filesc s� t � �� tD ]H}tj�| jjdd|d �}t|d�� W d � q1 sL0 Y q| j � � tj� tj�| jj d��s�J �tj� tj�| jj d��s�J �tj� tj�| jjdd��s�J �d S )NrE r rG rI rJ rF )rK r r r rM rN rO rP r rT r r� r� r� )r r rX rZ r r r \ s" � � � �zDeleteFilesTest.setUpc C sH ddl m} t�d�� |�| jd� W d � n1 s:0 Y d S )Nr rC r| r )r: rD r rA Z delete_filesrO r r r r r% l s zDeleteFilesTest._callc C sh | � � tj�tj�| jjd��r&J �tj�tj�| jjd��rDJ �tj�tj�| jjdd��rdJ �d S )NrJ r rF ) r% r rM r� rN rO r� r� rP r r r r �test_delete_all_filesq s � � �z%DeleteFilesTest.test_delete_all_filesc C s� t | jjd��}|�d� W d � n1 s.0 Y t�tj�� | �� W d � n1 sb0 Y t j � t j � | j jd��s�J �t j � t j � | j jd��r�J �d S )NrI Zasdfasfasdfasdfr rJ )r rT rS r rr rs r rt r% r rM r� rN rO r� r� )r rT r r r �test_bad_renewal_config{ s (& � �z'DeleteFilesTest.test_bad_renewal_configc C sx t �| jj� t�tj�� | �� W d � n1 s80 Y t j � t j � | j j d��s`J �t j � | jj�rtJ �d S �Nr )r �removerT rS rr rs r rt r% rM r� rN rO r� r r r r �test_no_renewal_config� s & � z&DeleteFilesTest.test_no_renewal_configc C sx t �t j�| jjdd�� | �� t j�| jj �r6J �t j�t j�| jjd��rTJ �t j�t j�| jj dd��rtJ �d S )Nr zcert.pemrF � r r rM rN rO r� r% r� rT rS rP r r r r �test_no_cert_file� s � � �z!DeleteFilesTest.test_no_cert_filec C sx t �t j�| jjdd�� | �� t j�| jj �r6J �t j�t j�| jjd��rTJ �t j�t j�| jj dd��rtJ �d S )Nr rH rF r! r r r r �test_no_readme_file� s � � �z#DeleteFilesTest.test_no_readme_filec C s� t tj�| jjdd�d�� W d � n1 s00 Y | �� tj�| jj �rVJ �tj�tj�| jjd��stJ �tj�tj�| jj dd��r�J �d S )Nr Z other_filerI rF ) r r rM rN rO r� r% r� rT rS rP r r r r �test_livedir_not_empty� s �� � �z&DeleteFilesTest.test_livedir_not_emptyc C sl t j�| jjdd�}t �|� | �� t j�| jj �r:J �t j�t j�| jj d��rXJ �t j�|�rhJ �d S )NrF r ) r rM rN rO rP �rmdirr% r� rT rS r� )r r r r r �test_no_archive� s � z DeleteFilesTest.test_no_archive)r= r> r? r@ r r% r r r r" r# r$ r& rn r r rZ r r Z s r c s8 e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Z� ZS ) �CertPathForCertNameTestz:Test for certbot._internal.storage.cert_path_for_cert_namec sB t � �� | j�� | �� tj�| jj ddd�| _ | j | j_ d S )NrE r z fullchain.pem) rK r rT r rm r rM rN rO rP ry Z cert_pathr rZ r r r � s �z CertPathForCertNameTest.setUpc C s ddl m} |||�S )Nr )�cert_path_for_cert_name)r" r( )r Z cli_configZcertnamer( r r r r% � s z CertPathForCertNameTest._callc C s | � | jd�| jksJ �d S r )r% rO ry r r r r �test_simple_cert_name� s z-CertPathForCertNameTest.test_simple_cert_namec C s> t �tj�� | �| jd� W d � n1 s00 Y d S )Nzfake-example.org)rr rs r rt r% rO r r r r �test_no_such_cert_name� s z.CertPathForCertNameTest.test_no_such_cert_name) r= r> r? r@ r r% r) r* rn r r rZ r r' � s r' �__main__r� )&r@ r� r� r �sysZunittestr rQ rr r� r r r r" r Zcertbot.compatr r Zcertbot.tests.utilZtests�utilr� Z load_certZCERTr r ZTestCaser ZConfigTestCaserB ro r r' r= �exit�main�argv�__file__r r r r �<module> s> I@ 0\ __pycache__/util_test.cpython-39.opt-1.pyc 0000644 00000067464 15114562471 0014407 0 ustar 00 a }|�g�` � @ s� d Z ddlZddlZddlmZ ddlZddlZddlZddlm Z ddl Z ddl m Z ddl mZ ddl mZ ddlm mZ G dd � d ej�ZG d d � d ej�ZG d d � d ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G d d � d ej�Z G d d � d ej�Z!G d d!� d!ej�Z"G d"d#� d#ej�Z#G d$d%� d%ej�Z$G d&d'� d'ej�Z%G d(d)� d)ej�Z&G d*d+� d+ej�Z'e(d,k�r�e�)e �*ej+d-d� e,g �� dS ).zTests for certbot.util.� N)�reload)�mock)�errors)� filesystem)�osc @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) � EnvNoSnapForExternalCallsTestz6Tests for certbot.util.env_no_snap_for_external_calls.c C s ddl m} |� S )Nr )� env_no_snap_for_external_calls)� certbot.utilr )�clsr � r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/util_test.py�_call s z#EnvNoSnapForExternalCallsTest._callc C sb t jd }t j�� }d| |d< d|d< d|d< tjd|d�� W d � n1 sT0 Y d S ) N�PATH�"RANDOM_NONSENSE_GARBAGE/blah/blah:�RANDOM_NONSENSE_GARBAGE�SNAP�True�CERTBOT_SNAPPED� certbot.compat.os.environ.copy�� return_value)r �environ�copyr �patch)�selfZ original_path� env_copy_dictr r r � test_removed s z*EnvNoSnapForExternalCallsTest.test_removedc C s� t j�� }d|d |d< |�� }tjd|d��> |�dd � |�dd � d|d< |d= d|d< W d � n1 st0 Y d S ) Nr r r r r r r r )r r r r r �pop)r Zenv_copy_dict_unmodifiedr r r r � test_noop" s � z'EnvNoSnapForExternalCallsTest.test_noopN)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r r r r s r c @ sR e Zd ZdZedd� �Ze�d�dd� �Ze�d�dd� �Z e�d�d d � �Z d S ) � RunScriptTestz"Tests for certbot.util.run_script.c C s ddl m} ||�S )Nr )� run_script)r r% )r �paramsr% r r r r 6 s zRunScriptTest._callzcertbot.util.subprocess.runc C s, d|� _ d|� _d|� _| �dg�\}}dS )z.These will be changed soon enough with reload.r �stdout�stderr�testN)� returncoder' r( r )r �mock_run�out�errr r r � test_default; s zRunScriptTest.test_defaultc C sB t |_t�tj�� | �dg� W d � n1 s40 Y d S )Nr) )�OSError� side_effect�pytest�raisesr �SubprocessErrorr �r r+ r r r �test_bad_processF s z RunScriptTest.test_bad_processc C sD d|� _ t�tj�� | �dg� W d � n1 s60 Y d S )N� r) )r* r1 r2 r r3 r r4 r r r � test_failureM s zRunScriptTest.test_failureN) r r r! r" r# r r r r. r5 r7 r r r r r$ 4 s r$ c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) � ExeExistsTestz"Tests for certbot.util.exe_exists.c C s ddl m} ||�S )Nr )� exe_exists)r r9 )r Zexer9 r r r r X s zExeExistsTest._callc C s2 t jddd�� W d � n1 s$0 Y d S )N�%certbot.util.filesystem.is_executableTr �r r �r r r r �test_exe_exists] s z ExeExistsTest.test_exe_existsc C s2 t jddd�� W d � n1 s$0 Y d S )Nr: Fr r; r< r r r �test_exe_not_existsa s z!ExeExistsTest.test_exe_not_existsN)r r r! r" r# r r= r> r r r r r8 U s r8 c sH e Zd ZdZedd� �Z� fdd�Ze�d�e�d�dd � ��Z � Z S ) �LockDirUntilExitz+Tests for certbot.util.lock_dir_until_exit.c O s ddl m} ||i |��S )Nr )�lock_dir_until_exit)r r@ )r �args�kwargsr@ r r r r h s zLockDirUntilExit._callc s t � �� dd l}t|j� d S )Nr )�super�setUpr � reload_module�util)r �certbot�� __class__r r rD m s zLockDirUntilExit.setUpzcertbot.util.loggerz certbot.util.atexit_registerc C s^ t j�| jd�}t�|� | �| j� | �|� | �|� |jd d }ddlm } |� d S )N�subdirr )rF ) r �path�join�tempdirr �mkdirr � call_argsrG rF )r Z mock_registerZ mock_loggerrJ Zregistered_funcrF r r r �test_its s zLockDirUntilExit.test_it) r r r! r" r# r rD r r rP � __classcell__r r rH r r? f s r? c @ s< e Zd ZdZdd� Ze�d�dd� �Ze�d�dd � �Zd S ) �SetUpCoreDirTestz/Tests for certbot.util.make_or_verify_core_dir.c O s ddl m} ||i |��S )Nr )�set_up_core_dir)r rS )r rA rB rS r r r r � s zSetUpCoreDirTest._callz certbot.util.lock_dir_until_exitc C s" t j�| jd�}| �|dd� d S )N�new� F�r rK rL rM r )r Z mock_lockZnew_dirr r r � test_success� s z SetUpCoreDirTest.test_successz certbot.util.make_or_verify_dirc C sF t |_t�tj�� | �| jdd� W d � n1 s80 Y d S )NrU F)r/ r0 r1 r2 r �Errorr rM )r Zmock_make_or_verifyr r r r7 � s z SetUpCoreDirTest.test_failureN) r r r! r" r r r rW r7 r r r r rR � s rR c sH e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z � Z S )�MakeOrVerifyDirTestz�Tests for certbot.util.make_or_verify_dir. Note that it is not possible to test for a wrong directory owner, as this testing script would have to be run as root. c s. t � �� tj�| jd�| _t�| jd� d S )N�foo� )rC rD r rK rL rM r rN r< rH r r rD � s zMakeOrVerifyDirTest.setUpc C s ddl m} |||dd�S )Nr )�make_or_verify_dirT)�strict)r r\ )r Z directory�moder\ r r r r � s zMakeOrVerifyDirTest._callc C s t j�| jd�}| �|d� d S )N�bari� rV )r rK r r r � test_creates_dir_when_missing� s z1MakeOrVerifyDirTest.test_creates_dir_when_missingc C s | � | jd� d S )Nr[ )r rK r< r r r �(test_existing_correct_mode_does_not_fail� s z<MakeOrVerifyDirTest.test_existing_correct_mode_does_not_failc C s> t �tj�� | �| jd� W d � n1 s00 Y d S )N� )r1 r2 r rX r rK r< r r r � test_existing_wrong_mode_fails� s z2MakeOrVerifyDirTest.test_existing_wrong_mode_failsc C sp t j�td��N}t� |_t�t�� | �dd� W d � n1 sD0 Y W d � n1 sb0 Y d S )N�makedirsr_ i� ) r r �objectr r/ r0 r1 r2 r )r rd r r r �test_reraises_os_error� s z*MakeOrVerifyDirTest.test_reraises_os_error) r r r! r" rD r r` ra rc rf rQ r r rH r rY � s rY c sB e Zd ZdZ� fdd�Zd dd�Zdd� Zd d � Zd d � Z� Z S )�UniqueFileTestz#Tests for certbot.util.unique_file.c s t � �� tj�| jd�| _d S )Nzfoo.txt)rC rD r rK rL rM � default_namer< rH r r rD � s zUniqueFileTest.setUpr[ c C s ddl m} || j|�S )Nr )� unique_file)r ri rh )r r^ ri r r r r � s zUniqueFileTest._callc C sJ | � � \}}|�d� |�� t|��}W d � n1 s<0 Y d S )Nr_ )r �write�close�open)r �fd�name�fr r r �test_returns_fd_for_writing� s z*UniqueFileTest.test_returns_fd_for_writingc C s0 | � d�\}}| � d�\}}|�� |�� d S )NrU r[ �r rk )r �fd1�name1�fd2�name2r r r �test_right_mode� s z UniqueFileTest.test_right_modec C sd | � � \}}| � � \}}| � � \}}tj�|�}tj�|�}tj�|�} |�� |�� |�� d S �N)r r rK �basenamerk ) r rr rs rt ru Zfd3Zname3Z basename1Z basename2Z basename3r r r �test_default_exists� s z"UniqueFileTest.test_default_exists)r[ ) r r r! r" rD r rp rv ry rQ r r rH r rg � s rg c @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d � Zd S ) �UniqueLineageNameTestz+Tests for certbot.util.unique_lineage_name.� c C s ddl m} || j||�S )Nr )�unique_lineage_name)r r| rM )r �filenamer^ r| r r r r � s zUniqueLineageNameTest._callc C s | � d�\}}|�� d S )N�wowrq )r ro rK r r r � test_basic s z UniqueLineageNameTest.test_basicc C sH g }t d�D ]}|�| �d�� q |d \}}|D ]\}}|�� q2d S )N� r~ ���)�range�appendr rk )r �items�_ro rn r r r � test_multiple s z#UniqueLineageNameTest.test_multiplec C sl t jdttj�d��D t�t�� | �d� W d � n1 s@0 Y W d � n1 s^0 Y d S )Nz certbot.compat.filesystem.open)r0 r~ )r r r/ �errnoZEIOr1 r2 r r< r r r r7 s z"UniqueLineageNameTest.test_failureN)r{ )r r r! r" r r r� r7 r r r r rz � s rz c s@ e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Z� Z S ) �SafelyRemoveTestz%Tests for certbot.util.safely_remove.c s t � �� tj�| jd�| _d S )NrZ )rC rD r rK rL rM r< rH r r rD s zSafelyRemoveTest.setUpc C s ddl m} || j�S )Nr )� safely_remove)r r� rK )r r� r r r r s zSafelyRemoveTest._callc C s8 t | jd�� W d � n1 s"0 Y | �� d S )N�w)rl rK r r< r r r � test_exists$ s z SafelyRemoveTest.test_existsc C s | � � d S rw �r r< r r r � test_missing* s z SafelyRemoveTest.test_missingc C sf t �d��H}t|_t�t�� | �� W d � n1 s:0 Y W d � n1 sX0 Y d S )Nzcertbot.util.os.remove)r r r/ r0 r1 r2 r )r Z mock_remover r r � test_other_error_passthrough/ s z-SafelyRemoveTest.test_other_error_passthrough) r r r! r" rD r r� r� r� rQ r r rH r r� s r� c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) � SafeEmailTestzTest safe_email.c C s ddl m} ||�S )Nr )� safe_email)r r� )r �addrr� r r r r 8 s zSafeEmailTest._callc C s g d�}|D ]}q d S )N)zcertbot@certbot.orgztbd.ade@gmail.comzabc_def.jdk@hotmail.museumr �r �addrsr� r r r �test_valid_emails= s z SafeEmailTest.test_valid_emailsc C s g d�}|D ]}q d S )N)zcertbot@certbot..orgz.tbd.ade@gmail.comz ~/abc_def.jdk@hotmail.museumr r� r r r �test_invalid_emailsF s z!SafeEmailTest.test_invalid_emailsN)r r r! r" r# r r� r� r r r r r� 6 s r� c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dS )�AddDeprecatedArgumentTestz Test add_deprecated_argument.c C s t �� | _d S rw )�argparse�ArgumentParser�parserr< r r r rD R s z AddDeprecatedArgumentTest.setUpc C s ddl m} || jj||� d S )Nr )�add_deprecated_argument)r r� r� � add_argument)r � argument_name�nargsr� r r r r U s z AddDeprecatedArgumentTest._callc C sH | � dd� t�d�� }| j�dg� W d � n1 s:0 Y d S )N� --old-optionr �certbot.util.logger.warning�r r r r� � parse_args�r Z mock_warnr r r �test_warning_no_argY s ,z-AddDeprecatedArgumentTest.test_warning_no_argc C sJ | � dd� t�d�� }| j�ddg� W d � n1 s<0 Y d S )Nr� r6 r� �42r� r� r r r �test_warning_with_arga s .z/AddDeprecatedArgumentTest.test_warning_with_argc C sl | � dd� t�� }tjd|d��6 z| j�dg� W n tyH Y n0 W d � n1 s^0 Y d S )Nr� � z sys.stdout)rT z-h)r �io�StringIOr r r� r� � SystemExit)r r' r r r � test_helpi s $z#AddDeprecatedArgumentTest.test_helpc C s | � t� dS )z�Test when ACTION_TYPES_THAT_DONT_NEED_A_VALUE is a set. This variable is a set in configargparse versions < 0.12.0. N)�_test_constant_common�setr< r r r �test_set_constants s z+AddDeprecatedArgumentTest.test_set_constantc C s | � t� dS )z�Test when ACTION_TYPES_THAT_DONT_NEED_A_VALUE is a tuple. This variable is a tuple in configargparse versions >= 0.12.0. N)r� �tupler< r r r �test_tuple_constant{ s z-AddDeprecatedArgumentTest.test_tuple_constantc C sN t �d��0}|� |_| �dd� | �dd� W d � n1 s@0 Y d S )Nzcertbot.util.configargparser� r6 z --old-option2r� )r r Z#ACTION_TYPES_THAT_DONT_NEED_A_VALUEr )r �typZmock_configargparser r r r� � s *z/AddDeprecatedArgumentTest._test_constant_commonN) r r r! r" rD r r� r� r� r� r� r� r r r r r� P s r� c @ sX e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dS )�EnforceLeValidityzTest enforce_le_validity.c C s ddl m} ||�S )Nr )�enforce_le_validity)r r� )r �domainr� r r r r � s zEnforceLeValidity._callc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nz..�r1 r2 r �ConfigurationErrorr r< r r r � test_sanity� s z EnforceLeValidity.test_sanityc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nzhello_world.example.comr� r< r r r �test_invalid_chars� s z$EnforceLeValidity.test_invalid_charsc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nz-a.example.comr� r< r r r �test_leading_hyphen� s z%EnforceLeValidity.test_leading_hyphenc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nza-.example.comr� r< r r r �test_trailing_hyphen� s z&EnforceLeValidity.test_trailing_hyphenc C s: t �tj�� | �d� W d � n1 s,0 Y d S )NZcomr� r< r r r �test_one_label� s z EnforceLeValidity.test_one_labelc C s d S rw r r< r r r �test_valid_domain� s z#EnforceLeValidity.test_valid_domainc C sp t �tj�� | �d� W d � n1 s,0 Y t �tj�� | �d� W d � n1 sb0 Y d S )Nzhttp://example.comzhttps://example.comr� r< r r r �test_input_with_scheme� s (z(EnforceLeValidity.test_input_with_schemec C s d S rw r r< r r r �!test_valid_input_with_scheme_name� s z3EnforceLeValidity.test_valid_input_with_scheme_nameN) r r r! r" r r� r� r� r� r� r� r� r� r r r r r� � s r� c @ sp e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� ZdS )�EnforceDomainSanityTestzTest enforce_domain_sanity.c C s ddl m} ||�S )Nr )�enforce_domain_sanity)r r� )r r� r� r r r r � s z EnforceDomainSanityTest._callc C s@ t �tj�� | �d�d�� W d � n1 s20 Y d S )N� eichhörnchen.example.comzutf-8)r1 r2 r r� r �encoder< r r r �test_nonascii_str� s z)EnforceDomainSanityTest.test_nonascii_strc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nr� r� r< r r r �test_nonascii_unicode� s z-EnforceDomainSanityTest.test_nonascii_unicodec C s> d}t �tj�� | �|� W d � n1 s00 Y d S )NA aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaar� )r Z long_domainr r r � test_too_long� s z%EnforceDomainSanityTest.test_too_longc C s d� dddd�}| �|� d S )Nz{0}.{1}.{2}.{3}�?aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa�?bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbZ?cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccZ?ddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd��formatr )r Znot_too_long_domainr r r �test_not_too_long� s z)EnforceDomainSanityTest.test_not_too_longc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )Nzfizz..example.comr� )r Zempty_label_domainr r r �test_empty_label� s z(EnforceDomainSanityTest.test_empty_labelc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )Nz example.com..r� )r Zempty_trailing_label_domainr r r �test_empty_trailing_label� s z1EnforceDomainSanityTest.test_empty_trailing_labelc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )N�@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaar� �r Zlong_label_domainr r r �test_long_label_1� s z)EnforceDomainSanityTest.test_long_label_1c C sF d� dd�}t�tj�� | �|� W d � n1 s80 Y d S )N� {0}.{1}.comr� r� )r� r1 r2 r r� r r� r r r �test_long_label_2� s z)EnforceDomainSanityTest.test_long_label_2c C s d� dd�}| �|� d S )Nr� r� r� r� )r Znot_too_long_label_domainr r r �test_not_long_label� s z+EnforceDomainSanityTest.test_not_long_labelc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )N� r� )r Z empty_domainr r r �test_empty_domain� s z)EnforceDomainSanityTest.test_empty_domainc C s | � d� d S )Nzthis.is.xn--ls8h.tldr� r< r r r �test_punycode_ok� s z(EnforceDomainSanityTest.test_punycode_okN)r r r! r" r r� r� r� r� r� r� r� r� r� r� r� r r r r r� � s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �IsWildcardDomainTestz Tests for is_wildcard_domain.c C s d| _ d| _d S )Nz *.example.orgz example.org)ZwildcardZ no_wildcardr< r r r rD � s zIsWildcardDomainTest.setUpc C s ddl m} ||�S )Nr )�is_wildcard_domain)r r� )r r� r� r r r r � s zIsWildcardDomainTest._callc C s d S rw r r< r r r �test_no_wildcard� s z%IsWildcardDomainTest.test_no_wildcardc C s d S rw r r< r r r � test_wildcard� s z"IsWildcardDomainTest.test_wildcardN)r r r! r" rD r r� r� r r r r r� � s r� c @ s� e Zd ZdZe�d�e�ej � d�d�dd� ��Z e�d�e�ej � d�d�dd� ��Z e�d�e�ej � d�d�d d � ��Z d d � Ze�d�e�ej � d�d�d d� ��Ze�d�e�ej � d�d�dd� ��ZdS )� OsInfoTestz Test OS / distribution detectionzcertbot.util.distro�linuxzrequires Linuxc C s dd l m} d|j_|�� }d S )Nr zfirst debian third)r rF Zliker Zget_systemd_os_like)r �m_distro�cbutilZid_likesr r r � test_systemd_os_release_like s z'OsInfoTest.test_systemd_os_release_likec C s\ dd l m} tjddd��$ d|j_g d�|j_W d � n1 sD0 Y dg|j_d S )Nr �platform.system_alias)r� r� r� r �1.0)r� � somethingr� Zwhatever)r rF r r �versionr rn r0 �r r� r� r r r �test_get_os_info_ua s � z OsInfoTest.test_get_os_info_uac C s` dd l m} t�d��6}d|j_d|j_d|_d|j_d|j_W d � n1 sR0 Y d S )Nr zplatform.systemrn r� r� r� �else)r rF r r �idr r� )r r� r� Z mock_platformr r r �test_get_os_info s zOsInfoTest.test_get_os_infoc C s\ dd l m} t�dd���, tjddd�� W d � n1 s@0 Y tjddd��B t�d��}d |� _W d � n1 s�0 Y W d � n1 s�0 Y tjdd d�� W d � n1 s�0 Y tjdd d��@ tjd d d�� W d � n1 �s0 Y W d � n1 �s.0 Y W d � n1 �sN0 Y d S )Nr zcertbot.util._USE_DISTROFr� )Z NonSystemDr� r� r )�darwinr� r� zsubprocess.runz42.42.42)Zfreebsdz 9.3-RC3-p1r� )Zwindowsr� r� zplatform.win32_ver)Z4242Z95�2r� )r rF r r r' )r r� Zrun_mockr r r �test_non_systemd_os_info* s. � � <� ��z#OsInfoTest.test_non_systemd_os_infoc C s dd l m} d|j_d|j_d S )Nr r� �r rF r� r r� r� r r r � test_python_os_info_notfoundC s z'OsInfoTest.test_python_os_info_notfoundc C s dd l m} d|j_d|j_d S )Nr Ztestdistr� r� r� r r r �test_python_os_info_customK s z%OsInfoTest.test_python_os_info_customN)r r r! r" r r �unittestZ skipUnless�sys�platform� startswithr� r� r� r� r� r� r r r r r� s" r� c @ s< e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd d � Z d S ) �AtexitRegisterTestz'Tests for certbot.util.atexit_register.c C s t �� | _d| _ddi| _d S )N)�hiZanswer�* )r Z MagicMock�funcrA rB r< r r r rD V s zAtexitRegisterTest.setUpc O s ddl m} ||i |��S )Nr )�atexit_register)r r� )r rA rB r� r r r r [ s zAtexitRegisterTest._callc C s( | � t�� � | jj| ji | j�� d S rw )� _test_commonr �getpidr� Zassert_called_withrA rB r< r r r � test_called` s z AtexitRegisterTest.test_calledc C s | j dd� d S )Nr� )� initial_pid)r� r< r r r �test_not_calledd s z"AtexitRegisterTest.test_not_calledc C s� t �d|��� t �d��.}| j| jg| j�R i | j�� W d � n1 sL0 Y |jj\}}|d }||dd � i |�� W d � n1 s�0 Y d S )Nzcertbot.util._INITIAL_PIDzcertbot.util.atexitr r6 )r r r r� rA rB �registerrO )r r� Z mock_atexitrA rB Z atexit_funcr r r r� h s < z AtexitRegisterTest._test_commonN) r r r! r" rD r# r r� r� r� r r r r r� T s r� c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) �LooseVersionTestz�Test for certbot.util.LooseVersion. These tests are based on the original tests for distutils.version.LooseVersion at https://github.com/python/cpython/blob/v3.10.0/Lib/distutils/tests/test_version.py#L58-L81. c O s ddl m} ||i |��S )Nr )� LooseVersion)r r� )r rA rB r� r r r r } s zLooseVersionTest._callc C s d}|D ]\}}qd S )N)�z1.5.1z1.5.2b2�z3.4jz 1996.07.12�Z2g6Z11g�z0.960923z 2.2beta29�z1.13++z5.5.kw)�2.0z2.0.1)�a�br �r Z comparisonsZv1Zv2r r r �test_less_than� s z LooseVersionTest.test_less_thanc C s d}|D ]\}}qd S )N))�8.02r )�1ar )r� �2.0.0)r r r r r r r � test_equal� s zLooseVersionTest.test_equalc C s d}|D ]\}}qd S �N))Z161z3.10a)z3.2.pl0z3.1.1.6r r r r r �test_greater_than� s z"LooseVersionTest.test_greater_thanc C s@ d}|D ]2\}}t �t�� W d � q1 s00 Y qd S )N))z bookworm/sid�9)r r� )r1 r2 � ValueErrorr r r r �test_incomparible� s z"LooseVersionTest.test_incomparibleN) r r r! r" r# r r r r r r r r r r� t s r� c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ParseLooseVersionTestz�Test for certbot.util.parse_loose_version. These tests are based on the original tests for distutils.version.LooseVersion at https://github.com/python/cpython/blob/v3.10.0/Lib/distutils/tests/test_version.py#L58-L81. c O s ddl m} ||i |��S )Nr )�parse_loose_version)r r )r rA rB r r r r r � s zParseLooseVersionTest._callc C s d}|D ]\}}qd S )N)r� r� r r r r r r r r r � s z$ParseLooseVersionTest.test_less_thanc C s d S rw r r< r r r r � s z ParseLooseVersionTest.test_equalc C s d}|D ]\}}qd S r r r r r r r � s z'ParseLooseVersionTest.test_greater_thanN) r r r! r" r# r r r r r r r r r � s r �__main__r6 )-r" r� r� � importlibr rE r� r� r� r r1 rG r Zcertbot.compatr r Zcertbot.tests.utilZtestsrF Z test_utilZTestCaser r$ r8 ZTempDirTestCaser? rR rY rg rz r� r� r� r� r� r� r� r� r� r r �exit�main�argv�__file__r r r r �<module> s@ "!$'4 ;';S /! __pycache__/util_test.cpython-39.pyc 0000644 00000073567 15114562471 0013451 0 ustar 00 a }|�g�` � @ s� d Z ddlZddlZddlmZ ddlZddlZddlZddlm Z ddl Z ddl m Z ddl mZ ddl mZ ddlm mZ G dd � d ej�ZG d d � d ej�ZG d d � d ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G d d � d ej�Z G d d � d ej�Z!G d d!� d!ej�Z"G d"d#� d#ej�Z#G d$d%� d%ej�Z$G d&d'� d'ej�Z%G d(d)� d)ej�Z&G d*d+� d+ej�Z'e(d,k�r�e�)e �*ej+d-d� e,g �� dS ).zTests for certbot.util.� N)�reload)�mock)�errors)� filesystem)�osc @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) � EnvNoSnapForExternalCallsTestz6Tests for certbot.util.env_no_snap_for_external_calls.c C s ddl m} |� S )Nr )� env_no_snap_for_external_calls)� certbot.utilr )�clsr � r �E/usr/lib/python3.9/site-packages/certbot/_internal/tests/util_test.py�_call s z#EnvNoSnapForExternalCallsTest._callc C sv t jd }t j�� }d| |d< d|d< d|d< tjd|d��$ | �� d |ksTJ �W d � n1 sh0 Y d S ) N�PATH�"RANDOM_NONSENSE_GARBAGE/blah/blah:�RANDOM_NONSENSE_GARBAGE�SNAP�True�CERTBOT_SNAPPED� certbot.compat.os.environ.copy�� return_value)r �environ�copyr �patchr )�selfZ original_path� env_copy_dictr r r � test_removed s z*EnvNoSnapForExternalCallsTest.test_removedc C s� t j�� }d|d |d< |�� }tjd|d��� |�dd � |�dd � | �� d |d ksbJ �d|d< | �� d |d ks�J �|d= d|d< | �� d |d ks�J �W d � n1 s�0 Y d S ) Nr r r r r r r r )r r r r r �popr )r Zenv_copy_dict_unmodifiedr r r r � test_noop" s � z'EnvNoSnapForExternalCallsTest.test_noopN)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r r r r s r c @ sR e Zd ZdZedd� �Ze�d�dd� �Ze�d�dd� �Z e�d�d d � �Z d S ) � RunScriptTestz"Tests for certbot.util.run_script.c C s ddl m} ||�S )Nr )� run_script)r r% )r �paramsr% r r r r 6 s zRunScriptTest._callzcertbot.util.subprocess.runc C sD d|� _ d|� _d|� _| �dg�\}}|dks4J �|dks@J �dS )z.These will be changed soon enough with reload.r �stdout�stderr�testN)� returncoder' r( r )r �mock_run�out�errr r r � test_default; s zRunScriptTest.test_defaultc C sB t |_t�tj�� | �dg� W d � n1 s40 Y d S )Nr) )�OSError� side_effect�pytest�raisesr �SubprocessErrorr �r r+ r r r �test_bad_processF s z RunScriptTest.test_bad_processc C sD d|� _ t�tj�� | �dg� W d � n1 s60 Y d S )N� r) )r* r1 r2 r r3 r r4 r r r � test_failureM s zRunScriptTest.test_failureN) r r r! r" r# r r r r. r5 r7 r r r r r$ 4 s r$ c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) � ExeExistsTestz"Tests for certbot.util.exe_exists.c C s ddl m} ||�S )Nr )� exe_exists)r r9 )r Zexer9 r r r r X s zExeExistsTest._callc C s@ t jddd�� | �d�s J �W d � n1 s20 Y d S )N�%certbot.util.filesystem.is_executableTr � /path/to/exe�r r r �r r r r �test_exe_exists] s z ExeExistsTest.test_exe_existsc C s@ t jddd�� | �d�r J �W d � n1 s20 Y d S )Nr: Fr r; r< r= r r r �test_exe_not_existsa s z!ExeExistsTest.test_exe_not_existsN)r r r! r" r# r r> r? r r r r r8 U s r8 c sH e Zd ZdZedd� �Z� fdd�Ze�d�e�d�dd � ��Z � Z S ) �LockDirUntilExitz+Tests for certbot.util.lock_dir_until_exit.c O s ddl m} ||i |��S )Nr )�lock_dir_until_exit)r rA )r �args�kwargsrA r r r r h s zLockDirUntilExit._callc s t � �� dd l}t|j� d S )Nr )�super�setUpr � reload_module�util)r �certbot�� __class__r r rE m s zLockDirUntilExit.setUpzcertbot.util.loggerz certbot.util.atexit_registerc C s� t j�| jd�}t�|� | �| j� | �|� | �|� |jdksHJ �|jd d }ddl m } t |j �dkstJ �|� |j jdks�J �d S )N�subdirr6 r )rG � )r �path�join�tempdirr �mkdirr � call_count� call_argsrH rG �lenZ_LOCKS�debug)r Z mock_registerZ mock_loggerrK Zregistered_funcrG r r r �test_its s zLockDirUntilExit.test_it) r r r! r" r# r rE r r rU � __classcell__r r rI r r@ f s r@ c @ s< e Zd ZdZdd� Ze�d�dd� �Ze�d�dd � �Zd S ) �SetUpCoreDirTestz/Tests for certbot.util.make_or_verify_core_dir.c O s ddl m} ||i |��S )Nr )�set_up_core_dir)r rX )r rB rC rX r r r r � s zSetUpCoreDirTest._callz certbot.util.lock_dir_until_exitc C s@ t j�| jd�}| �|dd� t j�|�s.J �|jdks<J �d S )N�new� Fr6 )r rM rN rO r �existsrQ )r Z mock_lockZnew_dirr r r � test_success� s z SetUpCoreDirTest.test_successz certbot.util.make_or_verify_dirc C sF t |_t�tj�� | �| jdd� W d � n1 s80 Y d S )NrZ F)r/ r0 r1 r2 r �Errorr rO )r Zmock_make_or_verifyr r r r7 � s z SetUpCoreDirTest.test_failureN) r r r! r" r r r r\ r7 r r r r rW � s rW c sH e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z � Z S )�MakeOrVerifyDirTestz�Tests for certbot.util.make_or_verify_dir. Note that it is not possible to test for a wrong directory owner, as this testing script would have to be run as root. c s. t � �� tj�| jd�| _t�| jd� d S )N�foo� )rD rE r rM rN rO r rP r= rI r r rE � s zMakeOrVerifyDirTest.setUpc C s ddl m} |||dd�S )Nr )�make_or_verify_dirT)�strict)r ra )r Z directory�modera r r r r � s zMakeOrVerifyDirTest._callc C s@ t j�| jd�}| �|d� t j�|�s,J �t�|d�s<J �d S )N�bari� )r rM rN rO r �isdirr � check_mode)r rM r r r � test_creates_dir_when_missing� s z1MakeOrVerifyDirTest.test_creates_dir_when_missingc C s$ | � | jd� t�| jd�s J �d S )Nr` )r rM r rf r= r r r �(test_existing_correct_mode_does_not_fail� s z<MakeOrVerifyDirTest.test_existing_correct_mode_does_not_failc C s> t �tj�� | �| jd� W d � n1 s00 Y d S )N� )r1 r2 r r] r rM r= r r r � test_existing_wrong_mode_fails� s z2MakeOrVerifyDirTest.test_existing_wrong_mode_failsc C sp t j�td��N}t� |_t�t�� | �dd� W d � n1 sD0 Y W d � n1 sb0 Y d S )N�makedirsrd i� ) r r �objectr r/ r0 r1 r2 r )r rk r r r �test_reraises_os_error� s z*MakeOrVerifyDirTest.test_reraises_os_error) r r r! r" rE r rg rh rj rm rV r r rI r r^ � s r^ c sB e Zd ZdZ� fdd�Zd dd�Zdd� Zd d � Zd d � Z� Z S )�UniqueFileTestz#Tests for certbot.util.unique_file.c s t � �� tj�| jd�| _d S �Nzfoo.txt)rD rE r rM rN rO � default_namer= rI r r rE � s zUniqueFileTest.setUpr` c C s ddl m} || j|�S )Nr )� unique_file)r rq rp )r rc rq r r r r � s zUniqueFileTest._callc C sZ | � � \}}|�d� |�� t|�� }|�� dks8J �W d � n1 sL0 Y d S )Nrd )r �write�close�open�read)r �fd�name�fr r r �test_returns_fd_for_writing� s z*UniqueFileTest.test_returns_fd_for_writingc C sP | � d�\}}| � d�\}}t�|d�s,J �t�|d�s<J �|�� |�� d S )NrZ r` )r r rf rs )r �fd1�name1�fd2�name2r r r �test_right_mode� s z UniqueFileTest.test_right_modec C s� | � � \}}| � � \}}| � � \}}||ks0J �||ks<J �||ksHJ �tj�|�| jks^J �tj�|�| jkstJ �tj�|�| jks�J �tj�|�}|�d�s�J �tj�|�}|�d�s�J �tj�|�} | �d�s�J �|�� |�� |�� d S ro )r r rM �dirnamerO �basename�endswithrs ) r rz r{ r| r} Zfd3Zname3Z basename1Z basename2Z basename3r r r �test_default_exists� s$ z"UniqueFileTest.test_default_exists)r` ) r r r! r" rE r ry r~ r� rV r r rI r rn � s rn c @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d � Zd S ) �UniqueLineageNameTestz+Tests for certbot.util.unique_lineage_name.� c C s ddl m} || j||�S )Nr )�unique_lineage_name)r r� rO )r �filenamerc r� r r r r � s zUniqueLineageNameTest._callc C sB | � d�\}}t|tj�s J �tj�| jd�|ks6J �|�� d S )N�wowzwow.conf) r � isinstance�io� TextIOWrapperr rM rN rO rs )r rx rM r r r � test_basic s z UniqueLineageNameTest.test_basicc C sr g }t d�D ]}|�| �d�� q |d \}}t|tj�s>J �t|t�sLJ �d|v sXJ �|D ]\}}|�� q\d S )N� r� ���z wow-0009.conf)�range�appendr r� r� r� �strrs )r �items�_rx rw r r r � test_multiple s z#UniqueLineageNameTest.test_multiplec C sl t jdttj�d��D t�t�� | �d� W d � n1 s@0 Y W d � n1 s^0 Y d S )Nz certbot.compat.filesystem.open)r0 r� )r r r/ �errnoZEIOr1 r2 r r= r r r r7 s z"UniqueLineageNameTest.test_failureN)r� )r r r! r" r r� r� r7 r r r r r� � s r� c s@ e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Z� Z S ) �SafelyRemoveTestz%Tests for certbot.util.safely_remove.c s t � �� tj�| jd�| _d S )Nr_ )rD rE r rM rN rO r= rI r r rE s zSafelyRemoveTest.setUpc C s ddl m} || j�S )Nr )� safely_remove)r r� rM )r r� r r r r s zSafelyRemoveTest._callc C sJ t | jd�� W d � n1 s"0 Y | �� tj�| j�rFJ �d S )N�w)rt rM r r r[ r= r r r � test_exists$ s z SafelyRemoveTest.test_existsc C s | � � tj�| j�rJ �d S �N)r r rM r[ r= r r r � test_missing* s z SafelyRemoveTest.test_missingc C sf t �d��H}t|_t�t�� | �� W d � n1 s:0 Y W d � n1 sX0 Y d S )Nzcertbot.util.os.remove)r r r/ r0 r1 r2 r )r Z mock_remover r r � test_other_error_passthrough/ s z-SafelyRemoveTest.test_other_error_passthrough) r r r! r" rE r r� r� r� rV r r rI r r� s r� c @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) � SafeEmailTestzTest safe_email.c C s ddl m} ||�S )Nr )� safe_email)r r� )r �addrr� r r r r 8 s zSafeEmailTest._callc C s, g d�}|D ]}| � |�s J d| ��q d S )N)zcertbot@certbot.orgztbd.ade@gmail.comzabc_def.jdk@hotmail.museum� %s failed.�r �r �addrsr� r r r �test_valid_emails= s z SafeEmailTest.test_valid_emailsc C s, g d�}|D ]}| � |�r J d| ��q d S )N)zcertbot@certbot..orgz.tbd.ade@gmail.comz ~/abc_def.jdk@hotmail.museumr� r� r� r r r �test_invalid_emailsF s z!SafeEmailTest.test_invalid_emailsN)r r r! r" r# r r� r� r r r r r� 6 s r� c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dS )�AddDeprecatedArgumentTestz Test add_deprecated_argument.c C s t �� | _d S r� )�argparse�ArgumentParser�parserr= r r r rE R s z AddDeprecatedArgumentTest.setUpc C s ddl m} || jj||� d S )Nr )�add_deprecated_argument)r r� r� � add_argument)r � argument_name�nargsr� r r r r U s z AddDeprecatedArgumentTest._callc C s� | � dd� t�d�� }| j�dg� W d � n1 s:0 Y |jdksRJ �d|jd d v shJ �d|jd d v s~J �d S )N� --old-optionr �certbot.util.logger.warningr6 � is deprecated�r r r r� � parse_argsrQ rR �r Z mock_warnr r r �test_warning_no_argY s ,z-AddDeprecatedArgumentTest.test_warning_no_argc C s� | � dd� t�d�� }| j�ddg� W d � n1 s<0 Y |jdksTJ �d|jd d v sjJ �d|jd d v s�J �d S )Nr� r6 r� �42r� r r� r� r r r �test_warning_with_arga s .z/AddDeprecatedArgumentTest.test_warning_with_argc C s| | � dd� t�� }tjd|d��6 z| j�dg� W n tyH Y n0 W d � n1 s^0 Y d|�� vsxJ �d S )Nr� rL z sys.stdout)rY z-h) r r� �StringIOr r r� r� � SystemExit�getvalue)r r' r r r � test_helpi s $z#AddDeprecatedArgumentTest.test_helpc C s | � t� dS )z�Test when ACTION_TYPES_THAT_DONT_NEED_A_VALUE is a set. This variable is a set in configargparse versions < 0.12.0. N)�_test_constant_common�setr= r r r �test_set_constants s z+AddDeprecatedArgumentTest.test_set_constantc C s | � t� dS )z�Test when ACTION_TYPES_THAT_DONT_NEED_A_VALUE is a tuple. This variable is a tuple in configargparse versions >= 0.12.0. N)r� �tupler= r r r �test_tuple_constant{ s z-AddDeprecatedArgumentTest.test_tuple_constantc C s` t �d��0}|� |_| �dd� | �dd� W d � n1 s@0 Y t|j�dks\J �d S )Nzcertbot.util.configargparser� r6 z --old-option2rL )r r Z#ACTION_TYPES_THAT_DONT_NEED_A_VALUEr rS )r �typZmock_configargparser r r r� � s *z/AddDeprecatedArgumentTest._test_constant_commonN) r r r! r" rE r r� r� r� r� r� r� r r r r r� P s r� c @ sX e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dS )�EnforceLeValidityzTest enforce_le_validity.c C s ddl m} ||�S )Nr )�enforce_le_validity)r r� )r �domainr� r r r r � s zEnforceLeValidity._callc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nz..�r1 r2 r �ConfigurationErrorr r= r r r � test_sanity� s z EnforceLeValidity.test_sanityc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nzhello_world.example.comr� r= r r r �test_invalid_chars� s z$EnforceLeValidity.test_invalid_charsc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nz-a.example.comr� r= r r r �test_leading_hyphen� s z%EnforceLeValidity.test_leading_hyphenc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nza-.example.comr� r= r r r �test_trailing_hyphen� s z&EnforceLeValidity.test_trailing_hyphenc C s: t �tj�� | �d� W d � n1 s,0 Y d S )NZcomr� r= r r r �test_one_label� s z EnforceLeValidity.test_one_labelc C s | � d�dksJ �d S )Nz example.comr� r= r r r �test_valid_domain� s z#EnforceLeValidity.test_valid_domainc C sp t �tj�� | �d� W d � n1 s,0 Y t �tj�� | �d� W d � n1 sb0 Y d S )Nzhttp://example.comzhttps://example.comr� r= r r r �test_input_with_scheme� s (z(EnforceLeValidity.test_input_with_schemec C s | � d�dksJ �d S )Nzhttp.example.comr� r= r r r �!test_valid_input_with_scheme_name� s z3EnforceLeValidity.test_valid_input_with_scheme_nameN) r r r! r" r r� r� r� r� r� r� r� r� r r r r r� � s r� c @ sp e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� ZdS )�EnforceDomainSanityTestzTest enforce_domain_sanity.c C s ddl m} ||�S )Nr )�enforce_domain_sanity)r r� )r r� r� r r r r � s z EnforceDomainSanityTest._callc C s@ t �tj�� | �d�d�� W d � n1 s20 Y d S )N� eichhörnchen.example.comzutf-8)r1 r2 r r� r �encoder= r r r �test_nonascii_str� s z)EnforceDomainSanityTest.test_nonascii_strc C s: t �tj�� | �d� W d � n1 s,0 Y d S )Nr� r� r= r r r �test_nonascii_unicode� s z-EnforceDomainSanityTest.test_nonascii_unicodec C s> d}t �tj�� | �|� W d � n1 s00 Y d S )NA aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaar� )r Z long_domainr r r � test_too_long� s z%EnforceDomainSanityTest.test_too_longc C s d� dddd�}| �|� d S )Nz{0}.{1}.{2}.{3}�?aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa�?bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbZ?cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccZ?ddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd��formatr )r Znot_too_long_domainr r r �test_not_too_long� s z)EnforceDomainSanityTest.test_not_too_longc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )Nzfizz..example.comr� )r Zempty_label_domainr r r �test_empty_label� s z(EnforceDomainSanityTest.test_empty_labelc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )Nz example.com..r� )r Zempty_trailing_label_domainr r r �test_empty_trailing_label� s z1EnforceDomainSanityTest.test_empty_trailing_labelc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )N�@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaar� �r Zlong_label_domainr r r �test_long_label_1� s z)EnforceDomainSanityTest.test_long_label_1c C sF d� dd�}t�tj�� | �|� W d � n1 s80 Y d S )N� {0}.{1}.comr� r� )r� r1 r2 r r� r r� r r r �test_long_label_2� s z)EnforceDomainSanityTest.test_long_label_2c C s d� dd�}| �|� d S )Nr� r� r� r� )r Znot_too_long_label_domainr r r �test_not_long_label� s z+EnforceDomainSanityTest.test_not_long_labelc C s> d}t �tj�� | �|� W d � n1 s00 Y d S )N� r� )r Z empty_domainr r r �test_empty_domain� s z)EnforceDomainSanityTest.test_empty_domainc C s | � d� d S )Nzthis.is.xn--ls8h.tldr� r= r r r �test_punycode_ok� s z(EnforceDomainSanityTest.test_punycode_okN)r r r! r" r r� r� r� r� r� r� r� r� r� r� r� r r r r r� � s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �IsWildcardDomainTestz Tests for is_wildcard_domain.c C s d| _ d| _d S )Nz *.example.orgz example.org)�wildcard� no_wildcardr= r r r rE � s zIsWildcardDomainTest.setUpc C s ddl m} ||�S )Nr )�is_wildcard_domain)r r� )r r� r� r r r r � s zIsWildcardDomainTest._callc C s( | � | j�rJ �| � | j�� �r$J �d S r� )r r� r� r= r r r �test_no_wildcard� s z%IsWildcardDomainTest.test_no_wildcardc C s( | � | j�sJ �| � | j�� �s$J �d S r� )r r� r� r= r r r � test_wildcard� s z"IsWildcardDomainTest.test_wildcardN)r r r! r" rE r r� r� r r r r r� � s r� c @ s� e Zd ZdZe�d�e�ej � d�d�dd� ��Z e�d�e�ej � d�d�dd� ��Z e�d�e�ej � d�d�d d � ��Z d d � Ze�d�e�ej � d�d�d d� ��Ze�d�e�ej � d�d�dd� ��ZdS )� OsInfoTestz Test OS / distribution detectionzcertbot.util.distro�linuxzrequires Linuxc C s< dd l m} d|j_|�� }t|�dks,J �d|v s8J �d S )Nr zfirst debian third� Zdebian)r rG Zliker Zget_systemd_os_likerS )r �m_distro�cbutilZid_likesr r r � test_systemd_os_release_like s z'OsInfoTest.test_systemd_os_release_likec C s� dd l m} tjddd��B d|j_g d�|j_|�� d� |j dd ��ksNJ �W d � n1 sb0 Y d g|j_|�� d ks�J �d S ) Nr �platform.system_alias)r� r� r� r �1.0)r� � somethingr� � T)ZprettyZwhatever) r rG r r �versionr rw r0 Zget_os_info_uarN �get_python_os_info�r r� r� r r r �test_get_os_info_ua s � �& z OsInfoTest.test_get_os_info_uac C s� dd l m} t�d��V}d|j_d|j_d|_|�� dks>J �d|j_d|j_|�� d ks^J �W d � n1 sr0 Y d S ) Nr zplatform.systemrw r� r� )rw r� r� �else)r� r� )r rG r r �idr r� Z get_os_info)r r� r� Z mock_platformr r r �test_get_os_info s zOsInfoTest.test_get_os_infoc C s� dd l m} t�dd���� tjddd��$ |�� d dks@J �W d � n1 sT0 Y tjddd��j t�d ��@}d |� _|�� d d ks�J �|�� d d ks�J �W d � n1 s�0 Y W d � n1 s�0 Y tjdd d��" |�� dk�sJ �W d � n1 �s 0 Y tjddd��R tjddd��" |�� dk�sZJ �W d � n1 �sp0 Y W d � n1 �s�0 Y W d � n1 �s�0 Y d S )Nr zcertbot.util._USE_DISTROFr� )Z NonSystemDr� r� r Z nonsystemd)�darwinr� r� zsubprocess.runz42.42.42r� r6 )�freebsdz 9.3-RC3-p1r� )r� �9)�windowsr� r� zplatform.win32_ver)Z4242�95�2r� )r� r� )r rG r r r� r' )r r� Zrun_mockr r r �test_non_systemd_os_info* s4 �2� P�2���z#OsInfoTest.test_non_systemd_os_infoc C s4 dd l m} d|j_d|j_|�� d dks0J �d S )Nr r� r� �r rG r� r r� r� r� r r r � test_python_os_info_notfoundC s z'OsInfoTest.test_python_os_info_notfoundc C s0 dd l m} d|j_d|j_|�� dks,J �d S )Nr �testdistr� )r r� r r� r r r �test_python_os_info_customK s z%OsInfoTest.test_python_os_info_customN)r r r! r" r r �unittestZ skipUnless�sys�platform� startswithr� r� r� r r r r r r r r� s" r� c @ s< e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd d � Z d S ) �AtexitRegisterTestz'Tests for certbot.util.atexit_register.c C s t �� | _d| _ddi| _d S )N)�hiZanswer�* )r Z MagicMock�funcrB rC r= r r r rE V s zAtexitRegisterTest.setUpc O s ddl m} ||i |��S )Nr )�atexit_register)r r )r rB rC r r r r r [ s zAtexitRegisterTest._callc C s( | � t�� � | jj| ji | j�� d S r� )� _test_commonr �getpidr Zassert_called_withrB rC r= r r r � test_called` s z AtexitRegisterTest.test_calledc C s | j dd� | jjdu s J �d S )Nr� )� initial_pidF)r r �calledr= r r r �test_not_calledd s z"AtexitRegisterTest.test_not_calledc C s� t �d|��� t �d��.}| j| jg| j�R i | j�� W d � n1 sL0 Y |jjsbJ �|jj\}}|d }||dd � i |�� W d � n1 s�0 Y d S )Nzcertbot.util._INITIAL_PIDzcertbot.util.atexitr r6 ) r r r r rB rC �registerr rR )r r Z mock_atexitrB rC Z atexit_funcr r r r h s < z AtexitRegisterTest._test_commonN) r r r! r" rE r# r r r r r r r r r T s r c @ s< e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d S ) �LooseVersionTestz�Test for certbot.util.LooseVersion. These tests are based on the original tests for distutils.version.LooseVersion at https://github.com/python/cpython/blob/v3.10.0/Lib/distutils/tests/test_version.py#L58-L81. c O s ddl m} ||i |��S )Nr )� LooseVersion)r r )r rB rC r r r r r } s zLooseVersionTest._callc C s4 d}|D ]&\}}| � |��| � |��dksJ �qd S )N)�z1.5.1z1.5.2b2�z3.4jz 1996.07.12�Z2g6Z11g�z0.960923z 2.2beta29�z1.13++z5.5.kw)�2.0z2.0.1)�a�br� �r �try_risky_comparison�r Z comparisonsZv1Zv2r r r �test_less_than� s z LooseVersionTest.test_less_thanc C s4 d}|D ]&\}}| � |��| � |��dksJ �qd S )N))�8.02r$ )�1ar% )r �2.0.0)r r& r r r" r r r � test_equal� s zLooseVersionTest.test_equalc C s4 d}|D ]&\}}| � |��| � |��dksJ �qd S )N�)Z161z3.10a)z3.2.pl0z3.1.1.6r6 r r" r r r �test_greater_than� s z"LooseVersionTest.test_greater_thanc C sZ d}|D ]L\}}t �t��* | �|��| �|��s6J �W d � q1 sJ0 Y qd S )N))z bookworm/sidr� )r% r� )r1 r2 � ValueErrorr r! r" r r r �test_incomparible� s z"LooseVersionTest.test_incomparibleN) r r r! r" r# r r# r' r) r+ r r r r r t s r c @ s4 e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd S ) �ParseLooseVersionTestz�Test for certbot.util.parse_loose_version. These tests are based on the original tests for distutils.version.LooseVersion at https://github.com/python/cpython/blob/v3.10.0/Lib/distutils/tests/test_version.py#L58-L81. c O s ddl m} ||i |��S )Nr )�parse_loose_version)r r- )r rB rC r- r r r r � s zParseLooseVersionTest._callc C s. d}|D ] \}}| � |�| � |�k sJ �qd S )N)r r r r r r� r" r r r r# � s z$ParseLooseVersionTest.test_less_thanc C s | � d�| � d�ksJ �d S )Nr$ r� r= r r r r' � s z ParseLooseVersionTest.test_equalc C s. d}|D ] \}}| � |�| � |�ksJ �qd S )Nr( r� r" r r r r) � s z'ParseLooseVersionTest.test_greater_thanN) r r r! r" r# r r# r' r) r r r r r, � s r, �__main__r6 )-r" r� r� � importlibr rF r� r r r r1 rH r Zcertbot.compatr r Zcertbot.tests.utilZtestsrG Z test_utilZTestCaser r$ r8 ZTempDirTestCaser@ rW r^ rn r� r� r� r� r� r� r� r� r r r, r �exit�main�argv�__file__r r r r �<module> s@ "!$'4 ;';S /! __pycache__/__init__.cpython-39.opt-1.pyc 0000644 00000000270 15114562471 0014110 0 ustar 00 a }|�g � @ s d Z dS )z certbot testsN)�__doc__� r r �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/__init__.py�<module> � __pycache__/__init__.cpython-39.pyc 0000644 00000000270 15114562471 0013151 0 ustar 00 a }|�g � @ s d Z dS )z certbot testsN)�__doc__� r r �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/__init__.py�<module> � __pycache__/account_test.cpython-39.opt-1.pyc 0000644 00000031077 15114562471 0015055 0 ustar 00 a }|�g�7 � @ s d Z ddlZddlZddlZddlmZ ddlZddlZddlZddl m Z ddl m Z ddl mZ ddl mZ ddl mZ ddlm mZ ej�e�d ��ZG d d � d ej�ZG d d � d ej�ZG dd� dej�Z G dd� dej �Z e dk�re� e�!ej"dd� e#g �� dS )z$Tests for certbot._internal.account.� N)�mock)�messages)�errors)� filesystem)�misc)�oszrsa512_key.pemc @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) � AccountTestz,Tests for certbot._internal.account.Account.c C s� ddl m} t�� | _|jdtjddddddtjd �d �| _ || jt | j �| _ tjd d �| j_ t� d ��^}d|j_t� d��,}| j j|jj_|| jt �| _W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr ��Accountztest.certbot.orgi� � � � � �Ztzinfo�Z creation_host� creation_dtZ i_am_a_regr)� return_valuez certbot._internal.account.socketz"certbot._internal.account.datetime)�certbot._internal.accountr r � MagicMock�regr�Meta�datetime�pytz�UTC�meta�KEY�acc�__repr__�patchZgetfqdnr r ZnowZ acc_no_meta)�selfr Z mock_socketZmock_dt� r �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/account_test.py�setUp s �� zAccountTest.setUpc C s d S �Nr �r r r r! � test_init( s zAccountTest.test_initc C s d S r# r r$ r r r! �test_id- s zAccountTest.test_idc C s d S r# r r$ r r r! � test_slug0 s zAccountTest.test_slugc C s d S r# r r$ r r r! � test_repr3 s zAccountTest.test_reprN) �__name__� __module__� __qualname__�__doc__r" r% r& r' r( r r r r! r s r c @ s e Zd ZdZdd� Zdd� ZdS )�MetaTestz)Tests for certbot._internal.account.Meta.c C s ddl m} |j�d�}d S )Nr r zU{ "creation_dt": "2020-06-13T07:46:45Z", "creation_host": "hyperion.localdomain"}�r r r Z json_loads�r r r r r r! �test_deserialize_partial: s �z!MetaTest.test_deserialize_partialc C s ddl m} |j�d�}d S )Nr r zq{ "creation_dt": "2020-06-13T07:46:45Z", "creation_host": "hyperion.localdomain", "register_to_eff": "bar"}r. r/ r r r! �test_deserialize_fullE s �z MetaTest.test_deserialize_fullN)r) r* r+ r, r0 r1 r r r r! r- 8 s r- c @ s e Zd ZdZdd� Zdd� ZdS )�AccountMemoryStorageTestz9Tests for certbot._internal.account.AccountMemoryStorage.c C s ddl m} |� | _d S )Nr )�AccountMemoryStorage)r r3 �storage)r r3 r r r! r" U s z AccountMemoryStorageTest.setUpc C sd t jdd�}t�tj�� | j�d� W d � n1 s:0 Y | j�|d � | j�|d � d S )N�x)�id) r ZMock�pytest�raisesr �AccountNotFoundr4 �load�save)r �accountr r r! �test_itY s *z AccountMemoryStorageTest.test_itN)r) r* r+ r, r" r= r r r r! r2 R s r2 c s e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Ze�d$�d%d&� �Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Z d1d2� Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z!d;d<� Z"d=d>� Z#d?d@� Z$� Z%S )A�AccountFileStorageTestz7Tests for certbot._internal.account.AccountFileStorage.c s~ t � �� ddlm} || j�| _ddlm} |jdtjddddd d t j d �d �}|t j d t � � d �t|d�| _t�� | _d S )Nr ��AccountFileStorager ztest.example.orgi� � � r r r r r )Zuri�body)r �keyr )�superr" r r@ �configr4 r r r r r r ZRegistrationResourceZ Registrationr r r r � mock_client)r r@ r r �� __class__r r! r" h s$ ����z AccountFileStorageTest.setUpc C s d S r# r r$ r r r! �test_init_creates_dirz s z,AccountFileStorageTest.test_init_creates_dirc C sF | j �| j| j� tj�| jj| jj �}dD ]}q,| j � | jj �}d S )N)z regr.jsonz meta.jsonzprivate_key.json) r4 r; r rG r �path�joinrF � accounts_dirr6 r: )r � account_path� file_nameZloadedr r r! �test_save_and_restore~ s z,AccountFileStorageTest.test_save_and_restorec C s( | j �| j� tj�| jj| jj�}d S r# ) r4 Z update_regrr r rK rL rF rM r6 �r rN r r r! �test_update_regr� s z'AccountFileStorageTest.test_update_regrc C s( | j �| j� tj�| jj| jj�}d S r# ) r4 Z update_metar r rK rL rF rM r6 rQ r r r! �test_update_meta� s z'AccountFileStorageTest.test_update_metac C s | j �| j| j� d S r# )r4 r; r rG r$ r r r! � test_find_all� s z$AccountFileStorageTest.test_find_allc C s d S r# r r$ r r r! � test_find_all_none_empty_list� s z4AccountFileStorageTest.test_find_all_none_empty_listc C s t �| jj� d S r# )r �rmdirrF rM r$ r r r! �!test_find_all_accounts_dir_absent� s z8AccountFileStorageTest.test_find_all_accounts_dir_absentc C sP t jdtjdgd�| j_t �d��}g d�|_W d � n1 sB0 Y d S )Nr5 �z�� side_effectz$certbot._internal.account.os.listdir)r5 �yrX )r r r �AccountStorageErrorr4 �_load_for_server_pathr r )r Z mock_listdirr r r! �test_find_all_load_skips� s � z/AccountFileStorageTest.test_find_all_load_skipsc C s< t �tj�� | j�d� W d � n1 s.0 Y d S )N�missing)r7 r8 r r9 r4 r: r$ r r r! �#test_load_non_existent_raises_error� s z:AccountFileStorageTest.test_load_non_existent_raises_errorc C s$ || j _ddlm} || j �| _d S )Nr r? )rF �serverr r@ r4 )r ra r@ r r r! � _set_server� s z"AccountFileStorageTest._set_serverc C s | � d� d S �N�6https://acme-staging-v02.api.letsencrypt.org/directory)rb r$ r r r! � test_find_all_neither_exists� s z3AccountFileStorageTest.test_find_all_neither_existsc C s$ | � d� | j�| j| j� d}d S �Nrd �2https://acme-staging.api.letsencrypt.org/directory�rb r4 r; r rG �r Zprev_server_pathr r r! � test_find_all_find_before_save� s z5AccountFileStorageTest.test_find_all_find_before_savec C s$ | � d� | j�| j| j� d}d S rf rh ri r r r! � test_find_all_save_before_find� s z5AccountFileStorageTest.test_find_all_save_before_findc C s* | � d� | j�| j| j� | � d� d S rf rh r$ r r r! � test_find_all_server_downgrade� s z5AccountFileStorageTest.test_find_all_server_downgradec C s* | � d� | j�| j| j� | � d� d S �Nrg rd rh r$ r r r! � test_upgrade_version_staging� s z3AccountFileStorageTest.test_upgrade_version_stagingc C s* | � d� | j�| j| j� | � d� d S )Nz.https://acme-v01.api.letsencrypt.org/directoryz.https://acme-v02.api.letsencrypt.org/directoryrh r$ r r r! � test_upgrade_version_production� s z6AccountFileStorageTest.test_upgrade_version_productionzcertbot.compat.os.rmdirc C sB | � d� | j�| j| j� t|_tjt j d�| j_ | � d� d S )Nrg rY rd ) rb r4 r; r rG �OSErrorrZ r r r r\ r] )r Z mock_rmdirr r r! �test_corrupted_account� s � z-AccountFileStorageTest.test_corrupted_accountc C sJ | � d� | j�| j| j� | j�| jj�}| � d� | j�| jj�}d S rm )rb r4 r; r rG r: r6 �r Z prev_accountr< r r r! �test_upgrade_load� s z(AccountFileStorageTest.test_upgrade_loadc C sJ | � d� | j�| j| j� | j�| jj�}| �d� | j�| jj�}d S rm )rb r4 r; r rG r: r6 � _set_server_and_stop_symlinkrr r r r! � test_upgrade_load_single_account� s z7AccountFileStorageTest.test_upgrade_load_single_accountc C s� | j �| j| j� t�� }t|_t�d|��L t � t j �� | j � | jj� W d � n1 s`0 Y W d � n1 s~0 Y d S �Nz builtins.open)r4 r; r rG r � mock_open�IOErrorrZ r r7 r8 r r\ r: r6 �r rw r r r! �test_load_ioerror s z(AccountFileStorageTest.test_load_ioerrorc C s| t �� }t|_t �d|��N t�tj��" | j � | j | j � W d � n1 sP0 Y W d � n1 sn0 Y d S rv ) r rw rx rZ r r7 r8 r r\ r4 r; r rG ry r r r! �test_save_ioerrors s z)AccountFileStorageTest.test_save_ioerrorsc C sb | j �| j| j� | j �| jj� t�tj �� | j � | jj� W d � n1 sT0 Y d S r# ) r4 r; r rG �deleter6 r7 r8 r r9 r: r$ r r r! � test_delete s z"AccountFileStorageTest.test_deletec C s@ t �tj�� | j�| jj� W d � n1 s20 Y d S r# )r7 r8 r r9 r4 r| r r6 r$ r r r! �test_delete_no_account s z-AccountFileStorageTest.test_delete_no_accountc C s� | � d� | j�| j| j� t�di ��V | � d� t�t j �� | j� | jj � W d � n1 sf0 Y W d � n1 s�0 Y d S )Nrg z,certbot._internal.constants.LE_REUSE_SERVERSrd ) rb r4 r; r rG r r r7 r8 r r9 r: r6 r$ r r r! �!_assert_symlinked_account_removed s z8AccountFileStorageTest._assert_symlinked_account_removedc C s� | � d� | j�| j| j� | � d� | j�| jj� | � |� | j�| jj� | � d� t� t j �� | j�| jj� W d � n1 s�0 Y | � d� t� t j �� | j�| jj� W d � n1 s�0 Y d S rm ) rb r4 r; r rG r: r6 r| r7 r8 r r9 )r Z server_urlr r r! �_test_delete_folders' s . z+AccountFileStorageTest._test_delete_foldersc C s | � d� | �� d S )Nrg �r� r r$ r r r! �test_delete_folders_up: s z-AccountFileStorageTest.test_delete_folders_upc C s | � d� | �� d S rc r� r$ r r r! �test_delete_folders_down> s z/AccountFileStorageTest.test_delete_folders_downc C sP | � |� ttj�| jjd�d��}|�d� W d � n1 sB0 Y d S )NZfoo�wZbar)rb �openr rK rL rF rM �write)r Z server_path�fr r r! rt B s z3AccountFileStorageTest._set_server_and_stop_symlinkc C s | � d� | �d� d S rf �rt r� r$ r r r! � test_delete_shared_account_upG s z4AccountFileStorageTest.test_delete_shared_account_upc C s | � d� | �d� d S rc r� r$ r r r! � test_delete_shared_account_downK s z6AccountFileStorageTest.test_delete_shared_account_down)&r) r* r+ r, r" rJ rP rR rS rT rU rW r^ r` rb re rj rk rl rn ro r r rq rs ru rz r{ r} r~ r r� r� r� rt r� r� � __classcell__r r rH r! r> e sB r> �__main__rA )$r, r �sysZunittestr ZjosepyZjoser7 r Zacmer Zcertbotr Zcertbot.compatr r r Zcertbot.tests.utilZtests�utilZ test_utilZJWKRSAr: Z load_vectorr ZTestCaser r- r2 ZConfigTestCaser> r) �exit�main�argv�__file__r r r r! �<module> s* # l __pycache__/account_test.cpython-39.pyc 0000644 00000034440 15114562471 0014113 0 ustar 00 a }|�g�7 � @ s d Z ddlZddlZddlZddlmZ ddlZddlZddlZddl m Z ddl m Z ddl mZ ddl mZ ddl mZ ddlm mZ ej�e�d ��ZG d d � d ej�ZG d d � d ej�ZG dd� dej�Z G dd� dej �Z e dk�re� e�!ej"dd� e#g �� dS )z$Tests for certbot._internal.account.� N)�mock)�messages)�errors)� filesystem)�misc)�oszrsa512_key.pemc @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) � AccountTestz,Tests for certbot._internal.account.Account.c C s� ddl m} t�� | _|jdtjddddddtjd �d �| _ || jt | j �| _ tjd d �| j_ t� d ��^}d|j_t� d��,}| j j|jj_|| jt �| _W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr ��Accountztest.certbot.orgi� � � � � �Ztzinfo�� creation_host� creation_dtZ i_am_a_regr)� return_valuez certbot._internal.account.socketz"certbot._internal.account.datetime)�certbot._internal.accountr r � MagicMock�regr�Meta�datetime�pytz�UTC�meta�KEY�acc�__repr__�patchZgetfqdnr r Znow� acc_no_meta)�selfr Z mock_socketZmock_dt� r" �H/usr/lib/python3.9/site-packages/certbot/_internal/tests/account_test.py�setUp s �� zAccountTest.setUpc C s8 | j | jj ksJ �t| jjks"J �| j| jjks4J �d S �N)r r r �keyr r �r! r" r" r# � test_init( s zAccountTest.test_initc C s | j jdksJ �d S )NZ 7adac10320f585ddf118429c0c4af2cd)r �idr' r" r" r# �test_id- s zAccountTest.test_idc C s | j jdksJ �d S )Nz,test.certbot.org@2015-07-04T14:04:10Z (7ada))r Zslugr' r" r" r# � test_slug0 s zAccountTest.test_slugc C s t | j��d�sJ �d S )Nz=<Account(i_am_a_regr, 7adac10320f585ddf118429c0c4af2cd, Meta()�reprr � startswithr' r" r" r# � test_repr3 s �zAccountTest.test_reprN) �__name__� __module__� __qualname__�__doc__r$ r( r* r+ r. r" r" r" r# r s r c @ s e Zd ZdZdd� Zdd� ZdS )�MetaTestz)Tests for certbot._internal.account.Meta.c C sF ddl m} |j�d�}|jd us&J �|jd us4J �|jd u sBJ �d S )Nr r zU{ "creation_dt": "2020-06-13T07:46:45Z", "creation_host": "hyperion.localdomain"}�r r r Z json_loadsr r Zregister_to_eff�r! r r r" r" r# �test_deserialize_partial: s �z!MetaTest.test_deserialize_partialc C sF ddl m} |j�d�}|jd us&J �|jd us4J �|jd usBJ �d S )Nr r zq{ "creation_dt": "2020-06-13T07:46:45Z", "creation_host": "hyperion.localdomain", "register_to_eff": "bar"}r4 r5 r" r" r# �test_deserialize_fullE s �z MetaTest.test_deserialize_fullN)r/ r0 r1 r2 r6 r7 r" r" r" r# r3 8 s r3 c @ s e Zd ZdZdd� Zdd� ZdS )�AccountMemoryStorageTestz9Tests for certbot._internal.account.AccountMemoryStorage.c C s ddl m} |� | _d S )Nr )�AccountMemoryStorage)r r9 �storage)r! r9 r" r" r# r$ U s z AccountMemoryStorageTest.setUpc C s� t jdd�}g | j�� ks J �t�tj�� | j�d� W d � n1 sL0 Y | j� |d � |g| j�� ksxJ �|| j�d�ks�J �| j� |d � |g| j�� ks�J �d S )N�x)r) ) r ZMockr: �find_all�pytest�raisesr �AccountNotFound�load�save)r! �accountr" r" r# �test_itY s *z AccountMemoryStorageTest.test_itN)r/ r0 r1 r2 r$ rC r" r" r" r# r8 R s r8 c s e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Ze�d$�d%d&� �Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Z d1d2� Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z!d;d<� Z"d=d>� Z#d?d@� Z$� Z%S )A�AccountFileStorageTestz7Tests for certbot._internal.account.AccountFileStorage.c s~ t � �� ddlm} || j�| _ddlm} |jdtjddddd d t j d �d �}|t j d t � � d �t|d�| _t�� | _d S )Nr ��AccountFileStorager ztest.example.orgi� � � r r r r r )Zuri�body)r r& r )�superr$ r rF �configr: r r r r r r ZRegistrationResourceZ Registrationr r r r � mock_client)r! rF r r �� __class__r" r# r$ h s$ ����z AccountFileStorageTest.setUpc C s t j�t�| jj��sJ �d S r% )r �path�isdirr Z.underscores_for_unsupported_characters_in_pathrK � accounts_dirr' r" r" r# �test_init_creates_dirz s �z,AccountFileStorageTest.test_init_creates_dirc C s� | j �| j| j� tj�| jj| jj �}tj� |�s8J �dD ] }tj� tj�||��s<J �q<t � tj�|d�d�svJ �| j � | jj �}| j|ks�J �d S )N)� regr.json� meta.json�private_key.jsonrU � )r: rA r rL r rO �joinrK rQ r) �existsr Z check_moder@ )r! � account_path� file_nameZloadedr" r" r# �test_save_and_restore~ s � z,AccountFileStorageTest.test_save_and_restorec C s� | j �| j� tj�| jj| jj�}tj� |�s4J �tj� tj�|d��sNJ �tj� tj�|d��rhJ �tj� tj�|d��r�J �d S )NrS rT rU ) r: Z update_regrr r rO rW rK rQ r) rX �r! rY r" r" r# �test_update_regr� s z'AccountFileStorageTest.test_update_regrc C s� | j �| j� tj�| jj| jj�}tj� |�s4J �tj� tj�|d��sNJ �tj� tj�|d��rhJ �tj� tj�|d��r�J �d S )NrT rS rU ) r: Z update_metar r rO rW rK rQ r) rX r\ r" r" r# �test_update_meta� s z'AccountFileStorageTest.test_update_metac C s, | j �| j| j� | jg| j �� ks(J �d S r% )r: rA r rL r< r' r" r" r# � test_find_all� s z$AccountFileStorageTest.test_find_allc C s g | j �� ksJ �d S r% )r: r< r' r" r" r# � test_find_all_none_empty_list� s z4AccountFileStorageTest.test_find_all_none_empty_listc C s$ t �| jj� g | j�� ks J �d S r% )r �rmdirrK rQ r: r< r' r" r" r# �!test_find_all_accounts_dir_absent� s z8AccountFileStorageTest.test_find_all_accounts_dir_absentc C sf t jdtjdgd�| j_t �d��0}g d�|_ddg| j�� ksDJ �W d � n1 sX0 Y d S )Nr; �z�� side_effectz$certbot._internal.account.os.listdir)r; �yrc ) r r r �AccountStorageErrorr: �_load_for_server_pathr r r< )r! Z mock_listdirr" r" r# �test_find_all_load_skips� s � z/AccountFileStorageTest.test_find_all_load_skipsc C s< t �tj�� | j�d� W d � n1 s.0 Y d S )N�missing)r= r> r r? r: r@ r' r" r" r# �#test_load_non_existent_raises_error� s z:AccountFileStorageTest.test_load_non_existent_raises_errorc C s$ || j _ddlm} || j �| _d S )Nr rE )rK �serverr rF r: )r! rl rF r" r" r# � _set_server� s z"AccountFileStorageTest._set_serverc C sF | � d� g | j�� ks J �g | j�� ks.J �tj�| jj�rBJ �d S �N�6https://acme-staging-v02.api.letsencrypt.org/directory)rm r: r< r rO �islinkrK rQ r' r" r" r# � test_find_all_neither_exists� s z3AccountFileStorageTest.test_find_all_neither_existsc C s� | � d� g | j�� ks J �| j�| j| j� | jg| j�� ksDJ �| jg| j�� ksZJ �tj�| j j �rnJ �d}tj� | j � |��r�J �d S �Nro �2https://acme-staging.api.letsencrypt.org/directory) rm r: r< rA r rL r rO rp rK rQ rP � accounts_dir_for_server_path�r! Zprev_server_pathr" r" r# � test_find_all_find_before_save� s z5AccountFileStorageTest.test_find_all_find_before_savec C s� | � d� | j�| j| j� | jg| j�� ks2J �| jg| j�� ksHJ �tj�| j j �r\J �tj� | j j �spJ �d}tj� | j � |��r�J �d S rr ) rm r: rA r rL r< r rO rp rK rQ rP rt ru r" r" r# � test_find_all_save_before_find� s z5AccountFileStorageTest.test_find_all_save_before_findc C sd | � d� g | j�� ks J �| j�| j| j� | jg| j�� ksDJ �| � d� g | j�� ks`J �d S rr )rm r: r< rA r rL r' r" r" r# � test_find_all_server_downgrade� s z5AccountFileStorageTest.test_find_all_server_downgradec C s@ | � d� | j�| j| j� | � d� | jg| j�� ks<J �d S �Nrs ro �rm r: rA r rL r< r' r" r" r# � test_upgrade_version_staging� s z3AccountFileStorageTest.test_upgrade_version_stagingc C s@ | � d� | j�| j| j� | � d� | jg| j�� ks<J �d S )Nz.https://acme-v01.api.letsencrypt.org/directoryz.https://acme-v02.api.letsencrypt.org/directoryrz r' r" r" r# � test_upgrade_version_production� s z6AccountFileStorageTest.test_upgrade_version_productionzcertbot.compat.os.rmdirc C sT | � d� | j�| j| j� t|_tjt j d�| j_ | � d� g | j� � ksPJ �d S )Nrs rd ro ) rm r: rA r rL �OSErrorre r r r rg rh r< )r! Z mock_rmdirr" r" r# �test_corrupted_account� s � z-AccountFileStorageTest.test_corrupted_accountc C sV | � d� | j�| j| j� | j�| jj�}| � d� | j�| jj�}||ksRJ �d S ry )rm r: rA r rL r@ r) �r! Z prev_accountrB r" r" r# �test_upgrade_load� s z(AccountFileStorageTest.test_upgrade_loadc C sV | � d� | j�| j| j� | j�| jj�}| �d� | j�| jj�}||ksRJ �d S ry )rm r: rA r rL r@ r) � _set_server_and_stop_symlinkr r" r" r# � test_upgrade_load_single_account� s z7AccountFileStorageTest.test_upgrade_load_single_accountc C s� | j �| j| j� t�� }t|_t�d|��L t � t j �� | j � | jj� W d � n1 s`0 Y W d � n1 s~0 Y d S �Nz builtins.open)r: rA r rL r � mock_open�IOErrorre r r= r> r rg r@ r) �r! r� r" r" r# �test_load_ioerror s z(AccountFileStorageTest.test_load_ioerrorc C s| t �� }t|_t �d|��N t�tj��" | j � | j | j � W d � n1 sP0 Y W d � n1 sn0 Y d S r� ) r r� r� re r r= r> r rg r: rA r rL r� r" r" r# �test_save_ioerrors s z)AccountFileStorageTest.test_save_ioerrorsc C sb | j �| j| j� | j �| jj� t�tj �� | j � | jj� W d � n1 sT0 Y d S r% ) r: rA r rL �deleter) r= r> r r? r@ r' r" r" r# � test_delete s z"AccountFileStorageTest.test_deletec C s@ t �tj�� | j�| jj� W d � n1 s20 Y d S r% )r= r> r r? r: r� r r) r' r" r" r# �test_delete_no_account s z-AccountFileStorageTest.test_delete_no_accountc C s� | � d� | j�| j| j� t�di ��V | � d� t�t j �� | j� | jj � W d � n1 sf0 Y W d � n1 s�0 Y d S )Nrs z,certbot._internal.constants.LE_REUSE_SERVERSro ) rm r: rA r rL r r r= r> r r? r@ r) r' r" r" r# �!_assert_symlinked_account_removed s z8AccountFileStorageTest._assert_symlinked_account_removedc C s� | � d� | j�| j| j� | � d� | j�| jj� | � |� | j�| jj� | � d� t� t j �� | j�| jj� W d � n1 s�0 Y | � d� t� t j �� | j�| jj� W d � n1 s�0 Y d S ry ) rm r: rA r rL r@ r) r� r= r> r r? )r! Z server_urlr" r" r# �_test_delete_folders' s . z+AccountFileStorageTest._test_delete_foldersc C s | � d� | �� d S )Nrs �r� r� r' r" r" r# �test_delete_folders_up: s z-AccountFileStorageTest.test_delete_folders_upc C s | � d� | �� d S rn r� r' r" r" r# �test_delete_folders_down> s z/AccountFileStorageTest.test_delete_folders_downc C sP | � |� ttj�| jjd�d��}|�d� W d � n1 sB0 Y d S )NZfoo�wZbar)rm �openr rO rW rK rQ �write)r! Z server_path�fr" r" r# r� B s z3AccountFileStorageTest._set_server_and_stop_symlinkc C s | � d� | �d� d S rr �r� r� r' r" r" r# � test_delete_shared_account_upG s z4AccountFileStorageTest.test_delete_shared_account_upc C s | � d� | �d� d S rn r� r' r" r" r# � test_delete_shared_account_downK s z6AccountFileStorageTest.test_delete_shared_account_down)&r/ r0 r1 r2 r$ rR r[ r] r^ r_ r` rb ri rk rm rq rv rw rx r{ r| r r r~ r� r� r� r� r� r� r� r� r� r� r� r� r� � __classcell__r" r" rM r# rD e sB rD �__main__rG )$r2 r �sysZunittestr ZjosepyZjoser= r Zacmer Zcertbotr Zcertbot.compatr r r Zcertbot.tests.utilZtests�utilZ test_utilZJWKRSAr@ Z load_vectorr ZTestCaser r3 r8 ZConfigTestCaserD r/ �exit�main�argv�__file__r" r" r" r# �<module> s* # l __pycache__/auth_handler_test.cpython-39.opt-1.pyc 0000644 00000044743 15114562471 0016063 0 ustar 00 a }|�g�a � @ sf d Z ddlZddlZddlZddlZddlmZ ddlmZ ddlZddl m Z ddl m Z ddl m Z ddl mZ dd lmZ ddlm Z dd lmZ dd lmZ dd lmZ dd lmZ G dd� dej �Z G dd� dej �Z ej ddfdd�Z G dd� dej �Z!G dd� dej �Z"G dd� dej �Z#dd � Z$d d � Z%e&d k�rbe�'e�(ej)dd� e*g �� dS ) z)Tests for certbot._internal.auth_handler.� N)�mock)� b64encode)� challenges)�client)�errors)�messages)� achallenges)�obj)�common)� acme_util)�utilc @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S ) �ChallengeFactoryTestc C sF ddl m} |d d tjdd�g �| _t�tjdtj tjgd �| _ d S )Nr �� AuthHandlerZmock_key)�key�test� ) � certbot._internal.auth_handlerr r �Mock�handlerr � gen_authzrr �STATUS_PENDING� CHALLENGES�authzr��selfr � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/auth_handler_test.py�setUp s �zChallengeFactoryTest.setUpc C s | j �| jtdttj���}d S �Nr )r �_challenge_factoryr �range�lenr r �r �achallsr r r �test_all$ s �z ChallengeFactoryTest.test_allc C s | j �| jdg�}d S r )r r r r# r r r � test_one_http* s z"ChallengeFactoryTest.test_one_httpc C s6 t �tjdtjddd�gtjg�}| j�|dg�}d S )Nr �challZ unrecognized)r' �typr )r r r r r r r r )r r r$ r r r �test_unrecognized/ s �z&ChallengeFactoryTest.test_unrecognizedN)�__name__� __module__� __qualname__r r% r& r) r r r r r s r c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z e�d�dd� �Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-S ).�HandleAuthorizationsTestzmhandle_authorizations test. This tests everything except for all functions under _poll_challenges. c C s� ddl m} t�� | _tjdd�| _t�| j� tjdd�| _ t j g| j j _ t| j j_t�� | _tjtjd�| _tjj| jj_|| j | j| jg �| _t�tj� d S )Nr r F)�debug_challengesZ Authenticator��name)�spec)r r r r Z mock_display� mock_config� display_objZ set_display� MagicMock� mock_authr �HTTP01�get_chall_pref� return_value� gen_auth_resp�perform� side_effect� mock_account� acme_clientZClientV2�mock_netZ retry_afterr �logging�disableZCRITICALr r r r r @ s �z HandleAuthorizationsTest.setUpc C s t �t j� d S �N�r? r@ ZNOTSET�r r r r �tearDownV s z!HandleAuthorizationsTest.tearDownc C sl t dtjd�}tj|gd�}tddd�| jj_t� d�� }| j � || j �}W d � n1 s^0 Y d S )N�0��domainZchalls�Zauthorizations� � )�retry� wait_valuez#certbot._internal.auth_handler.time) �gen_dom_authzrr r r r4 �_gen_mock_on_pollr> �pollr; �patchr �handle_authorizationsr2 )r r � mock_orderZ mock_timer r r � _test_name1_http_01_1_commonY s z5HandleAuthorizationsTest._test_name1_http_01_1_commonc C s | � � d S rA )rS rC r r r �test_name1_http_01_1_acme_2q s z4HandleAuthorizationsTest.test_name1_http_01_1_acme_2c C s` t � | jj_| jjj�tj � t dt j d�}t j|gd�}| j�|| j�}| jjjd d }d S )NrE rF rH r )rN r> rO r; r5 r7 r8 �appendr �DNS01rM r r r r4 r rQ r2 ZcleanupZ call_args)r r rR Zcleaned_up_achallsr r r �!test_name1_http_01_1_dns_1_acme_2t s z:HandleAuthorizationsTest.test_name1_http_01_1_dns_1_acme_2c C sT t dtjd�t dtjd�t dtjd�g}tj|d�}t� | jj_| j � || j �}d S )NrE rF �1�2rH ) rM r r r r4 rN r> rO r; r rQ r2 )r �authzrsrR r r r r �"test_name3_http_01_3_common_acme_2� s � z;HandleAuthorizationsTest.test_name3_http_01_3_common_acme_2c C sX t jddd�}tdtjd�g}t j|d�}d}|| jjj_ t � | j j _ | j�||� d S )NTr �r. Z verbose_countrE rF rH � foobarbaz)r r rM r r r4 r< r � thumbprintr8 rN r> rO r; r rQ �r ZconfigrZ rR Zaccount_key_thumbprintr r r �test_debug_challenges� s z.HandleAuthorizationsTest.test_debug_challengesc C sz t jddd�}tdtjgd�tdtjgd�g}t j|d�}d}|| jjj _ t � | j j _tjtjg| jj_ | j�||� d S ) NTrI r\ rE rF rX rH r] )r r rM r r6 rV r4 r< r r^ r8 rN r> rO r; r r5 r7 r rQ r_ r r r � test_debug_challenges_verbose� s � � z6HandleAuthorizationsTest.test_debug_challenges_verbosec C sh t dtjd�g}tj|d�}tj| jj_ t � tj�� | j � || j� W d � n1 sZ0 Y d S �NrE rF rH )rM r r r r4 r �AuthorizationErrorr5 r: r; �pytest�raisesr rQ r2 �r rZ rR r r r �test_perform_failure� s z-HandleAuthorizationsTest.test_perform_failurec C st t dtjd�g}tj|d�}tdd�| jj_t j t j dd��$ | j �|| jdd � W d � n1 sf0 Y d S ) NrE rF rH � )rK �0All authorizations were not finalized by the CA.��matchFrI )rM r r r r4 rN r> rO r; rd re r rc r rQ r2 rf r r r �test_max_retries_exceeded� s �z2HandleAuthorizationsTest.test_max_retries_exceededz)certbot._internal.auth_handler.time.sleepc s� t dtjd�g}tj|d�}tjj� ddi��fdd�}||_� �fdd �}tjd d �j }t t j |d �| j j_tjtjd d��T t�d��*}||j_| j�|| jd� W d � n1 s�0 Y W d � n1 s�0 Y d S )NrE rF rH � time_sleptr c s � d | 7 < d S )Nrm r )Zsecs)�stater r �mock_sleep_effect� s zJHandleAuthorizationsTest.test_deadline_exceeded.<locals>.mock_sleep_effectc s � � t j�d d� S )Nrm )�seconds)�datetime� timedeltar �Zorig_nowrn r r �mock_now_effect� s zHHandleAuthorizationsTest.test_deadline_exceeded.<locals>.mock_now_effect� )Zminutes)�statusrL ri rj z0certbot._internal.auth_handler.datetime.datetimeF)rM r r r r4 rq Znowr; rr rp rN r r r> rO rd re r rc rP r rQ r2 )r Z mock_sleeprZ rR ro rt �intervalZmock_dtr rs r �test_deadline_exceeded� s$ � � Nz/HandleAuthorizationsTest.test_deadline_exceededc C sL t jg d�}t�tj�� | j�|| j� W d � n1 s>0 Y d S )NrH ) r r4 rd re r rc r rQ r2 )r rR r r r �test_no_domains s z(HandleAuthorizationsTest.test_no_domainsc C sh t dtjd�g}tj|d�}| jjj�t j � | j j � t j jt jjf� t� | jj_| j �|| j� d S rb )rM r r r r4 r5 r7 r8 rU r r6 r � pref_challs�extendr( rV rN r> rO r; rQ r2 rf r r r �-test_preferred_challenge_choice_common_acme_2 s � zFHandleAuthorizationsTest.test_preferred_challenge_choice_common_acme_2c C sn t dtjd�g}tj|d�}| jj�tj j � t � t j�� | j�|| j� W d � n1 s`0 Y d S rb )rM r r r r4 r rz rU r rV r( rd re r rc rQ r2 rf r r r �.test_preferred_challenges_not_supported_acme_2 s zGHandleAuthorizationsTest.test_preferred_challenges_not_supported_acme_2c C s^ t dtjgd�g}tj|d�}t�tj�� | j � || j � W d � n1 sP0 Y d S rb ) rM r rV r r4 rd re r rc r rQ r2 rf r r r �%test_dns_only_challenge_not_supported s z>HandleAuthorizationsTest.test_dns_only_challenge_not_supportedc C sh t j| jj_tdtjd�}tj |gd�}t � t j�� | j � || j� W d � n1 sZ0 Y d S rb )r rc r5 r: r; rM r r r r4 rd re r rQ r2 �r r rR r r r �test_perform_error% s .z+HandleAuthorizationsTest.test_perform_errorc C sh t j| jj_tdtjd�g}tj |d�}t � t j�� | j � || j� W d � n1 sZ0 Y d S rb )r rc r> Zanswer_challenger; rM r r r r4 rd re r rQ r2 rf r r r �test_answer_error0 s .z*HandleAuthorizationsTest.test_answer_errorc C s� t dtjd�g}tj|d�}ttjd�| jj _ t � � �R t jtjdd��" | j�|| jd� W d � n1 sp0 Y W d � n1 s�0 Y d S )NrE rF rH �rv z Some challenges have failed.rj F)rM r r r r4 rN r �STATUS_INVALIDr> rO r; � test_util�patch_display_utilrd re r rc r rQ r2 rf r r r � test_incomplete_authzr_error; s Nz5HandleAuthorizationsTest.test_incomplete_authzr_errorc C s� dd� }t dtjd�t dtjd�g}|| jj_tj|d�}t�d��"}| j � || j d�}W d � n1 sl0 Y t t jd �| jj_t�� �R tjtjd d ��" | j � || j d� W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nc S s2 t tj�}t tj�}| jjjdkr*|| �S || �S )zBThis mock will invalidate one authzr, and invalidate the other one�will-be-invalid)rN r � STATUS_VALIDr� �body� identifier�value)r Z valid_mockZ invalid_mockr r r �_conditional_mock_on_pollG s zLHandleAuthorizationsTest.test_best_effort.<locals>._conditional_mock_on_pollz will-be-validrF r� rH zAcertbot._internal.auth_handler.AuthHandler._report_failed_authzrsTr� zAll challenges have failed.rj )rM r r r> rO r; r r4 rP r rQ r2 rN r r� r� r� rd re r rc )r r� rZ rR Z mock_reportZ valid_authzrr r r �test_best_effortF s � 0 z)HandleAuthorizationsTest.test_best_effortc C s� t �tjdt jgtjg�}tj|gd�}t�t j �� | j � || j � W d � n1 sZ0 Y t �tjdt jgtjg�}tj|gd�}| j � || j � d S )NrE rH )r r r r rV r r4 rd re r rc r rQ r2 r� r r r r �"test_validated_challenge_not_rerunf s �.�z;HandleAuthorizationsTest.test_validated_challenge_not_rerunc C s\ dd� }dt jfdt jfdt jfg}dd� |D �}tj|d�}|| jj_| j� |�\}}d S ) z�When we deactivate valid authzrs in an orderr, we expect them to become deactivated and to receive a list of deactivated authzrs in return.c S sR | j jtjkrD| j jjdkr&t�d��| j jtj d�}tj |d�} n t �d��| S )N�is_valid_but_will_failz Mock deactivation ACME errorr� )r� z Can't deactivate non-valid authz) r� rv r r� r� r� � acme_errors�Error�updateZSTATUS_DEACTIVATEDZAuthorizationResourcer )r Zauthzbr r r �_mock_deactivate~ s zQHandleAuthorizationsTest.test_valid_authzrs_deactivated.<locals>._mock_deactivateZis_validZ is_pendingr� c S s. g | ]&}t �|d |d t jg|d g��qS )rI r )r r r6 )�.0�ar r r � <listcomp>� s ��zKHandleAuthorizationsTest.test_valid_authzrs_deactivated.<locals>.<listcomp>rH N) r r� r r r4 r> Zdeactivate_authorizationr; r Z deactivate_valid_authorizations)r r� Z to_deactivateZorderrrZ Zfailedr r r � test_valid_authzrs_deactivated{ s �� z7HandleAuthorizationsTest.test_valid_authzrs_deactivatedN)r* r+ r, �__doc__r rD rS rT rW r[ r` ra rg rl r rP rx ry r| r} r~ r� r� r� r� r� r� r r r r r- 9 s. r- rI c s d|i� � ��fdd�}|S )N�countc sp � d d � d< � d dk r �nt j}t�|| jjjdd� | jjD �|gt| jj� �}|t j dt ��id�fS )Nr� rI r c S s g | ] }|j �qS r )r' )r� �challbr r r r� � � z4_gen_mock_on_poll.<locals>._mock.<locals>.<listcomp>z Retry-After)Zheaders) r r r r r� r� r� r r" r r4 �str)r Zeffective_statusZ updated_azr�rn rv rL r r �_mock� s �z _gen_mock_on_poll.<locals>._mockr )rv rK rL r� r r� r rN � s rN c @ s e Zd ZdZdd� Zdd� ZdS )�ChallbToAchallTestz:Tests for certbot._internal.auth_handler.challb_to_achall.c C s ddl m} ||dd�S )Nr )�challb_to_achallZ account_keyrG )r r� )r r� r� r r r �_call� s zChallbToAchallTest._callc C s d S rA r rC r r r �test_it� s zChallbToAchallTest.test_itN)r* r+ r, r� r� r� r r r r r� � s r� c @ s< e Zd ZdZdd� Zdd� Zedd� �Zdd � Zd d � Z d S ) �GenChallengePathTestzBTests for certbot._internal.auth_handler.gen_challenge_path. c C s t �t j� d S rA )r? r@ ZFATALrC r r r r � s zGenChallengePathTest.setUpc C s t �t j� d S rA rB rC r r r rD � s z GenChallengePathTest.tearDownc C s ddl m} |||�S )Nr )�gen_challenge_path)r r� )�cls�challbsZ preferencesr� r r r r� � s zGenChallengePathTest._callc C s t jt jf}tjtjg}dS )z/Given DNS01 and HTTP01 with appropriate combos.N)r �DNS01_PZHTTP01_Pr rV r6 �r r� Zprefsr r r �test_common_case� s z%GenChallengePathTest.test_common_casec C sL t jf}tjg}t�tj�� | �||� W d � n1 s>0 Y d S rA ) r r� r r6 rd re r rc r� r� r r r �test_not_supported� s z'GenChallengePathTest.test_not_supportedN) r* r+ r, r� r rD � classmethodr� r� r� r r r r r� � s r� c @ sN e Zd ZdZdd� Ze�d�dd� �Ze�d�dd� �Ze�d�d d � �Z d S ) �ReportFailedAuthzrsTestzLTests for certbot._internal.auth_handler.AuthHandler._report_failed_authzrs.c C s ddl m} tjtjdd�| _d| j_d| jj_ || jt�� t�� g �| _ t j dt jt jjddd �d �}t jf i |��}t j |d < t jf i |��}t�� | _d | jjj_||g| jj_t jjd dd �|d< t jf i |��}t�� | _d| jjj_|g| jj_d S )Nr r Zbuzz)r1 r0 z the buzz hint�uriZtls�detail)r� )r' r� rv �errorr' z example.comZdnssecr� zfoo.bar)r r r r4 � plugin_commonZPluginr5 r0 � auth_hintr8 r r r6 r r� r� Z with_codeZ ChallengeBody�authzr1r� r� r� r �authzr2)r r �kwargsZhttp_01Z http_01_diffr r r r � s* � z ReportFailedAuthzrsTest.setUpz2certbot._internal.auth_handler.display_util.notifyc C s | j �| jg� |�d� d S )Nz� Certbot failed to authenticate some domains (authenticator: buzz). The Certificate Authority reported these problems: Domain: example.com Type: tls Detail: detail Domain: example.com Type: tls Detail: detail Hint: the buzz hint )r �_report_failed_authzrsr� �assert_called_with�r � mock_notifyr r r �test_same_error_and_domain s �z2ReportFailedAuthzrsTest.test_same_error_and_domainc C s4 d| j _d| j j_| j�| j| jg� |�d� d S )NZquuxZquuuuuuxa' Certbot failed to authenticate some domains (authenticator: quux). The Certificate Authority reported these problems: Domain: foo.bar Type: dnssec Detail: detail Domain: example.com Type: tls Detail: detail Domain: example.com Type: tls Detail: detail Hint: quuuuuux ) r5 r0 r� r8 r r� r� r� r� r� r r r �!test_different_errors_and_domains s �z9ReportFailedAuthzrsTest.test_different_errors_and_domainsc C sZ ddl m} tjdd�| _d| j_t| jj_|| jt�� t�� g �| _ | j � | j g� dS )zMIf authenticator not derived from common.Plugin, we shouldn't call .auth_hintr r Zquuzr/ N) r r r r4 r5 r0 � Exceptionr� r; r r� r� )r r� r r r r �!test_non_subclassed_authenticator) s z9ReportFailedAuthzrsTest.test_non_subclassed_authenticatorN) r* r+ r, r� r r rP r� r� r� r r r r r� � s " r� c C s dd� | D �S )z(Generate a dummy authorization response.c S s g | ]}d |j j|jf �qS )z%s%s)� __class__r* rG )r� r' r r r r� 8 s �z!gen_auth_resp.<locals>.<listcomp>r )Z chall_listr r r r9 6 s �r9 c C s t �tj| |tjgt|� �S )z!Generates new authzr for domains.)r r r r r" rF r r r rM < s �rM �__main__)+r� rq r? �sysZunittestr Zjosepyr rd Zacmer r r= r r� r Zcertbotr Zcertbot._internal.displayr r3 Zcertbot.pluginsr r� Z certbot.testsr r r� ZTestCaser r- r� rN r� r� r� r9 rM r* �exit�main�argv�__file__r r r r �<module> s: " f \ __pycache__/auth_handler_test.cpython-39.pyc 0000644 00000052120 15114562471 0015110 0 ustar 00 a }|�g�a � @ sf d Z ddlZddlZddlZddlZddlmZ ddlmZ ddlZddl m Z ddl m Z ddl m Z ddl mZ dd lmZ ddlm Z dd lmZ dd lmZ dd lmZ dd lmZ G dd� dej �Z G dd� dej �Z ej ddfdd�Z G dd� dej �Z!G dd� dej �Z"G dd� dej �Z#dd � Z$d d � Z%e&d k�rbe�'e�(ej)dd� e*g �� dS ) z)Tests for certbot._internal.auth_handler.� N)�mock)� b64encode)� challenges)�client)�errors)�messages)� achallenges)�obj)�common)� acme_util)�utilc @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S ) �ChallengeFactoryTestc C sF ddl m} |d d tjdd�g �| _t�tjdtj tjgd �| _ d S )Nr �� AuthHandlerZmock_key)�key�test� ) � certbot._internal.auth_handlerr r �Mock�handlerr � gen_authzrr �STATUS_PENDING� CHALLENGES�authzr��selfr � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/auth_handler_test.py�setUp s �zChallengeFactoryTest.setUpc C s8 | j �| jtdttj���}dd� |D �tjks4J �d S )Nr c S s g | ] }|j �qS r ��chall��.0Zachallr r r � <listcomp>( � z1ChallengeFactoryTest.test_all.<locals>.<listcomp>)r �_challenge_factoryr �range�lenr r �r �achallsr r r �test_all$ s �z ChallengeFactoryTest.test_allc C s0 | j �| jdg�}dd� |D �tjgks,J �d S )Nr c S s g | ] }|j �qS r r r! r r r r# - r$ z6ChallengeFactoryTest.test_one_http.<locals>.<listcomp>)r r% r r �HTTP01r( r r r � test_one_http* s z"ChallengeFactoryTest.test_one_httpc C sL t �tjdtjddd�gtjg�}| j�|dg�}t|d �t j ksHJ �d S )Nr r Z unrecognized)r �typr ) r r r r r r r r% �typer ZOther)r r r) r r r �test_unrecognized/ s �z&ChallengeFactoryTest.test_unrecognizedN)�__name__� __module__� __qualname__r r* r, r/ r r r r r s r c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z e�d�dd� �Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-S ).�HandleAuthorizationsTestzmhandle_authorizations test. This tests everything except for all functions under _poll_challenges. c C s� ddl m} t�� | _tjdd�| _t�| j� tjdd�| _ t j g| j j _ t| j j_t�� | _tjtjd�| _tjj| jj_|| j | j| jg �| _t�tj� d S )Nr r F)�debug_challengesZ Authenticator��name)�spec)r r r r � mock_display� mock_config� display_objZ set_display� MagicMock� mock_authr r+ �get_chall_pref� return_value� gen_auth_resp�perform� side_effect� mock_account� acme_clientZClientV2�mock_netZ retry_afterr �logging�disableZCRITICALr r r r r @ s �z HandleAuthorizationsTest.setUpc C s t �t j� d S �N�rE rF ZNOTSET�r r r r �tearDownV s z!HandleAuthorizationsTest.tearDownc C s t dtjd�}tj|gd�}tddd�| jj_t� d���}| j � || j �}| jj jdks\J �| jjjdksnJ �|jjdks~J �|jjd d d dks�J �|jjd d d d ks�J �| jjjdks�J �| jjjd d d jd ks�J �t|�dks�J �W d � n1 �s0 Y d S ) N�0��domainZchalls�Zauthorizations� � )�retry� wait_valuez#certbot._internal.auth_handler.time� r � �http-01)�gen_dom_authzrr r r r; �_gen_mock_on_pollrD �pollrA �patchr �handle_authorizationsr9 �answer_challenge� call_count�sleep�call_args_listr< �cleanup� call_argsr- r' )r r � mock_orderZ mock_timer r r � _test_name1_http_01_1_commonY s z5HandleAuthorizationsTest._test_name1_http_01_1_commonc C s | � � d S rG )rb rI r r r �test_name1_http_01_1_acme_2q s z4HandleAuthorizationsTest.test_name1_http_01_1_acme_2c C s� t � | jj_| jjj�tj � t dt j d�}t j|gd�}| j�|| j�}| jjjdks\J �| jjjdksnJ �| jjjdks�J �| jjjd d }t|�dks�J �|d jdks�J �t|�dks�J �d S �NrK rL rN rO r rU )rW rD rX rA r< r= r> �appendr �DNS01rV r r r r; r rZ r9 r[ r\ r_ r` r' r- )r r ra Zcleaned_up_achallsr r r �!test_name1_http_01_1_dns_1_acme_2t s z:HandleAuthorizationsTest.test_name1_http_01_1_dns_1_acme_2c C s� t dtjd�t dtjd�t dtjd�g}tj|d�}t� | jj_| j � || j �}| jj j dksbJ �| jjj dkstJ �| jjj dks�J �t|�dks�J �d S )NrK rL �1�2rN rT rO )rV r r r r; rW rD rX rA r rZ r9 r[ r\ r< r_ r' )r �authzrsra r r r r �"test_name3_http_01_3_common_acme_2� s � z;HandleAuthorizationsTest.test_name3_http_01_3_common_acme_2c C s t jddd�}tdtjd�g}t j|d�}d}|| jjj_ t � | j j _ | j�||� | j jjdksfJ �| jjjdksxJ �d | jjjd d v s�J �d |d jjj� d �t|d jjd jj�� � | jjjd d vs�J �t|�� � | jjjd d vs�J �d S ) NTr �r4 Z verbose_countrK rL rN � foobarbazrO �Pass "-v" for more info�http://� /.well-known/acme-challenge/) r r rV r r r; rB r � thumbprintr> rW rD rX rA r rZ r[ r\ r8 � notificationr` �body� identifier�valuer r r �token�decode�r Zconfigrj ra Zaccount_key_thumbprintr r r �test_debug_challenges� s( ��� �z.HandleAuthorizationsTest.test_debug_challengesc C s� t jddd�}tdtjgd�tdtjgd�g}t j|d�}d}|| jjj _ t � | j j _tjtjg| jj_ | j�||� | j jjd ks�J �| jjjdks�J �d | jjjd d vs�J �d |d jjj� d �t |d jjd j j �� � | jjjd d v s�J �t |�� � | jjjd d v �s J �d|d jjj� �| jjjd d v �sLJ �|d jjd � | jj�| jjjd d v �s~J �d S )NTrO rl rK rL rh rN rm rS rn r ro rp z_acme-challenge.)!r r rV r r+ rf r; rB r rq r> rW rD rX rA r r< r= r rZ r[ r\ r8 rr r` rs rt ru r r rv rw Z validationrx r r r � test_debug_challenges_verbose� s> � � ��� � � �z6HandleAuthorizationsTest.test_debug_challenges_verbosec C sh t dtjd�g}tj|d�}tj| jj_ t � tj�� | j � || j� W d � n1 sZ0 Y d S �NrK rL rN )rV r r r r; r �AuthorizationErrorr< r@ rA �pytest�raisesr rZ r9 �r rj ra r r r �test_perform_failure� s z-HandleAuthorizationsTest.test_perform_failurec C st t dtjd�g}tj|d�}tdd�| jj_t j t j dd��$ | j �|| jdd � W d � n1 sf0 Y d S ) NrK rL rN rS )rQ �0All authorizations were not finalized by the CA.��matchFrO )rV r r r r; rW rD rX rA r} r~ r r| r rZ r9 r r r r �test_max_retries_exceeded� s �z2HandleAuthorizationsTest.test_max_retries_exceededz)certbot._internal.auth_handler.time.sleepc sd t dtjd�g}tj|d�}tjj� ddi��fdd�}||_� �fdd �}tjd d �j }t t j |d �| j j_tjtjd d��T t�d��*}||j_| j�|| jd� W d � n1 s�0 Y W d � n1 s�0 Y |jdks�J �|jd d d dk�s J �t|jd d d |d �dk�s4J �t|jd d d |d d �dk�s`J �d S )NrK rL rN � time_sleptr c s � d | 7 < d S )Nr� r )Zsecs)�stater r �mock_sleep_effect� s zJHandleAuthorizationsTest.test_deadline_exceeded.<locals>.mock_sleep_effectc s � � t j�d d� S )Nr� )�seconds)�datetime� timedeltar �Zorig_nowr� r r �mock_now_effect� s zHHandleAuthorizationsTest.test_deadline_exceeded.<locals>.mock_now_effect� )Zminutes)�statusrR r� r� z0certbot._internal.auth_handler.datetime.datetimeFrT rO rS )rV r r r r; r� ZnowrA r� r� rW r r rD rX r} r~ r r| rY r rZ r9 r\ r^ �abs)r Z mock_sleeprj ra r� r� �intervalZmock_dtr r� r �test_deadline_exceeded� s* � � N (z/HandleAuthorizationsTest.test_deadline_exceededc C sL t jg d�}t�tj�� | j�|| j� W d � n1 s>0 Y d S )NrN ) r r; r} r~ r r| r rZ r9 )r ra r r r �test_no_domains s z(HandleAuthorizationsTest.test_no_domainsc C s� t dtjd�g}tj|d�}| jjj�t j � | j j � t j jt jjf� t� | jj_| j �|| j� | jjjdksvJ �| jjjd d d jdks�J �d S rd )rV r r r r; r< r= r> re r r+ r � pref_challs�extendr- rf rW rD rX rA rZ r9 r_ r\ r` r r r r �-test_preferred_challenge_choice_common_acme_2 s � zFHandleAuthorizationsTest.test_preferred_challenge_choice_common_acme_2c C sn t dtjd�g}tj|d�}| jj�tj j � t � t j�� | j�|| j� W d � n1 s`0 Y d S r{ )rV r r r r; r r� re r rf r- r} r~ r r| rZ r9 r r r r �.test_preferred_challenges_not_supported_acme_2 s zGHandleAuthorizationsTest.test_preferred_challenges_not_supported_acme_2c C s^ t dtjgd�g}tj|d�}t�tj�� | j � || j � W d � n1 sP0 Y d S r{ ) rV r rf r r; r} r~ r r| r rZ r9 r r r r �%test_dns_only_challenge_not_supported s z>HandleAuthorizationsTest.test_dns_only_challenge_not_supportedc C s� t j| jj_tdtjd�}tj |gd�}t � t j�� | j � || j� W d � n1 sZ0 Y | jjjdksvJ �| jjjd d d jdks�J �d S rd )r r| r< r@ rA rV r r r r; r} r~ r rZ r9 r_ r\ r` r- �r r ra r r r �test_perform_error% s .z+HandleAuthorizationsTest.test_perform_errorc C s� t j| jj_tdtjd�g}tj |d�}t � t j�� | j � || j� W d � n1 sZ0 Y | jjjdksvJ �| jjjd d d jdks�J �d S rd )r r| rD r[ rA rV r r r r; r} r~ r rZ r9 r< r_ r\ r` r- r r r r �test_answer_error0 s .z*HandleAuthorizationsTest.test_answer_errorc C s� t dtjd�g}tj|d�}ttjd�| jj _ t � � �R t jtjdd��" | j�|| jd� W d � n1 sp0 Y W d � n1 s�0 Y | jjjdks�J �| jjjd d d jd ks�J �d S ) NrK rL rN �r� z Some challenges have failed.r� FrO r rU )rV r r r r; rW r �STATUS_INVALIDrD rX rA � test_util�patch_display_utilr} r~ r r| r rZ r9 r< r_ r\ r` r- r r r r � test_incomplete_authzr_error; s Nz5HandleAuthorizationsTest.test_incomplete_authzr_errorc C s dd� }t dtjd�t dtjd�g}|| jj_tj|d�}t�d��"}| j � || j d�}W d � n1 sl0 Y t |�d ks�J �|j d ks�J �ttjd �| jj_t�� �R tjtjd d ��" | j � || j d� W d � n1 s�0 Y W d � n1 �s0 Y d S ) Nc S s2 t tj�}t tj�}| jjjdkr*|| �S || �S )zBThis mock will invalidate one authzr, and invalidate the other one�will-be-invalid)rW r � STATUS_VALIDr� rs rt ru )r Z valid_mockZ invalid_mockr r r �_conditional_mock_on_pollG s zLHandleAuthorizationsTest.test_best_effort.<locals>._conditional_mock_on_pollz will-be-validrL r� rN zAcertbot._internal.auth_handler.AuthHandler._report_failed_authzrsTrO r� zAll challenges have failed.r� )rV r r rD rX rA r r; rY r rZ r9 r' r\ rW r r� r� r� r} r~ r r| )r r� rj ra Z mock_reportZ valid_authzrr r r �test_best_effortF s � 0 z)HandleAuthorizationsTest.test_best_effortc C s� t �tjdt jgtjg�}tj|gd�}t�t j �� | j � || j � W d � n1 sZ0 Y t �tjdt jgtjg�}tj|gd�}| j � || j � d S )NrK rN )r r r r rf r r; r} r~ r r| r rZ r9 r� r� r r r �"test_validated_challenge_not_rerunf s �.�z;HandleAuthorizationsTest.test_validated_challenge_not_rerunc C s� dd� }dt jfdt jfdt jfg}dd� |D �}tj|d�}|| jj_| j� |�\}}| jjj d ksjJ �t |�d kszJ �t |�d ks�J �|d j j jdks�J �|d j jt jks�J �|d j j jdks�J �|d j jt jks�J �d S ) z�When we deactivate valid authzrs in an orderr, we expect them to become deactivated and to receive a list of deactivated authzrs in return.c S sR | j jtjkrD| j jjdkr&t�d��| j jtj d�}tj |d�} n t �d��| S )N�is_valid_but_will_failz Mock deactivation ACME errorr� )rs z Can't deactivate non-valid authz) rs r� r r� rt ru � acme_errors�Error�update�STATUS_DEACTIVATEDZAuthorizationResourcer )r Zauthzbr r r �_mock_deactivate~ s zQHandleAuthorizationsTest.test_valid_authzrs_deactivated.<locals>._mock_deactivateZis_validZ is_pendingr� c S s. g | ]&}t �|d |d t jg|d g��qS )rO r )r r r+ )r" �ar r r r# � s ��zKHandleAuthorizationsTest.test_valid_authzrs_deactivated.<locals>.<listcomp>rN rS rO r N)r r� r r r; rD Zdeactivate_authorizationrA r Z deactivate_valid_authorizationsr\ r' rs rt ru r� r� )r r� Z to_deactivateZorderrrj Zfailedr r r � test_valid_authzrs_deactivated{ s$ �� z7HandleAuthorizationsTest.test_valid_authzrs_deactivatedN)r0 r1 r2 �__doc__r rJ rb rc rg rk ry rz r� r� r rY r� r� r� r� r� r� r� r� r� r� r� r r r r r3 9 s. r3 rO c s d|i� � ��fdd�}|S )N�countc sp � d d � d< � d dk r �nt j}t�|| jjjdd� | jjD �|gt| jj� �}|t j dt ��id�fS )Nr� rO r c S s g | ] }|j �qS r r )r" �challbr r r r# � r$ z4_gen_mock_on_poll.<locals>._mock.<locals>.<listcomp>z Retry-After)Zheaders) r r r r rs rt ru r r' r r; �str)r Zeffective_statusZ updated_azr�r� r� rR r r �_mock� s �z _gen_mock_on_poll.<locals>._mockr )r� rQ rR r� r r� r rW � s rW c @ s e Zd ZdZdd� Zdd� ZdS )�ChallbToAchallTestz:Tests for certbot._internal.auth_handler.challb_to_achall.c C s ddl m} ||dd�S )Nr )�challb_to_achall� account_keyrM )r r� )r r� r� r r r �_call� s zChallbToAchallTest._callc C s& | � tj�tjtjddd�ks"J �d S )Nr� rM )r� r� rM )r� r �HTTP01_Pr Z"KeyAuthorizationAnnotatedChallengerI r r r �test_it� s ��zChallbToAchallTest.test_itN)r0 r1 r2 r� r� r� r r r r r� � s r� c @ s< e Zd ZdZdd� Zdd� Zedd� �Zdd � Zd d � Z d S ) �GenChallengePathTestzBTests for certbot._internal.auth_handler.gen_challenge_path. c C s t �t j� d S rG )rE rF ZFATALrI r r r r � s zGenChallengePathTest.setUpc C s t �t j� d S rG rH rI r r r rJ � s z GenChallengePathTest.tearDownc C s ddl m} |||�S )Nr )�gen_challenge_path)r r� )�cls�challbsZ preferencesr� r r r r� � s zGenChallengePathTest._callc C sN t jt jf}tjtjg}| �||�dks,J �| �|ddd� |�dksJJ �dS )z/Given DNS01 and HTTP01 with appropriate combos.)r N���)rO )r �DNS01_Pr� r rf r+ r� �r r� Zprefsr r r �test_common_case� s z%GenChallengePathTest.test_common_casec C sL t jf}tjg}t�tj�� | �||� W d � n1 s>0 Y d S rG ) r r� r r+ r} r~ r r| r� r� r r r �test_not_supported� s z'GenChallengePathTest.test_not_supportedN) r0 r1 r2 r� r rJ � classmethodr� r� r� r r r r r� � s r� c @ sN e Zd ZdZdd� Ze�d�dd� �Ze�d�dd� �Ze�d�d d � �Z d S ) �ReportFailedAuthzrsTestzLTests for certbot._internal.auth_handler.AuthHandler._report_failed_authzrs.c C s ddl m} tjtjdd�| _d| j_d| jj_ || jt�� t�� g �| _ t j dt jt jjddd �d �}|d jd uszJ �t jf i |��}t j |d < t jf i |��}t�� | _d | jjj_||g| jj_t jjddd �|d < t jf i |��}t�� | _d| jjj_|g| jj_d S )Nr r Zbuzz)r7 r6 z the buzz hint�uriZtls�detail)r� )r r� r� �errorr� r z example.comZdnsseczfoo.bar)r r r r; � plugin_commonZPluginr< r6 � auth_hintr> r r r+ r r� r� Z with_code� descriptionZ ChallengeBody�authzr1rs rt ru r �authzr2)r r �kwargsZhttp_01Z http_01_diffr r r r � s, � z ReportFailedAuthzrsTest.setUpz2certbot._internal.auth_handler.display_util.notifyc C s | j �| jg� |�d� d S )Nz� Certbot failed to authenticate some domains (authenticator: buzz). The Certificate Authority reported these problems: Domain: example.com Type: tls Detail: detail Domain: example.com Type: tls Detail: detail Hint: the buzz hint )r �_report_failed_authzrsr� �assert_called_with�r � mock_notifyr r r �test_same_error_and_domain s �z2ReportFailedAuthzrsTest.test_same_error_and_domainc C s4 d| j _d| j j_| j�| j| jg� |�d� d S )NZquuxZquuuuuuxa' Certbot failed to authenticate some domains (authenticator: quux). The Certificate Authority reported these problems: Domain: foo.bar Type: dnssec Detail: detail Domain: example.com Type: tls Detail: detail Domain: example.com Type: tls Detail: detail Hint: quuuuuux ) r< r6 r� r> r r� r� r� r� r� r r r �!test_different_errors_and_domains s �z9ReportFailedAuthzrsTest.test_different_errors_and_domainsc C sh ddl m} tjdd�| _d| j_t| jj_|| jt�� t�� g �| _ | j � | j g� |j dksdJ �dS )zMIf authenticator not derived from common.Plugin, we shouldn't call .auth_hintr r Zquuzr5 rO N) r r r r; r< r6 � Exceptionr� rA r r� r� r\ )r r� r r r r �!test_non_subclassed_authenticator) s z9ReportFailedAuthzrsTest.test_non_subclassed_authenticatorN) r0 r1 r2 r� r r rY r� r� r� r r r r r� � s " r� c C s dd� | D �S )z(Generate a dummy authorization response.c S s g | ]}d |j j|jf �qS )z%s%s)� __class__r0 rM )r" r r r r r# 8 s �z!gen_auth_resp.<locals>.<listcomp>r )Z chall_listr r r r? 6 s �r? c C s t �tj| |tjgt|� �S )z!Generates new authzr for domains.)r r r r r' rL r r r rV < s �rV �__main__)+r� r� rE �sysZunittestr Zjosepyr r} Zacmer r rC r r� r Zcertbotr Zcertbot._internal.displayr r: Zcertbot.pluginsr r� Z certbot.testsr r r� ZTestCaser r3 r� rW r� r� r� r? rV r0 �exit�main�argv�__file__r r r r �<module> s: " f \ __pycache__/cert_manager_test.cpython-39.opt-1.pyc 0000644 00000053467 15114562471 0016057 0 ustar 00 a }|�gs � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlZddl m Z ddl m Z ddl m Z ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ G d d � d ej�ZG d d� dej�ZG dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� dej�Z!G dd � d ej�Z"G d d � d ej�Z#G d d � d ej$�Z%e&d!k�r�e�'e�(ej)d"d� e*g �� dS )#�)Tests for certbot._internal.cert_manager.� N)�mock)� configuration)�errors)�ALL_FOUR)� storage_test)� filesystem)�os)�utilc s( e Zd ZdZ� fdd�Zdd� Z� ZS )�BaseCertManagerTestz2Base class for setting up Cert Manager tests. c s� t � �� d� j_t�� jj� d tj� � jj d�d�� _ � fdd�� j D �� _ t tj� � jjd�d��}|�d� W d � n1 s�0 Y d S ) NFZspecialarchive)� example.orgz other.comc s i | ]}|� � |� j| ��qS � )�_set_up_config�domains)�.0�domain��selfr �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/cert_manager_test.py� <dictcomp>% s �z-BaseCertManagerTest.setUp.<locals>.<dictcomp>z IGNORE.THIS�wz This file should be ignored!)�super�setUp�config�quietr �makedirs�renewal_configs_dirr �path�join� config_dirr Z config_files�open�write)r Zjunk�� __class__r r r s � �zBaseCertManagerTest.setUpc C s� t �tj�| jj|�� t�� }|d ur<t �|� ||d< nt �tj�| jj |�� t D ] }tj�| jj||d �||< qXtj�| jj |d �|_ |� � |S )N� archive_dirz.pemz.conf)r r r r r r Zlive_dir� configobjZ ConfigObjZdefault_archive_dirr r �filenamer! )r r Zcustom_archive� config_file�kindr r r r . s � �z"BaseCertManagerTest._set_up_config)�__name__� __module__� __qualname__�__doc__r r � __classcell__r r r" r r s r c @ s� e Zd ZdZdd� Ze�� e�d�e�d�e�d�dd� ����Z e�� e�d�e�d�d d � ���Z e�� e�d�e�d�d d � ���Z e�� e�d�e�d�d d� ���Z e�� e�d�e�d�dd� ���Z e�� e�d�e�d�dd� ���ZdS )� DeleteTestz4Tests for certbot._internal.cert_manager.delete c C s ddl m} |�| j� d S �Nr �� cert_manager)�certbot._internalr1 �deleter )r r1 r r r �_callH s zDeleteTest._callzcertbot.display.util.notify�3certbot._internal.cert_manager.lineage_for_certnamez&certbot._internal.storage.delete_filesc C s> | j |_d|� j_d| j_| �� |�| jd� |�d� dS )� Test deleteTr z6Deleted all files relating to certificate example.org.N)�test_rc� return_value�yesnor �certnamer4 �assert_called_once_with)r �mock_delete_files�mock_lineage_for_certnameZ mock_notify� mock_utilr r r �test_delete_from_config_yesL s �z&DeleteTest.test_delete_from_config_yesc C s& | j |_d|� j_d| j_| �� dS )r6 Fr N)r7 r8 r9 r r: r4 �r r< r= r> r r r �test_delete_from_config_no\ s z%DeleteTest.test_delete_from_config_noc C s> | j |_tjdgf|� j_d|� j_| �� |�| jd� dS )r6 r TN) r7 r8 � display_util�OK� checklistr9 r4 r; r r@ r r r �"test_delete_interactive_single_yesh s z-DeleteTest.test_delete_interactive_single_yesc C s0 | j |_tjdgf|� j_d|� j_| �� dS )r6 r FN�r7 r8 rB rC rD r9 r4 r@ r r r �!test_delete_interactive_single_not s z,DeleteTest.test_delete_interactive_single_noc C sN | j |_tjddgf|� j_d|� j_| �� |�| jd� |�| jd� dS )r6 r � other.orgTN) r7 r8 rB rC rD r9 r4 Zassert_any_callr r@ r r r �$test_delete_interactive_multiple_yes� s z/DeleteTest.test_delete_interactive_multiple_yesc C s2 | j |_tjddgf|� j_d|� j_| �� dS )r6 r rH FNrF r@ r r r �#test_delete_interactive_multiple_no� s z.DeleteTest.test_delete_interactive_multiple_noN)r) r* r+ r, r4 � test_util�patch_display_utilr �patchr? rA rE rG rI rJ r r r r r. D s6 r. c @ s� e Zd ZdZdd� Ze�d�e�� dd� ��Z e�d�e�� dd� ��Z e�d �e�d�e�� e�d �e�d �d d � �����Z e�d�e�� dd� ��Z e�d�e�d�dd� ��Z dS )�CertificatesTestz:Tests for certbot._internal.cert_manager.certificates c O s ddl m} ||i |��S )Nr )� certificates)� certbot._internal.cert_managerrO )r �args�kwargsrO r r r � _certificates� s z CertificatesTest._certificatesz%certbot._internal.cert_manager.loggerc C s | � | j� d S �N)rS r �r � mock_utility� mock_loggerr r r � test_certificates_parse_fail� s z-CertificatesTest.test_certificates_parse_failc C s d| j _| �| j � d S )NT)r r rS rU r r r �test_certificates_quiet� s z(CertificatesTest.test_certificates_quietz)certbot.crypto_util.verify_renewable_cert�'certbot._internal.storage.RenewableCertz5certbot._internal.cert_manager._report_human_readablec C s d |_ d|_ | �| j� d S )N� )r8 rS r )r Z mock_report�mock_renewable_certrV rW Z mock_verifierr r r � test_certificates_parse_success� s z0CertificatesTest.test_certificates_parse_successc C sb t �� }t�tjtj�|d�tj�|d�tj�|d�dd��}t � |j � | � |� t �|� d S )Nr ZworkZlogsF)r Zwork_dirZlogs_dirr )�tempfileZmkdtempr ZNamespaceConfigr � MagicMockr r r r r r rS �shutil�rmtree)r rV rW Z empty_tempdirZ empty_configr r r �test_certificates_no_files� s � z+CertificatesTest.test_certificates_no_filesz(certbot.crypto_util.get_serial_from_certzBcertbot._internal.cert_manager.ocsp.RevocationChecker.ocsp_revokedc sV d |_ d|_ dd l}dd l}ddlm� |j�|j�}tjdd�}||_ ddg|j _ d|_ |g�tjd d d��� ��fd d �}|� }| j |j d d �7 _ |� }| j |j d d�7 _ |� }| j |j d d�7 _ |� }d|_ d|_ |� }tjdd�}||_ ddg|j _ d|_ �� |� |� }dg�_|� }dg�_|� }d�_|� }d�_|� }d S )Ni��Ir r0 Znameone�� lineagenameZnametwoF)r: rd c s � � ���S rT )Z_report_human_readabler �r1 Z mock_configZ parsed_certsr r �<lambda>� � z=CertificatesTest.test_report_human_readable.<locals>.<lambda>� )Zhours� )ZdaysTZ indescribablez thrice.namedZhorror)r8 �datetime�pytzr2 r1 ZnowZUTCr r_ Z target_expiry�namesZ is_test_certZ timedelta�appendr r: ) r Z mock_revokedZ mock_serialrj rk Zexpiry�certZ get_report�outr re r �test_report_human_readable� sL z+CertificatesTest.test_report_human_readableN)r) r* r+ r, rS r rM rK rL rX rY r] rb rp r r r r rN � s( rN c @ s6 e Zd ZdZe�d�e�d�e�d�dd� ���ZdS )�SearchLineagesTestz:Tests for certbot._internal.cert_manager._search_lineages.� certbot.util.make_or_verify_dir�,certbot._internal.storage.renewal_conf_filesrZ c C s dg|_ tj|_ddlm} d S )NZbadfiler r0 )r8 r �CertStorageError� side_effectr2 r1 )r r\ �mock_renewal_conf_files�mock_make_or_verify_dirr1 r r r �test_cert_storage_error s z*SearchLineagesTest.test_cert_storage_errorN)r) r* r+ r, r rM rx r r r r rq s rq c @ sn e Zd ZdZe�d�e�d�e�d�dd� ���Ze�d�e�d�dd� ��Ze�d�e�d�d d � ��Zd S ) �LineageForCertnameTestz=Tests for certbot._internal.cert_manager.lineage_for_certnamerr �3certbot._internal.storage.renewal_file_for_certnamerZ c C s( d|_ tjdd�}||_ ddlm} d S )N� somefile.conf� example.comrc r r0 )r8 r �Mockr2 r1 )r r\ �mock_renewal_conf_filerw � mock_matchr1 r r r �test_found_match1 s z'LineageForCertnameTest.test_found_matchc C s d|_ ddlm} d S )Nzother.com.confr r0 �r8 r2 r1 �r r~ rw r1 r r r � test_no_match= s z$LineageForCertnameTest.test_no_matchc C s t �� |_ddlm} d S r/ )r rt ru r2 r1 r� r r r �test_no_renewal_fileE s z+LineageForCertnameTest.test_no_renewal_fileN) r) r* r+ r, r rM r� r� r� r r r r ry . s ry c @ sR e Zd ZdZe�d�e�d�e�d�dd� ���Ze�d�e�d�dd� ��Zd S ) �DomainsForCertnameTestz=Tests for certbot._internal.cert_manager.domains_for_certnamerr rz rZ c C s8 d|_ tjdd�}ddg}||j_ ||_ ddlm} d S )Nr{ r| rc r r r0 )r8 r r} rl r2 r1 )r r\ r~ rw r r r1 r r r r� Q s z'DomainsForCertnameTest.test_found_matchc C s d|_ ddlm} d S )Nr{ r r0 r� r� r r r r� ` s z$DomainsForCertnameTest.test_no_matchN)r) r* r+ r, r rM r� r� r r r r r� N s r� c s� e Zd ZdZ� fdd�Zdd� Ze�d�e� � dd� ��Z e� � d d � �Z e� � e�d �d d � ��Z e� � e�d�dd� ��Z e� � e�d�dd� ��Ze� � e�d�dd� ��Z� ZS )�RenameLineageTestz7Tests for certbot._internal.cert_manager.rename_lineagec s t � �� d| j_d| j_d S )Nr Zafter)r r r r: � new_certnamer r" r r r l s zRenameLineageTest.setUpc O s ddl m} |j|i |��S r/ )r2 r1 Zrename_lineage)r rQ rR r1 r r r r4 q s zRenameLineageTest._callrs c C s� d | j _d| j _g |_t�tj�� | �| j � W d � n1 sD0 Y dg|_|� }t j df|j _t�tj�� | �| j � W d � n1 s�0 Y t j df|j _t�tj�� | �| j � W d � n1 s�0 Y d S )N�twozone.confr ���) r r: r� r8 �pytest�raisesr �Errorr4 rB �CANCEL�menurC )r �mock_get_utilityrv � util_mockr r r �test_no_certnameu s **z"RenameLineageTest.test_no_certnamec C s� d| j _d | j _|� }tjdf|j_t�t j �� | � | j � W d � n1 sR0 Y tj d f|j_t�t j �� | � | j � W d � n1 s�0 Y d S )N�one�name) r r: r� rB r� �inputr8 r� r� r r� r4 rC )r r� r� r r r �test_no_new_certname� s *z&RenameLineageTest.test_no_new_certnamer5 c C sR d| j _d| j _d |_t�tj�� | �| j � W d � n1 sD0 Y d S )Nr� r� ) r r: r� r8 r� r� r �ConfigurationErrorr4 )r r= �unused_get_utilityr r r �test_no_existing_certname� s z+RenameLineageTest.test_no_existing_certnamez7certbot._internal.storage.RenewableCert._check_symlinksc C s4 d|_ | �| j� ddlm} |�| j| jj�}d S �NTr r0 )r8 r4 r r2 r1 �lineage_for_certnamer� )r � mock_checkr� r1 �updated_lineager r r �test_rename_cert� s z"RenameLineageTest.test_rename_certc C sP d|_ d | j_|� }tjdf|j_ | �| j� ddlm} |� | j| jj �}d S r� ) r8 r r: rB rC r� r4 r2 r1 r� r� )r r� r� r� r1 r� r r r �%test_rename_cert_interactive_certname� s z7RenameLineageTest.test_rename_cert_interactive_certnamec C s� d|_ d| j_t�tj�� | �| j� W d � n1 s<0 Y d�t j j �| j_t�tj�� | �| j� W d � n1 s�0 Y d S )NTr z one{0}two) r8 r r� r� r� r r� r4 �formatr r �sep)r r� r� r r r �!test_rename_cert_bad_new_certname� s *z3RenameLineageTest.test_rename_cert_bad_new_certname)r) r* r+ r, r r4 r rM rK rL r� r� r� r� r� r� r- r r r" r r� i s( r� c s2 e Zd ZdZ� fdd�Ze�d�dd� �Z� ZS )�DuplicativeCertsTestz!Test to avoid duplicate lineages.c s t � �� | j�� | �� d S rT )r r r' r! �_write_out_ex_kindsr r" r r r � s zDuplicativeCertsTest.setUprr c C s� ddl m} t�d�}t| jjd��}|�|� W d � n1 sD0 Y || jddg�}|| jddg�}|| jg d ��}|| jdd g�}d S ) Nr )�find_duplicative_certszcert-san_512.pem�wbzwow.netz hooray.orgr| �www.example.com)r| r� � something.newr� ) rP r� rK Z load_vectorr r7 rn r! r )r Zunused_makedirr� Z test_cert�f�resultr r r �test_find_duplicative_names� s" ( � � � �z0DuplicativeCertsTest.test_find_duplicative_names) r) r* r+ r, r r rM r� r- r r r" r r� � s r� c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d �dd� �Z e � d �dd� �Z e � d �dd� �Zdd� Z� ZS )�CertPathToLineageTestz=Tests for certbot._internal.cert_manager.cert_path_to_lineagec sB t � �� | j�� | �� tj�| jj ddd�| _ | j | j_ d S �N�liver � fullchain.pem� r r r' r! r� r r r r r � fullchain� cert_pathr r" r r r � s �zCertPathToLineageTest.setUpc C s ddl m} ||�S )Nr )�cert_path_to_lineage)rP r� )r � cli_configr� r r r r4 � s zCertPathToLineageTest._callc C s ddl m} |||�S )Nr ��_archive_files)rP r� )r r� Zfiletyper� r r r r� � s z$CertPathToLineageTest._archive_filesc C s d S rT r r r r r �test_basic_match s z&CertPathToLineageTest.test_basic_matchc C sX | j }tj�| j jddd�|_t�tj �� | � |� W d � n1 sJ0 Y d S )Nr� Z SailorMoonr� ) r r r r r r� r� r� r r� r4 )r Zbad_test_configr r r �test_no_match_exists s �z*CertPathToLineageTest.test_no_match_existsz2certbot._internal.cert_manager._acceptable_matchesc C s dd� g|_ | j| j_d S )Nc S s | j S rT )�fullchain_path��xr r r rf rg z>CertPathToLineageTest.test_options_fullchain.<locals>.<lambda>)r8 r� r r� �r �mock_acceptable_matchesr r r �test_options_fullchain s z,CertPathToLineageTest.test_options_fullchainc C s. dd� g|_ tj�| jjddd�}|| j_d S )Nc S s | j S rT )r� r� r r r rf rg z>CertPathToLineageTest.test_options_cert_path.<locals>.<lambda>r� r zcert.pem)r8 r r r r r r� )r r� Ztest_cert_pathr r r �test_options_cert_path s �z,CertPathToLineageTest.test_options_cert_pathc s. t j�� jjddd�� j_� fdd�g|_d S )N�archiver z cert11.pemc s � � | d�S )Nrn r� r� r r r rf rg zACertPathToLineageTest.test_options_archive_cert.<locals>.<lambda>�r r r r r r� r8 r� r r r �test_options_archive_cert s �z/CertPathToLineageTest.test_options_archive_certc s. t j�� jjddd�� j_� fdd�g|_d S )Nr� r zfullchain11.pemc s � � | d�S )Nr� r� r� r r r rf $ s zFCertPathToLineageTest.test_options_archive_fullchain.<locals>.<lambda>r� r� r r r � test_options_archive_fullchain s �z4CertPathToLineageTest.test_options_archive_fullchainc C s | j | j_d S rT )r� r r� r r r r �test_only_path( s z$CertPathToLineageTest.test_only_path)r) r* r+ r, r r4 r� r� r� r rM r� r� r� r� r� r- r r r" r r� � s r� c sT e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�d d � �Z e�d�d d � �Z � Z S ) �MatchAndCheckOverlapszfTests for certbot._internal.cert_manager.match_and_check_overlaps w/o overlapping archive dirs.c sB t � �� | j�� | �� tj�| jj ddd�| _ | j | j_ d S r� r� r r" r r r 1 s �zMatchAndCheckOverlaps.setUpc C s ddl m} |||||�S )Nr )�match_and_check_overlaps)rP r� )r r� Zacceptable_matchesZ match_funcZrv_funcr� r r r r4 9 s zMatchAndCheckOverlaps._callc s ddl m} d S )Nr )�_acceptable_matches)rP r� )r r� r r r r� = s z&MatchAndCheckOverlaps.test_basic_matchz/certbot._internal.cert_manager._search_lineagesc C sH g |_ t�tj��" | �| jd d d � W d � n1 s:0 Y d S rT )r8 r� r� r r� r4 r �r Zmock_search_lineagesr r r �test_no_matchesB s z%MatchAndCheckOverlaps.test_no_matchesc C sL ddg|_ t�tj��" | �| jd d d � W d � n1 s>0 Y d S )NZspiderZdance)r8 r� r� r ZOverlappingMatchFoundr4 r r� r r r �test_too_many_matchesH s z+MatchAndCheckOverlaps.test_too_many_matches) r) r* r+ r, r r4 r� r rM r� r� r- r r r" r r� - s r� c @ s� e Zd ZdZdd� Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Ze�d�e�d�d d � ��Z e�d�e�d�d d � ��Z e�d�e�d�dd� ��Z e�d�e�d�dd� ��Z dS )�GetCertnameTestr c C s4 t �� }|�� | _| �|j� t�� | _d | j_ d S rT ) rK rL �startr� Z addCleanup�stopr r_ r r: )r Zget_utility_patchr r r r R s zGetCertnameTest.setUprs z2certbot._internal.storage.lineagename_for_filenamec C s4 dg|_ d|_ ddlm} d}tjdf| �� j_ d S )N�example.com.confr| r r0 zWhich certificate would you�r8 r2 r1 rB rC r� r� �r � mock_name� mock_filesr1 �promptr r r �test_get_certnamesY s z"GetCertnameTest.test_get_certnamesc C s4 dg|_ d|_ ddlm} d}tjdf| �� j_ d S �Nr� r| r r0 z custom promptr� r� r r r � test_get_certnames_custom_prompte s z0GetCertnameTest.test_get_certnames_custom_promptc C sn dg|_ d|_ ddlm} tjdf| �� j_ t�t j ��" |j | j ddd� W d � n1 s`0 Y d S )Nr� r| r r0 �erroring_anywayF�Zallow_multiple) r8 r2 r1 rB r� r� r� r� r� r r� � get_certnamesr �r r� r� r1 r r r � test_get_certnames_user_aborts s z-GetCertnameTest.test_get_certnames_user_abortc C s6 dg|_ d|_ ddlm} d}tjdgf| �� j_ d S )Nr� r| r r0 z Which certificate(s) would you�r8 r2 r1 rB rC r� rD r� r r r �!test_get_certnames_allow_multiple} s � z1GetCertnameTest.test_get_certnames_allow_multiplec C s6 dg|_ d|_ ddlm} d}tjdgf| �� j_ d S r� r� r� r r r �/test_get_certnames_allow_multiple_custom_prompt� s � z?GetCertnameTest.test_get_certnames_allow_multiple_custom_promptc C sn dg|_ d|_ ddlm} tjg f| �� j_ t�t j ��" |j | j ddd� W d � n1 s`0 Y d S )Nr� r| r r0 r� Tr� ) r8 r2 r1 rB r� r� rD r� r� r r� r� r r� r r r �,test_get_certnames_allow_multiple_user_abort� s z<GetCertnameTest.test_get_certnames_allow_multiple_user_abortN) r) r* r+ r, r r rM r� r� r� r� r� r� r r r r r� O s( r� �__main__ri )+r, �rer` �sysr^ Zunittestr r% r� Zcertbotr r Zcertbot._internal.storager Zcertbot._internal.testsr Zcertbot.compatr r Zcertbot.displayr rB Z certbot.testsrK ZConfigTestCaser ZBaseRenewableCertTestr. rN rq ry r� r� r� r� r� ZTestCaser� r) �exit�main�argv�__file__r r r r �<module> s< ,W ^&@"U __pycache__/cert_manager_test.cpython-39.pyc 0000644 00000060155 15114562471 0015110 0 ustar 00 a }|�gs � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlZddl m Z ddl m Z ddl m Z ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ G d d � d ej�ZG d d� dej�ZG dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� dej�Z!G dd � d ej�Z"G d d � d ej�Z#G d d � d ej$�Z%e&d!k�r�e�'e�(ej)d"d� e*g �� dS )#�)Tests for certbot._internal.cert_manager.� N)�mock)� configuration)�errors)�ALL_FOUR)� storage_test)� filesystem)�os)�utilc s( e Zd ZdZ� fdd�Zdd� Z� ZS )�BaseCertManagerTestz2Base class for setting up Cert Manager tests. c s� t � �� d� j_t�� jj� d tj� � jj d�d�� _ � fdd�� j D �� _ t tj� � jjd�d��}|�d� W d � n1 s�0 Y d S ) NFZspecialarchive)� example.org� other.comc s i | ]}|� � |� j| ��qS � )�_set_up_config�domains)�.0�domain��selfr �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/cert_manager_test.py� <dictcomp>% s �z-BaseCertManagerTest.setUp.<locals>.<dictcomp>z IGNORE.THIS�wz This file should be ignored!)�super�setUp�config�quietr �makedirs�renewal_configs_dirr �path�join� config_dirr Z config_files�open�write)r Zjunk�� __class__r r r s � �zBaseCertManagerTest.setUpc C s� t �tj�| jj|�� t�� }|d ur<t �|� ||d< nt �tj�| jj |�� t D ] }tj�| jj||d �||< qXtj�| jj |d �|_ |� � |S )N� archive_dirz.pemz.conf)r r r r r r Zlive_dir� configobjZ ConfigObjZdefault_archive_dirr r �filenamer" )r r Zcustom_archive� config_file�kindr r r r . s � �z"BaseCertManagerTest._set_up_config)�__name__� __module__� __qualname__�__doc__r r � __classcell__r r r# r r s r c @ s� e Zd ZdZdd� Ze�� e�d�e�d�e�d�dd� ����Z e�� e�d�e�d�d d � ���Z e�� e�d�e�d�d d � ���Z e�� e�d�e�d�d d� ���Z e�� e�d�e�d�dd� ���Z e�� e�d�e�d�dd� ���ZdS )� DeleteTestz4Tests for certbot._internal.cert_manager.delete c C s ddl m} |�| j� d S �Nr �� cert_manager)�certbot._internalr2 �deleter )r r2 r r r �_callH s zDeleteTest._callzcertbot.display.util.notify�3certbot._internal.cert_manager.lineage_for_certnamez&certbot._internal.storage.delete_filesc C s> | j |_d|� j_d| j_| �� |�| jd� |�d� dS )� Test deleteTr z6Deleted all files relating to certificate example.org.N)�test_rc� return_value�yesnor �certnamer5 �assert_called_once_with)r �mock_delete_files�mock_lineage_for_certnameZ mock_notify� mock_utilr r r �test_delete_from_config_yesL s �z&DeleteTest.test_delete_from_config_yesc C s4 | j |_d|� j_d| j_| �� |jdks0J �dS )r7 Fr r N)r8 r9 r: r r; r5 � call_count�r r= r> r? r r r �test_delete_from_config_no\ s z%DeleteTest.test_delete_from_config_noc C s> | j |_tjdgf|� j_d|� j_| �� |�| jd� dS )r7 r TN) r8 r9 � display_util�OK� checklistr: r5 r< r rB r r r �"test_delete_interactive_single_yesh s z-DeleteTest.test_delete_interactive_single_yesc C s> | j |_tjdgf|� j_d|� j_| �� |jdks:J �dS )r7 r Fr N�r8 r9 rD rE rF r: r5 rA rB r r r �!test_delete_interactive_single_not s z,DeleteTest.test_delete_interactive_single_noc C s\ | j |_tjddgf|� j_d|� j_| �� |�| jd� |�| jd� |j dksXJ �dS )r7 r � other.orgT� N) r8 r9 rD rE rF r: r5 Zassert_any_callr rA rB r r r �$test_delete_interactive_multiple_yes� s z/DeleteTest.test_delete_interactive_multiple_yesc C s@ | j |_tjddgf|� j_d|� j_| �� |jdks<J �dS )r7 r rJ Fr NrH rB r r r �#test_delete_interactive_multiple_no� s z.DeleteTest.test_delete_interactive_multiple_noN)r* r+ r, r- r5 � test_util�patch_display_utilr �patchr@ rC rG rI rL rM r r r r r/ D s6 r/ c @ s� e Zd ZdZdd� Ze�d�e�� dd� ��Z e�d�e�� dd� ��Z e�d �e�d�e�� e�d �e�d �d d � �����Z e�d�e�� dd� ��Z e�d�e�d�dd� ��Z dS )�CertificatesTestz:Tests for certbot._internal.cert_manager.certificates c O s ddl m} ||i |��S )Nr )� certificates)� certbot._internal.cert_managerrR )r �args�kwargsrR r r r � _certificates� s z CertificatesTest._certificatesz%certbot._internal.cert_manager.loggerc C s& | � | j� |jjsJ �|js"J �d S �N)rV r �warning�called�r � mock_utility� mock_loggerr r r � test_certificates_parse_fail� s z-CertificatesTest.test_certificates_parse_failc C s4 d| j _| �| j � |jjdu s$J �|jjs0J �d S )NTF)r r rV Z notificationrY rX rZ r r r �test_certificates_quiet� s z(CertificatesTest.test_certificates_quietz)certbot.crypto_util.verify_renewable_cert�'certbot._internal.storage.RenewableCertz5certbot._internal.cert_manager._report_human_readablec C sJ d |_ d|_ | �| j� |jjdu s(J �|js2J �|js<J �|jsFJ �d S )N� F)r9 rV r rX rY )r Z mock_report�mock_renewable_certr[ r\ Z mock_verifierr r r � test_certificates_parse_success� s z0CertificatesTest.test_certificates_parse_successc C s| t �� }t�tjtj�|d�tj�|d�tj�|d�dd��}t � |j � | � |� |j jdu sdJ �|jsnJ �t�|� d S )Nr ZworkZlogsF)r Zwork_dirZlogs_dirr )�tempfileZmkdtempr ZNamespaceConfigr � MagicMockr r r r r r rV rX rY �shutil�rmtree)r r[ r\ Z empty_tempdirZ empty_configr r r �test_certificates_no_files� s � z+CertificatesTest.test_certificates_no_filesz(certbot.crypto_util.get_serial_from_certzBcertbot._internal.cert_manager.ocsp.RevocationChecker.ocsp_revokedc s� d |_ d|_ dd l}dd l}ddlm� |j�|j�}tjdd�}||_ ddg|j _ d|_ |g�tjd d d��� ��fd d �}|� }d |v s�J �| j |j d d �7 _ |� }d|v p�d|v du s�J �d|v s�J �d|vs�J �| j |j dd�7 _ |� }d|v �sJ �d|v�sJ �d|v �s"J �d|v�s0J �| j |j d d�7 _ |� }d|v �sZJ �d|v �shJ �d|v�svJ �d|_ d|_ |� }d|v �s�J �tjdd�}||_ ddg|j _ d|_ �� |� |� }tt�d|��d k�s�J �dg�_|� }tt�d|��dk�s J �dg�_|� }tt�d|��d k�s4J �d�_|� }tt�d|��dk�sZJ �d �_|� }tt�d|��dk�s�J �d S ) Ni��Ir r1 Znameone�� lineagenameZnametwoF)r; ri c s � � ���S rW )Z_report_human_readabler �r2 Z mock_configZ parsed_certsr r �<lambda>� � z=CertificatesTest.test_report_human_readable.<locals>.<lambda>zINVALID: EXPIREDrK )Zhoursz1 hourz 2 hour(s)TZVALID�INVALID� )Zdaysz1 dayZunderz3 dayszINVALID: TEST_CERT, REVOKEDZ indescribablez thrice.namedzINVALID:Zhorror)r9 �datetime�pytzr3 r2 ZnowZUTCr rd Z target_expiry�namesZ is_test_certZ timedelta�append�len�re�findallr r; ) r Z mock_revokedZ mock_serialro rp Zexpiry�certZ get_report�outr rj r �test_report_human_readable� sl z+CertificatesTest.test_report_human_readableN)r* r+ r, r- rV r rP rN rO r] r^ rb rg rx r r r r rQ � s( rQ c @ s6 e Zd ZdZe�d�e�d�e�d�dd� ���ZdS )�SearchLineagesTestz:Tests for certbot._internal.cert_manager._search_lineages.� certbot.util.make_or_verify_dir�,certbot._internal.storage.renewal_conf_filesr_ c C sF dg|_ tj|_ddlm} |�| jdd� d�dks8J �|jsBJ �d S )NZbadfiler r1 c S s | S rW r ��xr r r rk * rl z<SearchLineagesTest.test_cert_storage_error.<locals>.<lambda>�check) r9 r �CertStorageError� side_effectr3 r2 Z_search_lineagesr rY )r ra �mock_renewal_conf_files�mock_make_or_verify_dirr2 r r r �test_cert_storage_error s z*SearchLineagesTest.test_cert_storage_errorN)r* r+ r, r- r rP r� r r r r ry s ry c @ sn e Zd ZdZe�d�e�d�e�d�dd� ���Ze�d�e�d�dd� ��Ze�d�e�d�d d � ��Zd S ) �LineageForCertnameTestz=Tests for certbot._internal.cert_manager.lineage_for_certnamerz �3certbot._internal.storage.renewal_file_for_certnamer_ c C sH d|_ tjdd�}||_ ddlm} |�| jd�|ks:J �|jsDJ �d S )N� somefile.conf� example.comrh r r1 )r9 r �Mockr3 r2 �lineage_for_certnamer rY )r ra �mock_renewal_conf_filer� � mock_matchr2 r r r �test_found_match1 s z'LineageForCertnameTest.test_found_matchc C s6 d|_ ddlm} |�| jd�d u s(J �|js2J �d S )Nzother.com.confr r1 r� )r9 r3 r2 r� r rY �r r� r� r2 r r r � test_no_match= s z$LineageForCertnameTest.test_no_matchc C s: t �� |_ddlm} |�| jd�d u s,J �|js6J �d S )Nr r1 r� )r r r� r3 r2 r� r rY r� r r r �test_no_renewal_fileE s z+LineageForCertnameTest.test_no_renewal_fileN) r* r+ r, r- r rP r� r� r� r r r r r� . s r� c @ sR e Zd ZdZe�d�e�d�e�d�dd� ���Ze�d�e�d�dd� ��Zd S ) �DomainsForCertnameTestz=Tests for certbot._internal.cert_manager.domains_for_certnamerz r� r_ c C sX d|_ tjdd�}ddg}||j_ ||_ ddlm} |�| jd�|ksJJ �|jsTJ �d S )Nr� r� rh r r r1 ) r9 r r� rq r3 r2 �domains_for_certnamer rY )r ra r� r� r� r r2 r r r r� Q s �z'DomainsForCertnameTest.test_found_matchc C s6 d|_ ddlm} |�| jd�d u s(J �|js2J �d S )Nr� r r1 r )r9 r3 r2 r� r rY r� r r r r� ` s z$DomainsForCertnameTest.test_no_matchN)r* r+ r, r- r rP r� r� r r r r r� N s r� c s� e Zd ZdZ� fdd�Zdd� Ze�d�e� � dd� ��Z e� � d d � �Z e� � e�d �d d � ��Z e� � e�d�dd� ��Z e� � e�d�dd� ��Ze� � e�d�dd� ��Z� ZS )�RenameLineageTestz7Tests for certbot._internal.cert_manager.rename_lineagec s t � �� d| j_d| j_d S )Nr Zafter)r r r r; � new_certnamer r# r r r l s zRenameLineageTest.setUpc O s ddl m} |j|i |��S r0 )r3 r2 Zrename_lineage)r rT rU r2 r r r r5 q s zRenameLineageTest._callr{ c C s� d | j _d| j _g |_t�tj�� | �| j � W d � n1 sD0 Y dg|_|� }t j df|j _t�tj�� | �| j � W d � n1 s�0 Y t j df|j _t�tj�� | �| j � W d � n1 s�0 Y d S )N�twozone.confr ���) r r; r� r9 �pytest�raisesr �Errorr5 rD �CANCEL�menurE )r �mock_get_utilityr� � util_mockr r r �test_no_certnameu s **z"RenameLineageTest.test_no_certnamec C s� d| j _d | j _|� }tjdf|j_t�t j �� | � | j � W d � n1 sR0 Y tj d f|j_t�t j �� | � | j � W d � n1 s�0 Y d S )N�one�name) r r; r� rD r� �inputr9 r� r� r r� r5 rE )r r� r� r r r �test_no_new_certname� s *z&RenameLineageTest.test_no_new_certnamer6 c C sR d| j _d| j _d |_t�tj�� | �| j � W d � n1 sD0 Y d S )Nr� r� ) r r; r� r9 r� r� r �ConfigurationErrorr5 )r r> �unused_get_utilityr r r �test_no_existing_certname� s z+RenameLineageTest.test_no_existing_certnamez7certbot._internal.storage.RenewableCert._check_symlinksc C sR d|_ | �| j� ddlm} |�| j| jj�}|d us<J �|j| jjksNJ �d S �NTr r1 )r9 r5 r r3 r2 r� r� ri )r � mock_checkr� r2 �updated_lineager r r �test_rename_cert� s z"RenameLineageTest.test_rename_certc C sn d|_ d | j_|� }tjdf|j_ | �| j� ddlm} |� | j| jj �}|d usXJ �|j | jj ksjJ �d S r� ) r9 r r; rD rE r� r5 r3 r2 r� r� ri )r r� r� r� r2 r� r r r �%test_rename_cert_interactive_certname� s z7RenameLineageTest.test_rename_cert_interactive_certnamec C s� d|_ d| j_t�tj�� | �| j� W d � n1 s<0 Y d�t j j �| j_t�tj�� | �| j� W d � n1 s�0 Y d S )NTr z one{0}two) r9 r r� r� r� r r� r5 �formatr r �sep)r r� r� r r r �!test_rename_cert_bad_new_certname� s *z3RenameLineageTest.test_rename_cert_bad_new_certname)r* r+ r, r- r r5 r rP rN rO r� r� r� r� r� r� r. r r r# r r� i s( r� c s2 e Zd ZdZ� fdd�Ze�d�dd� �Z� ZS )�DuplicativeCertsTestz!Test to avoid duplicate lineages.c s t � �� | j�� | �� d S rW )r r r( r" �_write_out_ex_kindsr r# r r r � s zDuplicativeCertsTest.setUprz c C s� ddl m} t�d�}t| jjd��}|�|� W d � n1 sD0 Y || jddg�}|dksjJ �|| jdd g�}|d j j � d �s�J �|d d u s�J �|| jg d ��}|d d u s�J �|d j j � d �s�J �|| jdd g�}|dks�J �d S )Nr )�find_duplicative_certszcert-san_512.pem�wbzwow.netz hooray.org)NNr� �www.example.comzexample.org.confrn )r� r� � something.newr� ) rS r� rN Z load_vectorr! r8 rv r" r Z configfiler' �endswith)r Zunused_makedirr� Z test_cert�f�resultr r r �test_find_duplicative_names� s, ( � � � �z0DuplicativeCertsTest.test_find_duplicative_names) r* r+ r, r- r r rP r� r. r r r# r r� � s r� c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Ze � d �d d� �Z e � d �dd� �Z e � d �dd� �Z e � d �dd� �Zdd� Z� ZS )�CertPathToLineageTestz=Tests for certbot._internal.cert_manager.cert_path_to_lineagec sB t � �� | j�� | �� tj�| jj ddd�| _ | j | j_ d S �N�liver � fullchain.pem� r r r( r" r� r r r r r � fullchain� cert_pathr r# r r r � s �zCertPathToLineageTest.setUpc C s ddl m} ||�S )Nr )�cert_path_to_lineage)rS r� )r � cli_configr� r r r r5 � s zCertPathToLineageTest._callc C s ddl m} |||�S )Nr ��_archive_files)rS r� )r r� Zfiletyper� r r r r� � s z$CertPathToLineageTest._archive_filesc C s d| � | j�ksJ �d S �Nr )r5 r r r r r �test_basic_match s z&CertPathToLineageTest.test_basic_matchc C sX | j }tj�| j jddd�|_t�tj �� | � |� W d � n1 sJ0 Y d S )Nr� Z SailorMoonr� ) r r r r r r� r� r� r r� r5 )r Zbad_test_configr r r �test_no_match_exists s �z*CertPathToLineageTest.test_no_match_existsz2certbot._internal.cert_manager._acceptable_matchesc C s. dd� g|_ | j| j_d| �| j�ks*J �d S )Nc S s | j S rW )�fullchain_pathr| r r r rk rl z>CertPathToLineageTest.test_options_fullchain.<locals>.<lambda>r )r9 r� r r� r5 �r �mock_acceptable_matchesr r r �test_options_fullchain s z,CertPathToLineageTest.test_options_fullchainc C sB dd� g|_ tj�| jjddd�}|| j_d| �| j�ks>J �d S )Nc S s | j S rW )r� r| r r r rk rl z>CertPathToLineageTest.test_options_cert_path.<locals>.<lambda>r� r zcert.pem)r9 r r r r r r� r5 )r r� Ztest_cert_pathr r r �test_options_cert_path s �z,CertPathToLineageTest.test_options_cert_pathc sB t j�� jjddd�� j_� fdd�g|_d� �� j�ks>J �d S )N�archiver z cert11.pemc s � � | d�S )Nrv r� r| r r r rk rl zACertPathToLineageTest.test_options_archive_cert.<locals>.<lambda>�r r r r r r� r9 r5 r� r r r �test_options_archive_cert s �z/CertPathToLineageTest.test_options_archive_certc sB t j�� jjddd�� j_� fdd�g|_d� �� j�ks>J �d S )Nr� r zfullchain11.pemc s � � | d�S )Nr� r� r| r r r rk $ s zFCertPathToLineageTest.test_options_archive_fullchain.<locals>.<lambda>r� r� r r r � test_options_archive_fullchain s �z4CertPathToLineageTest.test_options_archive_fullchainc C s" | j | j_d| �| j�ks J �d S r� )r� r r� r5 r r r r �test_only_path( s z$CertPathToLineageTest.test_only_path)r* r+ r, r- r r5 r� r� r� r rP r� r� r� r� r� r. r r r# r r� � s r� c sT e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�d d � �Z e�d�d d � �Z � Z S ) �MatchAndCheckOverlapszfTests for certbot._internal.cert_manager.match_and_check_overlaps w/o overlapping archive dirs.c sB t � �� | j�� | �� tj�| jj ddd�| _ | j | j_ d S r� r� r r# r r r 1 s �zMatchAndCheckOverlaps.setUpc C s ddl m} |||||�S )Nr )�match_and_check_overlaps)rS r� )r r� Zacceptable_matchesZ match_funcZrv_funcr� r r r r5 9 s zMatchAndCheckOverlaps._callc s: ddl m} dg� �� j|� � fdd�dd� �ks6J �d S )Nr )�_acceptable_matchesr c s � j jS rW )r r� r| r r r rk @ rl z8MatchAndCheckOverlaps.test_basic_match.<locals>.<lambda>c S s | j S rW rh r| r r r rk @ rl )rS r� r5 r )r r� r r r r� = s �z&MatchAndCheckOverlaps.test_basic_matchz/certbot._internal.cert_manager._search_lineagesc C sH g |_ t�tj��" | �| jd d d � W d � n1 s:0 Y d S rW )r9 r� r� r r� r5 r �r Zmock_search_lineagesr r r �test_no_matchesB s z%MatchAndCheckOverlaps.test_no_matchesc C sL ddg|_ t�tj��" | �| jd d d � W d � n1 s>0 Y d S )NZspiderZdance)r9 r� r� r ZOverlappingMatchFoundr5 r r� r r r �test_too_many_matchesH s z+MatchAndCheckOverlaps.test_too_many_matches) r* r+ r, r- r r5 r� r rP r� r� r. r r r# r r� - s r� c @ s� e Zd ZdZdd� Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Ze�d�e�d�d d � ��Z e�d�e�d�d d � ��Z e�d�e�d�dd� ��Z e�d�e�d�dd� ��Z dS )�GetCertnameTestr c C s4 t �� }|�� | _| �|j� t�� | _d | j_ d S rW ) rN rO �startr� Z addCleanup�stopr rd r r; )r Zget_utility_patchr r r r R s zGetCertnameTest.setUpr{ z2certbot._internal.storage.lineagename_for_filenamec C sl dg|_ d|_ ddlm} d}tjdf| �� j_ |j| jddd�dgksLJ �|| �� jj d d v shJ �d S ) N�example.com.confr� r r1 zWhich certificate would you�verbF��allow_multiple� r9 r3 r2 rD rE r� r� � get_certnamesr � call_args�r � mock_name� mock_filesr2 �promptr r r �test_get_certnamesY s ��z"GetCertnameTest.test_get_certnamesc C sn dg|_ d|_ ddlm} d}tjdf| �� j_ |j| jdd|d�dgksNJ �| �� jj d d |ksjJ �d S ) Nr� r� r r1 � custom promptr� F�r� Z custom_promptr� r� r r r � test_get_certnames_custom_prompte s ���z0GetCertnameTest.test_get_certnames_custom_promptc C sn dg|_ d|_ ddlm} tjdf| �� j_ t�t j ��" |j | j ddd� W d � n1 s`0 Y d S )Nr� r� r r1 �erroring_anywayFr� ) r9 r3 r2 rD r� r� r� r� r� r r� r� r �r r� r� r2 r r r � test_get_certnames_user_aborts s z-GetCertnameTest.test_get_certnames_user_abortc C sn dg|_ d|_ ddlm} d}tjdgf| �� j_ |j| jddd�dgksNJ �|| �� jj d d v sjJ �d S ) Nr� r� r r1 z Which certificate(s) would your� Tr� � r9 r3 r2 rD rE r� rF r� r r� r� r r r �!test_get_certnames_allow_multiple} s � ��z1GetCertnameTest.test_get_certnames_allow_multiplec C sp dg|_ d|_ ddlm} d}tjdgf| �� j_ |j| jdd|d�dgksPJ �| �� jj d d |kslJ �d S ) Nr� r� r r1 r� r� Tr� r� r� r r r �/test_get_certnames_allow_multiple_custom_prompt� s � ���z?GetCertnameTest.test_get_certnames_allow_multiple_custom_promptc C sn dg|_ d|_ ddlm} tjg f| �� j_ t�t j ��" |j | j ddd� W d � n1 s`0 Y d S )Nr� r� r r1 r� Tr� ) r9 r3 r2 rD r� r� rF r� r� r r� r� r r� r r r �,test_get_certnames_allow_multiple_user_abort� s z<GetCertnameTest.test_get_certnames_allow_multiple_user_abortN) r* r+ r, r- r r rP r� r� r� r� r� r� r r r r r� O s( r� �__main__rn )+r- rt re �sysrc Zunittestr r& r� Zcertbotr r Zcertbot._internal.storager Zcertbot._internal.testsr Zcertbot.compatr r Zcertbot.displayr rD Z certbot.testsrN ZConfigTestCaser ZBaseRenewableCertTestr/ rQ ry r� r� r� r� r� r� ZTestCaser� r* �exit�main�argv�__file__r r r r �<module> s< ,W ^&@"U __pycache__/cli_test.cpython-39.opt-1.pyc 0000644 00000045620 15114562471 0014167 0 ustar 00 a }|�g`f � @ s� d Z ddlZddlZddlmZ ddlZddlZddlZddl m Z m Z ddl Z ddl m Z ddlZddlmZ ddlmZ ddlmZmZ dd lmZ dd lmZ dd lmZ dd lm Z dd l m Z ddl m Z ddl m! m"Z# ddl m$Z$ e j%�&� Z'G dd� de$�Z(G dd� de j)�Z*e+e d�dd�Z,e+e ed�dd�Z-G dd� de j)�Z.e/d k�r|e�0e�1ej2d d� e3g �� dS ) z Tests for certbot._internal.cli.� N)�reload)�Any�List)�mock)� challenges)�errors)�ArgumentSource�NamespaceConfig)�cli)� constants)� flag_default)�disco)� filesystem)�os)�TempDirTestCasec @ s e Zd ZdZdd� ZdS )� TestReadFilezTest cli.read_filec C s� t �� }z�t �| j� t�t j�| jd��}t j�|�}t � t j �� t �|� W d � n1 sd0 Y d}t|d��}|�|� W d � n1 s�0 Y t �|�\}}W t �|� n t �|� 0 d S )N�foos bar �wb)r �getcwd�chdirZtempdirr �realpath�path�join�relpath�pytest�raises�argparse�ArgumentTypeErrorr Z read_file�open�write)�selfZcurr_dirZ real_path� relative_pathZ test_contents�fr �contents� r$ �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/cli_test.py�test_read_file s ( (zTestReadFile.test_read_fileN)�__name__� __module__� __qualname__�__doc__r& r$ r$ r$ r% r s r c @ s e Zd ZdZdd� ZdS )�FlagDefaultTestzTests cli.flag_defaultc C s t jdkr n d S )N�nt)r �name�r r$ r$ r% �test_default_directories@ s z(FlagDefaultTest.test_default_directoriesN)r' r( r) r* r/ r$ r$ r$ r% r+ = s r+ )�attr�valuec C s d S �Nr$ )� namespacer0 r1 r$ r$ r% � assert_set_by_user_with_valueK s r4 )r0 r1 �sourcec C s d S r2 r$ )r3 r0 r1 r5 r$ r$ r% �assert_value_and_sourceP s r6 c @ s� e Zd ZdZeee ed�dd��Zeee ed�dd��Z ee d�dd �Z e � d �d d � �Z d d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Z d+d,� Z d-d.� Z e � d/�d0d1� �Z e � d2�d3d4� �Z d5d6� Z!d7d8� Z"d9d:� Z#d;d<� Z$d=d>� Z%d?d@� Z&dAdB� Z'dCdD� Z(dEdF� Z)dGdH� Z*dIdJ� Z+dKdL� Z,dMdN� Z-dOdP� Z.dQdR� Z/dSdT� Z0dUdV� Z1dWdX� Z2dYdZ� Z3d[d\� Z4d]d^� Z5e � d/�d_d`� �Z6dadb� Z7dcdd� Z8deS )f� ParseTestz Test the cli args entrypoint)�args�returnc C s t �t| �S )z)Get result of cli.prepare_and_parse_args.)r �prepare_and_parse_args�PLUGINS�r8 r$ r$ r% �_unmocked_parseX s zParseTest._unmocked_parsec C s6 t �� � t�| �W d � S 1 s(0 Y dS )zJMocks certbot._internal.display.obj.get_display and calls _unmocked_parse.N)� test_util�patch_display_utilr7 r= r< r$ r$ r% �parse] s zParseTest.parser< c s� t �� � � fdd�}tjd� d��� t�� �x}||� j_t�d��D t� t �� | � |� W d � n1 sn0 Y W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y � � � S )z8Run a command, and return the output string for scrutinyc s � � | � d S r2 )r )�messager8 �kwargs��outputr$ r% � write_msgh s z)ParseTest._help_output.<locals>.write_msgz!certbot._internal.main.sys.stdout)�newz!certbot._internal.main.sys.stderrN) �io�StringIOr �patchr> r? Z notification� side_effectr r � SystemExitr= �getvalue)r r8 rE Zmock_get_utilityr$ rC r% � _help_outputc s �zParseTest._help_outputz*certbot._internal.cli.helpful.flag_defaultc s� t �� ��� � �� � fdd�}||_| �dg�}t|dg tj� t� j d��}|� d� W d � n1 sl0 Y | �dg�}t|ddgtj � | �dg�}t|dg tj � W d � n1 s�0 Y d S ) Nc s | dkrt �tj| �S � jgS )NZ config_files)�copy�deepcopyr Z CLI_DEFAULTSr- )�v�� tmp_configr$ r% �<lambda>z s �z0ParseTest.test_cli_ini_domains.<locals>.<lambda>�certonly�domains�wzdomains = example.com� example.com�renew) �tempfile�NamedTemporaryFile�closerJ r@ r6 r �DEFAULTr r- r � CONFIG_FILE�RUNTIME)r Zmock_flag_defaultZshimr3 �file_hr$ rQ r% �test_cli_ini_domainst s � ( z ParseTest.test_cli_ini_domainsc C s | � g �}dD ]}qd S )N)� config_dirZlogs_dirZwork_dir�r@ )r r3 �dr$ r$ r% � test_no_args� s zParseTest.test_no_argsc C sZ d}d}d}d}t �d��, | �dd|ddd dd dg �}W d � n1 sL0 Y d S ) N�cert�key�chain� fullchainz certbot._internal.main.install�installz --cert-pathz --key-pathz --chain-pathz--fullchain-path)r rI r@ )r re rf rg rh r3 r$ r$ r% �test_install_abspath� s �$z ParseTest.test_install_abspathc C s� | � dg� | � ddg�}| � ddg�}dtv r0| � dg�}dtv rFn | � ddg�}| � ddg�}| � ddg�}| � ddg�}| � dd g�}| � ddg�}| � dd g�}| � dg�}d S ) N�--help�all�-hZnginx�pluginsrX Z automation�revokeri �register)rM r; �r �outr$ r$ r% � test_help� s zParseTest.test_helpc C s: | � dg� | � ddg�}| � ddg�}| � ddg�}d S )N�helprl ri ro )rM rq r$ r$ r% �test_help_no_dashes� s z ParseTest.test_help_no_dashesc C s� ddg}| � |�}t|ddg� ddg}| � |�}t|ddg� ddg}| � |�}t|dg d�� ddg}| � |�}t|ddg� ddg}| � |�}t|ddg� dd g}| � |�}t|ddd g� d S ) Nz-drW rU ztrailing.period.com.ztrailing.period.comz-example.com,another.net,third.org,example.com)rW � another.netz third.orgz --domainsz#example.com,another.net,example.comrv �r@ r4 )r � short_argsr3 Z long_argsr$ r$ r% �test_parse_domains� s( � z ParseTest.test_parse_domainsc C s� ddg}| � |�}tjjtjjg}t|d|� ddg}t�d��D t� t �� | � |� W d � n1 sl0 Y W d � n1 s�0 Y d S )Nz--preferred-challengesz http, dns� pref_challszjumping-over-the-moonz sys.stderr) r@ r �HTTP01�typZDNS01r4 r rI r r rK )r rx r3 Zexpectedr$ r$ r% �test_preferred_challenges s z#ParseTest.test_preferred_challengesc C s | � d�� �}t|dd� d S )N�--server example.com�serverrW )r@ �splitr4 �r r3 r$ r$ r% �test_server_flag s zParseTest.test_server_flagc C s, | � dg�}t|dd� t|ddtj� d S )N� --must-staple� must_stapleT�staple)r@ r4 r6 r r^ r� r$ r$ r% �test_must_staple_flag s z ParseTest.test_must_staple_flagc C s* | � ddg�}t|dd� t|dd� d S )Nr� z --staple-ocspr� Tr� rw r� r$ r$ r% �&test_must_staple_and_staple_ocsp_flags s z0ParseTest.test_must_staple_and_staple_ocsp_flagsc C sZ z$| � |� | �d�d�|��� W n0 tjyT } z|D ]}q:W Y d }~n d }~0 0 d S )Nz6The following flags didn't conflict with --server: {0}z, )r@ Zfail�formatr r �Error)r Z parser_argsZconflicting_args�error�argr$ r$ r% � _check_server_conflict_message" s ��z(ParseTest._check_server_conflict_messagec C sF dg}| � |�}t|dd� t|dtj� |d�� 7 }| �|d� d S )N� --staging�stagingTr r~ )r@ r4 r � STAGING_URIr� r� )r rx r3 r$ r$ r% �test_staging_flag- s zParseTest.test_staging_flagc C s� t |dd� t|ddtj� t|ddtj� t|dtjtj� |rdt|ddtj� t|ddtj� n t|ddtj� t|ddtj� d S ) N�dry_runTZbreak_my_certsr� r ZtosZ register_unsafely_without_emailF)r4 r6 r r^ r r� r\ )r r3 Zexisting_accountr$ r$ r% �_assert_dry_run_flag_worked6 s z%ParseTest._assert_dry_run_flag_workedc C s� t �� }d�|��� }t�tj�� | �|� W d � n1 sB0 Y | � | �|dg �d� | � | �|dg �d� | � | �|dg �d� t j � |t j�}t�|� t�t j � |d�� | � | �|dg �d� | � | �|dg �d� | � | �|dg �d� |dg7 }| �|dd g �}t|d d � | �|dt jg �}t|d t j� | �|dt�d �g �}t|d t jtj� d g}| �|g d � |� d S ) Nz--dry-run --config-dir {0}ZauthFrT rX Zfake_account_dirT�--serverrW r r� )r� rW r� )rY Zmkdtempr� r� r r r r� r@ r� r r r r Z ACCOUNTS_DIRr �mkdirr4 r� r r r6 r r^ r� )r ra rx Z account_dir�config� conflictsr$ r$ r% �test_dry_run_flagC s< (��� �zParseTest.test_dry_run_flagc C s* d}t �|�}| �d�|��� �}d}d S )NZ rsa_key_sizez--rsa-key-size {0}ra �r r r@ r� r� )r Zkey_size_optionZkey_size_valuer� Zconfig_dir_optionr$ r$ r% �test_user_set_rsa_key_sizek s z$ParseTest.test_user_set_rsa_key_sizec C s | � d�}| � d�}d S )Nz--apachez--installer webrootrb )r r� r$ r$ r% �)test_user_set_installer_and_authenticatorw s z3ParseTest.test_user_set_installer_and_authenticatorc C s& d}t �|�}| �d�|��� �}d S )NZelliptic_curvez--elliptic-curve {0}r� )r Zelliptic_curve_optionZelliptic_curve_option_valuer� r$ r$ r% � test_user_set_ecdsa_key_option� s z(ParseTest.test_user_set_ecdsa_key_optionc C sZ d}t �|�}| �d�|��� �}t�t�� | �d� W d � n1 sL0 Y d S )NZkey_typez--key-type {0}z--key-type foo)r r r@ r� r� r r rK )r Zkey_type_optionZkey_type_valuer� r$ r$ r% � test_user_set_invalid_key_type� s z(ParseTest.test_user_set_invalid_key_typez&certbot._internal.hooks.validate_hooksc C s" d� � }tj�� }t�||�}d S )Nzrenew --deploy-hook foo)r� r �PluginsRegistry�find_allr r: )r Zunused_mock_validate_hooksr8 rn r� r$ r$ r% �test_user_set_deploy_hook� s z#ParseTest.test_user_set_deploy_hookz3certbot._internal.plugins.webroot._validate_webrootc C s( d� � }d|_tj�� }t�||�}d S )Nz%renew -w /var/www/html -d example.comz /var/www/html)r� Z return_valuer r� r� r r: )r Zmock_validate_webrootr8 rn r� r$ r$ r% �test_user_set_webroot_map� s z#ParseTest.test_user_set_webroot_mapc C sL t j�� D ]\}}| �d|g�}q t j�� D ]\}}| �d|�� g�}q,d S )Nz--reason)r ZREVOCATION_REASONS�itemsr@ �upper)r �reason�coder3 r$ r$ r% � test_encode_revocation_reason� s z'ParseTest.test_encode_revocation_reasonc C sx t �tj�� | �d�� � W d � n1 s00 Y t �tj�� | �d�� � W d � n1 sj0 Y d S )Nzrenew --force-interactivez-n --force-interactive�r r r r� r@ r� r. r$ r$ r% �test_force_interactive� s ,z ParseTest.test_force_interactivec C sf t �d��H t�t�� | �d�� � W d � n1 s:0 Y W d � n1 sX0 Y d S )N� certbot._internal.cli.sys.stderrz"--renew-hook foo --deploy-hook bar�r rI r r rK r@ r� r. r$ r$ r% �test_deploy_hook_conflict� s z#ParseTest.test_deploy_hook_conflictc C s4 d}| � d|d|dg�}t|d|� t|d|� d S )Nr � --renew-hook� --deploy-hook�--disable-hook-validation� deploy_hook� renew_hookrw �r r1 r3 r$ r$ r% �#test_deploy_hook_matches_renew_hook� s � z-ParseTest.test_deploy_hook_matches_renew_hookc C s0 d}| � d|dg�}t|d|� t|d|� d S )Nr r� r� r� r� rw r� r$ r$ r% � test_deploy_hook_sets_renew_hook� s � z*ParseTest.test_deploy_hook_sets_renew_hookc C sf t �d��H t�t�� | �d�� � W d � n1 s:0 Y W d � n1 sX0 Y d S )Nr� z"--deploy-hook foo --renew-hook barr� r. r$ r$ r% �test_renew_hook_conflict� s z"ParseTest.test_renew_hook_conflictc C s4 d}| � d|d|dg�}t|d|� t|d|� d S )Nr r� r� r� r� r� rw r� r$ r$ r% �#test_renew_hook_matches_deploy_hook� s � z-ParseTest.test_renew_hook_matches_deploy_hookc C s$ d}| � d|dg�}t|d|� d S )Nr r� r� r� rw r� r$ r$ r% �'test_renew_hook_does_not_set_renew_hook� s �z1ParseTest.test_renew_hook_does_not_set_renew_hookc C s� t �d��� t�t�� | �d�� � W d � n1 s:0 Y t�t�� | �d�� � W d � n1 sr0 Y W d � n1 s�0 Y d S )Nr� z--max-log-backups fooz--max-log-backups -42r� r. r$ r$ r% �test_max_log_backups_error� s , z$ParseTest.test_max_log_backups_errorc C s& d}| � d|g�}t|dt|�� d S )NZ42z--max-log-backupsZmax_log_backups)r@ r4 �intr� r$ r$ r% � test_max_log_backups_success� s z&ParseTest.test_max_log_backups_successc C sl | � g �}t|dg tj� t|dg tj� tjjg|_dg|_| � g �}t|dg tj� t|dg tj� d S )NrU rz rW ) r@ r6 r r\ r r{ r| rz rU r� r$ r$ r% �test_unchanging_defaults� s z"ParseTest.test_unchanging_defaultsc C s | � dg�}t|dd� d S )Nz--no-directory-hooks�directory_hooksFrw r� r$ r$ r% �test_no_directory_hooks_set� s z%ParseTest.test_no_directory_hooks_setc C s | � g �}t|ddtj� d S )Nr� T)r@ r6 r r\ r� r$ r$ r% � test_no_directory_hooks_unset� s z'ParseTest.test_no_directory_hooks_unsetc C s | � dg�}t|dd� d S )Nz--delete-after-revoke�delete_after_revokeTrw r� r$ r$ r% �test_delete_after_revoke� s z"ParseTest.test_delete_after_revokec C s | � g �}d S r2 rb r� r$ r$ r% � test_delete_after_revoke_default� s z*ParseTest.test_delete_after_revoke_defaultc C s | � dg�}t|dd� d S )Nz--no-delete-after-revoker� Frw r� r$ r$ r% �test_no_delete_after_revoke� s z%ParseTest.test_no_delete_after_revokec C s> t �tj�� | �d�� � W d � n1 s00 Y d S )Nz(--allow-subset-of-names -d *.example.orgr� r. r$ r$ r% � test_allow_subset_with_wildcard s z)ParseTest.test_allow_subset_with_wildcardc C s dD ]}dD ]}q qd S )N)rm rk )rl rn z dns-route53r$ )r Z help_flagZtopicr$ r$ r% �test_route53_no_revert s z ParseTest.test_route53_no_revertc C s> t �tj�� | �ddg� W d � n1 s00 Y d S )Nz--hstsz --auto-hsts)r r r r� r@ r. r$ r$ r% �$test_parse_args_hosts_and_auto_hosts s z.ParseTest.test_parse_args_hosts_and_auto_hostsc C s� t d�}d}d}| �dg�}t|d|tj� t�� ��}|�� t|j d�� }|� d|� �� W d � n1 sp0 Y | �dd|j g�}t|d|tj � | �dd|j d|g�}t|d|tj � W d � n1 s�0 Y d S ) Nr zconfigfile.bizzcommandline.edurT rV z server = z-cr� ) r r@ r6 r r\ rY rZ r[ r r- r r] Z COMMAND_LINE)r Z DEFAULT_VALUEZCONFIG_FILE_VALUEZCOMMAND_LINE_VALUEr3 rR r_ r$ r$ r% �)test_parse_with_multiple_argument_sources s( .��z3ParseTest.test_parse_with_multiple_argument_sourcesc C s� | � d�}t|ddg� t|dd� t�� �n}|�� t|jd��}|�d� W d � n1 sb0 Y | � dd |jg�}t|ddg� W d � n1 s�0 Y d S ) Nz --preferred-chal dns --no-dirrz zdns-01r� FrV zpreferred-chal = dnsrT z--config)r@ r4 rY rZ r[ r r- r )r r3 rR r_ r$ r$ r% �test_abbreviated_arguments+ s (�z$ParseTest.test_abbreviated_argumentsc C sB | � d�}t|ddg� tj�� }t�|ddg�}t|dd� d S )Nz-d=example.comrU rW �runz--pre-hook="foo=bar"Zpre_hookz "foo=bar")r@ r4 r r� r� r r: )r Zunsused_mock_validate_hooksr3 rn r$ r$ r% �test_argument_with_equals> s z#ParseTest.test_argument_with_equalsc C sv | � d�}t|dd� t|dd� | � d�}t|dd� t|dd� | � d�}t|dd� t|dd� t|d d � d S ) Nz-tvZ text_modeTZ verbose_count� z-tvvv� z-tvm foo@example.comZemailzfoo@example.comrw r� r$ r$ r% �test_adjacent_short_argsH s z"ParseTest.test_adjacent_short_argsc C s | � ddg�}t|ddg� d S )NrT z -d foo.comrU zfoo.comrw r� r$ r$ r% � test_arg_with_contained_spacesV s z(ParseTest.test_arg_with_contained_spacesN)9r' r( r) r* � staticmethodr �strr r= r@ rM r rI r` rd rj rs ru ry r} r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r$ r$ r$ r% r7 U sl : ( r7 �__main__r� )4r* r rN � importlibr Z reload_modulerG �sysrY �typingr r Zunittestr r Zacmer Zcertbotr Zcertbot.configurationr r Zcertbot._internalr r Z certbot._internal.cli.cli_utilsr Zcertbot._internal.pluginsr Zcertbot.compatr r Zcertbot.tests.utilZtests�utilr> r r� r� r; r ZTestCaser+ r� r4 r6 r7 r' �exit�main�argv�__file__r$ r$ r$ r% �<module> sB __pycache__/cli_test.cpython-39.pyc 0000644 00000051525 15114562471 0013231 0 ustar 00 a }|�g`f � @ s� d Z ddlZddlZddlmZ ddlZddlZddlZddl m Z m Z ddl Z ddl m Z ddlZddlmZ ddlmZ ddlmZmZ dd lmZ dd lmZ dd lmZ dd lm Z dd l m Z ddl m Z ddl m! m"Z# ddl m$Z$ e j%�&� Z'G dd� de$�Z(G dd� de j)�Z*e+e d�dd�Z,e+e ed�dd�Z-G dd� de j)�Z.e/d k�r|e�0e�1ej2d d� e3g �� dS ) z Tests for certbot._internal.cli.� N)�reload)�Any�List)�mock)� challenges)�errors)�ArgumentSource�NamespaceConfig)�cli)� constants)� flag_default)�disco)� filesystem)�os)�TempDirTestCasec @ s e Zd ZdZdd� ZdS )� TestReadFilezTest cli.read_filec C s� t �� }z�t �| j� t�t j�| jd��}t j�|�}t � t j �� t �|� W d � n1 sd0 Y d}t|d��}|�|� W d � n1 s�0 Y t �|�\}}|t j�|�ks�J �||ks�J �W t �|� n t �|� 0 d S )N�foos bar �wb)r �getcwd�chdirZtempdirr �realpath�path�join�relpath�pytest�raises�argparse�ArgumentTypeErrorr Z read_file�open�write�abspath)�selfZcurr_dirZ real_path� relative_pathZ test_contents�fr �contents� r% �D/usr/lib/python3.9/site-packages/certbot/_internal/tests/cli_test.py�test_read_file s ( (zTestReadFile.test_read_fileN)�__name__� __module__� __qualname__�__doc__r' r% r% r% r& r s r c @ s e Zd ZdZdd� ZdS )�FlagDefaultTestzTests cli.flag_defaultc C s| t jdkrBt�d�dks J �t�d�dks.J �t�d�dksxJ �n6t�d�dksTJ �t�d�d ksfJ �t�d�d ksxJ �d S ) N�nt� config_dirz/etc/letsencrypt�work_dirz/var/lib/letsencrypt�logs_dirz/var/log/letsencryptz C:\CertbotzC:\Certbot\libzC:\Certbot\log)r �namer r �r! r% r% r& �test_default_directories@ s z(FlagDefaultTest.test_default_directoriesN)r( r) r* r+ r3 r% r% r% r& r, = s r, )�attr�valuec C s$ t | |�|ksJ �| �|�s J �d S �N)�getattr� set_by_user)� namespacer4 r5 r% r% r& � assert_set_by_user_with_valueK s r: )r4 r5 �sourcec C s( t | |�|ksJ �| j| |ks$J �d S r6 )r7 Zargument_sources)r9 r4 r5 r; r% r% r& �assert_value_and_sourceP s r< c @ s� e Zd ZdZeee ed�dd��Zeee ed�dd��Z ee d�dd �Z e � d �d d � �Z d d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Z d+d,� Z d-d.� Z e � d/�d0d1� �Z e � d2�d3d4� �Z d5d6� Z!d7d8� Z"d9d:� Z#d;d<� Z$d=d>� Z%d?d@� Z&dAdB� Z'dCdD� Z(dEdF� Z)dGdH� Z*dIdJ� Z+dKdL� Z,dMdN� Z-dOdP� Z.dQdR� Z/dSdT� Z0dUdV� Z1dWdX� Z2dYdZ� Z3d[d\� Z4d]d^� Z5e � d/�d_d`� �Z6dadb� Z7dcdd� Z8deS )f� ParseTestz Test the cli args entrypoint)�args�returnc C s t �t| �S )z)Get result of cli.prepare_and_parse_args.)r �prepare_and_parse_args�PLUGINS�r> r% r% r& �_unmocked_parseX s zParseTest._unmocked_parsec C s6 t �� � t�| �W d � S 1 s(0 Y dS )zJMocks certbot._internal.display.obj.get_display and calls _unmocked_parse.N)� test_util�patch_display_utilr= rC rB r% r% r& �parse] s zParseTest.parserB c s� t �� � � fdd�}tjd� d��� t�� �x}||� j_t�d��D t� t �� | � |� W d � n1 sn0 Y W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y � � � S )z8Run a command, and return the output string for scrutinyc s � � | � d S r6 )r )�messager> �kwargs��outputr% r& � write_msgh s z)ParseTest._help_output.<locals>.write_msgz!certbot._internal.main.sys.stdout)�newz!certbot._internal.main.sys.stderrN) �io�StringIOr �patchrD rE Z notification� side_effectr r � SystemExitrC �getvalue)r! r> rK Zmock_get_utilityr% rI r& � _help_outputc s �zParseTest._help_outputz*certbot._internal.cli.helpful.flag_defaultc s� t �� ��� � �� � fdd�}||_| �dg�}t|dg tj� t� j d��}|� d� W d � n1 sl0 Y | �dg�}t|ddgtj � | �dg�}t|dg tj � W d � n1 s�0 Y d S ) Nc s | dkrt �tj| �S � jgS )NZ config_files)�copy�deepcopyr Z CLI_DEFAULTSr1 )�v�� tmp_configr% r& �<lambda>z s �z0ParseTest.test_cli_ini_domains.<locals>.<lambda>�certonly�domains�wzdomains = example.com� example.com�renew) �tempfile�NamedTemporaryFile�closerP rF r< r �DEFAULTr r1 r � CONFIG_FILE�RUNTIME)r! Zmock_flag_defaultZshimr9 �file_hr% rW r& �test_cli_ini_domainst s � ( z ParseTest.test_cli_ini_domainsc C s> | � g �}dD ]*}t||�t�|�ks*J �|�|�rJ �qd S )N)r. r0 r/ )rF r7 r r r8 )r! r9 �dr% r% r& � test_no_args� s zParseTest.test_no_argsc C s� d}d}d}d}t �d��, | �dd|ddd dd dg �}W d � n1 sL0 Y |jtj�|�kslJ �|jtj�|�ks�J �|jtj�|�ks�J �|j tj�|�ks�J �d S ) N�cert�key�chain� fullchainz certbot._internal.main.install�install� --cert-path� --key-pathz --chain-pathz--fullchain-path) r rO rF Z cert_pathr r r Zkey_pathZ chain_pathZfullchain_path)r! ri rj rk rl r9 r% r% r& �test_install_abspath� s �$z ParseTest.test_install_abspathc C sZ | � dg� | � ddg�}d|v s&J �d|v s2J �d|v s>J �d|vsJJ �d|vsVJ �d|vsbJ �d |vsnJ �| � d d g�}d tv r�d |v s�J �d|vs�J �d |vs�J �| � d g�}d tv r�d|v s�J �n d|v s�J �| � ddg�}d|vs�J �d|v s�J �d|v �s J �| � d dg�}d|v �s&J �| � d dg�}d|v �sBJ �| � d dg�}d|v�s^J �| � ddg�}d|v �szJ �d|v �s�J �| � ddg�}d|v �s�J �d|v �s�J �d|v �s�J �d|v �s�J �d |v �s�J �| � d d g�}d|v�s�J �d|v�sJ �| � d g�}tj|v �s"J �tjd d � |v �s:J �d|v�sHJ �d|v�sVJ �d S ) N�--help�all�--configurator� how a certificate is deployed�--webroot-path�--text�%s�{0}� --renew-hook�-hZnginxz --nginx-ctlz --checkpointszUse the Nginx pluginz (the certbot nginx plugin is not�pluginsz --preparez"plugins" subcommandr^ z--keepZ automation�revokerm rn ro �--reason�--delete-after-revoke�--no-delete-after-revoke�register�d )rS rA r Z SHORT_USAGEZCOMMAND_OVERVIEW�r! �outr% r% r& � test_help� sZ zParseTest.test_helpc C s� | � dg� | � ddg�}d|v s&J �d|v s2J �d|v s>J �d|vsJJ �d|vsVJ �d|vsbJ �| � dd g�}d |v s|J �d |v s�J �| � dd g�}d |v s�J �d |v s�J �d S ) N�helprr rs rt ru rv rw rx rm rn ro r| �rS r� r% r% r& �test_help_no_dashes� s z ParseTest.test_help_no_dashesc C s� ddg}| � |�}t|ddg� ddg}| � |�}t|ddg� ddg}| � |�}t|dg d�� ddg}| � |�}t|ddg� ddg}| � |�}t|ddg� dd g}| � |�}t|ddd g� d S ) Nz-dr] r[ ztrailing.period.com.ztrailing.period.comz-example.com,another.net,third.org,example.com)r] � another.netz third.orgz --domainsz#example.com,another.net,example.comr� �rF r: )r! � short_argsr9 Z long_argsr% r% r& �test_parse_domains� s( � z ParseTest.test_parse_domainsc C s� ddg}| � |�}tjjtjjg}t|d|� ddg}t�d��D t� t �� | � |� W d � n1 sl0 Y W d � n1 s�0 Y d S )Nz--preferred-challengesz http, dns� pref_challszjumping-over-the-moonz sys.stderr) rF r �HTTP01�typZDNS01r: r rO r r rQ )r! r� r9 Zexpectedr% r% r& �test_preferred_challenges s z#ParseTest.test_preferred_challengesc C s | � d�� �}t|dd� d S )N�--server example.com�serverr] )rF �splitr: �r! r9 r% r% r& �test_server_flag s zParseTest.test_server_flagc C s, | � dg�}t|dd� t|ddtj� d S )N� --must-staple� must_stapleT�staple)rF r: r< r rd r� r% r% r& �test_must_staple_flag s z ParseTest.test_must_staple_flagc C s* | � ddg�}t|dd� t|dd� d S )Nr� z --staple-ocspr� Tr� r� r� r% r% r& �&test_must_staple_and_staple_ocsp_flags s z0ParseTest.test_must_staple_and_staple_ocsp_flagsc C sz z$| � |� | �d�d�|��� W nP tjyt } z6dt|�v sFJ �|D ]}|t|�v sJJ �qJW Y d }~n d }~0 0 d S )Nz6The following flags didn't conflict with --server: {0}z, �--server)rF Zfail�formatr r �Error�str)r! Z parser_argsZconflicting_args�error�argr% r% r& � _check_server_conflict_message" s ��z(ParseTest._check_server_conflict_messagec C sF dg}| � |�}t|dd� t|dtj� |d�� 7 }| �|d� d S )N� --staging�stagingTr� r� )rF r: r � STAGING_URIr� r� )r! r� r9 r% r% r& �test_staging_flag- s zParseTest.test_staging_flagc C s� t |dd� t|ddtj� t|ddtj� t|dtjtj� |rdt|ddtj� t|ddtj� n t|ddtj� t|ddtj� d S ) N�dry_runTZbreak_my_certsr� r� ZtosZ register_unsafely_without_emailF)r: r< r rd r r� rb )r! r9 Zexisting_accountr% r% r& �_assert_dry_run_flag_worked6 s z%ParseTest._assert_dry_run_flag_workedc C s� t �� }d�|��� }t�tj�� | �|� W d � n1 sB0 Y | � | �|dg �d� | � | �|dg �d� | � | �|dg �d� t j � |t j�}t�|� t�t j � |d�� | � | �|dg �d� | � | �|dg �d� | � | �|dg �d� |dg7 }| �|dd g �}t|d d � | �|dt jg �}t|d t j� | �|dt�d �g �}t|d t jtj� d g}| �|g d � |� d S ) Nz--dry-run --config-dir {0}ZauthFrZ r^ Zfake_account_dirTr� r] r� r� )r� r] r� )r_ Zmkdtempr� r� r r r r� rF r� r r r r Z ACCOUNTS_DIRr �mkdirr: r� r r r< r rd r� )r! r. r� Z account_dir�config� conflictsr% r% r& �test_dry_run_flagC s< (��� �zParseTest.test_dry_run_flagc C sT d}t �|�}| �d�|��� �}|�|�s0J �d}|�|�rBJ �|�d�rPJ �d S )NZ rsa_key_sizez--rsa-key-size {0}r. � authenticator�r r rF r� r� r8 )r! Zkey_size_optionZkey_size_valuer� Zconfig_dir_optionr% r% r& �test_user_set_rsa_key_sizek s �z$ParseTest.test_user_set_rsa_key_sizec C sP | � d�}|�d�sJ �|�d�s&J �| � d�}|�d�s>J �|�d�rLJ �d S )Nz--apacheZ installerr� z--installer webroot)rF r8 )r! r� r% r% r& �)test_user_set_installer_and_authenticatorw s z3ParseTest.test_user_set_installer_and_authenticatorc C s4 d}t �|�}| �d�|��� �}|�|�s0J �d S )NZelliptic_curvez--elliptic-curve {0}r� )r! Zelliptic_curve_optionZelliptic_curve_option_valuer� r% r% r& � test_user_set_ecdsa_key_option� s z(ParseTest.test_user_set_ecdsa_key_optionc C sh d}t �|�}| �d�|��� �}|�|�s0J �t�t�� | �d� W d � n1 sZ0 Y d S )NZkey_typez--key-type {0}z--key-type foo) r r rF r� r� r8 r r rQ )r! Zkey_type_optionZkey_type_valuer� r% r% r& � test_user_set_invalid_key_type� s z(ParseTest.test_user_set_invalid_key_typez&certbot._internal.hooks.validate_hooksc C s0 d� � }tj�� }t�||�}|�d�s,J �d S )Nzrenew --deploy-hook foo� renew_hook)r� r �PluginsRegistry�find_allr r@ r8 )r! Zunused_mock_validate_hooksr> r{ r� r% r% r& �test_user_set_deploy_hook� s z#ParseTest.test_user_set_deploy_hookz3certbot._internal.plugins.webroot._validate_webrootc C s6 d� � }d|_tj�� }t�||�}|�d�s2J �d S )Nz%renew -w /var/www/html -d example.comz /var/www/htmlZ webroot_map)r� Z return_valuer r� r� r r@ r8 )r! Zmock_validate_webrootr> r{ r� r% r% r& �test_user_set_webroot_map� s z#ParseTest.test_user_set_webroot_mapc C sh t j�� D ]$\}}| �d|g�}|j|ks J �q t j�� D ](\}}| �d|�� g�}|j|ks:J �q:d S )Nr} )r ZREVOCATION_REASONS�itemsrF �reason�upper)r! r� �coder9 r% r% r& � test_encode_revocation_reason� s z'ParseTest.test_encode_revocation_reasonc C sx t �tj�� | �d�� � W d � n1 s00 Y t �tj�� | �d�� � W d � n1 sj0 Y d S )Nzrenew --force-interactivez-n --force-interactive�r r r r� rF r� r2 r% r% r& �test_force_interactive� s ,z ParseTest.test_force_interactivec C sf t �d��H t�t�� | �d�� � W d � n1 s:0 Y W d � n1 sX0 Y d S )N� certbot._internal.cli.sys.stderrz"--renew-hook foo --deploy-hook bar�r rO r r rQ rF r� r2 r% r% r& �test_deploy_hook_conflict� s z#ParseTest.test_deploy_hook_conflictc C s4 d}| � d|d|dg�}t|d|� t|d|� d S )Nr ry � --deploy-hook�--disable-hook-validation� deploy_hookr� r� �r! r5 r9 r% r% r& �#test_deploy_hook_matches_renew_hook� s � z-ParseTest.test_deploy_hook_matches_renew_hookc C s0 d}| � d|dg�}t|d|� t|d|� d S )Nr r� r� r� r� r� r� r% r% r& � test_deploy_hook_sets_renew_hook� s � z*ParseTest.test_deploy_hook_sets_renew_hookc C sf t �d��H t�t�� | �d�� � W d � n1 s:0 Y W d � n1 sX0 Y d S )Nr� z"--deploy-hook foo --renew-hook barr� r2 r% r% r& �test_renew_hook_conflict� s z"ParseTest.test_renew_hook_conflictc C s4 d}| � d|d|dg�}t|d|� t|d|� d S )Nr r� ry r� r� r� r� r� r% r% r& �#test_renew_hook_matches_deploy_hook� s � z-ParseTest.test_renew_hook_matches_deploy_hookc C s2 d}| � d|dg�}|jd u s"J �t|d|� d S )Nr ry r� r� )rF r� r: r� r% r% r& �'test_renew_hook_does_not_set_renew_hook� s �z1ParseTest.test_renew_hook_does_not_set_renew_hookc C s� t �d��� t�t�� | �d�� � W d � n1 s:0 Y t�t�� | �d�� � W d � n1 sr0 Y W d � n1 s�0 Y d S )Nr� z--max-log-backups fooz--max-log-backups -42r� r2 r% r% r& �test_max_log_backups_error� s , z$ParseTest.test_max_log_backups_errorc C s& d}| � d|g�}t|dt|�� d S )NZ42z--max-log-backupsZmax_log_backups)rF r: �intr� r% r% r& � test_max_log_backups_success� s z&ParseTest.test_max_log_backups_successc C sl | � g �}t|dg tj� t|dg tj� tjjg|_dg|_| � g �}t|dg tj� t|dg tj� d S )Nr[ r� r] ) rF r< r rb r r� r� r� r[ r� r% r% r& �test_unchanging_defaults� s z"ParseTest.test_unchanging_defaultsc C s | � dg�}t|dd� d S )Nz--no-directory-hooks�directory_hooksFr� r� r% r% r& �test_no_directory_hooks_set� s z%ParseTest.test_no_directory_hooks_setc C s | � g �}t|ddtj� d S )Nr� T)rF r< r rb r� r% r% r& � test_no_directory_hooks_unset� s z'ParseTest.test_no_directory_hooks_unsetc C s | � dg�}t|dd� d S )Nr~ �delete_after_revokeTr� r� r% r% r& �test_delete_after_revoke� s z"ParseTest.test_delete_after_revokec C s* | � g �}|jd u sJ �|�d�r&J �d S )Nr� )rF r� r8 r� r% r% r& � test_delete_after_revoke_default� s z*ParseTest.test_delete_after_revoke_defaultc C s | � dg�}t|dd� d S )Nr r� Fr� r� r% r% r& �test_no_delete_after_revoke� s z%ParseTest.test_no_delete_after_revokec C s> t �tj�� | �d�� � W d � n1 s00 Y d S )Nz(--allow-subset-of-names -d *.example.orgr� r2 r% r% r& � test_allow_subset_with_wildcard s z)ParseTest.test_allow_subset_with_wildcardc C s. dD ]$}dD ]}d| � ||g�vs J �q qd S )N)rz rq )rr r{ z dns-route53zcertbot-route53:authr� )r! Z help_flagZtopicr% r% r& �test_route53_no_revert s z ParseTest.test_route53_no_revertc C s> t �tj�� | �ddg� W d � n1 s00 Y d S )Nz--hstsz --auto-hsts)r r r r� rF r2 r% r% r& �$test_parse_args_hosts_and_auto_hosts s z.ParseTest.test_parse_args_hosts_and_auto_hostsc C s� t d�}d}d}| �dg�}t|d|tj� t�� ��}|�� t|j d�� }|� d|� �� W d � n1 sp0 Y | �dd|j g�}t|d|tj � | �dd|j d|g�}t|d|tj � W d � n1 s�0 Y d S ) Nr� zconfigfile.bizzcommandline.edurZ r\ z server = z-cr� ) r rF r< r rb r_ r` ra r r1 r rc Z COMMAND_LINE)r! Z DEFAULT_VALUEZCONFIG_FILE_VALUEZCOMMAND_LINE_VALUEr9 rX re r% r% r& �)test_parse_with_multiple_argument_sources s( .��z3ParseTest.test_parse_with_multiple_argument_sourcesc C s� | � d�}t|ddg� t|dd� t�� �n}|�� t|jd��}|�d� W d � n1 sb0 Y | � dd |jg�}t|ddg� W d � n1 s�0 Y d S ) Nz --preferred-chal dns --no-dirr� zdns-01r� Fr\ zpreferred-chal = dnsrZ z--config)rF r: r_ r` ra r r1 r )r! r9 rX re r% r% r& �test_abbreviated_arguments+ s (�z$ParseTest.test_abbreviated_argumentsc C sB | � d�}t|ddg� tj�� }t�|ddg�}t|dd� d S )Nz-d=example.comr[ r] �runz--pre-hook="foo=bar"Zpre_hookz "foo=bar")rF r: r r� r� r r@ )r! Zunsused_mock_validate_hooksr9 r{ r% r% r& �test_argument_with_equals> s z#ParseTest.test_argument_with_equalsc C sv | � d�}t|dd� t|dd� | � d�}t|dd� t|dd� | � d�}t|dd� t|dd� t|d d � d S ) Nz-tvZ text_modeTZ verbose_count� z-tvvv� z-tvm foo@example.comZemailzfoo@example.comr� r� r% r% r& �test_adjacent_short_argsH s z"ParseTest.test_adjacent_short_argsc C s | � ddg�}t|ddg� d S )NrZ z -d foo.comr[ zfoo.comr� r� r% r% r& � test_arg_with_contained_spacesV s z(ParseTest.test_arg_with_contained_spacesN)9r( r) r* r+ � staticmethodr r� r rC rF rS r rO rf rh rp r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r% r% r% r& r= U sl : ( r= �__main__r� )4r+ r rT � importlibr Z reload_modulerM �sysr_ �typingr r Zunittestr r Zacmer Zcertbotr Zcertbot.configurationr r Zcertbot._internalr r Z certbot._internal.cli.cli_utilsr Zcertbot._internal.pluginsr Zcertbot.compatr r Zcertbot.tests.utilZtests�utilrD r r� r� rA r ZTestCaser, r� r: r< r= r( �exit�main�argv�__file__r% r% r% r& �<module> sB __pycache__/client_test.cpython-39.opt-1.pyc 0000644 00000100556 15114562471 0014676 0 ustar 00 a }|�g@� � @ sl d Z ddlZddlZddlZddlZddlZddlZddlZddlmZ ddl m Z ddl m Z ddl Z ddlmZ ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ ddlm mZ e� d �Z e� d �Z G dd� dej �Z G dd� dej �Z!G dd� dej �Z"G dd� de"�Z#G dd� de"�Z$G dd� dej%�Z&e'dk�rhe�(e �)ej*dd� e+g �� dS ) z#Tests for certbot._internal.client.� N)�mock)� MagicMock)� interfaces)�errors)�util)�account)� constants)�obj)�oszrsa512_key.pemzcsr-san_512.pemc @ sT e Zd ZdZdd� Zej�ej ddi�dd� �Z ej�ej i �dd � �Z d d � Z d S ) �DetermineUserAgentTestz8Tests for certbot._internal.client.determine_user_agent.c C s ddl m} || j�S )Nr )�determine_user_agent)�certbot._internal.clientr �config)�selfr � r �G/usr/lib/python3.9/site-packages/certbot/_internal/tests/client_test.py�_call s z DetermineUserAgentTest._callZ CERTBOT_DOCS�1c C s | j dd� d S )NT��expect_doc_values��_test�r r r r �test_docs_value$ s z&DetermineUserAgentTest.test_docs_valuec C s | j dd� d S )NFr r r r r r �test_real_values( s z'DetermineUserAgentTest.test_real_valuesc C sZ | � � }|r| j}| j}n | j}| j}|d|� |d|� |t�� |� |t�� |� d S )NzOS_NAME OS_VERSIONzmajor.minor.patchlevel)r ZassertInZ assertNotInr Zget_os_info_ua�platformZpython_version)r r ZuaZdoc_value_checkZreal_value_checkr r r r , s z DetermineUserAgentTest._testN) �__name__� __module__� __qualname__�__doc__r r �patch�dictr �environr r r r r r r r s r c s e Zd ZdZ� fdd�Zdd� Zedd� �Zedd � �Zed d � �Z ed d � �Z ee j dd� ��Z dd� Ze�d�dd� �Ze�� dd� �Ze�d�dd� �Zdd� Zd d � Ze�d �d d � �Ze�d�d!d"� �Ze�� d#d$� �Ze�� d%d&� �Zd'd(� Z d)d*� Z � Z S )+� RegisterTestz,Tests for certbot._internal.client.register.c sF t � �� d| j_d| j_d| j_t�� | _t � � | _ t � t � � d S )Ni Fzalias@example.com)�super�setUpr � rsa_key_size� register_unsafely_without_email�emailr ZAccountMemoryStorage�account_storager r �tos_cb� display_objZ set_displayr �� __class__r r r% ? s zRegisterTest.setUpc C s ddl m} || j| j| j�S )Nr )�register)r r. r r) r* )r r. r r r r H s zRegisterTest._callc C s t jtjd�} d| j_| S )Nr, z{"a": 1})r �Mockr ZJSONDeSerializableZto_partial_json� return_value)�mr r r �_public_key_mockL s z RegisterTest._public_key_mockc C s dS )Nz/acme/new-accountr r r r r �_new_acct_dir_mockR s z RegisterTest._new_acct_dir_mockc C s dS �NTr r r r r � _true_mockV s zRegisterTest._true_mockc C s dS �NFr r r r r � _false_mockZ s zRegisterTest._false_mockc c s6 t �d��} | jV W d � n1 s(0 Y d S )N�$certbot._internal.client.acme_client)r r �ClientV2)Zmock_acme_clientr r r �_patched_acme_client^ s z!RegisterTest._patched_acme_clientc C s� | � � ��}d|�� _| j|� j_t�d��b}tj |� j_t � tj �� | � � W d � n1 sb0 Y d |� j_| � � W d � n1 s�0 Y W d � n1 s�0 Y d S )Nz http://tos�*certbot._internal.eff.prepare_subscription) r: � new_accountZterms_of_servicer7 �external_account_required� side_effectr r r �Error�pytest�raisesr )r � mock_client� mock_preparer r r � test_no_tosd s & zRegisterTest.test_no_tosr; c C sZ | � � �>}ddlm} |�i �|� _| j|� j_| �� W d � n1 sL0 Y d S )Nr )� Directory) r: Z acme.messagesrE Z from_json� directoryr7 r= r> r )r Zunused_mock_preparerB rE r r r �test_empty_metar s z RegisterTest.test_empty_metac C sj | � � �N}| j|� j_t�d�� | �� W d � n1 s>0 Y W d � n1 s\0 Y d S )N�)certbot._internal.eff.handle_subscription)r: r7 r= r> r r r )r �unused_mock_get_utilityrB r r r �test_it s &zRegisterTest.test_itz.certbot._internal.client.display_ops.get_emailc C s� ddl m} d| j_d}|jjd|d�}| �� �`}| j|� j_ t � d��*}|t � � g|� j _ | �� W d � n1 sx0 Y W d � n1 s�0 Y d S )Nr ��messagesF�3DNS problem: NXDOMAIN looking up MX for example.com�invalidContact��detailr; )�acmerL r �noninteractive_moder? � with_coder: r7 r= r> r r r r< r )r �mock_get_emailrL �msg�mx_errrB rC r r r �test_email_retry� s z RegisterTest.test_email_retryc C s� ddl m} d| j_d}|jjd|d�}| �� ��}| j|� j_ t � d��V |t � � g|� j _ t�tj�� | �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr rK TrM rN rO rH )rQ rL r rR r? rS r: r7 r= r> r r r r< r@ rA r r )r rL rU rV rB r r r �!test_email_invalid_noninteractive� s z.RegisterTest.test_email_invalid_noninteractivec C s@ d | j _t�tj�� | �� W d � n1 s20 Y d S �N)r r( r@ rA r r? r r r r r �test_needs_email� s z RegisterTest.test_needs_email� certbot._internal.client.loggerc C s� t �d��r}| �� �J}| j|� j_d | j_d| j_d| j_ | � � |j � t j � W d � n1 sd0 Y W d � n1 s�0 Y d S )Nr; TF)r r r: r7 r= r> r r( r' �dry_runr �debug�assert_called_once_with�ANY)r � mock_loggerrC rB r r r �test_without_email� s z RegisterTest.test_without_emailc C sr | � � �V}| j|� j_t�d�� d| j_| �� W d � n1 sF0 Y W d � n1 sd0 Y dS )zJTests dry-run for no staging account, expect account created with no emailrH TN) r: r7 r= r> r r r r\ r )r rT rB r r r � test_dry_run_no_staging_account� s z,RegisterTest.test_dry_run_no_staging_accountc C s� | � � ��}tj| jd�|� jj_| j|� j_ t� d��V d}t� |��(}d| j _ d| j _ | �� W d � n1 st0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )N�r> rH �Bcertbot._internal.client.messages.ExternalAccountBinding.from_dataztest-kidz+J2OAqW4MHXsrHVa_PVg0Y-L_R4SYw0_aL1le6mfblbE)r: r r/ r3 �clientrF � __getitem__r7 r= r> r r �eab_kid� eab_hmac_keyr �r rI rB �targetZmock_eab_from_datar r r �test_with_eab_arguments� s � z$RegisterTest.test_with_eab_argumentsc C s� | � � ��}| j|� j_t�d��V d}t�|��(}d | j_d | j_| � � W d � n1 s^0 Y W d � n1 s|0 Y W d � n1 s�0 Y d S )NrH rd ) r: r7 r= r> r r r rg rh r ri r r r �test_without_eab_arguments� s z'RegisterTest.test_without_eab_argumentsc C s� | � � ��}tj| jd�|� jjj_| j|� j _ t� d��~ t� d��T d | j _ d | j _t�tj�� | �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nrc rH rd )r: r r/ r2 re �net�keyZ public_keyr5 r= r> r r rg rh r@ rA r r? r )r rB r r r �4test_external_account_required_without_eab_arguments� s zARegisterTest.test_external_account_required_without_eab_argumentsc C s� ddl m} d}|jjd|dd�}| �� ��}tj| jd�|� jj _ | j |� j _ t�d��V}|t�� g|� j_ t�|j�� | �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nr rK ZTest� malformed�title�rP rq rc rH )rQ rL r? rS r: r r/ r3 re rF rf r7 r= r> r r r< r@ rA r )r rL rU rV rB Z mock_handler r r �test_unsupported_error� s � bz#RegisterTest.test_unsupported_error) r r r r r% r � staticmethodr2 r3 r5 r7 � contextlib�contextmanagerr: rD r r rG � test_util�patch_display_utilrJ rW rX rZ ra rb rk rl ro rs � __classcell__r r r, r r# < sB r# c s e Zd ZdZ� fdd�Z� ZS )�ClientTestCommonz<Common base class for certbot._internal.client.Client tests.c s� t � �� d| j_d| j_tjf i dti��| _ddl m } t� d��H}|j | _ t�� | _| j _|j| _|| j| jd d d�| _W d � n1 s�0 Y d S )NFzkey.pemr )�Clientr8 )r Zaccount_Zauth� installer)r$ r% r Z no_verify_ssl�allow_subset_of_namesr r �KEYr r r{ r r9 Z acme_clientrQ r0 Z ClientNetworkZclient_networkre )r r{ rQ r, r r r% � s �zClientTestCommon.setUp)r r r r r% ry r r r, r rz � s rz c s� e Zd ZdZ� fdd�Zdd� Zdd� Zd?d d �Ze� d �e� d �d d� ��Z e� d �dd� �Z e� d �dd� �Z e� d �dd� �Z e� d �dd� �Ze� d �dd� �Ze� d �dd� �Ze� d �dd � �Ze� d �d d � �Ze� d �e� d �d d!� ��Ze� d �e� d �e� d �d"d#� ���Zd$d%� Zd&d'� Zd@d)d*�Ze� d+�e� d,�d-d.� ��Ze� d/�d0d1� �Ze�� d2d3� �Z e� d4�e�� d5d6� ��Z e�� d7d8� �Z e� d4�e�� d9d:� ��Z e� d �e�� d;d<� ��Z d=d>� Z!� Z"S )A� ClientTestz*Tests for certbot._internal.client.Client.c sF t � �� d| j_d| j_d| j_ddg| _tjd gtj j d�| _ d S )NFT� example.com�www.example.com)�authorizations�csr_pem) r$ r% r r} r\ �strict_permissions� eg_domainsr r �sentinelr� �eg_orderr r, r r r% s �zClientTest.setUpc C s d S rY r r r r r �test_init_acme_verify_ssl s z$ClientTest.test_init_acme_verify_sslc C sR t �� | j_d g| jjj_g g f| jjj_| j| jj _| j| jj _| j| jj _d S rY ) r r re � auth_handler�handle_authorizationsr0 � deactivate_valid_authorizationsr� rQ �finalize_order� new_order�updater r r r �_mock_obtain_certificate s z#ClientTest._mock_obtain_certificate� c C sJ |dkr&| j jj�| j| j| jj� n | jjj| jt j | jj d ud� d S )Nr� )Zfetch_alternative_chains) re r� r� r^ r� r r} rQ r� r r_ �preferred_chain)r � auth_countr r r �_check_obtain_certificate% s � �z$ClientTest._check_obtain_certificatez$certbot._internal.client.crypto_utilr[ c C sp | � � tjdd td�}| jj}| �|j� | j� |j �}|� || j d� |j �� | �� d| j _|j �|jg|j dd� d | j _tj�� tjtjd d� }| jj||d� | jjjj\\}}}tj�� tjd d� }d | j _ | jj||d� | jjjj\\}}}|j � | j | j d� d | j_t � t!j"�� | j�|� W d � n1 �sT0 Y |j#�t$j%� d S ) N�pem�Zform�file�dataFz some issuerT�issuance_timeout)Zseconds)�orderri, )&r� r �CSR�CSR_SANre r� �_set_mock_from_fullchain� cert_and_chain_from_fullchainrQ r� r� r� r Zfind_chain_with_issuer�assert_not_calledr� r� r^ � fullchain_pemZalternative_fullchains_pem�datetimeZnowZ timedeltar Z CLI_DEFAULTSZobtain_certificate_from_csrr� Z call_argsr� �assert_called_withr� r@ rA r r? �errorr r_ ) r r` �mock_crypto_utilZtest_csrr� r� Zexpected_deadline�_Zdeadliner r r � test_obtain_certificate_from_csr2 s< � ���,z+ClientTest.test_obtain_certificate_from_csrc C s� t jdd td�}||j_tjj|j_| � |j � | � tjj|� |jj | j jd | j jddd� |j� tjj| jd dd� |j � | jj� d S )Nr� r� � secp256r1T)Zkey_sizeZkey_dir�key_type�elliptic_curver� F)r r� r� � generate_csrr0 r r� rn � generate_keyr� r� � _test_obtain_certificate_commonr^ r r& r� r� r� r� )r r� �csrr r r �test_obtain_certificatel s$ ���z"ClientTest.test_obtain_certificatec C sn t jdtjjtd�}t jdtjjtd�}||j_||j _| � |j � | � dg�}d| j _| j|||dd� d S )Nr� r� r� T� )� authzr_retr� )r r� r r� �csr_filer� �key_filer� r0 r� r� r� �_authzr_from_domainsr r} r� )r r� r� rn �authzrr r r �'test_obtain_certificate_partial_success� s z2ClientTest.test_obtain_certificate_partial_successc C sT ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|jjddd |d �}|jjd d d |gd �}|tjg| jj j_ d| j _ t � � � | j�!| j�} W d � n1 s�0 Y dd� | jD �} |j �"t�#|| jd | j j$| j j%�t�#|| d | j j$| j j%�g� d S )Nr rK r� r� r� ��typ�value�caa�barrq �rP rq � identifierrp �foo�rP rq Z subproblemsTc S s g | ]}|d kr|�qS �r� r ��.0�dr r r � <listcomp>� � zUClientTest.test_obtain_certificate_finalize_order_partial_success.<locals>.<listcomp>)&rQ rL r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� re r� r� � Identifier�IDENTIFIER_FQDNr? rS �DEFAULTr� r> r r} rw rx �obtain_certificate�assert_has_calls�call� must_stapler� � r r� rL r� rn r� r� Z subproblem�error_with_subproblems�resultZsuccessful_domainsr r r �6test_obtain_certificate_finalize_order_partial_success� s. ,�zAClientTest.test_obtain_certificate_finalize_order_partial_successc C s, ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|j|jdd�}|jjdd d |d �}|jjdd d |d �} |jjd d d || gd�} | | jj j_d| j _ t � |j�� | j� | j� W d � n1 �s 0 Y d S �Nr rK r� r� r� r� r� r� r� rq r� rp r� r� T)!rQ rL r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� re r� r� r� r� r? rS r� r> r r} r@ rA r� � r r� rL r� rn r� Z identifier1Z identifier2Z subproblem1Z subproblem2r� r r r �;test_obtain_certificate_finalize_order_no_retryable_domains� s( .zFClientTest.test_obtain_certificate_finalize_order_no_retryable_domainsc C s� ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |jjdddd�}|| jj j_d | j_t � |j�� | j� | j� W d � n1 s�0 Y d S � Nr rK r� r� r� r� rq rr T) rQ rL r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� re r� r� r? rS r� r> r r} r@ rA r� �r r� rL r� rn r� r� r r r �Itest_obtain_certificate_finalize_order_rejected_identifier_no_subproblems� s ,zTClientTest.test_obtain_certificate_finalize_order_rejected_identifier_no_subproblemsc C sT ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|jjddd |d �}|jjd d d |gd �}|tjg| jj j_ d| j _ t � � � | j�!| j�} W d � n1 s�0 Y dd� | jD �} |j �"t�#|| jd | j j$| j j%�t�#|| d | j j$| j j%�g� d S )Nr rK r� r� r� r� r� r� rq r� rp r� r� Tc S s g | ]}|d kr|�qS r� r r� r r r r� r� zPClientTest.test_obtain_certificate_get_order_partial_success.<locals>.<listcomp>)&rQ rL r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� re r� r� r� r� r? rS r� r� r> r r} rw rx r� r� r� r� r� r� r r r �1test_obtain_certificate_get_order_partial_success� s. ,�z<ClientTest.test_obtain_certificate_get_order_partial_successc C s, ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|j|jdd�}|jjdd d |d �}|jjdd d |d �} |jjd d d || gd�} | | jj j_d| j _ t � |j�� | j� | j� W d � n1 �s 0 Y d S r� )!rQ rL r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� re r� r� r� r� r? rS r� r> r r} r@ rA r� r� r r r �6test_obtain_certificate_get_order_no_retryable_domains s( .zAClientTest.test_obtain_certificate_get_order_no_retryable_domainsc C s� ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |jjdddd�}|| jj j_d | j_t � |j�� | j� | j� W d � n1 s�0 Y d S r� ) rQ rL r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� re r� r� r? rS r� r> r r} r@ rA r� r� r r r �Dtest_obtain_certificate_get_order_rejected_identifier_no_subproblems/ s ,zOClientTest.test_obtain_certificate_get_order_rejected_identifier_no_subproblemsz)certbot._internal.client.acme_crypto_utilc C s� t jdd td�}t|j_tjj|j_t j d tjjd�}| � |j � d| j j _| �||� |jj| j jd| j jd� |j�tjj| j| j j� |j�� |j�� d S )Nr� r� �r� r� Tr� )�bitsr� r� )r r� r� �make_csrr0 r r� �key_pem�make_key�Keyr� r� re r r\ r� r^ r& r� r� r� r� r� r� )r �mock_acme_crypto� mock_cryptor� rn r r r � test_obtain_certificate_dry_runI s$ �� z*ClientTest.test_obtain_certificate_dry_runc C s ddl m} tjdd td�}t|j_tjj |j _tj d tjj d�}| � |j � | �� d| jj_| �ddg�}|D ]}|j|j_qr| jj} |d g|d gf| j_|| j_|| jjj_t� � � | j� | j �} W d � n1 s�0 Y | � d � |j �!d � d S ) Nr rK r� r� r� Tr� r� r� zCertbot was unable to obtain fresh authorizations for every domain. The dry run will continue, but results may not be accurate.)"rQ rL r r� r� r� r0 r r� r� r� r� r� r� r� re r r\ r� Z STATUS_VALID�body�statusr� r� r� r� r� rw rx r� r� r� Zwarningr� ) r r� r� �mock_logrL r� rn Zauthzrsr� r� r� r r r �:test_obtain_certificate_dry_run_authz_deactivations_failed` s& , zEClientTest.test_obtain_certificate_dry_run_authz_deactivations_failedc C s6 t �� }t jj|j_t �� }t jj|j_||f|_d S rY )r r/ r� �cert�encoder0 �chain)r Zmock_from_fullchainZ mock_certZ mock_chainr r r r� � s z#ClientTest._set_mock_from_fullchainc C s8 g }t |�D ]&}|�tjtjtj|d�d�d�� q |S )N)r� )r� )r� )�reversed�appendr r )r �domainsr� �domainr r r r� � s ����z ClientTest._authzr_from_domainsNc C sp | � � |p| �| j�}|| j_|| jjj_t � � � | j� | j�}W d � n1 sX0 Y | � |� d S rY ) r� r� r� r� r� re r� r� r0 rw rx r� r� )r rn r� r� r� r� r� r r r r� � s ,z*ClientTest._test_obtain_certificate_commonz2certbot._internal.client.Client.obtain_certificatez3certbot._internal.storage.RenewableCert.new_lineagec C sJ ddg}t �� t �� t �� d f|_d| jj_d| jj_dd� |jD �}d S )Nz *.example.comr� FTc S s g | ]}|d d �qS )r r )r� r� r r r r� � r� zAClientTest.test_obtain_and_enroll_certificate.<locals>.<listcomp>)r r r0 re r r\ Zcall_args_list)r Z mock_storageZmock_obtain_certificater� �namesr r r �"test_obtain_and_enroll_certificate� s � z-ClientTest.test_obtain_and_enroll_certificatez$certbot._internal.cli.helpful_parserc C s ddg}t �� }t�|d �}t�|d �t�|d � }tj�|dd�}tj�|dd�}tj�|dd�}d |_d |d |d |g|_| j � |||||�\} } } t | d ��} | � � } W d � n1 s�0 Y t | d ��}|� � }W d � n1 s�0 Y t �|� d S )Nz cert_512.pemzcert-san_512.pemr r� �certsZchainsz chain.pemz fullchain.pemZcertonlyz --cert-pathz --chain-pathz--fullchain-path�rb)�tempfileZmkdtemprw � load_vectorr �path�joinZverb�argsre Zsave_certificate�open�read�shutil�rmtree)r Z mock_parserr� Ztmp_pathZcert_pemZ chain_pemZcandidate_cert_pathZcandidate_chain_pathZcandidate_fullchain_path� cert_path� chain_path�fullchain_pathZ cert_fileZ cert_contentsZ chain_fileZchain_contentsr r r �test_save_certificate� s* �� & &z ClientTest.test_save_certificatec C s� t �tj��& | j�dgdddd� W d � n1 s80 Y t�� }|| j_| j�dgdddd� |j j t j � d�t j � d�ddt j � d�d� |j� � d S )N�foo.barrn r� r� � fullchain)r� r� r� r� Zkey_path)r@ rA r r? re �deploy_certificater r r| � deploy_certr^ r r� �abspath�restart�r � mock_utilr| r r r � test_deploy_certificate_success� s 4 �z*ClientTest.test_deploy_certificate_successz,certbot._internal.client.display_util.notifyc C s| t �� }|| j_d| j_tj|j_t � tj��& | j� dgdddd� W d � n1 sZ0 Y |j � � |�d� d S )NZfoobarr� rn r� r� r� zDeploying certificate)r r re r| r r � PluginErrorr r> r@ rA r� �recovery_routiner^ Zassert_any_call)r r � mock_notifyr| r r r � test_deploy_certificate_failure� s 4 z*ClientTest.test_deploy_certificate_failurec C sj t �� }|| j_tj|j_t� tj��& | j� dgdddd� W d � n1 sR0 Y |j � � d S �Nr� rn r� r� r� ) r r re r| r r �saver> r@ rA r� r r^ r r r r �$test_deploy_certificate_save_failure s 4z/ClientTest.test_deploy_certificate_save_failurec C sx t �� }tjd g|j_|| j_t� tj��& | j� dgdddd� W d � n1 sV0 Y |� d� |j � � d S )Nr� rn r� r� r� zuWe were unable to install your certificate, however, we successfully restored your server to its prior configuration.)r r r r r r> re r| r@ rA r� r� �rollback_checkpointsr^ )r �mock_get_utilityr r| r r r �'test_deploy_certificate_restart_failure s 4� z2ClientTest.test_deploy_certificate_restart_failurec C st t �� }tj|j_tj|j_|| j_ t � tj��& | j� dgdddd� W d � n1 s\0 Y |j� � d S r )r r r r r r> � ReverterErrorr re r| r@ rA r� r^ )r r r` r| r r r �(test_deploy_certificate_restart_failure2" s 4 z3ClientTest.test_deploy_certificate_restart_failure2c C s6 t jj}d|� d�g}dg}d|� d�}d}d|� d�g}t�tj�� | j�|d � W d � n1 sj0 Y t�tj�� | j�||� W d � n1 s�0 Y t�tj�� | j�||� W d � n1 s�0 Y t�tj�� | j�|d � W d � n1 �s0 Y | j�||� d S )NZexamzple.comr� r� z.barr� z*.exam) r r� �sepr@ rA r r? re Z_choose_lineagename)r r Zinvalid_domainsZ valid_domainsZinvalid_certnameZvalid_certnameZinvalid_wildcard_domainr r r �test_choose_lineage_name2 s ,,,.z#ClientTest.test_choose_lineage_name)r� )Nr� )#r r r r r% r� r� r� r r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rw rx r r r r r r ry r r r, r r sj 8 # # & $ r c s� e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�d d � �Z e�d�d d � �Z e�d�d d� �Z e�d�dd� �Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd*d$d%�Zd&d'� Zd(d)� Z� ZS )+�EnhanceConfigTestz9Tests for certbot._internal.client.Client.enhance_config.c s4 t � �� d| j_d| j_d| j_d| j_d| _d S )NFz example.org)r$ r% r �hsts�redirect�staple�uirr� r r, r r r% I s zEnhanceConfigTest.setUpc C sB t �tj��" | j�| jgd � W d � n1 s40 Y d S rY )r@ rA r r? re �enhance_configr� r r r r �test_no_installerR s z#EnhanceConfigTest.test_no_installerc C sv t �� | j_g | jjj_d | j_d| j_t � d��"}| j� | j gd � W d � n1 sZ0 Y | jjj � � d S )NTr[ )r r re r| �supported_enhancementsr0 r r r r r r� �enhancer� )r r` r r r �test_unsupportedV s 0z"EnhanceConfigTest.test_unsupportedr[ c C s d| j _| �� d S r4 )r r �_test_with_already_existing�r r� r r r �test_already_exists_headera s z,EnhanceConfigTest.test_already_exists_headerc C s d| j _| �� d S r4 �r r r r r r r � test_already_exists_redirecti s z.EnhanceConfigTest.test_already_exists_redirectc C s d| j _| �� d S r6 r! r r r r �#test_config_set_no_warning_redirectq s z5EnhanceConfigTest.test_config_set_no_warning_redirectc C s d | j _| �� d S rY )r r �_test_with_all_supportedr r r r �test_no_warn_redirectw s z'EnhanceConfigTest.test_no_warn_redirectc C s* d| j _| �� | jjj�| jdd� d S )NT�ensure-http-headerzStrict-Transport-Security)r r r$ re r| r r� r� r r r r �test_no_ask_hsts} s �z"EnhanceConfigTest.test_no_ask_hstsc C s* d| j _| �� | jjj�| jdd � d S )NTr )r r r$ re r| r r� r� r r r r �test_no_ask_redirect� s �z&EnhanceConfigTest.test_no_ask_redirectc C s* d| j _| �� | jjj�| jdd � d S )NT� staple-ocsp)r r r$ re r| r r� r� r r r r �test_no_ask_staple� s �z$EnhanceConfigTest.test_no_ask_staplec C s* d| j _| �� | jjj�| jdd� d S )NTr& zUpgrade-Insecure-Requests)r r r$ re r| r r� r� r r r r �test_no_ask_uir� s �z!EnhanceConfigTest.test_no_ask_uirc C s8 t �� | j_tj| jjj_| jdd� | jjj � � d S )NT)� enhance_error) r r re r| r r r r> � _test_errorr r^ r r r r �test_enhance_failure� s z&EnhanceConfigTest.test_enhance_failurec C sF t �� | j_tj| jjj_| �� | jjj � � | jjj� t j � d S rY ) r r re r| r r r r> r- r r^ r_ r r r r �test_save_failure� s z#EnhanceConfigTest.test_save_failurec C s* t �� | j_tjd g| jjj_| �� d S rY ) r r re r| r r r r> �_test_error_with_rollbackr r r r �test_restart_failure� s z&EnhanceConfigTest.test_restart_failurec C s0 t �� }tj|j_tj|j_|| j_ | � � d S rY ) r r r r r r> r r re r| r0 )r r| r r r �test_restart_failure2� s z'EnhanceConfigTest.test_restart_failure2c C s | � � d S rY )r- r r r r r0 � s z+EnhanceConfigTest._test_error_with_rollbackFc C s� d| j _t�d��l}t�� �D}t�tj �� | � � W d � n1 sH0 Y W d � n1 sf0 Y W d � n1 s�0 Y |r�|r�|j � d� d S )NTr[ z0Rolling back to previous server configuration...) r r r r rw rx r@ rA r r r$ Zcriticalr� )r r, Z restart_errorr` Zmock_gur r r r- � s �b�z EnhanceConfigTest._test_errorc C s> | j jd u rt�� | j _g d�| j jj_| j �| jgd � d S �N)r& r r) )re r| r r r r0 r r� r r r r r$ � s z*EnhanceConfigTest._test_with_all_supportedc C sB t �� | j_g d�| jjj_t�� | jjj_ | j� | j gd � d S r3 ) r r re r| r r0 r Z PluginEnhancementAlreadyPresentr r> r r� r r r r r � s z-EnhanceConfigTest._test_with_already_existing)FF)r r r r r% r r r r r r" r# r% r' r( r* r+ r. r/ r1 r2 r0 r- r$ r ry r r r, r r F s0 r c @ s4 e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd S ) � RollbackTestz,Tests for certbot._internal.client.rollback.c C s t �� | _d S rY )r r � m_installr r r r r% � s zRollbackTest.setUpc C sR ddl m} t�d��(}||_|d |i t�� � W d � n1 sD0 Y d S )Nr )�rollbackz8certbot._internal.client.plugin_selection.pick_installer)r r6 r r r> r )�clsZ checkpointsr> r6 Zmpir r r r � s zRollbackTest._callc C s | � d| j� d S �Nr� )r r5 r r r r �test_no_problems� s z RollbackTest.test_no_problemsc C s | � dd � d S r8 )r r r r r r � s z RollbackTest.test_no_installerN) r r r r r% � classmethodr r9 r r r r r r4 � s r4 �__main__r� ),r ru r� r r� �sysr� Zunittestr Z unittest.mockr Zjosepyr r@ Zcertbotr r Zcertbot._internalr r Zcertbot._internal.displayr r+ Zcertbot.compatr Zcertbot.tests.utilZtestsrw r� r~ r� ZConfigTestCaser r# rz r r ZTestCaser4 r �exit�main�argv�__file__r r r r �<module> sD = > __pycache__/client_test.cpython-39.pyc 0000644 00000106036 15114562471 0013736 0 ustar 00 a }|�g@� � @ sl d Z ddlZddlZddlZddlZddlZddlZddlZddlmZ ddl m Z ddl m Z ddl Z ddlmZ ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ ddlm mZ e� d �Z e� d �Z G dd� dej �Z G dd� dej �Z!G dd� dej �Z"G dd� de"�Z#G dd� de"�Z$G dd� dej%�Z&e'dk�rhe�(e �)ej*dd� e+g �� dS ) z#Tests for certbot._internal.client.� N)�mock)� MagicMock)� interfaces)�errors)�util)�account)� constants)�obj)�oszrsa512_key.pemzcsr-san_512.pemc @ sT e Zd ZdZdd� Zej�ej ddi�dd� �Z ej�ej i �dd � �Z d d � Z d S ) �DetermineUserAgentTestz8Tests for certbot._internal.client.determine_user_agent.c C s ddl m} || j�S )Nr )�determine_user_agent)�certbot._internal.clientr �config)�selfr � r �G/usr/lib/python3.9/site-packages/certbot/_internal/tests/client_test.py�_call s z DetermineUserAgentTest._callZ CERTBOT_DOCS�1c C s | j dd� d S )NT��expect_doc_values��_test�r r r r �test_docs_value$ s z&DetermineUserAgentTest.test_docs_valuec C s | j dd� d S )NFr r r r r r �test_real_values( s z'DetermineUserAgentTest.test_real_valuesc C sZ | � � }|r| j}| j}n | j}| j}|d|� |d|� |t�� |� |t�� |� d S )NzOS_NAME OS_VERSIONzmajor.minor.patchlevel)r ZassertInZ assertNotInr Zget_os_info_ua�platformZpython_version)r r ZuaZdoc_value_checkZreal_value_checkr r r r , s z DetermineUserAgentTest._testN) �__name__� __module__� __qualname__�__doc__r r �patch�dictr �environr r r r r r r r s r c s e Zd ZdZ� fdd�Zdd� Zedd� �Zedd � �Zed d � �Z ed d � �Z ee j dd� ��Z dd� Ze�d�dd� �Ze�� dd� �Ze�d�dd� �Zdd� Zd d � Ze�d �d d � �Ze�d�d!d"� �Ze�� d#d$� �Ze�� d%d&� �Zd'd(� Z d)d*� Z � Z S )+� RegisterTestz,Tests for certbot._internal.client.register.c sF t � �� d| j_d| j_d| j_t�� | _t � � | _ t � t � � d S )Ni Fzalias@example.com)�super�setUpr � rsa_key_size� register_unsafely_without_email�emailr ZAccountMemoryStorage�account_storager r �tos_cb� display_objZ set_displayr �� __class__r r r% ? s zRegisterTest.setUpc C s ddl m} || j| j| j�S )Nr )�register)r r. r r) r* )r r. r r r r H s zRegisterTest._callc C s t jtjd�} d| j_| S )Nr, z{"a": 1})r �Mockr ZJSONDeSerializableZto_partial_json� return_value)�mr r r �_public_key_mockL s z RegisterTest._public_key_mockc C s dS )Nz/acme/new-accountr r r r r �_new_acct_dir_mockR s z RegisterTest._new_acct_dir_mockc C s dS �NTr r r r r � _true_mockV s zRegisterTest._true_mockc C s dS �NFr r r r r � _false_mockZ s zRegisterTest._false_mockc c s6 t �d��} | jV W d � n1 s(0 Y d S )N�$certbot._internal.client.acme_client)r r �ClientV2)Zmock_acme_clientr r r �_patched_acme_client^ s z!RegisterTest._patched_acme_clientc C s� | � � ��}d|�� _| j|� j_t�d��~}tj |� j_t � tj �� | � � W d � n1 sb0 Y |j du szJ �d |� j_| � � |j du s�J �W d � n1 s�0 Y W d � n1 s�0 Y d S )Nz http://tos�*certbot._internal.eff.prepare_subscriptionFT)r: � new_accountZterms_of_servicer7 �external_account_required� side_effectr r r �Error�pytest�raisesr �called)r � mock_client� mock_preparer r r � test_no_tosd s & zRegisterTest.test_no_tosr; c C sj | � � �N}ddlm} |�i �|� _| j|� j_| �� | j j du sHJ �W d � n1 s\0 Y d S )Nr )� DirectoryF) r: Z acme.messagesrF Z from_json� directoryr7 r= r> r r* rB )r Zunused_mock_preparerC rF r r r �test_empty_metar s z RegisterTest.test_empty_metac C sz | � � �^}| j|� j_t�d�� | �� W d � n1 s>0 Y | jjdu sXJ �W d � n1 sl0 Y d S )N�)certbot._internal.eff.handle_subscriptionT) r: r7 r= r> r r r r* rB )r �unused_mock_get_utilityrC r r r �test_it s &zRegisterTest.test_itz.certbot._internal.client.display_ops.get_emailc C s� ddl m} d| j_d}|jjd|d�}| �� �|}| j|� j_ t � d��F}|t � � g|� j _ | �� |jdksrJ �|jd u s�J �W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nr ��messagesF�3DNS problem: NXDOMAIN looking up MX for example.com�invalidContact��detailr; � T)�acmerM r �noninteractive_moder? � with_coder: r7 r= r> r r r r< r � call_countrB )r �mock_get_emailrM �msg�mx_errrC rD r r r �test_email_retry� s z RegisterTest.test_email_retryc C s� ddl m} d| j_d}|jjd|d�}| �� ��}| j|� j_ t � d��V |t � � g|� j _ t�tj�� | �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr rL TrN rO rP rI )rS rM r rT r? rU r: r7 r= r> r r r r< r@ rA r r )r rM rX rY rC r r r �!test_email_invalid_noninteractive� s z.RegisterTest.test_email_invalid_noninteractivec C s@ d | j _t�tj�� | �� W d � n1 s20 Y d S �N)r r( r@ rA r r? r r r r r �test_needs_email� s z RegisterTest.test_needs_email� certbot._internal.client.loggerc C s� t �d���}| �� �X}| j|� j_d | j_d| j_d| j_ | � � |j � t j � |jdu s^J �W d � n1 sr0 Y W d � n1 s�0 Y d S )Nr; TF)r r r: r7 r= r> r r( r' �dry_runr �debug�assert_called_once_with�ANYrB )r � mock_loggerrD rC r r r �test_without_email� s z RegisterTest.test_without_emailc C s� | � � �|}| j|� j_t�d��F d| j_| �� |j du s@J �|� j j d d j rXJ �W d � n1 sl0 Y W d � n1 s�0 Y dS )zJTests dry-run for no staging account, expect account created with no emailrI TFr N) r: r7 r= r> r r r r_ r rB r< � call_argsZcontact)r rW rC r r r � test_dry_run_no_staging_account� s z,RegisterTest.test_dry_run_no_staging_accountc C s� | � � ��}tj| jd�|� jj_| j|� j_ t� d��d d}t� |��6}d| j _ d| j _ | �� |jdu snJ �W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )N�r> rI �Bcertbot._internal.client.messages.ExternalAccountBinding.from_dataztest-kidz+J2OAqW4MHXsrHVa_PVg0Y-L_R4SYw0_aL1le6mfblbET)r: r r/ r3 �clientrG � __getitem__r7 r= r> r r �eab_kid� eab_hmac_keyr rB �r rJ rC �targetZmock_eab_from_datar r r �test_with_eab_arguments� s � z$RegisterTest.test_with_eab_argumentsc C s� | � � ��}| j|� j_t�d��d d}t�|��6}d | j_d | j_| � � |j du sXJ �W d � n1 sl0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )NrI rh F) r: r7 r= r> r r r rk rl r rB rm r r r �test_without_eab_arguments� s z'RegisterTest.test_without_eab_argumentsc C s� | � � ��}tj| jd�|� jjj_| j|� j _ t� d��~ t� d��T d | j _ d | j _t�tj�� | �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nrg rI rh )r: r r/ r2 ri �net�keyZ public_keyr5 r= r> r r rk rl r@ rA r r? r )r rC r r r �4test_external_account_required_without_eab_arguments� s zARegisterTest.test_external_account_required_without_eab_argumentsc C s� ddl m} d}|jjd|dd�}| �� ��}tj| jd�|� jj _ | j |� j _ t�d��V}|t�� g|� j_ t�|j�� | �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y |jd u s�J �d S ) Nr rL ZTest� malformed�title�rQ ru rg rI F)rS rM r? rU r: r r/ r3 ri rG rj r7 r= r> r r r< r@ rA r rB )r rM rX rY rC Z mock_handler r r �test_unsupported_error� s � bz#RegisterTest.test_unsupported_error) r r r r r% r � staticmethodr2 r3 r5 r7 � contextlib�contextmanagerr: rE r r rH � test_util�patch_display_utilrK rZ r[ r] rd rf ro rp rs rw � __classcell__r r r, r r# < sB r# c s e Zd ZdZ� fdd�Z� ZS )�ClientTestCommonz<Common base class for certbot._internal.client.Client tests.c s� t � �� d| j_d| j_tjf i dti��| _ddl m } t� d��H}|j | _ t�� | _| j _|j| _|| j| jd d d�| _W d � n1 s�0 Y d S )NFzkey.pemr )�Clientr8 )r Zaccount_Zauth� installer)r$ r% r Z no_verify_ssl�allow_subset_of_namesr r �KEYr r r r r9 Z acme_clientrS r0 Z ClientNetwork�client_networkri )r r rS r, r r r% � s �zClientTestCommon.setUp)r r r r r% r} r r r, r r~ � s r~ c s� e Zd ZdZ� fdd�Zdd� Zdd� Zd?d d �Ze� d �e� d �d d� ��Z e� d �dd� �Z e� d �dd� �Z e� d �dd� �Z e� d �dd� �Ze� d �dd� �Ze� d �dd� �Ze� d �dd � �Ze� d �d d � �Ze� d �e� d �d d!� ��Ze� d �e� d �e� d �d"d#� ���Zd$d%� Zd&d'� Zd@d)d*�Ze� d+�e� d,�d-d.� ��Ze� d/�d0d1� �Ze�� d2d3� �Z e� d4�e�� d5d6� ��Z e�� d7d8� �Z e� d4�e�� d9d:� ��Z e� d �e�� d;d<� ��Z d=d>� Z!� Z"S )A� ClientTestz*Tests for certbot._internal.client.Client.c sF t � �� d| j_d| j_d| j_ddg| _tjd gtj j d�| _ d S )NFT� example.com�www.example.com)�authorizations�csr_pem) r$ r% r r� r_ �strict_permissions� eg_domainsr r �sentinelr� �eg_orderr r, r r r% s �zClientTest.setUpc C s | j jd d du sJ �d S )NrR Z verify_sslT)r� re r r r r �test_init_acme_verify_ssl s z$ClientTest.test_init_acme_verify_sslc C sR t �� | j_d g| jjj_g g f| jjj_| j| jj _| j| jj _| j| jj _d S r\ ) r r ri � auth_handler�handle_authorizationsr0 � deactivate_valid_authorizationsr� rS �finalize_order� new_order�updater r r r �_mock_obtain_certificate s z#ClientTest._mock_obtain_certificaterR c C s^ |dkr&| j jj�| j| j| jj� n| j jjj|ks:J �| jj j| jt j | jj d ud� d S )NrR )Zfetch_alternative_chains) ri r� r� ra r� r r� rV rS r� r rb �preferred_chain)r � auth_countr r r �_check_obtain_certificate% s � �z$ClientTest._check_obtain_certificatez$certbot._internal.client.crypto_utilr^ c C s | � � tjdd td�}| jj}| �|j� | j� |j �}|� || j d� t jjt jjf| jj||d�ksnJ �|j�� | �� d| j _t jjt jjf| jj||d�ks�J �|j�|jg|j dd� d | j _tj�� tjt j d d� }| jj||d� | jjj j \\}}}t || �tjd d�k�s,J �tj�� tjd d� }d | j _!| jj||d� | jjj j \\}}}t || �tjd d�k�s�J �t jjt jjf| jj|d d�k�s�J �|j �"| j#| j d� d | j_t$�%t&j'�� | j�|� W d � n1 �s�0 Y |j(�t j)� d S ) N�pem�Zform�file�dataF)�orderrz some issuerT�issuance_timeout)ZsecondsrR i, )*r� r �CSR�CSR_SANri r� �_set_mock_from_fullchain� cert_and_chain_from_fullchainrS r� r� r� r r r� �cert�chainZobtain_certificate_from_csrZfind_chain_with_issuer�assert_not_calledr� r� ra � fullchain_pemZalternative_fullchains_pem�datetimeZnowZ timedeltar Z CLI_DEFAULTSr� re �absr� �assert_called_withr� r@ rA r r? �errorrb ) r rc �mock_crypto_utilZtest_csrr� r� Zexpected_deadline�_Zdeadliner r r � test_obtain_certificate_from_csr2 sd �� �� � �� � �� ,z+ClientTest.test_obtain_certificate_from_csrc C s� t jdd td�}||j_tjj|j_| � |j � | � tjj|� |jj | j jd | j jddd� |j� tjj| jd dd� |j � | jj� d S )Nr� r� � secp256r1T)Zkey_sizeZkey_dir�key_type�elliptic_curver� F)r r� r� � generate_csrr0 r r� rr � generate_keyr� r� � _test_obtain_certificate_commonra r r& r� r� r� r� )r r� �csrr r r �test_obtain_certificatel s$ ���z"ClientTest.test_obtain_certificatec C s� t jdtjjtd�}t jdtjjtd�}||j_||j _| � |j � | � dg�}d| j _| j|||dd� |j jdkszJ �|jjdks�J �|j jdks�J �d S )Nr� r� r� T� )� authzr_retr� rR )r r� r r� �csr_filer� �key_filer� r0 r� r� r� �_authzr_from_domainsr r� r� rV )r r� r� rr �authzrr r r �'test_obtain_certificate_partial_success� s z2ClientTest.test_obtain_certificate_partial_successc C s� ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|jjddd |d �}|jjd d d |gd �}|tjg| jj j_ d| j _ t � � � | j�!| j�} W d � n1 s�0 Y | tjj"tjj#||fk�s J �| jjjj$dk�s6J �| j jj$dk�sJJ �dd� | jD �} |j j$dk�slJ �|j �%t�&|| jd | j j'| j j(�t�&|| d | j j'| j j(�g� |j j$dk�s�J �d S )Nr rL r� r� r� ��typ�value�caa�barru �rQ ru � identifierrt �foo�rQ ru Z subproblemsTr� c S s g | ]}|d kr|�qS �r� r ��.0�dr r r � <listcomp>� � zUClientTest.test_obtain_certificate_finalize_order_partial_success.<locals>.<listcomp>rR ))rS rM r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� ri r� r� � Identifier�IDENTIFIER_FQDNr? rU �DEFAULTr� r> r r� r{ r| �obtain_certificater� r� rV �assert_has_calls�call� must_stapler� � r r� rM r� rr r� r� Z subproblem�error_with_subproblems�resultZsuccessful_domainsr r r �6test_obtain_certificate_finalize_order_partial_success� s: ,� �zAClientTest.test_obtain_certificate_finalize_order_partial_successc C sz ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|j|jdd�}|jjdd d |d �}|jjdd d |d �} |jjd d d || gd�} | | jj j_d| j _ t � |j�� | j� | j� W d � n1 �s 0 Y | jjjj!dk�s>J �| j jj!dk�sRJ �|j j!dk�sdJ �|j j!dk�svJ �d S �Nr rL r� r� r� r� r� r� r� ru r� rt r� r� TrR )"rS rM r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� ri r� r� r� r� r? rU r� r> r r� r@ rA r� rV � r r� rM r� rr r� Z identifier1Z identifier2Z subproblem1Z subproblem2r� r r r �;test_obtain_certificate_finalize_order_no_retryable_domains� s. .zFClientTest.test_obtain_certificate_finalize_order_no_retryable_domainsc C s& ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |jjdddd�}|| jj j_d | j_t � |j�� | j� | j� W d � n1 s�0 Y | jjjj d ks�J �| j jj d ks�J �|j j d k�sJ �|j j dk�s"J �d S � Nr rL r� r� r� r� ru rv TrR ) rS rM r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� ri r� r� r? rU r� r> r r� r@ rA r� rV �r r� rM r� rr r� r� r r r �Itest_obtain_certificate_finalize_order_rejected_identifier_no_subproblems� s& ,zTClientTest.test_obtain_certificate_finalize_order_rejected_identifier_no_subproblemsc C s� ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|jjddd |d �}|jjd d d |gd �}|tjg| jj j_ d| j _ t � � � | j�!| j�} W d � n1 s�0 Y | tjj"tjj#||fk�s J �| jjjj$dk�s6J �| j jj$dk�sJJ �dd� | jD �} |j j$dk�slJ �|j �%t�&|| jd | j j'| j j(�t�&|| d | j j'| j j(�g� |j j$dk�s�J �d S )Nr rL r� r� r� r� r� r� ru r� rt r� r� TrR r� c S s g | ]}|d kr|�qS r� r r� r r r r� r� zPClientTest.test_obtain_certificate_get_order_partial_success.<locals>.<listcomp>))rS rM r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� ri r� r� r� r� r? rU r� r� r> r r� r{ r| r� r� r� rV r� r� r� r� r� r r r �1test_obtain_certificate_get_order_partial_success� s: ,� �z<ClientTest.test_obtain_certificate_get_order_partial_successc C sz ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |j|jdd�}|j|jdd�}|jjdd d |d �}|jjdd d |d �} |jjd d d || gd�} | | jj j_d| j _ t � |j�� | j� | j� W d � n1 �s 0 Y | jjjj!dk�s>J �| j jj!dk�sRJ �|j j!dk�sdJ �|j j!dk�svJ �d S r� )"rS rM r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� ri r� r� r� r� r? rU r� r> r r� r@ rA r� rV r� r r r �6test_obtain_certificate_get_order_no_retryable_domains s. .zAClientTest.test_obtain_certificate_get_order_no_retryable_domainsc C s& ddl m} tjdtjjtd�}tjdtjjtd�}||j _ ||j _ | � |j � | �� | �| j�}|| j_|| jjj_ |jjdddd�}|| jj j_d | j_t � |j�� | j� | j� W d � n1 s�0 Y | jjjj dks�J �| j jj d ks�J �|j j d k�sJ �|j j dk�s"J �d S r� ) rS rM r r� r r� r� r� r� r� r0 r� r� r� r� r� r� r� r� ri r� r� r? rU r� r> r r� r@ rA r� rV r� r r r �Dtest_obtain_certificate_get_order_rejected_identifier_no_subproblems/ s& ,zOClientTest.test_obtain_certificate_get_order_rejected_identifier_no_subproblemsz)certbot._internal.client.acme_crypto_utilc C s� t jdd td�}t|j_tjj|j_t j d tjjd�}| � |j � d| j j _| �||� |jj| j jd| j jd� |j�tjj| j| j j� |j�� |j�� |j jdks�J �d S )Nr� r� �r� r� Tr� )�bitsr� r� rR )r r� r� �make_csrr0 r r� �key_pem�make_key�Keyr� r� ri r r_ r� ra r& r� r� r� r� r� r� rV )r �mock_acme_crypto� mock_cryptor� rr r r r � test_obtain_certificate_dry_runI s$ �� z*ClientTest.test_obtain_certificate_dry_runc C sR ddl m} tjdd td�}t|j_tjj |j _tj d tjj d�}| � |j � | �� d| jj_| �ddg�}|D ]}|j|j_qr| jj} |d g|d gf| j_|| j_|| jjj_t� � � | j� | j �} W d � n1 s�0 Y | tjj tjj ||fk�s J �| �!d � | jj"d k�s*J d ��| j j#j"d k�sBJ d ��|j$�%d � d S )Nr rL r� r� r� Tr� r� rR z*Deactivate authorizations should be calledr� zHOrder should be recreated due to successfully deactivated authorizationszCertbot was unable to obtain fresh authorizations for every domain. The dry run will continue, but results may not be accurate.)&rS rM r r� r� r� r0 r r� r� r� r� r� r� r� ri r r_ r� Z STATUS_VALID�body�statusr� r� r� r� r� r{ r| r� r� r� r� r� rV r� �warningr� ) r r� r� �mock_logrM r� rr Zauthzrsr� r� r� r r r �:test_obtain_certificate_dry_run_authz_deactivations_failed` s4 , ��zEClientTest.test_obtain_certificate_dry_run_authz_deactivations_failedc C s6 t �� }t jj|j_t �� }t jj|j_||f|_d S r\ )r r/ r� r� �encoder0 r� )r Zmock_from_fullchainZ mock_certZ mock_chainr r r r� � s z#ClientTest._set_mock_from_fullchainc C s8 g }t |�D ]&}|�tjtjtj|d�d�d�� q |S )N)r� )r� )r� )�reversed�appendr r )r �domainsr� �domainr r r r� � s ����z ClientTest._authzr_from_domainsNc C s� | � � |p| �| j�}|| j_|| jjj_t � � � | j� | j�}W d � n1 sX0 Y |t j jt j j||fks~J �| �|� d S r\ )r� r� r� r� r� ri r� r� r0 r{ r| r� r r� r� r� r� )r rr r� r� r� r� r� r r r r� � s ,�z*ClientTest._test_obtain_certificate_commonz2certbot._internal.client.Client.obtain_certificatez3certbot._internal.storage.RenewableCert.new_lineagec C s� ddg}t �� t �� t �� d f|_d| jj_| j�|d�s>J �| j�|d �sPJ �| j�|dd � d �sjJ �d| jj_| j�|d �r�J �dd� |jD �}|g d �ks�J �d S ) Nz *.example.comr� F� example_certrR Tc S s g | ]}|d d �qS )r r )r� r� r r r r� � r� zAClientTest.test_obtain_and_enroll_certificate.<locals>.<listcomp>)r� r� r� )r r r0 ri r r_ Z obtain_and_enroll_certificate�call_args_list)r Z mock_storageZmock_obtain_certificater� �namesr r r �"test_obtain_and_enroll_certificate� s � z-ClientTest.test_obtain_and_enroll_certificatez$certbot._internal.cli.helpful_parserc C s� ddg}t �� }t�|d �}t�|d �t�|d � }tj�|dd�}tj�|dd�}tj�|dd�}d |_d |d |d |g|_| j � |||||�\} } } tj� | �tj� |�ks�J �tj� | �tj� |�ks�J �tj� | �tj� |�ks�J �t | d ��} | � � } W d � n1 �s0 Y | t�|d �k�s<J �t | d ��}|� � }W d � n1 �sf0 Y |t�|d �t�|d � k�s�J �t�|� d S )Nz cert_512.pemzcert-san_512.pemr rR �certsZchainsz chain.pemz fullchain.pemZcertonlyz --cert-pathz --chain-pathz--fullchain-path�rb)�tempfileZmkdtempr{ � load_vectorr �path�joinZverb�argsri Zsave_certificate�dirname�open�read�shutil�rmtree)r Z mock_parserr� Ztmp_pathZcert_pemZ chain_pemZcandidate_cert_pathZcandidate_chain_pathZcandidate_fullchain_path� cert_path� chain_path�fullchain_pathZ cert_fileZ cert_contentsZ chain_fileZchain_contentsr r r �test_save_certificate� sD �� � � � ( ( � z ClientTest.test_save_certificatec C s� t �tj��& | j�dgdddd� W d � n1 s80 Y t�� }|| j_| j�dgdddd� |j j t j � d�t j � d�ddt j � d�d� |jjdks�J �|j� � d S )N�foo.barrr r� r� � fullchain)r r r� r Zkey_pathr� )r@ rA r r? ri �deploy_certificater r r� � deploy_certra r r� �abspath�saverV �restart�r � mock_utilr� r r r � test_deploy_certificate_success� s 4 �z*ClientTest.test_deploy_certificate_successz,certbot._internal.client.display_util.notifyc C s| t �� }|| j_d| j_tj|j_t � tj��& | j� dgdddd� W d � n1 sZ0 Y |j � � |�d� d S )NZfoobarr rr r� r� r zDeploying certificate)r r ri r� r r � PluginErrorr r> r@ rA r �recovery_routinera Zassert_any_call)r r � mock_notifyr� r r r � test_deploy_certificate_failure� s 4 z*ClientTest.test_deploy_certificate_failurec C sj t �� }|| j_tj|j_t� tj��& | j� dgdddd� W d � n1 sR0 Y |j � � d S )Nr rr r� r� r ) r r ri r� r r r r> r@ rA r r ra r r r r �$test_deploy_certificate_save_failure s 4z/ClientTest.test_deploy_certificate_save_failurec C s� t �� }tjd g|j_|| j_t� tj��& | j� dgdddd� W d � n1 sV0 Y |� d� |j � � |jjdks�J �d S )Nr rr r� r� r zuWe were unable to install your certificate, however, we successfully restored your server to its prior configuration.r� )r r r r r r> ri r� r@ rA r r� �rollback_checkpointsra rV )r �mock_get_utilityr r� r r r �'test_deploy_certificate_restart_failure s 4� z2ClientTest.test_deploy_certificate_restart_failurec C s� t �� }tj|j_tj|j_|| j_ t � tj��& | j� dgdddd� W d � n1 s\0 Y |j jdksvJ �d|j jd d v s�J �|j�� |jjdks�J �d S ) Nr rr r� r� r rR z6An error occurred and we failed to restore your configr )r r r r r r> � ReverterErrorr ri r� r@ rA r r� rV re ra )r r rc r� r r r �(test_deploy_certificate_restart_failure2" s 4� z3ClientTest.test_deploy_certificate_restart_failure2c C s6 t jj}d|� d�g}dg}d|� d�}d}d|� d�g}t�tj�� | j�|d � W d � n1 sj0 Y t�tj�� | j�||� W d � n1 s�0 Y t�tj�� | j�||� W d � n1 s�0 Y t�tj�� | j�|d � W d � n1 �s0 Y | j�||� d S )NZexamzple.comr� r� z.barr z*.exam) r r� �sepr@ rA r r? ri Z_choose_lineagename)r r Zinvalid_domainsZ valid_domainsZinvalid_certnameZvalid_certnameZinvalid_wildcard_domainr r r �test_choose_lineage_name2 s ,,,.z#ClientTest.test_choose_lineage_name)rR )NrR )#r r r r r% r� r� r� r r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r{ r| r r r r r r r} r r r, r r� sj 8 # # & $ r� c s� e Zd ZdZ� fdd�Zdd� Zdd� Ze�d�d d � �Z e�d�d d � �Z e�d�d d� �Z e�d�dd� �Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd*d$d%�Zd&d'� Zd(d)� Z� ZS )+�EnhanceConfigTestz9Tests for certbot._internal.client.Client.enhance_config.c s4 t � �� d| j_d| j_d| j_d| j_d| _d S )NFz example.org)r$ r% r �hsts�redirect�staple�uirr� r r, r r r% I s zEnhanceConfigTest.setUpc C sB t �tj��" | j�| jgd � W d � n1 s40 Y d S r\ )r@ rA r r? ri �enhance_configr� r r r r �test_no_installerR s z#EnhanceConfigTest.test_no_installerc C s� t �� | j_g | jjj_d | j_d| j_t � d��"}| j� | j gd � W d � n1 sZ0 Y |j j dkstJ �| jjj�� d S )NTr^ rR )r r ri r� �supported_enhancementsr0 r r r r r! r� r� rV �enhancer� )r rc r r r �test_unsupportedV s 0z"EnhanceConfigTest.test_unsupportedr^ c C s< d| j _| �� |jjdu s J �|jjd d dks8J �d S )NTr rR �Strict-Transport-Security)r r �_test_with_already_existing�inforB re �r r� r r r �test_already_exists_headera s �z,EnhanceConfigTest.test_already_exists_headerc C s< d| j _| �� |jjdu s J �|jjd d dks8J �d S )NTr rR r )r r r' r( rB re r) r r r � test_already_exists_redirecti s �z.EnhanceConfigTest.test_already_exists_redirectc C s$ d| j _| �� |jjdu s J �d S r6 )r r r' r� rB r) r r r �#test_config_set_no_warning_redirectq s z5EnhanceConfigTest.test_config_set_no_warning_redirectc C s$ d | j _| �� |jjdu s J �d S r6 )r r �_test_with_all_supportedr� rB r) r r r �test_no_warn_redirectw s z'EnhanceConfigTest.test_no_warn_redirectc C s* d| j _| �� | jjj�| jdd� d S )NT�ensure-http-headerr& )r r r- ri r� r$ r� r� r r r r �test_no_ask_hsts} s �z"EnhanceConfigTest.test_no_ask_hstsc C s* d| j _| �� | jjj�| jdd � d S )NTr )r r r- ri r� r$ r� r� r r r r �test_no_ask_redirect� s �z&EnhanceConfigTest.test_no_ask_redirectc C s* d| j _| �� | jjj�| jdd � d S )NT� staple-ocsp)r r r- ri r� r$ r� r� r r r r �test_no_ask_staple� s �z$EnhanceConfigTest.test_no_ask_staplec C s* d| j _| �� | jjj�| jdd� d S )NTr/ zUpgrade-Insecure-Requests)r r r- ri r� r$ r� r� r r r r �test_no_ask_uir� s �z!EnhanceConfigTest.test_no_ask_uirc C s8 t �� | j_tj| jjj_| jdd� | jjj � � d S )NT)� enhance_error) r r ri r� r r r$ r> � _test_errorr ra r r r r �test_enhance_failure� s z&EnhanceConfigTest.test_enhance_failurec C sF t �� | j_tj| jjj_| �� | jjj � � | jjj� t j � d S r\ ) r r ri r� r r r r> r6 r ra rb r r r r �test_save_failure� s z#EnhanceConfigTest.test_save_failurec C s* t �� | j_tjd g| jjj_| �� d S r\ ) r r ri r� r r r r> �_test_error_with_rollbackr r r r �test_restart_failure� s z&EnhanceConfigTest.test_restart_failurec C s0 t �� }tj|j_tj|j_|| j_ | � � d S r\ ) r r r r r r> r r ri r� r9 )r r� r r r �test_restart_failure2� s z'EnhanceConfigTest.test_restart_failure2c C s | � � | jjjjdu s J �d S r4 )r6 ri r� r rB r r r r r9 � s z+EnhanceConfigTest._test_error_with_rollbackFc C s� d| j _t�d��l}t�� �D}t�tj �� | � � W d � n1 sH0 Y W d � n1 sf0 Y W d � n1 s�0 Y |r�|j j dks�J �d|j j d d d ks�J �|r�|j�d� d S )NTr^ rR z(Unable to set the %s enhancement for %s.r z0Rolling back to previous server configuration...)r r r r r{ r| r@ rA r r r- r� rV r� Zcriticalr� )r r5 Z restart_errorrc Zmock_gur r r r6 � s �b �z EnhanceConfigTest._test_errorc C sf | j jd u rt�� | j _g d�| j jj_| j �| jgd � | j jjj dksNJ �| j jj j dksbJ �d S )N�r/ r r2 rR ) ri r� r r r# r0 r! r� r rV r r r r r r- � s z*EnhanceConfigTest._test_with_all_supportedc C sB t �� | j_g d�| jjj_t�� | jjj_ | j� | j gd � d S )Nr< ) r r ri r� r# r0 r Z PluginEnhancementAlreadyPresentr$ r> r! r� r r r r r' � s z-EnhanceConfigTest._test_with_already_existing)FF)r r r r r% r" r% r r r* r+ r, r. r0 r1 r3 r4 r7 r8 r: r; r9 r6 r- r' r} r r r, r r F s0 r c @ s4 e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd S ) � RollbackTestz,Tests for certbot._internal.client.rollback.c C s t �� | _d S r\ )r r � m_installr r r r r% � s zRollbackTest.setUpc C sR ddl m} t�d��(}||_|d |i t�� � W d � n1 sD0 Y d S )Nr )�rollbackz8certbot._internal.client.plugin_selection.pick_installer)r r? r r r> r )�clsZ checkpointsr> r? Zmpir r r r � s zRollbackTest._callc C s: | � d| j� | �� jjdks"J �| �� jjdks6J �d S �NrR )r r> r rV r r r r r �test_no_problems� s z RollbackTest.test_no_problemsc C s | � dd � d S rA )r r r r r r" � s z RollbackTest.test_no_installerN) r r r r r% � classmethodr rB r" r r r r r= � s r= �__main__rR ),r ry r� r r �sysr� Zunittestr Z unittest.mockr Zjosepyr r@ Zcertbotr r Zcertbot._internalr r Zcertbot._internal.displayr r+ Zcertbot.compatr Zcertbot.tests.utilZtestsr{ r� r� r� ZConfigTestCaser r# r~ r� r ZTestCaser= r �exit�main�argv�__file__r r r r �<module> sD = > __pycache__/configuration_test.cpython-39.opt-1.pyc 0000644 00000010715 15114562471 0016264 0 ustar 00 a }|�g� � @ s� d Z ddlZddlmZ ddlZddlmZ ddlmZ ddl m Z ddl m Z ddl m Z G d d � d ej�Zed kr�e�e�ejd d� eg �� dS ) z Tests for certbot.configuration.� N)�mock)�errors)� constants)�misc)�os)�utilc s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Ze� d �d d � �Z d d� Z e� d �dd� �Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Z� ZS ) �NamespaceConfigTestz0Tests for certbot.configuration.NamespaceConfig.c s. t � �� d| j_d| j_d| j_d| j_d S )N�barz https://acme-server.org:443/newi� �� )�super�setUp�config�foo�server� https_port� http01_port��self�� __class__� �N/usr/lib/python3.9/site-packages/certbot/_internal/tests/configuration_test.pyr s zNamespaceConfigTest.setUpc C sP d| j _ddlm} t�tj�� || j j� W d � n1 sB0 Y d S )Nr r ��NamespaceConfig) r r �certbot.configurationr �pytest�raisesr �Error� namespace)r r r r r �test_init_same_ports s z(NamespaceConfigTest.test_init_same_portsc C s d S �Nr r r r r �test_proxy_getattr s z&NamespaceConfigTest.test_proxy_getattrc C s d| j _d S )NzBhttp://user:pass@acme.server:443/p/a/t/h;parameters?query#fragment)r r r r r r �test_server_path" s z$NamespaceConfigTest.test_server_pathz certbot.configuration.constantsc C s, d|_ d|_d|_d|_d|_t�d�}d S )NZaccZbackupsz../p�keys�tzacc/acme-server.org:443/new)Z ACCOUNTS_DIRZ BACKUP_DIRZIN_PROGRESS_DIRZKEY_DIRZTEMP_CHECKPOINT_DIRr Z.underscores_for_unsupported_characters_in_path)r �mock_constantsZref_pathr r r �test_dynamic_dirs+ s �z%NamespaceConfigTest.test_dynamic_dirsc C sP ddl m} d}d}d}d}tjg d�d�}||_||_||_||_||�}d S ) Nr r r r �bazz mock.server�� config_dir�work_dir�logs_dirr r �domainsr ��spec)r r r � MagicMockr) r* r+ r )r r � config_base� work_base� logs_baser �mock_namespacer r r r �test_absolute_paths? s z'NamespaceConfigTest.test_absolute_pathsc C s d|_ d|_d|_d S )N�a�lZrenewal_configs)Z ARCHIVE_DIRZLIVE_DIRZRENEWAL_CONFIGS_DIR)r r% r r r �test_renewal_dynamic_dirs_ s z-NamespaceConfigTest.test_renewal_dynamic_dirsc C sF ddl m} d}d}d}tjg d�d�}||_||_||_||�}d S )Nr r r r r' r( r- )r r r r/ r) r* r+ )r r r0 r1 r2 r3 r r r r �test_renewal_absolute_pathsj s z/NamespaceConfigTest.test_renewal_absolute_pathsc C s d| j _d| j j_d S )N�* i9 )r r r r r r r r �test_get_and_set_attr~ s z)NamespaceConfigTest.test_get_and_set_attrc C s d S r r r r r r �test_hook_directories� s z)NamespaceConfigTest.test_hook_directoriesc C s d| j _d S )Nza value)r Z somethingr r r r �"test_set_by_user_runtime_overrides� s z6NamespaceConfigTest.test_set_by_user_runtime_overridesc C sZ ddl m} || jj�}t�t�� |�d� W d � n1 sB0 Y |�i � d S )Nr r Zwhatever) r r r r r r � RuntimeErrorZ set_by_userZset_argument_sources)r r r r r r �test_set_by_user_exception� s ( z.NamespaceConfigTest.test_set_by_user_exceptionc C s | j j�d� d S )Nz example.org)r r, �appendr r r r �test_set_by_user_mutables� s z-NamespaceConfigTest.test_set_by_user_mutables)�__name__� __module__� __qualname__�__doc__r r r! r" r Zpatchr& r4 r7 r8 r: r; r< r> r@ � __classcell__r r r r r s r �__main__� )rD �sysZunittestr r Zcertbotr Zcertbot._internalr Zcertbot.compatr r Z certbot.testsr Z test_utilZConfigTestCaser rA �exit�main�argv�__file__r r r r �<module> s compat/__pycache__/__init__.cpython-39.opt-1.pyc 0000644 00000000246 15114562471 0015376 0 ustar 00 a }|�g � @ s d S )N� r r r �K/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/__init__.py�<module> � compat/__pycache__/__init__.cpython-39.pyc 0000644 00000000246 15114562471 0014437 0 ustar 00 a }|�g � @ s d S )N� r r r �K/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/__init__.py�<module> � compat/__pycache__/filesystem_test.cpython-39.opt-1.pyc 0000644 00000052131 15114562471 0017062 0 ustar 00 a }|�g�j � @ s4 d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddl m Z ddl m Z ddl m Z ddlm mZ ddlmZ z ddlZddlZddlZd ZW n ey� d ZY n0 d Zd Zd Zejedd�G dd� de��ZG dd� de�Z G dd� de�Z ejedd�G dd� de��Z G dd� dej�Z ejedd�G dd � d ej��Z G d d � d ej�Z!G d d � d ej�Z"G d!d"� d"ej�Z#G d#d$� d$ej�Z$G d%d&� d&ej�Z%G d'd(� d(ej�Z&G d)d*� d*ej'�Z(ej)d+d,� �Z*d-d.� Z+d/d0� Z,d1d2� Z-d8d4d5�Z.e/d6k�r0e�0e�1ej2d7d� e3g �� dS )9z#Tests for certbot.compat.filesystem� N)�mock)�util)�lock)� filesystem)�os)�TempDirTestCaseFTzS-1-1-0zS-1-5-18z S-1-5-32-544z"Tests specific to Windows security��reasonc sp e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Z� ZS )�WindowsChmodTestsz:Unit tests for Windows chmod function in filesystem modulec s t � �� t| j�| _d S �N��super�setUp� _create_probe�tempdir� probe_path��self�� __class__� �R/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/filesystem_test.pyr # s zWindowsChmodTests.setUpc C sb t j�| jd�}t �| j|� t| j��� }t|��� }t� |d� t| j��� }t|��� }d S )N�link� ) r �path�joinr �symlinkr �_get_security_dacl�GetSecurityDescriptorDaclr �chmod)r � link_path�ref_dacl_probeZ ref_dacl_link�cur_dacl_probeZ cur_dacl_linkr r r �test_symlink_resolution' s z)WindowsChmodTests.test_symlink_resolutionc sF t �t��t�| jd� t| j��� � t�| jd� t| j��� � d S )Nr i� )� win32security�ConvertStringSidToSid� EVERYBODY_SIDr r r r r r r ��daclZ everybodyr �test_world_permission6 s z'WindowsChmodTests.test_world_permissionc C s< t �| jd� t| j��� }t �| jd� t| j��� }d S )Nr i� )r r r r r )r r! r" r r r �test_group_permissions_noopE s z-WindowsChmodTests.test_group_permissions_noopc sp t �t��t �t�� t�| jd� t| j��� ���fdd�t d�� � �D �}� �fdd�t d�� � �D �}d S )N� c s( g | ] }� � |�d �kr� � |��qS �� �ZGetAce��.0�index)r( �systemr r � <listcomp>U s �z<WindowsChmodTests.test_admin_permissions.<locals>.<listcomp>r c s( g | ] }�� |�d � kr�� |��qS r, r. r/ )�adminsr( r r r3 W s �) r$ r% � SYSTEM_SID� ADMINS_SIDr r r r r �range� GetAceCount)r Z system_acesZ admin_acesr )r4 r( r2 r �test_admin_permissionsN s z(WindowsChmodTests.test_admin_permissionsc C s | � dtj� d S )N� )� _test_flag� ntsecuritycon�FILE_GENERIC_READr r r r �test_read_flag` s z WindowsChmodTests.test_read_flagc C s | � dtj� d S �N� )r; r< �FILE_GENERIC_EXECUTEr r r r �test_execute_flagc s z#WindowsChmodTests.test_execute_flagc C s | � dtjtjA tjA � d S )Nr- )r; r< �FILE_ALL_ACCESSr= rA r r r r �test_write_flagf s ��z!WindowsChmodTests.test_write_flagc C s | � dtj� d S )N� )r; r< rC r r r r �test_full_flagk s z WindowsChmodTests.test_full_flagc sT t �| jd|B � t| j��� � t�t��� �fdd�td� � � �D �}|d }d S )Nr c s( g | ] }� � |�d �kr� � |��qS r, r. r/ r' r r r3 v s �z0WindowsChmodTests._test_flag.<locals>.<listcomp>r ) r r r r r r$ r% r& r7 r8 )r Z everyone_modeZ windows_flagZacls_everybodyr r' r r; n s z WindowsChmodTests._test_flagc C s� t �dt�� �\}}}t| j�}t| j||� t�| jd� t | j�}t � t �}t| j�}t| j||� t�| jd� t | j�}d S )N� r ) r$ ZLookupAccountName�win32apiZ GetUserName�_get_security_ownerr � _set_ownerr r r r% r6 )r Zauthenticated_user�_�security_ownerZ security_daclZ admin_userr r r � test_user_admin_dacl_consistency s z2WindowsChmodTests.test_user_admin_dacl_consistency)�__name__� __module__� __qualname__�__doc__r r# r) r* r9 r> rB rD rF r; rM � __classcell__r r r r r s r c @ s* e Zd Zdd� Zdd� Zed dd��ZdS ) � UmaskTestc C s� t �d�}zjtj�| jd�}t �|� t �d� tj�| jd�}t �|� tj�| jd�}t j|dd� W t �|� n t �|� 0 d S )N� �probe1�? �dir2�dir3� )�mode)r �umaskr r r r �mkdir)r �previous_umaskZdir1rW rX r r r �test_umask_on_dir� s zUmaskTest.test_umask_on_dirc C s� t �d�}zftj�| jd�}t�|� t �d� tj�| jd�}t�|� tj�| jd�}t�|� W t �|� n t �|� 0 d S )NrT rU rV Zprobe2Zprobe3)r r[ r r r r rS � _create_file)r r] Zfile1Zfile2Zfile3r r r �test_umask_on_file� s z UmaskTest.test_umask_on_filerY c C s> d }z$t j| tj|d�}W |r:t�|� n|r8t�|� 0 d S )N)�flagsrZ )r �openr �O_CREAT�close)r rZ Z file_descr r r r_ � s �zUmaskTest._create_fileN)rY )rN rO rP r^ r` � staticmethodr_ r r r r rS � s rS c s$ e Zd Z� fdd�Zdd� Z� ZS )�ComputePrivateKeyModeTestc s t � �� t| j�| _d S r r r r r r r � s z ComputePrivateKeyModeTest.setUpc C s& t �| jd� t �| jd�}tr"n d S )NrY i� )r r r Zcompute_private_key_mode� POSIX_MODE)r Znew_moder r r � test_compute_private_key_mode� s z7ComputePrivateKeyModeTest.test_compute_private_key_mode)rN rO rP r rh rR r r r r rf � s rf c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S ) �WindowsOpenTestc sP t j�| jd�}t�|t jt jB t jB d�}t � |� t |�� � � t � t��d S )N�filer )r r r r r rb rc �O_EXCL�O_RDWRrd r r r$ r% r& �r r Zdescr r' r �!test_new_file_correct_permissions� s z1WindowsOpenTest.test_new_file_correct_permissionsc sX t j�| jd�}t|d��� t�|t jt jB d�}t �|� t |�� � � t � t ��d S )Nrj �wr )r r r r rb rd r rk rl r r r$ r% r& rm r r' r �&test_existing_file_correct_permissions� s z6WindowsOpenTest.test_existing_file_correct_permissionsc C s< | j ddtjtjB d� t�t��(}| j ddtjtjB d� W d � n1 sP0 Y | j ddtjd� | j ddtjd� tj�| j d�}t |d �� � t � |�}zHt�t��"}| j d dtjd� W d � n1 s�0 Y W |�� n |�� 0 t�t��" | j d dtjd� W d � n1 �s.0 Y d S ) Nr@ F)� file_existra r- T� r: �5ro � � )�_test_one_creationr rc rk �pytest�raises�OSErrorr r r rb rd r ZLockFile�release�O_RDONLY)r �exc_infor Zfilelockr r r �test_create_file_on_open� s 6 0 z(WindowsOpenTest.test_create_file_on_openc C s� t j�| jt|��}|rNt j�|�sNt|d�� W d � n1 sD0 Y d }z t�||�}W |r�t �|� n|r�t �|� 0 d S )Nro ) r r r r �str�existsrb r rd )r Znumrq ra Zone_fileZhandlerr r r rv s �z"WindowsOpenTest._test_one_creationN)rN rO rP rn rp r} rv r r r r ri � s ri c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �TempUmaskTestsz8Tests for using the TempUmask class in `with` statementsc C s t �d�}t �|� |S )Nr )r r[ )r Z old_umaskr r r � _check_umask& s zTempUmaskTests._check_umaskc C s8 t �d� t �d�� W d � n1 s*0 Y d S �NrT rV )r r[ � temp_umaskr r r r �test_works_normally+ s z"TempUmaskTests.test_works_normallyc C sP t �d� z4t �d�� t� �W d � n1 s20 Y W n Y n0 d S r� )r r[ r� � Exceptionr r r r �!test_resets_umask_after_exception2 s (z0TempUmaskTests.test_resets_umask_after_exceptionN)rN rO rP rQ r� r� r� r r r r r� $ s r� �!Test specific to Windows securityc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �WindowsMkdirTestszFUnit tests for Windows mkdir + makedirs functions in filesystem modulec s6 t j�| jd�}t�|d� t�t��t |�� � � d S )N�dirr ) r r r r r r\ r$ r% r& r r )r r r r' r � test_mkdir_correct_permissions@ s z0WindowsMkdirTests.test_mkdir_correct_permissionsc sD t j�| jd�}t j�|d�}t�|d� t�t��t |�� � � d S )Nr� �subpathr ) r r r r r �makedirsr$ r% r& r r )r r r� r r' r �!test_makedirs_correct_permissionsK s z3WindowsMkdirTests.test_makedirs_correct_permissionsc C sN t j�| jd�}dd l }|j}t�|� zt�|� W n tyH Y n0 d S )Nr� r )r r r r r\ r r� ry )r r �std_osZoriginal_mkdirr r r � test_makedirs_switch_os_mkdirW s z/WindowsMkdirTests.test_makedirs_switch_os_mkdirN)rN rO rP rQ r� r� r� r r r r r� = s r� c @ s e Zd ZdZdd� ZdS )� MakedirsTestsz5Unit tests for makedirs function in filesystem modulec C sT t j�| jd�}t j�|d�}t�d�}zt�|d� W t�|� n t�|� 0 d S )Nr� r� rT r )r r r r r r[ r� )r r r� r] r r r r� h s z/MakedirsTests.test_makedirs_correct_permissionsN)rN rO rP rQ r� r r r r r� f s r� c sj e Zd ZdZ� fdd�Zejedd�dd� �Zej edd�d d � �Z d d � Z ejedd�d d� �Z � Z S )�CopyOwnershipAndModeTestzYTests about copy_ownership_and_apply_mode, copy_ownership_and_mode and has_same_ownershipc s t � �� t| j�| _d S r r r r r r r y s z CopyOwnershipAndModeTest.setUpr� r c s� t �t�}t �� j}|�|d� t�d��V}t�d��,}||_t j d| j dddd� W d � n1 sh0 Y W d � n1 s�0 Y |j d }|d d }|j d }|d d }|� � � t �t��d S ) NF� win32security.GetFileSecurityz win32security.SetFileSecurity�dummyr T�Z copy_userZ copy_groupr r- r@ )r$ r% r5 �SECURITY_ATTRIBUTES�SECURITY_DESCRIPTOR�SetSecurityDescriptorOwnerr �patch� return_valuer � copy_ownership_and_apply_moder Zcall_args_listr r& )r r2 �security�mock_getZmock_setZ first_callZ second_callr r' r �*test_copy_ownership_and_apply_mode_windows} s �B zCCopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_windows� Test specific to Linux securityc C s� t �d���}t �d��`}t �d��6}d|j_d|j_tjd| jdddd � W d � n1 s^0 Y W d � n1 s|0 Y W d � n1 s�0 Y |�| jdd� |�| jd� d S ) Nzos.chownzos.chmodzos.stat�2 �3 r� r Tr� ) r r� r� �st_uid�st_gidr r� r �assert_called_once_with)r Z mock_chownZ mock_chmodZ mock_statr r r �(test_copy_ownership_and_apply_mode_linux� s �`zACopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_linuxc C sD t j�| jd�}t j�| jd�}t�|d��� t�|d��� d S )NZtest1Ztest2ro )r r r r r � safe_openrd )r Zpath1Zpath2r r r �test_has_same_ownership� s z0CopyOwnershipAndModeTest.test_has_same_ownershipc C sf | j }t| jdd�}t�|d� t�d�� }t�||� W d � n1 sL0 Y |�||� d S )N�dst)�namer z-certbot.compat.filesystem._copy_win_ownership) r r r r r r r� Zcopy_ownership_and_moder� )r �srcr� Zmock_copy_ownerr r r �$test_copy_ownership_and_mode_windows� s * z=CopyOwnershipAndModeTest.test_copy_ownership_and_mode_windows)rN rO rP rQ r �unittest�skipIfrg r� � skipUnlessr� r� r� rR r r r r r� w s r� c sl e Zd ZdZ� fdd�Zdd� Zejedd�dd � �Z ej ed d�d d � �Z d d� Z dd� Z dd� Z� ZS )�CheckPermissionsTestz-Tests relative to functions that check modes.c s t � �� t| j�| _d S r r r r r r r � s zCheckPermissionsTest.setUpc C s t �| jd� d S )Nr �r r r r r r r �test_check_mode� s z$CheckPermissionsTest.test_check_moder� r c C sT t �t�}t �� j}|�|d� t�d��}||_W d � n1 sF0 Y d S )NFr� ) r$ r% r5 r� r� r� r r� r� )r r2 r� r� r r r �test_check_owner_windows� s z-CheckPermissionsTest.test_check_owner_windowsr� c C sH dd l }|�� }t�d��}|d |_W d � n1 s:0 Y d S )Nr z os.getuidr@ )r �getuidr r� r� )r r� �uidZmock_uidr r r �test_check_owner_linux� s z+CheckPermissionsTest.test_check_owner_linuxc C sd t �d��}d|_W d � n1 s&0 Y t �d��}d|_W d � n1 sV0 Y d S )Nz$certbot.compat.filesystem.check_modeFz%certbot.compat.filesystem.check_owner)r r� r� )r Z mock_modeZ mock_ownerr r r �test_check_permissions� s z+CheckPermissionsTest.test_check_permissionsc C s. t �| jd� t �| jd� t �| jd� d S )N�� r i� r� r r r r �test_check_min_permissions� s z/CheckPermissionsTest.test_check_min_permissionsc C s t �| jd� t �| jd� d S )Nr� r r� r r r r �test_is_world_reachable� s z,CheckPermissionsTest.test_is_world_reachable)rN rO rP rQ r r� r� r� rg r� r� r� r� r� r� rR r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� OsReplaceTestz3Test to ensure consistent behavior of rename methodc C sL t j�| jd�}t j�| jd�}t|d��� t|d��� t�||� dS )zKEnsure that replace will effectively rename src into dst for all platforms.r� r� ro N)r r r r rb rd r �replace)r r� r� r r r � test_os_replace_to_existing_file s z.OsReplaceTest.test_os_replace_to_existing_fileN)rN rO rP rQ r� r r r r r� s r� c s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )� RealpathTestzTests for realpath methodc s t � �� t| j�| _d S r r r r r r r s zRealpathTest.setUpc C s� t �| j�| _tj�| jd�}t�| j|� t�� }tj�| jd�}tj� | j�}z.t� tj� | j�� t�||� W t� |� n t� |� 0 d S )NZlink_absZlink_rel) r �realpathr r r r r r �getcwd�basename�chdir�dirname)r r �curdirZ probe_namer r r r# s z$RealpathTest.test_symlink_resolutionc C s� t j�| jd�}t j�| jd�}t j�| jd�}t �||� t �||� t �||� tjtdd��}t� |� W d � n1 s�0 Y d S )NZlink1Zlink2Zlink3zlink1 is a loop!)�match) r r r r r rw rx � RuntimeErrorr r� )r Z link1_pathZ link2_pathZ link3_path�errorr r r � test_symlink_loop_mitigation0 s z)RealpathTest.test_symlink_loop_mitigation)rN rO rP rQ r r# r� rR r r r r r� s r� c @ sl e Zd ZdZdd� Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Ze�d�e�d�d d � ��Z d S ) �IsExecutableTestz Tests for is_executable methodc sx t j�| jd�}ddlm� d � fdd� }tjd|d��, t �t � |t j t j B d�� W d � n1 sj0 Y d S ) NZfoor ��_generate_daclc s. � | ||�}t d|�� �D ]}|�d� q|S r? )r7 r8 Z DeleteAce)Zuser_sidrZ �maskr( rK r� r r � _execute_mockK s z;IsExecutableTest.test_not_executable.<locals>._execute_mockz(certbot.compat.filesystem._generate_dacl)Z side_effecti� )N) r r r r Zcertbot.compat.filesystemr� r r� rd r rb rc �O_WRONLY)r Z file_pathr� r r� r �test_not_executable> s :z$IsExecutableTest.test_not_executablez(certbot.compat.filesystem.os.path.isfilez#certbot.compat.filesystem.os.accessc C s6 t � � d|_d|_W d � n1 s(0 Y d S �NT��_fix_windows_runtimer� �r Z mock_accessZ mock_isfiler r r �test_full_pathW s z IsExecutableTest.test_full_pathc C s6 t � � d|_d|_W d � n1 s(0 Y d S r� r� r� r r r � test_rel_path_ s z IsExecutableTest.test_rel_pathc C s6 t � � d|_d|_W d � n1 s(0 Y d S )NTFr� r� r r r �test_not_foundg s z IsExecutableTest.test_not_foundN) rN rO rP rQ r� r r� r� r� r� r r r r r� < s r� c @ sl e Zd Zejedd�e�d�dd� ��Zej edd�e�d�dd� ��Z ej edd�e�d�d d � ��Z d S ) � ReadlinkTestzTests specific to Linuxr z%certbot.compat.filesystem.os.readlinkc C s d|_ d S )Nz /normal/path�r� �r Z mock_readlinkr r r �test_path_posixq s z ReadlinkTest.test_path_posixzTests specific to Windowsc C s d|_ d S )Nz\\?\C:\short\pathr� r� r r r �test_normal_path_windowsw s z%ReadlinkTest.test_normal_path_windowsc C sF ddd |_ t�t�� t�d� W d � n1 s80 Y d S )Nz \\?\C:\longi� z\pathr� )r� rw rx � ValueErrorr �readlinkr� r r r �test_extended_path_windows~ s z'ReadlinkTest.test_extended_path_windowsN) rN rO rP r� r� rg r r� r� r� r� r� r r r r r� p s r� c c s^ t jdkrd V nHt�d��.} | jj}|jj}tj|_d V W d � n1 sP0 Y d S )N�ntr� ) r r� r r� r� r ZGetEffectiveRightsFromAclr< rA )r� Z dacl_mockZ mode_mockr r r r� � s r� c C s t �| t j�S r )r$ �GetFileSecurityZDACL_SECURITY_INFORMATION��targetr r r r � s r c C s t �| t j�S r )r$ r� �OWNER_SECURITY_INFORMATIONr� r r r rI � s rI c C s |� |d� t�| tj|� d S )NF)r� r$ ZSetFileSecurityr� )r� rL �userr r r rJ � s �rJ �probec C s2 t �| d� tj�| |�}tj|ddd��� |S )Nr� ro )r )r r r r r r r� rd )r r� r r r r r � s r �__main__r@ )r� )4rQ � contextlib�errno�sysr� r rw Zcertbotr Zcertbot._internalr Zcertbot.compatr r Zcertbot.tests.utilZtestsZ test_utilr r< rH r$ rg � ImportErrorr& r5 r6 r� r rS rf ri r� r� r� r� r� r� r� r� ZTestCaser� �contextmanagerr� r rI rJ r rN �exit�main�argv�__file__r r r r �<module> s\ w3 F (IC)4 compat/__pycache__/filesystem_test.cpython-39.pyc 0000644 00000060433 15114562471 0016127 0 ustar 00 a }|�g�j � @ s4 d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddl m Z ddl m Z ddl m Z ddlm mZ ddlmZ z ddlZddlZddlZd ZW n ey� d ZY n0 d Zd Zd Zejedd�G dd� de��ZG dd� de�Z G dd� de�Z ejedd�G dd� de��Z G dd� dej�Z ejedd�G dd � d ej��Z G d d � d ej�Z!G d d � d ej�Z"G d!d"� d"ej�Z#G d#d$� d$ej�Z$G d%d&� d&ej�Z%G d'd(� d(ej�Z&G d)d*� d*ej'�Z(ej)d+d,� �Z*d-d.� Z+d/d0� Z,d1d2� Z-d8d4d5�Z.e/d6k�r0e�0e�1ej2d7d� e3g �� dS )9z#Tests for certbot.compat.filesystem� N)�mock)�util)�lock)� filesystem)�os)�TempDirTestCaseFTzS-1-1-0zS-1-5-18z S-1-5-32-544z"Tests specific to Windows security��reasonc sp e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Z� ZS )�WindowsChmodTestsz:Unit tests for Windows chmod function in filesystem modulec s t � �� t| j�| _d S �N��super�setUp� _create_probe�tempdir� probe_path��self�� __class__� �R/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/filesystem_test.pyr # s zWindowsChmodTests.setUpc C s� t j�| jd�}t �| j|� t| j��� }t|��� }t� |d� t| j��� }t|��� }t� ||�rnJ �t� ||�s~J �d S )N�link� ) r �path�joinr �symlinkr �_get_security_dacl�GetSecurityDescriptorDaclr �chmod�_compare_dacls)r � link_path�ref_dacl_probeZ ref_dacl_link�cur_dacl_probeZ cur_dacl_linkr r r �test_symlink_resolution' s z)WindowsChmodTests.test_symlink_resolutionc s� t �t��t�| jd� t| j��� � � �fdd�td� � � �D �rHJ �t�| jd� t| j��� � � �fdd�td� � � �D �s�J �d S )Nr c s( g | ] }� � |�d �kr� � |��qS �� �ZGetAce��.0�index��daclZ everybodyr r � <listcomp>< s �z;WindowsChmodTests.test_world_permission.<locals>.<listcomp>r i� c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- B s �) � win32security�ConvertStringSidToSid� EVERYBODY_SIDr r r r r �range� GetAceCountr r r+ r �test_world_permission6 s "z'WindowsChmodTests.test_world_permissionc C sL t �| jd� t| j��� }t �| jd� t| j��� }t �||�sHJ �d S )Nr i� )r r r r r r )r r" r# r r r �test_group_permissions_noopE s z-WindowsChmodTests.test_group_permissions_noopc s� t �t��t �t�� t�| jd� t| j��� ���fdd�t d�� � �D �}� �fdd�t d�� � �D �}t |�dks|J �t |�dks�J �|d d t j ks�J �|d d t j ks�J �d S )N� c s( g | ] }� � |�d �kr� � |��qS r% r' r( )r, �systemr r r- U s �z<WindowsChmodTests.test_admin_permissions.<locals>.<listcomp>r c s( g | ] }�� |�d � kr�� |��qS r% r' r( )�adminsr, r r r- W s �� )r. r/ � SYSTEM_SID� ADMINS_SIDr r r r r r1 r2 �len� ntsecuritycon�FILE_ALL_ACCESS)r Z system_acesZ admin_acesr )r7 r, r6 r �test_admin_permissionsN s z(WindowsChmodTests.test_admin_permissionsc C s | � dtj� d S )N� )� _test_flagr< �FILE_GENERIC_READr r r r �test_read_flag` s z WindowsChmodTests.test_read_flagc C s | � dtj� d S �Nr8 )r@ r< �FILE_GENERIC_EXECUTEr r r r �test_execute_flagc s z#WindowsChmodTests.test_execute_flagc C s | � dtjtjA tjA � d S )Nr& )r@ r< r= rA rD r r r r �test_write_flagf s ��z!WindowsChmodTests.test_write_flagc C s | � dtj� d S )N� )r@ r< r= r r r r �test_full_flagk s z WindowsChmodTests.test_full_flagc st t �| jd|B � t| j��� � t�t��� �fdd�td� � � �D �}t |�dksXJ �|d }|d |kspJ �d S )Nr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- v s �z0WindowsChmodTests._test_flag.<locals>.<listcomp>r r8 ) r r r r r r. r/ r0 r1 r2 r; )r Z everyone_modeZ windows_flagZacls_everybodyr r+ r r@ n s z WindowsChmodTests._test_flagc C s� t �dt�� �\}}}t| j�}t| j||� t�| jd� t | j�}|� � � � dksZJ �t � t �}t| j�}t| j||� t�| jd� t | j�}|� � � � dks�J �d S )N� r � r& )r. ZLookupAccountName�win32apiZ GetUserName�_get_security_ownerr � _set_ownerr r r r r2 r/ r: )r Zauthenticated_user�_�security_ownerZ security_daclZ admin_userr r r � test_user_admin_dacl_consistency s z2WindowsChmodTests.test_user_admin_dacl_consistency)�__name__� __module__� __qualname__�__doc__r r$ r3 r4 r> rB rE rF rH r@ rP � __classcell__r r r r r s r c @ s* e Zd Zdd� Zdd� Zed dd��ZdS ) � UmaskTestc C s� t �d�}z�tj�| jd�}t �|� t �|d�du s:J �t �d� tj�| jd�}t �|� t �|d�du srJ �tj�| jd�}t j|d d � t �|d�du s�J �W t �|� n t �|� 0 d S ) N� �probe1�� T�? �dir2r �dir3� )�mode)r �umaskr r r r �mkdir� check_mode)r �previous_umaskZdir1r[ r\ r r r �test_umask_on_dir� s zUmaskTest.test_umask_on_dirc C s� t �d�}z�tj�| jd�}t�|� t �|d�du s:J �t �d� tj�| jd�}t�|� t �|d�du srJ �tj�| jd�}t�|� t �|d�du s�J �W t �|� n t �|� 0 d S ) NrW rX rY TrZ Zprobe2r Zprobe3) r r_ r r r r rV � _create_filera )r rb Zfile1Zfile2Zfile3r r r �test_umask_on_file� s z UmaskTest.test_umask_on_filer] c C s> d }z$t j| tj|d�}W |r:t�|� n|r8t�|� 0 d S )N)�flagsr^ )r �openr �O_CREAT�close)r r^ Z file_descr r r rd � s �zUmaskTest._create_fileN)r] )rQ rR rS rc re � staticmethodrd r r r r rV � s rV c s$ e Zd Z� fdd�Zdd� Z� ZS )�ComputePrivateKeyModeTestc s t � �� t| j�| _d S r r r r r r r � s z ComputePrivateKeyModeTest.setUpc C s> t �| jd� t �| jd�}tr.|dks:J �n |dks:J �d S )Nr] i� i� )r r r Zcompute_private_key_mode� POSIX_MODE)r Znew_moder r r � test_compute_private_key_mode� s z7ComputePrivateKeyModeTest.test_compute_private_key_mode)rQ rR rS r rm rU r r r r rk � s rk c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S ) �WindowsOpenTestc sr t j�| jd�}t�|t jt jB t jB d�}t � |� t |�� � � t � t��� �fdd�td� �� �D �rnJ �d S )N�filer c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- � s �zEWindowsOpenTest.test_new_file_correct_permissions.<locals>.<listcomp>r )r r r r r rg rh �O_EXCL�O_RDWRri r r r. r/ r0 r1 r2 �r r Zdescr r+ r �!test_new_file_correct_permissions� s z1WindowsOpenTest.test_new_file_correct_permissionsc sz t j�| jd�}t|d��� t�|t jt jB d�}t �|� t |�� � � t � t ��� �fdd�td� �� �D �rvJ �d S )Nro �wr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- � s �zJWindowsOpenTest.test_existing_file_correct_permissions.<locals>.<listcomp>r )r r r r rg ri r rp rq r r r. r/ r0 r1 r2 rr r r+ r �&test_existing_file_correct_permissions� s z6WindowsOpenTest.test_existing_file_correct_permissionsc C sb | j ddtjtjB d� t�t��(}| j ddtjtjB d� W d � n1 sP0 Y |jjtj kslJ �| j ddtjd� | j ddtjd� tj � | j d�}t |d ��� t�|�}z\t�t��"}| j d dtjd� W d � n1 s�0 Y |jjtjk�s J �W |�� n |�� 0 t�t��" | j d dtjd� W d � n1 �sT0 Y d S ) Nr8 F)� file_existrf r& TrJ r? �5rt � � )�_test_one_creationr rh rp �pytest�raises�OSError�value�errnoZEEXISTr r r rg ri r ZLockFileZEACCES�release�O_RDONLY)r �exc_infor Zfilelockr r r �test_create_file_on_open� s 6 0 z(WindowsOpenTest.test_create_file_on_openc C s� t j�| jt|��}|rNt j�|�sNt|d�� W d � n1 sD0 Y d }z t�||�}W |r�t �|� n|r�t �|� 0 d S )Nrt ) r r r r �str�existsrg r ri )r Znumrv rf Zone_fileZhandlerr r r rz s �z"WindowsOpenTest._test_one_creationN)rQ rR rS rs ru r� rz r r r r rn � s rn c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �TempUmaskTestsz8Tests for using the TempUmask class in `with` statementsc C s t �d�}t �|� |S )Nr )r r_ )r Z old_umaskr r r � _check_umask& s zTempUmaskTests._check_umaskc C sh t �d� | �� dksJ �t �d�� | �� dks6J �W d � n1 sJ0 Y | �� dksdJ �d S �NrW rZ )r r_ r� � temp_umaskr r r r �test_works_normally+ s .z"TempUmaskTests.test_works_normallyc C s� t �d� | �� dksJ �zDt �d��& | �� dks8J �t� �W d � n1 sR0 Y W n | �� dksvJ �Y n0 d S r� )r r_ r� r� � Exceptionr r r r �!test_resets_umask_after_exception2 s (z0TempUmaskTests.test_resets_umask_after_exceptionN)rQ rR rS rT r� r� r� r r r r r� $ s r� �!Test specific to Windows securityc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �WindowsMkdirTestszFUnit tests for Windows mkdir + makedirs functions in filesystem modulec sX t j�| jd�}t�|d� t�t��t |�� � � � �fdd�t d� � � �D �rTJ �d S )N�dirr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- H s �zDWindowsMkdirTests.test_mkdir_correct_permissions.<locals>.<listcomp>r ) r r r r r r` r. r/ r0 r r r1 r2 )r r r r+ r � test_mkdir_correct_permissions@ s z0WindowsMkdirTests.test_mkdir_correct_permissionsc sf t j�| jd�}t j�|d�}t�|d� t�t��t |�� � � � �fdd�t d� � � �D �rbJ �d S )Nr� �subpathr c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- T s �zGWindowsMkdirTests.test_makedirs_correct_permissions.<locals>.<listcomp>r ) r r r r r �makedirsr. r/ r0 r r r1 r2 )r r r� r r+ r �!test_makedirs_correct_permissionsK s z3WindowsMkdirTests.test_makedirs_correct_permissionsc C sj t j�| jd�}dd l }|j}t�|� ||jks6J �zt�|� W n tyV Y n0 ||jksfJ �d S )Nr� r )r r r r r` r r� r} )r r �std_osZoriginal_mkdirr r r � test_makedirs_switch_os_mkdirW s z/WindowsMkdirTests.test_makedirs_switch_os_mkdirN)rQ rR rS rT r� r� r� r r r r r� = s r� c @ s e Zd ZdZdd� ZdS )� MakedirsTestsz5Unit tests for makedirs function in filesystem modulec C st t j�| jd�}t j�|d�}t�d�}z:t�|d� t�|d�sFJ �t�|d�sVJ �W t�|� n t�|� 0 d S )Nr� r� rW r )r r r r r r_ r� ra )r r r� rb r r r r� h s z/MakedirsTests.test_makedirs_correct_permissionsN)rQ rR rS rT r� r r r r r� f s r� c sj e Zd ZdZ� fdd�Zejedd�dd� �Zej edd�d d � �Z d d � Z ejedd�d d� �Z � Z S )�CopyOwnershipAndModeTestzYTests about copy_ownership_and_apply_mode, copy_ownership_and_mode and has_same_ownershipc s t � �� t| j�| _d S r r r r r r r y s z CopyOwnershipAndModeTest.setUpr� r c s t �t�}t �� j}|�|d� t�d��V}t�d��,}||_t j d| j dddd� W d � n1 sh0 Y W d � n1 s�0 Y |j dks�J �|j d }|d d }||�� ks�J �|j d }|d d }|�� � t �t��� �� s�J �� �fd d �td � �� �D ��r J �d S ) NF� win32security.GetFileSecurityz win32security.SetFileSecurity�dummyr T�Z copy_userZ copy_groupr& r r8 c s( g | ] }� � |�d �kr� � |��qS r% r' r( r+ r r r- � s �zWCopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_windows.<locals>.<listcomp>)r. r/ r9 �SECURITY_ATTRIBUTES�SECURITY_DESCRIPTOR�SetSecurityDescriptorOwnerr �patch� return_valuer � copy_ownership_and_apply_moder Z call_countZcall_args_listZGetSecurityDescriptorOwnerr r0 r2 r1 )r r6 �security�mock_getZmock_setZ first_callZ second_callr r+ r �*test_copy_ownership_and_apply_mode_windows} s& �B zCCopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_windows� Test specific to Linux securityc C s� t �d���}t �d��`}t �d��6}d|j_d|j_tjd| jdddd � W d � n1 s^0 Y W d � n1 s|0 Y W d � n1 s�0 Y |�| jdd� |�| jd� d S ) Nzos.chownzos.chmodzos.stat�2 �3 r� r Tr� ) r r� r� �st_uid�st_gidr r� r �assert_called_once_with)r Z mock_chownZ mock_chmodZ mock_statr r r �(test_copy_ownership_and_apply_mode_linux� s �`zACopyOwnershipAndModeTest.test_copy_ownership_and_apply_mode_linuxc C sX t j�| jd�}t j�| jd�}t�|d��� t�|d��� t�||�du sTJ �d S )NZtest1Ztest2rt T) r r r r r � safe_openri r Zhas_same_ownership)r Zpath1Zpath2r r r �test_has_same_ownership� s z0CopyOwnershipAndModeTest.test_has_same_ownershipc C s� | j }t| jdd�}t�|d� t�|d�du s4J �t�|d�du sHJ �t�d�� }t�||� W d � n1 st0 Y |� ||� t�|d�du s�J �d S )N�dst)�namer T�� z-certbot.compat.filesystem._copy_win_ownership) r r r r r ra r r� Zcopy_ownership_and_moder� )r �srcr� Zmock_copy_ownerr r r �$test_copy_ownership_and_mode_windows� s * z=CopyOwnershipAndModeTest.test_copy_ownership_and_mode_windows)rQ rR rS rT r �unittest�skipIfrl r� � skipUnlessr� r� r� rU r r r r r� w s r� c sl e Zd ZdZ� fdd�Zdd� Zejedd�dd � �Z ej ed d�d d � �Z d d� Z dd� Z dd� Z� ZS )�CheckPermissionsTestz-Tests relative to functions that check modes.c s t � �� t| j�| _d S r r r r r r r � s zCheckPermissionsTest.setUpc C s: t �| jd�du sJ �t �| jd� t �| jd�r6J �d S �Nr� Tr )r ra r r r r r r �test_check_mode� s z$CheckPermissionsTest.test_check_moder� r c C sx t �| j�du sJ �t�t�}t�� j}|�|d� t � d��&}||_ t �| j�rVJ �W d � n1 sj0 Y d S )NTFr� ) r � check_ownerr r. r/ r9 r� r� r� r r� r� )r r6 r� r� r r r �test_check_owner_windows� s z-CheckPermissionsTest.test_check_owner_windowsr� c C sl t �| j�du sJ �dd l}|�� }t�d��*}|d |_t �| j�rJJ �W d � n1 s^0 Y d S )NTr z os.getuidr8 )r r� r r �getuidr r� r� )r r� �uidZmock_uidr r r �test_check_owner_linux� s z+CheckPermissionsTest.test_check_owner_linuxc C s� t �| jd�du sJ �t�d��(}d|_t �| jd�r:J �W d � n1 sN0 Y t�d��(}d|_t �| jd�r|J �W d � n1 s�0 Y d S )Nr� Tz$certbot.compat.filesystem.check_modeFz%certbot.compat.filesystem.check_owner)r Zcheck_permissionsr r r� r� )r Z mock_modeZ mock_ownerr r r �test_check_permissions� s 0 z+CheckPermissionsTest.test_check_permissionsc C sh t �| jd� t �| jd�du s$J �t �| jd� t �| jd�rDJ �t �| jd� t �| jd�rdJ �d S )Nr� Tr i� )r r r Zhas_min_permissionsr r r r �test_check_min_permissions� s z/CheckPermissionsTest.test_check_min_permissionsc C sD t �| jd� t �| j�du s"J �t �| jd� t �| j�r@J �d S r� )r r r Zhas_world_permissionsr r r r �test_is_world_reachable� s z,CheckPermissionsTest.test_is_world_reachable)rQ rR rS rT r r� r� r� rl r� r� r� r� r� r� rU r r r r r� � s r� c @ s e Zd ZdZdd� ZdS )� OsReplaceTestz3Test to ensure consistent behavior of rename methodc C sp t j�| jd�}t j�| jd�}t|d��� t|d��� t�||� t j�|�rXJ �t j�|�du slJ �dS )zKEnsure that replace will effectively rename src into dst for all platforms.r� r� rt TN) r r r r rg ri r �replacer� )r r� r� r r r � test_os_replace_to_existing_file s z.OsReplaceTest.test_os_replace_to_existing_fileN)rQ rR rS rT r� r r r r r� s r� c s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )� RealpathTestzTests for realpath methodc s t � �� t| j�| _d S r r r r r r r s zRealpathTest.setUpc C s� t �| j�| _tj�| jd�}t�| j|� | jt �| j�ksBJ �| jt �|�ksVJ �t�� }tj�| jd�}tj� | j�}zVt� tj� | j�� t�||� | jt �|�ks�J �| jt �|�ks�J �W t� |� n t� |� 0 d S )NZlink_absZlink_rel) r �realpathr r r r r r �getcwd�basename�chdir�dirname)r r! �curdirZ probe_namer r r r$ s z$RealpathTest.test_symlink_resolutionc C s� t j�| jd�}t j�| jd�}t j�| jd�}t �||� t �||� t �||� tjtdd��}t� |� W d � n1 s�0 Y d S )NZlink1Zlink2Zlink3zlink1 is a loop!)�match) r r r r r r{ r| � RuntimeErrorr r� )r Z link1_pathZ link2_pathZ link3_path�errorr r r � test_symlink_loop_mitigation0 s z)RealpathTest.test_symlink_loop_mitigation)rQ rR rS rT r r$ r� rU r r r r r� s r� c @ sl e Zd ZdZdd� Ze�d�e�d�dd� ��Ze�d�e�d�dd � ��Ze�d�e�d�d d � ��Z d S ) �IsExecutableTestz Tests for is_executable methodc s� t j�| jd�}ddlm� d � fdd� }tjd|d��, t �t � |t j t j B d�� W d � n1 sj0 Y t � |�r�J �d S ) NZfoor ��_generate_daclc s. � | ||�}t d|�� �D ]}|�d� q|S rC )r1 r2 Z DeleteAce)Zuser_sidr^ �maskr, rN r� r r � _execute_mockK s z;IsExecutableTest.test_not_executable.<locals>._execute_mockz(certbot.compat.filesystem._generate_dacl)Z side_effecti� )N)r r r r Zcertbot.compat.filesystemr� r r� ri r rg rh �O_WRONLY� is_executable)r Z file_pathr� r r� r �test_not_executable> s :z$IsExecutableTest.test_not_executablez(certbot.compat.filesystem.os.path.isfilez#certbot.compat.filesystem.os.accessc C sH t � �. d|_d|_t�d�du s&J �W d � n1 s:0 Y d S )NTz /path/to/exe��_fix_windows_runtimer� r r� �r Z mock_accessZ mock_isfiler r r �test_full_pathW s z IsExecutableTest.test_full_pathc C sH t � �. d|_d|_t�d�du s&J �W d � n1 s:0 Y d S )NT�exer� r� r r r � test_rel_path_ s z IsExecutableTest.test_rel_pathc C sD t � �* d|_d|_t�d�r"J �W d � n1 s60 Y d S )NTFr� r� r� r r r �test_not_foundg s z IsExecutableTest.test_not_foundN) rQ rR rS rT r� r r� r� r� r� r r r r r� < s r� c @ sl e Zd Zejedd�e�d�dd� ��Zej edd�e�d�dd� ��Z ej edd�e�d�d d � ��Z d S ) � ReadlinkTestzTests specific to Linuxr z%certbot.compat.filesystem.os.readlinkc C s d|_ t�d�dksJ �d S )Nz /normal/pathr� �r� r �readlink�r Z mock_readlinkr r r �test_path_posixq s z ReadlinkTest.test_path_posixzTests specific to Windowsc C s d|_ t�d�dksJ �d S )Nz\\?\C:\short\pathr� z C:\short\pathr� r� r r r �test_normal_path_windowsw s z%ReadlinkTest.test_normal_path_windowsc C sF ddd |_ t�t�� t�d� W d � n1 s80 Y d S )Nz \\?\C:\longi� z\pathr� )r� r{ r| � ValueErrorr r� r� r r r �test_extended_path_windows~ s z'ReadlinkTest.test_extended_path_windowsN) rQ rR rS r� r� rl r r� r� r� r� r� r r r r r� p s r� c c s^ t jdkrd V nHt�d��.} | jj}|jj}tj|_d V W d � n1 sP0 Y d S )N�ntr� ) r r� r r� r� r ZGetEffectiveRightsFromAclr< rD )r� Z dacl_mockZ mode_mockr r r r� � s r� c C s t �| t j�S r )r. �GetFileSecurityZDACL_SECURITY_INFORMATION��targetr r r r � s r c C s t �| t j�S r )r. r� �OWNER_SECURITY_INFORMATIONr� r r r rL � s rL c C s |� |d� t�| tj|� d S )NF)r� r. ZSetFileSecurityr� )r� rO �userr r r rM � s �rM �probec C s2 t �| d� tj�| |�}tj|ddd��� |S )Nr� rt )r )r r r r r r r� ri )r r� r r r r r � s r �__main__r8 )r� )4rT � contextlibr �sysr� r r{ Zcertbotr Zcertbot._internalr Zcertbot.compatr r Zcertbot.tests.utilZtestsZ test_utilr r< rK r. rl � ImportErrorr0 r9 r: r� r rV rk rn r� r� r� r� r� r� r� r� ZTestCaser� �contextmanagerr� r rL rM r rQ �exit�main�argv�__file__r r r r �<module> s\ w3 F (IC)4 compat/__pycache__/misc_test.cpython-39.opt-1.pyc 0000644 00000003472 15114562471 0015635 0 ustar 00 a }|�g� � @ sf d Z ddlZddlmZ ddlZddlmZ G dd� d�Zedkrbe� e� ej dd� e g �� dS ) z Tests for certbot.compat.misc� N)�mock)�osc @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �ExecuteStatusTestz5Tests for certbot.compat.misc.execute_command_status.c O s ddl m} ||i |��S )Nr )�execute_command_status)Zcertbot.compat.miscr )�cls�args�kwargsr � r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/misc_test.py�_call s zExecuteStatusTest._callc C s� d}d}t �d��R}||j_||j_||j_t �d��}W d � n1 sL0 Y W d � n1 sj0 Y |jd �d|jd d �}tj dkr�d d |g} n|} |j � d ||� d S ) NZfoozfoo-hookz"certbot.compat.misc.subprocess.runzcertbot.compat.misc.logger� r r �ntzpowershell.exez-CommandzRunning %s command: %s) r ZpatchZ return_value�stdout�stderr� returncodeZ call_args�getr �name�infoZassert_any_call) �selfr r r Z given_commandZ given_nameZmock_runZ mock_loggerZexecuted_commandZexpected_commandr r r � _test_common s" < � �z ExecuteStatusTest._test_commonc C s6 t dd�D ]&}dD ] }dD ]}| �|||� qqq d S )Nr � )� z Hello World!)r zGoodbye Cruel World!)�ranger )r r r r r r r �test_it( s zExecuteStatusTest.test_itN)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r r r r s r �__main__r ) r �sysZunittestr ZpytestZcertbot.compatr r r �exit�main�argv�__file__r r r r �<module> s % compat/__pycache__/misc_test.cpython-39.pyc 0000644 00000003565 15114562471 0014701 0 ustar 00 a }|�g� � @ sf d Z ddlZddlmZ ddlZddlmZ G dd� d�Zedkrbe� e� ej dd� e g �� dS ) z Tests for certbot.compat.misc� N)�mock)�osc @ s, e Zd ZdZedd� �Zdd� Zdd� ZdS ) �ExecuteStatusTestz5Tests for certbot.compat.misc.execute_command_status.c O s ddl m} ||i |��S )Nr )�execute_command_status)Zcertbot.compat.miscr )�cls�args�kwargsr � r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/misc_test.py�_call s zExecuteStatusTest._callc C s� d}d}t �d��l}||j_||j_||j_t �d��*}| �||�|||fksRJ �W d � n1 sf0 Y W d � n1 s�0 Y |jd �d|jd d �}t j dkr�d d |g} n|} || ks�J �|| ks�J �|j � d ||� d S ) NZfoozfoo-hookz"certbot.compat.misc.subprocess.runzcertbot.compat.misc.logger� r r �ntzpowershell.exez-CommandzRunning %s command: %s) r ZpatchZ return_value�stdout�stderr� returncoder Z call_args�getr �name�infoZassert_any_call) �selfr r r Z given_commandZ given_nameZmock_runZ mock_loggerZexecuted_commandZexpected_commandr r r � _test_common s& V � �z ExecuteStatusTest._test_commonc C s6 t dd�D ]&}dD ] }dD ]}| �|||� qqq d S )Nr � )� z Hello World!)r zGoodbye Cruel World!)�ranger )r r r r r r r �test_it( s zExecuteStatusTest.test_itN)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r r r r s r �__main__r ) r �sysZunittestr ZpytestZcertbot.compatr r r �exit�main�argv�__file__r r r r �<module> s % compat/__pycache__/os_test.cpython-39.opt-1.pyc 0000644 00000001404 15114562471 0015314 0 ustar 00 a }|�g\ � @ sT d Z ddlZddlZddlmZ dd� ZedkrPe�e�ej dd� e g �� dS )zUnit test for os module.� N)�osc C s� dD ]:} t �t�� tt| �� W d � q1 s40 Y qdD ]<} t �t�� ttj| �� W d � qD1 sv0 Y qDd S )N) �chmod�chown�open�mkdir�makedirs�rename�replace�access�stat�fstat)�realpath)�pytestZraises� RuntimeError�getattrr �path)�method� r �J/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/os_test.py�test_forbidden_methods s , r �__main__� ) �__doc__�sysr Zcertbot.compatr r �__name__�exit�main�argv�__file__r r r r �<module> s compat/__pycache__/os_test.cpython-39.pyc 0000644 00000001404 15114562471 0014355 0 ustar 00 a }|�g\ � @ sT d Z ddlZddlZddlmZ dd� ZedkrPe�e�ej dd� e g �� dS )zUnit test for os module.� N)�osc C s� dD ]:} t �t�� tt| �� W d � q1 s40 Y qdD ]<} t �t�� ttj| �� W d � qD1 sv0 Y qDd S )N) �chmod�chown�open�mkdir�makedirs�rename�replace�access�stat�fstat)�realpath)�pytestZraises� RuntimeError�getattrr �path)�method� r �J/usr/lib/python3.9/site-packages/certbot/_internal/tests/compat/os_test.py�test_forbidden_methods s , r �__main__� ) �__doc__�sysr Zcertbot.compatr r �__name__�exit�main�argv�__file__r r r r �<module> s compat/__init__.py 0000644 00000000000 15114562471 0010134 0 ustar 00 compat/filesystem_test.py 0000644 00000065211 15114562471 0011637 0 ustar 00 """Tests for certbot.compat.filesystem""" import contextlib import errno import sys import unittest from unittest import mock import pytest from certbot import util from certbot._internal import lock from certbot.compat import filesystem from certbot.compat import os import certbot.tests.util as test_util from certbot.tests.util import TempDirTestCase try: import ntsecuritycon import win32api import win32security POSIX_MODE = False except ImportError: POSIX_MODE = True EVERYBODY_SID = 'S-1-1-0' SYSTEM_SID = 'S-1-5-18' ADMINS_SID = 'S-1-5-32-544' @unittest.skipIf(POSIX_MODE, reason='Tests specific to Windows security') class WindowsChmodTests(TempDirTestCase): """Unit tests for Windows chmod function in filesystem module""" def setUp(self): super().setUp() self.probe_path = _create_probe(self.tempdir) def test_symlink_resolution(self): link_path = os.path.join(self.tempdir, 'link') os.symlink(self.probe_path, link_path) ref_dacl_probe = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() ref_dacl_link = _get_security_dacl(link_path).GetSecurityDescriptorDacl() filesystem.chmod(link_path, 0o700) # Assert the real file is impacted, not the link. cur_dacl_probe = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() cur_dacl_link = _get_security_dacl(link_path).GetSecurityDescriptorDacl() assert not filesystem._compare_dacls(ref_dacl_probe, cur_dacl_probe) # pylint: disable=protected-access assert filesystem._compare_dacls(ref_dacl_link, cur_dacl_link) # pylint: disable=protected-access def test_world_permission(self): everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) filesystem.chmod(self.probe_path, 0o700) dacl = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() assert not [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] filesystem.chmod(self.probe_path, 0o704) dacl = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() assert [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] def test_group_permissions_noop(self): filesystem.chmod(self.probe_path, 0o700) ref_dacl_probe = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() filesystem.chmod(self.probe_path, 0o740) cur_dacl_probe = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() assert filesystem._compare_dacls(ref_dacl_probe, cur_dacl_probe) # pylint: disable=protected-access def test_admin_permissions(self): system = win32security.ConvertStringSidToSid(SYSTEM_SID) admins = win32security.ConvertStringSidToSid(ADMINS_SID) filesystem.chmod(self.probe_path, 0o400) dacl = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() system_aces = [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == system] admin_aces = [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == admins] assert len(system_aces) == 1 assert len(admin_aces) == 1 assert system_aces[0][1] == ntsecuritycon.FILE_ALL_ACCESS assert admin_aces[0][1] == ntsecuritycon.FILE_ALL_ACCESS def test_read_flag(self): self._test_flag(4, ntsecuritycon.FILE_GENERIC_READ) def test_execute_flag(self): self._test_flag(1, ntsecuritycon.FILE_GENERIC_EXECUTE) def test_write_flag(self): self._test_flag(2, (ntsecuritycon.FILE_ALL_ACCESS ^ ntsecuritycon.FILE_GENERIC_READ ^ ntsecuritycon.FILE_GENERIC_EXECUTE)) def test_full_flag(self): self._test_flag(7, ntsecuritycon.FILE_ALL_ACCESS) def _test_flag(self, everyone_mode, windows_flag): # Note that flag is tested against `everyone`, not `user`, because practically these unit # tests are executed with admin privilege, so current user is effectively the admins group, # and so will always have all rights. filesystem.chmod(self.probe_path, 0o700 | everyone_mode) dacl = _get_security_dacl(self.probe_path).GetSecurityDescriptorDacl() everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) acls_everybody = [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] assert len(acls_everybody) == 1 acls_everybody = acls_everybody[0] assert acls_everybody[1] == windows_flag def test_user_admin_dacl_consistency(self): # Set ownership of target to authenticated user authenticated_user, _, _ = win32security.LookupAccountName("", win32api.GetUserName()) security_owner = _get_security_owner(self.probe_path) _set_owner(self.probe_path, security_owner, authenticated_user) filesystem.chmod(self.probe_path, 0o700) security_dacl = _get_security_dacl(self.probe_path) # We expect three ACE: one for admins, one for system, and one for the user assert security_dacl.GetSecurityDescriptorDacl().GetAceCount() == 3 # Set ownership of target to Administrators user group admin_user = win32security.ConvertStringSidToSid(ADMINS_SID) security_owner = _get_security_owner(self.probe_path) _set_owner(self.probe_path, security_owner, admin_user) filesystem.chmod(self.probe_path, 0o700) security_dacl = _get_security_dacl(self.probe_path) # We expect only two ACE: one for admins, one for system, # since the user is also the admins group assert security_dacl.GetSecurityDescriptorDacl().GetAceCount() == 2 class UmaskTest(TempDirTestCase): def test_umask_on_dir(self): previous_umask = filesystem.umask(0o022) try: dir1 = os.path.join(self.tempdir, 'probe1') filesystem.mkdir(dir1) assert filesystem.check_mode(dir1, 0o755) is True filesystem.umask(0o077) dir2 = os.path.join(self.tempdir, 'dir2') filesystem.mkdir(dir2) assert filesystem.check_mode(dir2, 0o700) is True dir3 = os.path.join(self.tempdir, 'dir3') filesystem.mkdir(dir3, mode=0o777) assert filesystem.check_mode(dir3, 0o700) is True finally: filesystem.umask(previous_umask) def test_umask_on_file(self): previous_umask = filesystem.umask(0o022) try: file1 = os.path.join(self.tempdir, 'probe1') UmaskTest._create_file(file1) assert filesystem.check_mode(file1, 0o755) is True filesystem.umask(0o077) file2 = os.path.join(self.tempdir, 'probe2') UmaskTest._create_file(file2) assert filesystem.check_mode(file2, 0o700) is True file3 = os.path.join(self.tempdir, 'probe3') UmaskTest._create_file(file3) assert filesystem.check_mode(file3, 0o700) is True finally: filesystem.umask(previous_umask) @staticmethod def _create_file(path, mode=0o777): file_desc = None try: file_desc = filesystem.open(path, flags=os.O_CREAT, mode=mode) finally: if file_desc: os.close(file_desc) class ComputePrivateKeyModeTest(TempDirTestCase): def setUp(self): super().setUp() self.probe_path = _create_probe(self.tempdir) def test_compute_private_key_mode(self): filesystem.chmod(self.probe_path, 0o777) new_mode = filesystem.compute_private_key_mode(self.probe_path, 0o600) if POSIX_MODE: # On Linux RWX permissions for group and R permission for world # are persisted from the existing moe assert new_mode == 0o674 else: # On Windows no permission is persisted assert new_mode == 0o600 @unittest.skipIf(POSIX_MODE, reason='Tests specific to Windows security') class WindowsOpenTest(TempDirTestCase): def test_new_file_correct_permissions(self): path = os.path.join(self.tempdir, 'file') desc = filesystem.open(path, os.O_CREAT | os.O_EXCL | os.O_RDWR, 0o700) os.close(desc) dacl = _get_security_dacl(path).GetSecurityDescriptorDacl() everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) assert not [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] def test_existing_file_correct_permissions(self): path = os.path.join(self.tempdir, 'file') open(path, 'w').close() desc = filesystem.open(path, os.O_EXCL | os.O_RDWR, 0o700) os.close(desc) dacl = _get_security_dacl(path).GetSecurityDescriptorDacl() everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) assert not [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] def test_create_file_on_open(self): # os.O_CREAT | os.O_EXCL + file not exists = OK self._test_one_creation(1, file_exist=False, flags=(os.O_CREAT | os.O_EXCL)) # os.O_CREAT | os.O_EXCL + file exists = EEXIST OS exception with pytest.raises(OSError) as exc_info: self._test_one_creation(2, file_exist=True, flags=(os.O_CREAT | os.O_EXCL)) assert exc_info.value.errno == errno.EEXIST # os.O_CREAT + file not exists = OK self._test_one_creation(3, file_exist=False, flags=os.O_CREAT) # os.O_CREAT + file exists = OK self._test_one_creation(4, file_exist=True, flags=os.O_CREAT) # os.O_CREAT + file exists (locked) = EACCES OS exception path = os.path.join(self.tempdir, '5') open(path, 'w').close() filelock = lock.LockFile(path) try: with pytest.raises(OSError) as exc_info: self._test_one_creation(5, file_exist=True, flags=os.O_CREAT) assert exc_info.value.errno == errno.EACCES finally: filelock.release() # os.O_CREAT not set + file not exists = OS exception with pytest.raises(OSError): self._test_one_creation(6, file_exist=False, flags=os.O_RDONLY) def _test_one_creation(self, num, file_exist, flags): one_file = os.path.join(self.tempdir, str(num)) if file_exist and not os.path.exists(one_file): with open(one_file, 'w'): pass handler = None try: handler = filesystem.open(one_file, flags) finally: if handler: os.close(handler) class TempUmaskTests(test_util.TempDirTestCase): """Tests for using the TempUmask class in `with` statements""" def _check_umask(self): old_umask = filesystem.umask(0) filesystem.umask(old_umask) return old_umask def test_works_normally(self): filesystem.umask(0o0022) assert self._check_umask() == 0o0022 with filesystem.temp_umask(0o0077): assert self._check_umask() == 0o0077 assert self._check_umask() == 0o0022 def test_resets_umask_after_exception(self): filesystem.umask(0o0022) assert self._check_umask() == 0o0022 try: with filesystem.temp_umask(0o0077): assert self._check_umask() == 0o0077 raise Exception() except: assert self._check_umask() == 0o0022 @unittest.skipIf(POSIX_MODE, reason='Test specific to Windows security') class WindowsMkdirTests(test_util.TempDirTestCase): """Unit tests for Windows mkdir + makedirs functions in filesystem module""" def test_mkdir_correct_permissions(self): path = os.path.join(self.tempdir, 'dir') filesystem.mkdir(path, 0o700) everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) dacl = _get_security_dacl(path).GetSecurityDescriptorDacl() assert not [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] def test_makedirs_correct_permissions(self): path = os.path.join(self.tempdir, 'dir') subpath = os.path.join(path, 'subpath') filesystem.makedirs(subpath, 0o700) everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) dacl = _get_security_dacl(subpath).GetSecurityDescriptorDacl() assert not [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] def test_makedirs_switch_os_mkdir(self): path = os.path.join(self.tempdir, 'dir') import os as std_os # pylint: disable=os-module-forbidden original_mkdir = std_os.mkdir filesystem.makedirs(path) assert original_mkdir == std_os.mkdir try: filesystem.makedirs(path) # Will fail because path already exists except OSError: pass assert original_mkdir == std_os.mkdir class MakedirsTests(test_util.TempDirTestCase): """Unit tests for makedirs function in filesystem module""" def test_makedirs_correct_permissions(self): path = os.path.join(self.tempdir, 'dir') subpath = os.path.join(path, 'subpath') previous_umask = filesystem.umask(0o022) try: filesystem.makedirs(subpath, 0o700) assert filesystem.check_mode(path, 0o700) assert filesystem.check_mode(subpath, 0o700) finally: filesystem.umask(previous_umask) class CopyOwnershipAndModeTest(test_util.TempDirTestCase): """Tests about copy_ownership_and_apply_mode, copy_ownership_and_mode and has_same_ownership""" def setUp(self): super().setUp() self.probe_path = _create_probe(self.tempdir) @unittest.skipIf(POSIX_MODE, reason='Test specific to Windows security') def test_copy_ownership_and_apply_mode_windows(self): system = win32security.ConvertStringSidToSid(SYSTEM_SID) security = win32security.SECURITY_ATTRIBUTES().SECURITY_DESCRIPTOR security.SetSecurityDescriptorOwner(system, False) with mock.patch('win32security.GetFileSecurity') as mock_get: with mock.patch('win32security.SetFileSecurity') as mock_set: mock_get.return_value = security filesystem.copy_ownership_and_apply_mode( 'dummy', self.probe_path, 0o700, copy_user=True, copy_group=False) assert mock_set.call_count == 2 first_call = mock_set.call_args_list[0] security = first_call[0][2] assert system == security.GetSecurityDescriptorOwner() second_call = mock_set.call_args_list[1] security = second_call[0][2] dacl = security.GetSecurityDescriptorDacl() everybody = win32security.ConvertStringSidToSid(EVERYBODY_SID) assert dacl.GetAceCount() assert not [dacl.GetAce(index) for index in range(0, dacl.GetAceCount()) if dacl.GetAce(index)[2] == everybody] @unittest.skipUnless(POSIX_MODE, reason='Test specific to Linux security') def test_copy_ownership_and_apply_mode_linux(self): with mock.patch('os.chown') as mock_chown: with mock.patch('os.chmod') as mock_chmod: with mock.patch('os.stat') as mock_stat: mock_stat.return_value.st_uid = 50 mock_stat.return_value.st_gid = 51 filesystem.copy_ownership_and_apply_mode( 'dummy', self.probe_path, 0o700, copy_user=True, copy_group=True) mock_chown.assert_called_once_with(self.probe_path, 50, 51) mock_chmod.assert_called_once_with(self.probe_path, 0o700) def test_has_same_ownership(self): path1 = os.path.join(self.tempdir, 'test1') path2 = os.path.join(self.tempdir, 'test2') util.safe_open(path1, 'w').close() util.safe_open(path2, 'w').close() assert filesystem.has_same_ownership(path1, path2) is True @unittest.skipIf(POSIX_MODE, reason='Test specific to Windows security') def test_copy_ownership_and_mode_windows(self): src = self.probe_path dst = _create_probe(self.tempdir, name='dst') filesystem.chmod(src, 0o700) assert filesystem.check_mode(src, 0o700) is True assert filesystem.check_mode(dst, 0o744) is True # Checking an actual change of owner is tricky during a unit test, since we do not know # if any user exists beside the current one. So we mock _copy_win_ownership. It's behavior # have been checked theoretically with test_copy_ownership_and_apply_mode_windows. with mock.patch('certbot.compat.filesystem._copy_win_ownership') as mock_copy_owner: filesystem.copy_ownership_and_mode(src, dst) mock_copy_owner.assert_called_once_with(src, dst) assert filesystem.check_mode(dst, 0o700) is True class CheckPermissionsTest(test_util.TempDirTestCase): """Tests relative to functions that check modes.""" def setUp(self): super().setUp() self.probe_path = _create_probe(self.tempdir) def test_check_mode(self): assert filesystem.check_mode(self.probe_path, 0o744) is True filesystem.chmod(self.probe_path, 0o700) assert not filesystem.check_mode(self.probe_path, 0o744) @unittest.skipIf(POSIX_MODE, reason='Test specific to Windows security') def test_check_owner_windows(self): assert filesystem.check_owner(self.probe_path) is True system = win32security.ConvertStringSidToSid(SYSTEM_SID) security = win32security.SECURITY_ATTRIBUTES().SECURITY_DESCRIPTOR security.SetSecurityDescriptorOwner(system, False) with mock.patch('win32security.GetFileSecurity') as mock_get: mock_get.return_value = security assert not filesystem.check_owner(self.probe_path) @unittest.skipUnless(POSIX_MODE, reason='Test specific to Linux security') def test_check_owner_linux(self): assert filesystem.check_owner(self.probe_path) is True import os as std_os # pylint: disable=os-module-forbidden # See related inline comment in certbot.compat.filesystem.check_owner method # that explains why MyPy/PyLint check disable is needed here. uid = std_os.getuid() with mock.patch('os.getuid') as mock_uid: mock_uid.return_value = uid + 1 assert not filesystem.check_owner(self.probe_path) def test_check_permissions(self): assert filesystem.check_permissions(self.probe_path, 0o744) is True with mock.patch('certbot.compat.filesystem.check_mode') as mock_mode: mock_mode.return_value = False assert not filesystem.check_permissions(self.probe_path, 0o744) with mock.patch('certbot.compat.filesystem.check_owner') as mock_owner: mock_owner.return_value = False assert not filesystem.check_permissions(self.probe_path, 0o744) def test_check_min_permissions(self): filesystem.chmod(self.probe_path, 0o744) assert filesystem.has_min_permissions(self.probe_path, 0o744) is True filesystem.chmod(self.probe_path, 0o700) assert not filesystem.has_min_permissions(self.probe_path, 0o744) filesystem.chmod(self.probe_path, 0o741) assert not filesystem.has_min_permissions(self.probe_path, 0o744) def test_is_world_reachable(self): filesystem.chmod(self.probe_path, 0o744) assert filesystem.has_world_permissions(self.probe_path) is True filesystem.chmod(self.probe_path, 0o700) assert not filesystem.has_world_permissions(self.probe_path) class OsReplaceTest(test_util.TempDirTestCase): """Test to ensure consistent behavior of rename method""" def test_os_replace_to_existing_file(self): """Ensure that replace will effectively rename src into dst for all platforms.""" src = os.path.join(self.tempdir, 'src') dst = os.path.join(self.tempdir, 'dst') open(src, 'w').close() open(dst, 'w').close() # On Windows, a direct call to os.rename would fail because dst already exists. filesystem.replace(src, dst) assert not os.path.exists(src) assert os.path.exists(dst) is True class RealpathTest(test_util.TempDirTestCase): """Tests for realpath method""" def setUp(self): super().setUp() self.probe_path = _create_probe(self.tempdir) def test_symlink_resolution(self): # Remove any symlinks already in probe_path self.probe_path = filesystem.realpath(self.probe_path) # Absolute resolution link_path = os.path.join(self.tempdir, 'link_abs') os.symlink(self.probe_path, link_path) assert self.probe_path == filesystem.realpath(self.probe_path) assert self.probe_path == filesystem.realpath(link_path) # Relative resolution curdir = os.getcwd() link_path = os.path.join(self.tempdir, 'link_rel') probe_name = os.path.basename(self.probe_path) try: os.chdir(os.path.dirname(self.probe_path)) os.symlink(probe_name, link_path) assert self.probe_path == filesystem.realpath(probe_name) assert self.probe_path == filesystem.realpath(link_path) finally: os.chdir(curdir) def test_symlink_loop_mitigation(self): link1_path = os.path.join(self.tempdir, 'link1') link2_path = os.path.join(self.tempdir, 'link2') link3_path = os.path.join(self.tempdir, 'link3') os.symlink(link1_path, link2_path) os.symlink(link2_path, link3_path) os.symlink(link3_path, link1_path) with pytest.raises(RuntimeError, match='link1 is a loop!') as error: filesystem.realpath(link1_path) class IsExecutableTest(test_util.TempDirTestCase): """Tests for is_executable method""" def test_not_executable(self): file_path = os.path.join(self.tempdir, "foo") # On Windows a file created within Certbot will always have all permissions to the # Administrators group set. Since the unit tests are typically executed under elevated # privileges, it means that current user will always have effective execute rights on the # hook script, and so the test will fail. To prevent that and represent a file created # outside Certbot as typically a hook file is, we mock the _generate_dacl function in # certbot.compat.filesystem to give rights only to the current user. This implies removing # all ACEs except the first one from the DACL created by original _generate_dacl function. from certbot.compat.filesystem import _generate_dacl def _execute_mock(user_sid, mode, mask=None): dacl = _generate_dacl(user_sid, mode, mask) for _ in range(1, dacl.GetAceCount()): dacl.DeleteAce(1) # DeleteAce dynamically updates the internal index mapping. return dacl # create a non-executable file with mock.patch("certbot.compat.filesystem._generate_dacl", side_effect=_execute_mock): os.close(filesystem.open(file_path, os.O_CREAT | os.O_WRONLY, 0o666)) assert not filesystem.is_executable(file_path) @mock.patch("certbot.compat.filesystem.os.path.isfile") @mock.patch("certbot.compat.filesystem.os.access") def test_full_path(self, mock_access, mock_isfile): with _fix_windows_runtime(): mock_access.return_value = True mock_isfile.return_value = True assert filesystem.is_executable("/path/to/exe") is True @mock.patch("certbot.compat.filesystem.os.path.isfile") @mock.patch("certbot.compat.filesystem.os.access") def test_rel_path(self, mock_access, mock_isfile): with _fix_windows_runtime(): mock_access.return_value = True mock_isfile.return_value = True assert filesystem.is_executable("exe") is True @mock.patch("certbot.compat.filesystem.os.path.isfile") @mock.patch("certbot.compat.filesystem.os.access") def test_not_found(self, mock_access, mock_isfile): with _fix_windows_runtime(): mock_access.return_value = True mock_isfile.return_value = False assert not filesystem.is_executable("exe") class ReadlinkTest(unittest.TestCase): @unittest.skipUnless(POSIX_MODE, reason='Tests specific to Linux') @mock.patch("certbot.compat.filesystem.os.readlink") def test_path_posix(self, mock_readlink): mock_readlink.return_value = "/normal/path" assert filesystem.readlink("dummy") == "/normal/path" @unittest.skipIf(POSIX_MODE, reason='Tests specific to Windows') @mock.patch("certbot.compat.filesystem.os.readlink") def test_normal_path_windows(self, mock_readlink): # Python >=3.8 (os.readlink always returns the extended form) mock_readlink.return_value = "\\\\?\\C:\\short\\path" assert filesystem.readlink("dummy") == "C:\\short\\path" @unittest.skipIf(POSIX_MODE, reason='Tests specific to Windows') @mock.patch("certbot.compat.filesystem.os.readlink") def test_extended_path_windows(self, mock_readlink): # Following path is largely over the 260 characters permitted in the normal form. mock_readlink.return_value = "\\\\?\\C:\\long" + 1000 * "\\path" with pytest.raises(ValueError): filesystem.readlink("dummy") @contextlib.contextmanager def _fix_windows_runtime(): if os.name != 'nt': yield else: with mock.patch('win32security.GetFileSecurity') as mock_get: dacl_mock = mock_get.return_value.GetSecurityDescriptorDacl mode_mock = dacl_mock.return_value.GetEffectiveRightsFromAcl mode_mock.return_value = ntsecuritycon.FILE_GENERIC_EXECUTE yield def _get_security_dacl(target): return win32security.GetFileSecurity(target, win32security.DACL_SECURITY_INFORMATION) def _get_security_owner(target): return win32security.GetFileSecurity(target, win32security.OWNER_SECURITY_INFORMATION) def _set_owner(target, security_owner, user): security_owner.SetSecurityDescriptorOwner(user, False) win32security.SetFileSecurity( target, win32security.OWNER_SECURITY_INFORMATION, security_owner) def _create_probe(tempdir, name='probe'): filesystem.chmod(tempdir, 0o744) probe_path = os.path.join(tempdir, name) util.safe_open(probe_path, 'w', chmod=0o744).close() return probe_path if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover compat/misc_test.py 0000644 00000003323 15114562471 0010402 0 ustar 00 """Tests for certbot.compat.misc""" import sys from unittest import mock import pytest from certbot.compat import os class ExecuteStatusTest: """Tests for certbot.compat.misc.execute_command_status.""" @classmethod def _call(cls, *args, **kwargs): from certbot.compat.misc import execute_command_status return execute_command_status(*args, **kwargs) def _test_common(self, returncode, stdout, stderr): given_command = "foo" given_name = "foo-hook" with mock.patch("certbot.compat.misc.subprocess.run") as mock_run: mock_run.return_value.stdout = stdout mock_run.return_value.stderr = stderr mock_run.return_value.returncode = returncode with mock.patch("certbot.compat.misc.logger") as mock_logger: assert self._call(given_name, given_command) == (returncode, stderr, stdout) executed_command = mock_run.call_args[1].get( "args", mock_run.call_args[0][0]) if os.name == 'nt': expected_command = ['powershell.exe', '-Command', given_command] else: expected_command = given_command assert executed_command == expected_command assert executed_command == expected_command mock_logger.info.assert_any_call("Running %s command: %s", given_name, given_command) def test_it(self): for returncode in range(0, 2): for stdout in ("", "Hello World!",): for stderr in ("", "Goodbye Cruel World!"): self._test_common(returncode, stdout, stderr) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover compat/os_test.py 0000644 00000001134 15114562471 0010066 0 ustar 00 """Unit test for os module.""" import sys import pytest from certbot.compat import os def test_forbidden_methods(): # Checks for os module for method in ['chmod', 'chown', 'open', 'mkdir', 'makedirs', 'rename', 'replace', 'access', 'stat', 'fstat']: with pytest.raises(RuntimeError): getattr(os, method)() # Checks for os.path module for method in ['realpath']: with pytest.raises(RuntimeError): getattr(os.path, method)() if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover display/__pycache__/__init__.cpython-39.opt-1.pyc 0000644 00000000310 15114562471 0015550 0 ustar 00 a }|�g � @ s d Z dS )zCertbot Display TestsN)�__doc__� r r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/__init__.py�<module> � display/__pycache__/__init__.cpython-39.pyc 0000644 00000000310 15114562471 0014611 0 ustar 00 a }|�g � @ s d Z dS )zCertbot Display TestsN)�__doc__� r r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/__init__.py�<module> � display/__pycache__/completer_test.cpython-39.opt-1.pyc 0000644 00000007222 15114562471 0017053 0 ustar 00 a }|�g� � @ s� d Z ddlmZ ddlZddlZddlmZ ddlZddlm Z ddl Z ddl m Z ddl m Z ddlm mZ z ddlZW n* ey� ddlm m mZ Y n0 G dd � d ej�Zd d � Zed kr�e� e � ej d d� e g �� dS )z)Test certbot._internal.display.completer.� )�reloadN)�List)�mock)� filesystem)�osc s� e Zd ZdZ� fdd�Zdd� Zejdej vdd�d d � �Z d d � Z e j d dd�dd� �Ze j d dd�dd� �Zdd� Z� ZS )� CompleterTestz3Test certbot._internal.display.completer.Completer.c s� t � �� | jd tjkr*| jtj7 _g | _tjD ]b}tj� | j|�}| j� |� t |�d rnt � |� q6t|d�� W d � q61 s�0 Y q6d S )N���� �w)�super�setUp�tempdirr �sep�paths�stringZascii_lowercase�path�join�append�ordr �mkdir�open)�self�cr �� __class__� �R/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/completer_test.pyr s zCompleterTest.setUpc C sX ddl m} |�� }t| j�}t|�D ] }|�| j|�}| j�|� q&|�| j|�}d S �Nr )� completer) �certbot._internal.displayr � Completer�lenr �rangeZcompleter �remove)r r Z my_completerZ num_paths�iZ completionr r r � test_complete, s zCompleterTest.test_complete�readlinez*Not relevant if readline is not available.)�reasonc C s* t jd }d t jd< | �� |t jd< d S )Nr& )�sys�modules�+test_context_manager_with_unmocked_readline)r Zoriginal_readliner r r �test_import_error: s z CompleterTest.test_import_errorc C sP ddl m} t|� t�� }t�� }|�� � W d � n1 sB0 Y d S r )r r � reload_moduler& Z get_completerZget_completer_delimsr )r r Zoriginal_completerZoriginal_delimsr r r r* D s z9CompleterTest.test_context_manager_with_unmocked_readlinez,certbot._internal.display.completer.readlineT)Zautospecc C s d|_ | �|� d S )N�libedit��__doc__�(_test_context_manager_with_mock_readline�r � mock_readliner r r � test_context_manager_libeditQ s z*CompleterTest.test_context_manager_libeditc C s d|_ | �|� d S )Nz GNU readliner. r1 r r r � test_context_manager_readlineV s z+CompleterTest.test_context_manager_readlinec C s@ ddl m} t|j_|�� � W d � n1 s20 Y d S r )r r �enable_tab_completion�parse_and_bindZ side_effectr )r r2 r r r r r0 [ s z6CompleterTest._test_context_manager_with_mock_readline)�__name__� __module__� __qualname__r/ r r% �unittestZskipIfr( r) r+ r* r Zpatchr3 r4 r0 � __classcell__r r r r r s � r c C s. t jduodt jv }|r dnd}t �|� dS )zAEnables readline tab completion using the system specific syntax.Nr- zbind ^I rl_completez tab: complete)r& r/ r6 )Zunused_commandr- Zcommandr r r r5 f s r5 �__main__� ) r/ � importlibr r, r r( �typingr r: r ZpytestZcertbot.compatr r Zcertbot.tests.utilZtests�utilZ test_utilr& � ImportErrorZ(certbot._internal.display.dummy_readlineZ _internalZdisplayZdummy_readlineZTempDirTestCaser r5 r7 �exit�main�argv�__file__r r r r �<module> s$ P display/__pycache__/completer_test.cpython-39.pyc 0000644 00000007405 15114562471 0016117 0 ustar 00 a }|�g� � @ s� d Z ddlmZ ddlZddlZddlmZ ddlZddlm Z ddl Z ddl m Z ddl m Z ddlm mZ z ddlZW n* ey� ddlm m mZ Y n0 G dd � d ej�Zd d � Zed kr�e� e � ej d d� e g �� dS )z)Test certbot._internal.display.completer.� )�reloadN)�List)�mock)� filesystem)�osc s� e Zd ZdZ� fdd�Zdd� Zejdej vdd�d d � �Z d d � Z e j d dd�dd� �Ze j d dd�dd� �Zdd� Z� ZS )� CompleterTestz3Test certbot._internal.display.completer.Completer.c s� t � �� | jd tjkr*| jtj7 _g | _tjD ]b}tj� | j|�}| j� |� t |�d rnt � |� q6t|d�� W d � q61 s�0 Y q6d S )N���� �w)�super�setUp�tempdirr �sep�paths�stringZascii_lowercase�path�join�append�ordr �mkdir�open)�self�cr �� __class__� �R/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/completer_test.pyr s zCompleterTest.setUpc C s� ddl m} |�� }t| j�}t|�D ],}|�| j|�}|| jv sFJ �| j�|� q&t| j�dksfJ �|�| j|�}|d u s�J �d S �Nr �� completer) �certbot._internal.displayr � Completer�lenr �rangeZcompleter �remove)r r Z my_completerZ num_paths�iZ completionr r r � test_complete, s zCompleterTest.test_complete�readlinez*Not relevant if readline is not available.)�reasonc C s* t jd }d t jd< | �� |t jd< d S )Nr' )�sys�modules�+test_context_manager_with_unmocked_readline)r Zoriginal_readliner r r �test_import_error: s z CompleterTest.test_import_errorc C sp ddl m} t|� t�� }t�� }|�� � W d � n1 sB0 Y t�� |ks\J �t�� |kslJ �d S r )r r � reload_moduler' Z get_completerZget_completer_delimsr! )r r Zoriginal_completerZoriginal_delimsr r r r+ D s z9CompleterTest.test_context_manager_with_unmocked_readlinez,certbot._internal.display.completer.readlineT)Zautospecc C s d|_ | �|� d S )N�libedit��__doc__�(_test_context_manager_with_mock_readline�r � mock_readliner r r � test_context_manager_libeditQ s z*CompleterTest.test_context_manager_libeditc C s d|_ | �|� d S )Nz GNU readliner/ r2 r r r � test_context_manager_readlineV s z+CompleterTest.test_context_manager_readlinec C sP ddl m} t|j_|�� � W d � n1 s20 Y |jjdu sLJ �d S )Nr r T)r r �enable_tab_completion�parse_and_bindZ side_effectr! Zcalled)r r3 r r r r r1 [ s z6CompleterTest._test_context_manager_with_mock_readline)�__name__� __module__� __qualname__r0 r r& �unittestZskipIfr) r* r, r+ r Zpatchr4 r5 r1 � __classcell__r r r r r s � r c C s. t jduodt jv }|r dnd}t �|� dS )zAEnables readline tab completion using the system specific syntax.Nr. zbind ^I rl_completez tab: complete)r' r0 r7 )Zunused_commandr. Zcommandr r r r6 f s r6 �__main__� ) r0 � importlibr r- r r) �typingr r; r ZpytestZcertbot.compatr r Zcertbot.tests.utilZtests�utilZ test_utilr' � ImportErrorZ(certbot._internal.display.dummy_readlineZ _internalZdisplayZdummy_readlineZTempDirTestCaser r6 r8 �exit�main�argv�__file__r r r r �<module> s$ P display/__pycache__/internal_util_test.cpython-39.opt-1.pyc 0000644 00000015576 15114562471 0017745 0 ustar 00 a }|�g! � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlm Z ddl m Z G dd� dej �ZG dd � d ej �ZG d d � d ej �ZG d d � d ej �ZG dd� dej �ZG dd� dej �Zedkr�e�e�ejdd� eg �� dS )z+Test :mod:`certbot._internal.display.util`.� N)�mock)�messages)�errorsc @ s e Zd Zdd� ZdS )� WrapLinesTestc C s" ddl m} d�d�}||�}d S )Nr )� wrap_linesz�This is just a weak test{0}This function is only meant to be for easy viewing{0}Test a really really really really really really really really really really really really long line...� )� certbot._internal.display.utilr �format)�selfr �msg�text� r �V/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/internal_util_test.py�test_wrap_lines s �z WrapLinesTest.test_wrap_linesN)�__name__� __module__� __qualname__r r r r r r s r c @ s( e Zd Zedd� �Zdd� Zdd� ZdS )�PlaceParensTestc C s ddl m} ||�S )Nr )�parens_around_char)r r )�clsZlabelr r r r �_call s zPlaceParensTest._callc C s d S �Nr �r r r r �test_single_letter! s z"PlaceParensTest.test_single_letterc C s d S r r r r r r � test_multiple$ s z PlaceParensTest.test_multipleN)r r r � classmethodr r r r r r r r s r c @ sH e Zd ZdZedd� �Zdd� Zddd�Ze� d �d d � �Z d d � Z dS )�InputWithTimeoutTestz<Tests for certbot._internal.display.util.input_with_timeout.c O s ddl m} ||i |��S )Nr )�input_with_timeout)r r )r �args�kwargsr r r r r + s zInputWithTimeoutTest._callc C s� t �d��p}tjd|d��B t�t�� | �� W d � n1 sD0 Y W d � n1 sb0 Y W d � n1 s�0 Y d S )Nzr+�(certbot._internal.display.util.sys.stdin)�new)�tempfileZ TemporaryFiler �patch�pytest�raises�EOFErrorr )r �fr r r �test_eof0 s z InputWithTimeoutTest.test_eofNc C sN d}t �|d �}t�d�� }|gg g f|_W d � n1 s@0 Y d S )Nzfoo barr z!certbot.compat.misc.select.select)�io�StringIOr r# Z return_value)r �promptZexpected�stdinZ mock_selectr r r � test_input6 s z InputWithTimeoutTest.test_inputz)certbot._internal.display.util.sys.stdoutc C s( d}| � |� |j�|� |j�� d S )Nz test prompt: )r- �writeZassert_called_once_with�flush)r Z mock_stdoutr+ r r r �test_input_with_prompt= s z+InputWithTimeoutTest.test_input_with_promptc C s� t � t jt j�}|�d� |�d� t�d|��H t�t j �� | j dd� W d � n1 s`0 Y W d � n1 s~0 Y |� � d S )N)� r � r g����MbP?)�timeout) �socketZAF_INETZ SOCK_STREAMZbindZlistenr r# r$ r% r �Errorr �close)r r, r r r � test_timeoutD s Hz!InputWithTimeoutTest.test_timeout)N) r r r �__doc__r r r( r- r r# r0 r7 r r r r r ) s r c @ sD e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd d � Z d d � Z dS )�SeparateListInputTestzTest Module functions.c C s g d�| _ d S )N)�a�b�c�test)Zexpr r r r �setUpP s zSeparateListInputTest.setUpc C s ddl m} ||�S )Nr )�separate_list_input)r r? )r Zinput_r? r r r r S s zSeparateListInputTest._callc C s d S r r r r r r � test_commasX s z!SeparateListInputTest.test_commasc C s d S r r r r r r � test_spaces[ s z!SeparateListInputTest.test_spacesc C s d S r r r r r r � test_both^ s z SeparateListInputTest.test_bothc C s* | � d�| � d�| � d�g}|D ]}q d S )Nz a , b c testz,a, ,, , b c test z,,,,, , a b,,, , c,test)r )r �actualZactr r r � test_messa s �z SeparateListInputTest.test_messN) r r r r8 r> r r r@ rA rB rD r r r r r9 N s r9 c @ s8 e Zd Zedd� �Zdd� Zdd� Zdd� Zd d � Zd S ) �SummarizeDomainListTestc C s ddl m} ||�S )Nr )�summarize_domain_list)r rF )r ZdomainsrF r r r r m s z SummarizeDomainListTest._callc C s d S r r r r r r �test_single_domainr s z*SummarizeDomainListTest.test_single_domainc C s d S r r r r r r �test_two_domainsu s z(SummarizeDomainListTest.test_two_domainsc C s d S r r r r r r �test_many_domainsy s z)SummarizeDomainListTest.test_many_domainsc C s d S r r r r r r �test_empty_domains} s z*SummarizeDomainListTest.test_empty_domainsN) r r r r r rG rH rI rJ r r r r rE l s rE c @ sD e Zd Zedeeed�dd��Zdd� Zd d � Zd d � Zd d� Z dS )�DescribeACMEErrorTest�!urn:ietf:params:acme:error:badCSR�Unacceptable CSR� CSR contained unknown extensions��typ�title�detailc C s ddl m} |tj|||d��S )Nr )�describe_acme_errorrO )r rS � acme_messagesr5 )r rP rQ rR rS r r r r � s �zDescribeACMEErrorTest._callc C s d S r r r r r r �test_title_and_detail� s z+DescribeACMEErrorTest.test_title_and_detailc C s d S r r r r r r � test_detail� s z!DescribeACMEErrorTest.test_detailc C s d S r r r r r r �test_description� s z&DescribeACMEErrorTest.test_descriptionc C s d S r r r r r r �test_unknown_type� s z'DescribeACMEErrorTest.test_unknown_typeN)rL rM rN ) r r r r �strr rU rV rW rX r r r r rK � s ��rK �__main__r2 )r8 r) r4 �sysr" Zunittestr r$ Zacmer rT Zcertbotr ZTestCaser r r r9 rE rK r �exit�main�argv�__file__r r r r �<module> s" % display/__pycache__/internal_util_test.cpython-39.pyc 0000644 00000017115 15114562471 0016775 0 ustar 00 a }|�g! � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddlm Z ddl m Z G dd� dej �ZG dd � d ej �ZG d d � d ej �ZG d d � d ej �ZG dd� dej �ZG dd� dej �Zedkr�e�e�ejdd� eg �� dS )z+Test :mod:`certbot._internal.display.util`.� N)�mock)�messages)�errorsc @ s e Zd Zdd� ZdS )� WrapLinesTestc C s4 ddl m} d�d�}||�}|�d�dks0J �d S )Nr )� wrap_linesz�This is just a weak test{0}This function is only meant to be for easy viewing{0}Test a really really really really really really really really really really really really long line...� � )� certbot._internal.display.utilr �format�count)�selfr �msg�text� r �V/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/internal_util_test.py�test_wrap_lines s �z WrapLinesTest.test_wrap_linesN)�__name__� __module__� __qualname__r r r r r r s r c @ s( e Zd Zedd� �Zdd� Zdd� ZdS )�PlaceParensTestc C s ddl m} ||�S )Nr )�parens_around_char)r r )�clsZlabelr r r r �_call s zPlaceParensTest._callc C s d| � d�ksJ �d S )Nz(a)�a�r �r r r r �test_single_letter! s z"PlaceParensTest.test_single_letterc C s( d| � d�ksJ �d| � d�ks$J �d S )Nz(L)abelZLabelz (y)es pleasez yes pleaser r r r r � test_multiple$ s z PlaceParensTest.test_multipleN)r r r � classmethodr r r r r r r r s r c @ sH e Zd ZdZedd� �Zdd� Zddd�Ze� d �d d � �Z d d � Z dS )�InputWithTimeoutTestz<Tests for certbot._internal.display.util.input_with_timeout.c O s ddl m} ||i |��S )Nr )�input_with_timeout)r r )r �args�kwargsr r r r r + s zInputWithTimeoutTest._callc C s� t �d��p}tjd|d��B t�t�� | �� W d � n1 sD0 Y W d � n1 sb0 Y W d � n1 s�0 Y d S )Nzr+�(certbot._internal.display.util.sys.stdin)�new)�tempfileZ TemporaryFiler �patch�pytest�raises�EOFErrorr )r �fr r r �test_eof0 s z InputWithTimeoutTest.test_eofNc C s` d}t �|d �}t�d��0}|gg g f|_| �|�|ks>J �W d � n1 sR0 Y d S )Nzfoo barr z!certbot.compat.misc.select.select)�io�StringIOr r& Z return_valuer )r �promptZexpected�stdinZ mock_selectr r r � test_input6 s z InputWithTimeoutTest.test_inputz)certbot._internal.display.util.sys.stdoutc C s( d}| � |� |j�|� |j�� d S )Nz test prompt: )r0 �writeZassert_called_once_with�flush)r Z mock_stdoutr. r r r �test_input_with_prompt= s z+InputWithTimeoutTest.test_input_with_promptc C s� t � t jt j�}|�d� |�d� t�d|��H t�t j �� | j dd� W d � n1 s`0 Y W d � n1 s~0 Y |� � d S )N)� r � r# g����MbP?)�timeout) �socketZAF_INETZ SOCK_STREAMZbindZlistenr r& r' r( r �Errorr �close)r r/ r r r � test_timeoutD s Hz!InputWithTimeoutTest.test_timeout)N) r r r �__doc__r r r+ r0 r r& r3 r: r r r r r ) s r c @ sD e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd d � Z d d � Z dS )�SeparateListInputTestzTest Module functions.c C s g d�| _ d S )N)r �b�c�test)�expr r r r �setUpP s zSeparateListInputTest.setUpc C s ddl m} ||�S )Nr )�separate_list_input)r rB )r Zinput_rB r r r r S s zSeparateListInputTest._callc C s | � d�| jksJ �d S )Nz a,b,c,test�r r@ r r r r � test_commasX s z!SeparateListInputTest.test_commasc C s | � d�| jksJ �d S )Nz a b c testrC r r r r � test_spaces[ s z!SeparateListInputTest.test_spacesc C s | � d�| jksJ �d S )Nz a, b, c, testrC r r r r � test_both^ s z SeparateListInputTest.test_bothc C s8 | � d�| � d�| � d�g}|D ]}|| jks J �q d S )Nz a , b c testz,a, ,, , b c test z,,,,, , a b,,, , c,testrC )r �actualZactr r r � test_messa s �z SeparateListInputTest.test_messN) r r r r; rA r r rD rE rF rH r r r r r< N s r< c @ s8 e Zd Zedd� �Zdd� Zdd� Zdd� Zd d � Zd S ) �SummarizeDomainListTestc C s ddl m} ||�S )Nr )�summarize_domain_list)r rJ )r ZdomainsrJ r r r r m s z SummarizeDomainListTest._callc C s d| � dg�ksJ �d S )N� example.comr r r r r �test_single_domainr s z*SummarizeDomainListTest.test_single_domainc C s d| � ddg�ksJ �d S )Nzexample.com and example.orgrK � example.orgr r r r r �test_two_domainsu s �z(SummarizeDomainListTest.test_two_domainsc C s d| � g d��ksJ �d S )Nz example.com and 2 more domains)rK rM z a.example.comr r r r r �test_many_domainsy s �z)SummarizeDomainListTest.test_many_domainsc C s d| � g �ksJ �d S )Nr4 r r r r r �test_empty_domains} s z*SummarizeDomainListTest.test_empty_domainsN) r r r r r rL rN rO rP r r r r rI l s rI c @ sD e Zd Zedeeed�dd��Zdd� Zd d � Zd d � Zd d� Z dS )�DescribeACMEErrorTest�!urn:ietf:params:acme:error:badCSR�Unacceptable CSR� CSR contained unknown extensions��typ�title�detailc C s ddl m} |tj|||d��S )Nr )�describe_acme_errorrU )r rY � acme_messagesr8 )r rV rW rX rY r r r r � s �zDescribeACMEErrorTest._callc C s d| � � ksJ �d S )Nz4Unacceptable CSR :: CSR contained unknown extensionsr r r r r �test_title_and_detail� s z+DescribeACMEErrorTest.test_title_and_detailc C s d| j d d�ksJ �d S )NrT )rW r r r r r � test_detail� s z!DescribeACMEErrorTest.test_detailc C s t jd | jd d d�ks J �d S )NZbadCSR)rW rX )rZ Z ERROR_CODESr r r r r �test_description� s z&DescribeACMEErrorTest.test_descriptionc C s d| j dd d d�ksJ �d S )Nz+urn:ietf:params:acme:error:unknownErrorTyperU r r r r r �test_unknown_type� s �z'DescribeACMEErrorTest.test_unknown_typeN)rR rS rT ) r r r r �strr r[ r\ r] r^ r r r r rQ � s ��rQ �__main__r5 )r; r, r7 �sysr% Zunittestr r' Zacmer rZ Zcertbotr ZTestCaser r r r< rI rQ r �exit�main�argv�__file__r r r r �<module> s" % display/__pycache__/obj_test.cpython-39.opt-1.pyc 0000644 00000027617 15114562471 0015645 0 ustar 00 a }|�g�5 � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlmZ ddl m Z ddgZ g d �ZG d d � d ej�ZG d d � d ej�Zedkr�e�e�ejdd� eg �� dS )z*Test :mod:`certbot._internal.display.obj`.� N)�mock)�errors)�obj)�util)ZFirstZ Description1)ZSecondZ Description2)�tag1�tag2�tag3c sF e Zd ZdZ� fdd�Ze�d�dd� �Zdd� Zd d � Z d d � Z d d� Z e�d�dd� �Z dd� Z dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Ze�d"�d#d$� �Ze�d"�d%d&� �Ze�d"�d'd(� �Ze�d"�d)d*� �Zd+d,� Zd-d.� Zd/d0� Ze�d"�d1d2� �Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z!d=d>� Z"� Z#S )?�FileOutputDisplayTestz�Test stdout display. Most of this class has to deal with visual output. In order to test how the functions look to a user, uncomment the test_visual function. c s( t � �� t�� | _t�| jd�| _d S )NF)�super�setUpr � MagicMock� mock_stdout� display_objZ FileDisplay� displayer��self�� __class__� �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/obj_test.pyr s zFileOutputDisplayTest.setUp�$certbot._internal.display.obj.loggerc C s2 | j �dd� | jjjd d }|j�dd� d S )N�messageFr �Notifying user: %s�r � notificationr �write� call_args�debugZassert_called_with�r � mock_logger�stringr r r �test_notification_no_pause s z0FileOutputDisplayTest.test_notification_no_pausec C sF d}t j|dd�� | jjddd� W d � n1 s80 Y d S )N�1certbot._internal.display.util.input_with_timeoutZenter�� return_valuer T�Zforce_interactive)r �patchr r �r �input_with_timeoutr r r �test_notification_pause$ s .z-FileOutputDisplayTest.test_notification_pausec C s& | � | jjd� | jjjd d }d S )Nr r ��_force_noninteractiver r r r r �r r r r r � test_notification_noninteractive+ s z6FileOutputDisplayTest.test_notification_noninteractivec C sH | � | jjd� | jjjd d }| � | jjd� | jjjd d }d S )Nr r �message2r* r, r r r �!test_notification_noninteractive20 s z7FileOutputDisplayTest.test_notification_noninteractive2c C sV ddl m} | jjdddd� | jjjd d }| jjddd� | jjjd d }d S �Nr )�osr F)�pauseZdecorater. )r2 �Zcertbot.compatr1 r r r r r �r r1 r r r r � test_notification_decoration= s z2FileOutputDisplayTest.test_notification_decorationz<certbot._internal.display.obj.FileDisplay._get_valid_int_ansc C s" t jdf|_| jjdtdd�}d S )N� r Tr% )� display_util�OKr$ r �menu�CHOICES)r Zmock_ans�retr r r � test_menuH s z FileOutputDisplayTest.test_menuc C s d}| j | jjdt|d�}d S )Nr �msg��default)r+ r r9 r: )r r? �resultr r r �test_menu_noninteractiveO s �z.FileOutputDisplayTest.test_menu_noninteractivec C sJ d}t j|dd��$ | jjddd�\}}W d � n1 s<0 Y d S )Nr" �cr# r Tr% �r r& r �input)r r( �code�_r r r �test_input_cancelU s 2z'FileOutputDisplayTest.test_input_cancelc C sJ d}t j|dd��$ | jjddd�\}}W d � n1 s<0 Y d S )Nr" z domain.comr# r Tr% rC )r r( rE �input_r r r �test_input_normal\ s 2z'FileOutputDisplayTest.test_input_normalc C s d}| j | jjd|d�\}}d S )NZfoor r> )r+ r rD �r r? rE rH r r r �test_input_noninteractived s � z/FileOutputDisplayTest.test_input_noninteractivec C sB t �t��$ | j| jjddd� W d � n1 s40 Y d S )Nr �--flag�Zcli_flag)�pytest�raises� Exceptionr+ r rD r r r r �test_input_assertion_faill s z/FileOutputDisplayTest.test_input_assertion_failc C sn t �d��P t�tj��$ | j| jjddd� W d � n1 sB0 Y W d � n1 s`0 Y d S )Nz&certbot.display.util.assert_valid_callr= rL rM ) r r& rN rO r �Errorr+ r rD r r r r �test_input_assertion_fail2r s z0FileOutputDisplayTest.test_input_assertion_fail2c C s& d}t j|dd�� W d � n1 s(0 Y t j|dd�� W d � n1 sV0 Y t j|ddgd�� W d � n1 s�0 Y t j|dd�� W d � n1 s�0 Y t j|dd gd�� W d � n1 s�0 Y t j|d d�� W d � n1 �s0 Y d S ) Nr" ZYesr# �y�maybe�� side_effectZNo�cancel�n�a�r r& r' r r r � test_yesnow s z FileOutputDisplayTest.test_yesnoc C s d S �Nr r r r r �test_yesno_noninteractive� s z/FileOutputDisplayTest.test_yesno_noninteractiver" c C s d|_ | jjdtdd�\}}d S )Nz2 1r= Tr% �r$ r � checklist�TAGS�r � mock_inputrE Ztag_listr r r �test_checklist_valid� s � z*FileOutputDisplayTest.test_checklist_validc C s d|_ | jjdtdd�\}}d S )N� r= Tr% r_ rb r r r �test_checklist_empty� s z*FileOutputDisplayTest.test_checklist_emptyc C s g d�|_ | jjdtdd�}d S )N)�10z tag1 please�1r= Tr% �rW r r` ra �r rc r; r r r �test_checklist_miss_valid� s z/FileOutputDisplayTest.test_checklist_miss_validc C s ddg|_ | jjdtdd�}d S )Nrg rB r= Tr% ri rj r r r �test_checklist_miss_quit� s z.FileOutputDisplayTest.test_checklist_miss_quitc C s" t }| j| jjdt |d�\}}d S )Nr= r> )ra r+ r r` rJ r r r � test_checklist_noninteractive� s � z3FileOutputDisplayTest.test_checklist_noninteractivec C sP dgg d�ddgg}dhddhddhg}t |�D ]\}}t| j�|t��}q0d S )Nrh )rh �2rh rn �3r r r )� enumerate�setr �_scrub_checklist_inputra )r �indices�exp�i�list_Zset_tagsr r r � test_scrub_checklist_input_valid� s �� �z6FileOutputDisplayTest.test_scrub_checklist_input_validc C sd g d�}ddgddgg d�g d�g}ddgddgddgddgg}t |�D ]\}}| j�||�}qHd S )N) ZT1ZT2ZT3�T4ZT5ZT6ZT7ZT8�T9�4�9)rz r{ rz )r{ rz r{ rx ry )rp r rr )r Z source_tagsrs rt ru rv �tagsr r r �+test_scrub_checklist_maintain_indices_order� s ��zAFileOutputDisplayTest.test_scrub_checklist_maintain_indices_orderc C s" g d�}d}||_ | jj|� }d S )N)r= � /var/www/htmlrL Tr~ )r$ r �directory_select)r rc �argsZ user_inputZreturnedr r r �test_directory_select� s z+FileOutputDisplayTest.test_directory_selectc C s d}| j | jjd|d�\}}d S )Nr~ r= r> )r+ r r rJ r r r �$test_directory_select_noninteractive� s � z:FileOutputDisplayTest.test_directory_select_noninteractivec O s| | j j}t�d��P}d|j_t�d�� }||i |��}W d � n1 sJ0 Y W d � n1 sh0 Y |rxn |S )Nz'certbot._internal.display.obj.sys.stdinFr )r �skipped_interactionr r& �isattyr$ )r �funcr� �kwargsr� Z mock_stdinr r@ r r r r+ � s Jz+FileOutputDisplayTest._force_noninteractivec C s* dgdgdgddgddgg}|D ]}q d S )N�0rz r rh rn �or )r rs rv r r r �"test_scrub_checklist_input_invalid� s �z8FileOutputDisplayTest.test_scrub_checklist_input_invalidc C s | j �dt� | j �dt� d S )Nr= )r Z _print_menur: ra r r r r �test_print_menu s z%FileOutputDisplayTest.test_print_menuc C sh d}t j|dd�� W d � n1 s(0 Y d}t j||d�� W d � n1 sZ0 Y d S )Nr" rh r# rn r[ )r r( �ansr r r � test_get_valid_int_ans_valid s z2FileOutputDisplayTest.test_get_valid_int_ans_validc C sT ddgg d�dgg}d}|D ]2}t j||d�� W d � q 1 sD0 Y q d S )Nr� rB )rz Zone�Cr" rV r[ )r Zanswersr( r� r r r � test_get_valid_int_ans_invalid s �z4FileOutputDisplayTest.test_get_valid_int_ans_invalid)$�__name__� __module__� __qualname__�__doc__r r r& r! r) r- r/ r5 r< rA rG rI rK rQ rS r\ r^ rd rf rk rl rm rw r} r� r� r+ r� r� r� r� � __classcell__r r r r r sJ r c @ sZ e Zd ZdZdd� Ze�d�dd� �Zdd� Zd d � Z d d � Z d d� Z dd� Z dd� Z dS )�NoninteractiveDisplayTestz:Test non-interactive display. These tests are pretty easy!c C s t �� | _t�| j�| _d S r] )r r r r ZNoninteractiveDisplayr r r r r r $ s z NoninteractiveDisplayTest.setUpr c C s2 | j �dd� | jjjd d }|j�dd� d S )Nr � r r r r r r r r! ( s z4NoninteractiveDisplayTest.test_notification_no_pausec C sV ddl m} | jjdddd� | jjjd d }| jjddd� | jjjd d }d S r0 r3 r4 r r r r5 0 s z6NoninteractiveDisplayTest.test_notification_decorationc C sP d}| j jd|d�}t�tj�� | j �d� W d � n1 sB0 Y d S )Nzan incomputable valuer r> )r rD rN rO r �MissingCommandlineFlag�r �dr; r r r � test_input; s z$NoninteractiveDisplayTest.test_inputc C sP | j jdtdd�}t�tj�� | j �dt� W d � n1 sB0 Y d S )Nr r6 r> )r r9 r: rN rO r r� )r r; r r r r< B s z#NoninteractiveDisplayTest.test_menuc C sP d}| j jd|d�}t�tj�� | j �d� W d � n1 sB0 Y d S )NFr r> )r ZyesnorN rO r r� r� r r r r\ H s z$NoninteractiveDisplayTest.test_yesnoc C sX ddg}| j jdt|d�}t�tj�� | j �dt� W d � n1 sJ0 Y d S )Nr6 � r r> )r r` ra rN rO r r� r� r r r �test_checklistO s z(NoninteractiveDisplayTest.test_checklistc C sX d}t j|f}| j�d|�}t�tj�� | j�d� W d � n1 sJ0 Y d S )Nr~ r= )r7 r8 r r rN rO r r� )r r? Zexpected�actualr r r r� V s z/NoninteractiveDisplayTest.test_directory_selectN)r� r� r� r� r r r& r! r5 r� r< r\ r� r� r r r r r� " s r� �__main__r6 )r� �sysZunittestr rN Zcertbotr Zcertbot._internal.displayr r Zcertbot.displayr r7 r: ra ZTestCaser r� r� �exit�main�argv�__file__r r r r �<module> s > display/__pycache__/obj_test.cpython-39.pyc 0000644 00000032444 15114562471 0014700 0 ustar 00 a }|�g�5 � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlmZ ddl m Z ddgZ g d �ZG d d � d ej�ZG d d � d ej�Zedkr�e�e�ejdd� eg �� dS )z*Test :mod:`certbot._internal.display.obj`.� N)�mock)�errors)�obj)�util)ZFirstZ Description1)ZSecondZ Description2)�tag1�tag2�tag3c sF e Zd ZdZ� fdd�Ze�d�dd� �Zdd� Zd d � Z d d � Z d d� Z e�d�dd� �Z dd� Z dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Ze�d"�d#d$� �Ze�d"�d%d&� �Ze�d"�d'd(� �Ze�d"�d)d*� �Zd+d,� Zd-d.� Zd/d0� Ze�d"�d1d2� �Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z!d=d>� Z"� Z#S )?�FileOutputDisplayTestz�Test stdout display. Most of this class has to deal with visual output. In order to test how the functions look to a user, uncomment the test_visual function. c s( t � �� t�� | _t�| jd�| _d S )NF)�super�setUpr � MagicMock� mock_stdout� display_objZ FileDisplay� displayer��self�� __class__� �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/obj_test.pyr s zFileOutputDisplayTest.setUp�$certbot._internal.display.obj.loggerc C s> | j �dd� | jjjd d }d|v s,J �|j�dd� d S )N�messageFr �Notifying user: %s�r � notificationr �write� call_args�debugZassert_called_with�r � mock_logger�stringr r r �test_notification_no_pause s z0FileOutputDisplayTest.test_notification_no_pausec C s` d}t j|dd�� | jjddd� W d � n1 s80 Y d| jjjd d v s\J �d S )N�1certbot._internal.display.util.input_with_timeoutZenter�� return_valuer T��force_interactiver )r �patchr r r r r �r �input_with_timeoutr r r �test_notification_pause$ s .z-FileOutputDisplayTest.test_notification_pausec C s2 | � | jjd� | jjjd d }d|v s.J �d S )Nr r )�_force_noninteractiver r r r r �r r r r r � test_notification_noninteractive+ s z6FileOutputDisplayTest.test_notification_noninteractivec C sl | � | jjd� | jjjd d }d|v s.J �| jjs:J �| � | jjd� | jjjd d }d|v shJ �d S )Nr r �message2)r+ r r r r r �skipped_interactionr, r r r �!test_notification_noninteractive20 s z7FileOutputDisplayTest.test_notification_noninteractive2c C s� ddl m} | jjdddd� | jjjd d }|d|j ksBJ �| jjddd� | jjjd d }d|v spJ �d|j |v s�J �d S � Nr )�osr F)�pauseZdecorater. )r3 z- - - �Zcertbot.compatr2 r r r r r �linesep�r r2 r r r r � test_notification_decoration= s z2FileOutputDisplayTest.test_notification_decorationz<certbot._internal.display.obj.FileDisplay._get_valid_int_ansc C s4 t jdf|_| jjdtdd�}|t jdfks0J �d S )N� r Tr% r )� display_util�OKr$ r �menu�CHOICES)r Zmock_ans�retr r r � test_menuH s z FileOutputDisplayTest.test_menuc C s0 d}| j | jjdt|d�}|tj|fks,J �d S )Nr �msg��default)r+ r r; r< r9 r: )r rA �resultr r r �test_menu_noninteractiveO s �z.FileOutputDisplayTest.test_menu_noninteractivec C sX d}t j|dd��$ | jjddd�\}}W d � n1 s<0 Y |sTJ tj��d S )Nr" �cr# r Tr% )r r' r �inputr9 �CANCEL)r r) �code�_r r r �test_input_cancelU s 2z'FileOutputDisplayTest.test_input_cancelc C sd d}t j|dd��$ | jjddd�\}}W d � n1 s<0 Y |tjksTJ �|dks`J �d S )Nr" z domain.comr# r Tr% )r r' r rE r9 r: )r r) rG �input_r r r �test_input_normal\ s 2z'FileOutputDisplayTest.test_input_normalc C s: d}| j | jjd|d�\}}|tjks*J �||ks6J �d S )NZfoor r@ )r+ r rE r9 r: �r rA rG rJ r r r �test_input_noninteractived s � z/FileOutputDisplayTest.test_input_noninteractivec C sB t �t��$ | j| jjddd� W d � n1 s40 Y d S )Nr �--flag�Zcli_flag)�pytest�raises� Exceptionr+ r rE r r r r �test_input_assertion_faill s z/FileOutputDisplayTest.test_input_assertion_failc C sn t �d��P t�tj��$ | j| jjddd� W d � n1 sB0 Y W d � n1 s`0 Y d S )Nz&certbot.display.util.assert_valid_callr? rN rO ) r r' rP rQ r �Errorr+ r rE r r r r �test_input_assertion_fail2r s z0FileOutputDisplayTest.test_input_assertion_fail2c C s� d}t j|dd��$ | jjddd�s(J �W d � n1 s<0 Y t j|dd��$ | jjddd�sjJ �W d � n1 s~0 Y t j|ddgd ��$ | jjddd�s�J �W d � n1 s�0 Y t j|d d��$ | jjddd�r�J �W d � n1 �s0 Y t j|d d gd ��& | jjddd��r<J �W d � n1 �sR0 Y t j|d d��( | jjdddd��s�J �W d � n1 �s�0 Y d S )Nr" ZYesr# r Tr% �y�maybe�� side_effectZNo�cancel�n�ar? ZAgree)Z yes_labelr& )r r' r �yesnor( r r r � test_yesnow s2 �(�(�(�*�,�z FileOutputDisplayTest.test_yesnoc C s | j | jjddd�sJ �d S )Nr Tr@ )r+ r r] r r r r �test_yesno_noninteractive� s �z/FileOutputDisplayTest.test_yesno_noninteractiver" c C s> d|_ | jjdtdd�\}}|t|�ftjddhfks:J �d S )Nz2 1r? Tr% r r �r$ r � checklist�TAGS�setr9 r: �r � mock_inputrG Ztag_listr r r �test_checklist_valid� s � z*FileOutputDisplayTest.test_checklist_validc C s> d|_ | jjdtdd�\}}|t|�ftjh d�fks:J �d S )N� r? Tr% > r r r r` rd r r r �test_checklist_empty� s z*FileOutputDisplayTest.test_checklist_emptyc C s4 g d�|_ | jjdtdd�}|tjdgfks0J �d S )N)�10z tag1 please�1r? Tr% r )rY r ra rb r9 r: �r re r= r r r �test_checklist_miss_valid� s z/FileOutputDisplayTest.test_checklist_miss_validc C s2 ddg|_ | jjdtdd�}|tjg fks.J �d S )Nri rD r? Tr% )rY r ra rb r9 rF rk r r r �test_checklist_miss_quit� s z.FileOutputDisplayTest.test_checklist_miss_quitc C s< t }| j| jjdt |d�\}}|tjks,J �||ks8J �d S )Nr? r@ )rb r+ r ra r9 r: rL r r r � test_checklist_noninteractive� s � z3FileOutputDisplayTest.test_checklist_noninteractivec C s` dgg d�ddgg}dhddhddhg}t |�D ]*\}}t| j�|t��}||| ks0J �q0d S )Nrj )rj �2rj ro �3r r r )� enumeraterc r �_scrub_checklist_inputrb )r �indices�exp�i�list_Zset_tagsr r r � test_scrub_checklist_input_valid� s �� �z6FileOutputDisplayTest.test_scrub_checklist_input_validc C st g d�}ddgddgg d�g d�g}ddgddgddgddgg}t |�D ]&\}}| j�||�}||| ksHJ �qHd S )N) ZT1ZT2ZT3�T4ZT5ZT6ZT7ZT8�T9�4�9)rz r{ rz )r{ rz r{ rx ry )rq r rr )r Z source_tagsrs rt ru rv �tagsr r r �+test_scrub_checklist_maintain_indices_order� s ��zAFileOutputDisplayTest.test_scrub_checklist_maintain_indices_orderc C s4 g d�}d}||_ | jj|� }|tj|fks0J �d S )N)r? � /var/www/htmlrN Tr~ )r$ r �directory_selectr9 r: )r re �argsZ user_inputZreturnedr r r �test_directory_select� s z+FileOutputDisplayTest.test_directory_selectc C s: d}| j | jjd|d�\}}|tjks*J �||ks6J �d S )Nr~ r? r@ )r+ r r r9 r: rL r r r �$test_directory_select_noninteractive� s � z:FileOutputDisplayTest.test_directory_select_noninteractivec O s� | j j}t�d��P}d|j_t�d�� }||i |��}W d � n1 sJ0 Y W d � n1 sh0 Y |r�|jjdu s�J �n|jjdks�J �|S )Nz'certbot._internal.display.obj.sys.stdinFr r8 ) r r/ r r' �isattyr$ ZwarningZcalledZ call_count)r �funcr� �kwargsr/ Z mock_stdinr rB r r r r+ � s Jz+FileOutputDisplayTest._force_noninteractivec C s@ dgdgdgddgddgg}|D ]}| j �|t�g ks J �q d S )N�0rz r rj ro �o)r rr rb )r rs rv r r r �"test_scrub_checklist_input_invalid� s �z8FileOutputDisplayTest.test_scrub_checklist_input_invalidc C s | j �dt� | j �dt� d S )Nr? )r Z _print_menur< rb r r r r �test_print_menu s z%FileOutputDisplayTest.test_print_menuc C s� d}t j|dd��* | j�d�tjdfks.J �W d � n1 sB0 Y d}t j||d��. | j�d�tjt|�fks~J �W d � n1 s�0 Y d S )Nr" rj r# r8 ro � )r r' r �_get_valid_int_ansr9 r: �int)r r) �ansr r r � test_get_valid_int_ans_valid s 8 �z2FileOutputDisplayTest.test_get_valid_int_ans_validc C sn ddgg d�dgg}d}|D ]L}t j||d��* | j�d�tjdfksJJ �W d � q 1 s^0 Y q d S )Nr� rD )rz Zone�Cr" rX r� ���)r r' r r� r9 rF )r Zanswersr) r� r r r � test_get_valid_int_ans_invalid s � �z4FileOutputDisplayTest.test_get_valid_int_ans_invalid)$�__name__� __module__� __qualname__�__doc__r r r' r! r* r- r0 r7 r> rC rI rK rM rS rU r^ r_ rf rh rl rm rn rw r} r� r� r+ r� r� r� r� � __classcell__r r r r r sJ r c @ sZ e Zd ZdZdd� Ze�d�dd� �Zdd� Zd d � Z d d � Z d d� Z dd� Z dd� Z dS )�NoninteractiveDisplayTestz:Test non-interactive display. These tests are pretty easy!c C s t �� | _t�| j�| _d S )N)r r r r ZNoninteractiveDisplayr r r r r r $ s z NoninteractiveDisplayTest.setUpr c C s> | j �dd� | jjjd d }d|v s,J �|j�dd� d S )Nr � r r r r r r r r! ( s z4NoninteractiveDisplayTest.test_notification_no_pausec C s� ddl m} | jjdddd� | jjjd d }|d|j ksBJ �| jjddd� | jjjd d }d|v spJ �d|j |v s�J �d S r1 r4 r6 r r r r7 0 s z6NoninteractiveDisplayTest.test_notification_decorationc C sb d}| j jd|d�}|tj|fks&J �t�tj�� | j �d� W d � n1 sT0 Y d S )Nzan incomputable valuer r@ )r rE r9 r: rP rQ r �MissingCommandlineFlag�r �dr= r r r � test_input; s z$NoninteractiveDisplayTest.test_inputc C sb | j jdtdd�}|tjdfks$J �t�tj�� | j �dt� W d � n1 sT0 Y d S )Nr r8 r@ ) r r; r< r9 r: rP rQ r r� )r r= r r r r> B s z#NoninteractiveDisplayTest.test_menuc C s\ d}| j jd|d�}||ks J �t�tj�� | j �d� W d � n1 sN0 Y d S )NFr r@ )r r] rP rQ r r� r� r r r r^ H s z$NoninteractiveDisplayTest.test_yesnoc C sj ddg}| j jdt|d�}|tj|fks,J �t�tj�� | j �dt� W d � n1 s\0 Y d S )Nr8 r� r r@ ) r ra rb r9 r: rP rQ r r� r� r r r �test_checklistO s z(NoninteractiveDisplayTest.test_checklistc C sd d}t j|f}| j�d|�}||ks(J �t�tj�� | j�d� W d � n1 sV0 Y d S )Nr~ r? )r9 r: r r rP rQ r r� )r rA Zexpected�actualr r r r� V s z/NoninteractiveDisplayTest.test_directory_selectN)r� r� r� r� r r r' r! r7 r� r> r^ r� r� r r r r r� " s r� �__main__r8 )r� �sysZunittestr rP Zcertbotr Zcertbot._internal.displayr r Zcertbot.displayr r9 r< rb ZTestCaser r� r� �exit�main�argv�__file__r r r r �<module> s > display/__pycache__/ops_test.cpython-39.opt-1.pyc 0000644 00000044562 15114562471 0015672 0 ustar 00 a }|�g3O � @ s� d Z ddlZddlZddlmZ ddlZddlZddlmZ ddl m Z ddl m Z ddl mZ ddlmZ dd lmZ dd lmZ dd lmZ ddlm mZ ej�e� d ��Z G d d� dej �Z G dd� dej �Z!G dd� dej �Z"G dd� dej �Z#G dd� dej �Z$G dd� dej �Z%G dd� dej �Z&G dd � d ej �Z'G d d � d ej �Z(e�)d �e�)d �G d!d"� d"ej ���Z*e+d#k�r�e�,e�-ej.d$d� e/g �� dS )%zTest certbot.display.ops.� N)�mock)�messages)�errors)�account)�obj)� filesystem)�os)�ops)�utilzrsa512_key.pemc @ s| e Zd ZdZedd� �Ze�� dd� �Ze�� dd� �Z e�� dd � �Z e�� d d � �Z e�� d d � �Z e�� dd� �Z dS )� GetEmailTestz(Tests for certbot.display.ops.get_email.c K s ddl m} |f i |��S )Nr )� get_email)�certbot.display.opsr )�cls�kwargsr � r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/ops_test.py�_call s zGetEmailTest._callc C s� |� j }tjdf|_t�tj�� | �� W d � n1 s>0 Y t�tj�� | jdd� W d � n1 sv0 Y d S )N� foo@bar.bazF�Zoptional) �input� display_util�CANCEL� return_value�pytest�raisesr �Errorr )�self�mock_get_utility� mock_inputr r r �test_cancel_none s &z GetEmailTest.test_cancel_nonec C sH |� j }tjdf|_t�d��}d|_W d � n1 s:0 Y d S )Nr �#certbot.display.ops.util.safe_emailT)r r �OKr r �patch�r r r �mock_safe_emailr r r � test_ok_safe( s zGetEmailTest.test_ok_safec C sL |� j }tjdf|_t�d��}ddg|_W d � n1 s>0 Y d S )Nr r FT)r r r! r r r" � side_effectr# r r r �test_ok_not_safe0 s z GetEmailTest.test_ok_not_safec C s` d}|� j }tjdf|_t�d��*}d|_| �� | jdd� W d � n1 sR0 Y d S )N�There seem to be problemsr r T�Zinvalid)r r r! r r r" r �r r Z invalid_txtr r$ r r r �test_invalid_flag8 s z GetEmailTest.test_invalid_flagc C sd |� j }tjdf|_t�d��2}ddg|_| jdd� |jD ]}q<W d � n1 sV0 Y d S )Nr r FTr ) r r r! r r r" r& r �call_args_list)r r r r$ �callr r r �test_optional_flagD s z GetEmailTest.test_optional_flagc C s\ d}|� j }tjdf|_t�d��&}ddg|_| jdd� W d � n1 sN0 Y d S )Nr( r r FTr) )r r r! r r r" r& r r* r r r � test_optional_invalid_unsafeN s z)GetEmailTest.test_optional_invalid_unsafeN)�__name__� __module__� __qualname__�__doc__� classmethodr � test_util�patch_display_utilr r% r' r+ r. r/ r r r r r s r c s\ e Zd ZdZ� fdd�Zedd� �Ze�� dd� �Z e�� dd � �Z e�� d d � �Z � Z S ) �ChooseAccountTestz-Tests for certbot.display.ops.choose_account.c s� t � �� t�t�tjd�� tj� | j d�| _ t � | j d� tj| j | j dd�| _t| _t�tjd tjjdd�d�| j�| _t�tjd tjjd d d �d�| j�| _d S ) NF�keysi� zcertbot-demo.org)Z accounts_dir�account_keys_dirZserverz email1@g.com)�email)Zuri�bodyz email2@g.com�phone)r: r< )�super�setUp� display_obj� set_display� FileDisplay�sys�stdoutr �path�joinZtempdirr9 r �makedirsr � MagicMockZconfig�KEY�keyr ZAccountr ZRegistrationResourceZ RegistrationZ from_dataZacc1Zacc2�r �� __class__r r r> [ s0 �������zChooseAccountTest.setUpc C s t �|�S �N)r Zchoose_account)r Zaccountsr r r r p s zChooseAccountTest._callc C s t jdf|� j_d S )Nr �r r! �menur �r � mock_utilr r r �test_onet s zChooseAccountTest.test_onec C s t jdf|� j_d S �N� rN rP r r r �test_twoy s zChooseAccountTest.test_twoc C s t jdf|� j_d S rS )r r rO r rP r r r � test_cancel~ s z ChooseAccountTest.test_cancel) r0 r1 r2 r3 r> r4 r r5 r6 rR rU rV � __classcell__r r rK r r7 Y s r7 c @ sL e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd d � Z d d � Z dd� Z dS )�GenHttpsNamesTestzTest _gen_https_names.c C s t �t �tjd�� d S �NF)r? r@ rA rB rC rJ r r r r> � s zGenHttpsNamesTest.setUpc C s ddl m} ||�S )Nr )�_gen_https_names)r rZ )r ZdomainsrZ r r r r � s zGenHttpsNamesTest._callc C s d S rM r rJ r r r � test_zero� s zGenHttpsNamesTest.test_zeroc C s ddg}|D ]}q d S )N� example.comzasllkjsadfljasdf.cr )r �doms�domr r r rR � s �zGenHttpsNamesTest.test_onec C s ddgddgg}|D ]}qd S )Nz foo.bar.orgzbar.orgz paypal.google.facebook.live.comz*.zombo.example.comr )r Z domains_listr] r r r rU � s �zGenHttpsNamesTest.test_twoc C s g d�}d S )N)�a.org�b.org�c.orgr )r r] r r r � test_three� s z GenHttpsNamesTest.test_threec C s g d�}dj |d�}d S )N)r_ r` ra zd.orgzJhttps://{dom[0]}, https://{dom[1]}, https://{dom[2]}, and https://{dom[3]})r^ )�format)r r] Zexpr r r � test_four� s �zGenHttpsNamesTest.test_fourN) r0 r1 r2 r3 r> r4 r r[ rR rU rb rd r r r r rX � s rX c @ s� e Zd ZdZdd� Zed dd��Ze�d�dd � �Z e � � d d � �Z e � � d d � �Z dd� Zdd� Ze � � dd� �Ze � � dd� �Ze � � dd� �Ze � � dd� �Zdd� Ze � � d d � �Ze � � d d � �ZdS )!�ChooseNamesTestzTest choose names.c C s" t �t �tjd�� t�� | _d S rY )r? r@ rA rB rC r rG � mock_installrJ r r r r> � s zChooseNamesTest.setUpNc C s ddl m} |||�S )Nr )� choose_names)r rg )r Z installer�questionrg r r r r � s zChooseNamesTest._callz*certbot.display.ops._choose_names_manuallyc C s | � d � d S rM �r )r Z mock_manualr r r �test_no_installer� s z!ChooseNamesTest.test_no_installerc C s t jg f|� j_d S rM )r r r r rP r r r �test_no_installer_cancel� s z(ChooseNamesTest.test_no_installer_cancelc C s2 t � | �� j_d}tj|f|� j_| �| j�}d S �Nr\ )�setrf � get_all_namesr r r! r r )r rQ �domainZ actual_domsr r r �test_no_names_choose� s z$ChooseNamesTest.test_no_names_choosec sP ddl m} g d�}d� g d�}� fdd�|D �}t|�}� fdd�|D �}d S ) Nr �� _sort_names)zex.comzzx.comzax.comz.ex.com)�e�a�z�yc s g | ] }|� �qS r r ��.0�us�ro r r � <listcomp>� � z;ChooseNamesTest.test_sort_names_trivial.<locals>.<listcomp>c s g | ] }|� �qS r r rw rz r r r{ � r| )r rr �sorted)r rr Z some_domains�unsorted_shortZ unsorted_long� sorted_shortZ sorted_longr rz r �test_sort_names_trivial� s z'ChooseNamesTest.test_sort_names_trivialc C sx ddl m} g d�}g d�}g d�}g }|D ] }|D ]}|�|| � q4q,g }t|�D ] }|D ]}|�|| � q^qVd S )Nr rq )z.cx.comz.bx.comz.ax.comz.dx.com)�www�bnother.long.subdomainrt �a.long.subdomainru �b)rt r� r� r� r� ru )r rr �appendr} ) r rr Zunsorted_domainsr~ r Zto_sortZshortro Zsortdr r r �test_sort_names_many� s z$ChooseNamesTest.test_sort_names_manyc C s. dh| j j_tjdgf|� j_| �| j �}d S rl �rf rn r r r! � checklistr �r rQ �namesr r r � test_filter_names_valid_return� s z.ChooseNamesTest.test_filter_names_valid_returnc C s0 dh| j j_tjdgf|� j_| �| j d�}d S )Nr\ ZCustomr� r� r r r �$test_filter_namees_override_question s z4ChooseNamesTest.test_filter_namees_override_questionc C s dh| j j_tjg f|� j_d S rl )rf rn r r r! r� rP r r r �"test_filter_names_nothing_selected s z2ChooseNamesTest.test_filter_names_nothing_selectedc C s" dh| j j_tjdgf|� j_d S rl )rf rn r r r r� rP r r r �test_filter_names_cancel s � z(ChooseNamesTest.test_filter_names_cancelc C s( ddl m} g d�}ddg}g d�}d S )Nr )�get_valid_domains)r\ zsecond.example.com�also.example.comzunder_score.example.comZjusttldz*.wildcard.comu öóòps.net� uniçodé.com)r\ u úniçøde.comr� )r r� )r r� Z all_validZ all_invalidZ two_validr r r �test_get_valid_domains s z&ChooseNamesTest.test_get_valid_domainsc C sz ddl m} |� }d|j_tjdf|j_t�d��&}t ddddd�}||_ W d � n1 s^0 Y tjd f|j_d S ) Nr ��_choose_names_manuallyFr� z=certbot.display.ops.internal_display_util.separate_list_inputr � rT z=example.com,under_score.example.com,justtld,valid.example.com) r r� �yesnor r r! r r r" �UnicodeEncodeErrorr& )r rQ r� � utility_mockZmock_sliZ unicode_errorr r r �test_choose_manually# s" �� �z$ChooseNamesTest.test_choose_manuallyc C s6 ddl m} |� }tjdf|j_g d�|j_|� d S )Nr r� r� )TTF)r r� r r! r r r� r& )r rQ r� r� r r r �test_choose_manually_retry> s � z*ChooseNamesTest.test_choose_manually_retry)N)r0 r1 r2 r3 r> r4 r r r" rj r5 r6 rk rp r� r� r� r� r� r� r� r� r� r r r r re � s2 re c @ s6 e Zd ZdZedd� �Ze�� e� d�dd� ��Z dS )�SuccessInstallationTestz&Test the success installation message.c C s ddl m} ||� d S )Nr )�success_installation)r r� )r r� r� r r r r L s z SuccessInstallationTest._call�certbot.display.util.notifyc C s< d |� j _ddg}| �|� |jd d d }|D ]}q2d S )Nr\ �abc.comr )� notificationr r r, )r � mock_notify� mock_displayr� �arg�namer r r �test_success_installationQ s z1SuccessInstallationTest.test_success_installationN) r0 r1 r2 r3 r4 r r5 r6 r r" r� r r r r r� J s r� c @ s6 e Zd ZdZedd� �Ze�� e� d�dd� ��Z dS )�SuccessRenewalTestz!Test the success renewal message.c C s ddl m} ||� d S )Nr )�success_renewal)r r� )r r� r� r r r r b s zSuccessRenewalTest._callr� c C s d |� j _ddg}| �|� d S )Nr\ r� )r� r r )r r� r� r� r r r �test_success_renewalg s z'SuccessRenewalTest.test_success_renewalN) r0 r1 r2 r3 r4 r r5 r6 r r" r� r r r r r� ` s r� c @ s6 e Zd ZdZedd� �Ze�� e� d�dd� ��Z dS )�SuccessRevocationTestz$Test the success revocation message.c C s ddl m} ||� d S )Nr )�success_revocation)r r� )r rD r� r r r r t s zSuccessRevocationTest._callr� c C s" d}| � |� |�d�|�� d S )Nz/path/to/cert.pemzWCongratulations! You have successfully revoked the certificate that was located at {0}.)r Zassert_called_once_withrc )r r� Zunused_mock_displayrD r r r �test_success_revocationy s ��z-SuccessRevocationTest.test_success_revocationN) r0 r1 r2 r3 r4 r r5 r6 r r" r� r r r r r� r s r� c @ s� e Zd ZdZdZdZdZedd� �Ze � � dd� �Z e � � d d � �Z e � � d d � �Z e � � d d� �Ze � � dd� �Ze � � dd� �Ze � � dd� �ZdS )�ValidatorTestsz6Tests for `validated_input` and `validated_directory`.zMust be non-emptyZasdfz /var/www/htmlc C s | dkrt �tj��d S )Nr� )r Z PluginErrorr� �_ValidatorTests__ERROR)�mr r r Z __validator� s zValidatorTests.__validatorc C sB t jdft jdft jdft j| jfg|� j_tj| jddd�}d S �Nr� �messageT�Zforce_interactive�r r! � valid_inputr r& r �validated_input�_ValidatorTests__validator�r rQ Zreturnedr r r � test_input_blank_with_validator� s � z.ValidatorTests.test_input_blank_with_validatorc C s* t j| jfg|� j_tj| jddd�}d S �N�msg�other��defaultr� r� r r r �"test_input_validation_with_default� s z1ValidatorTests.test_input_validation_with_defaultc C sT t j| jfg|� j_t�t��" tj | j ddd� W d � n1 sF0 Y d S �Nr� r� r� ) r r! r� r r& r r �AssertionErrorr r� r� rP r r r �&test_input_validation_with_bad_default� s z5ValidatorTests.test_input_validation_with_bad_defaultc C s, t jdfg|� j_tj| jddd�\}}d S r� )r r r r& r r� r� )r rQ �codeZ unused_rawr r r � test_input_cancel_with_validator� s z/ValidatorTests.test_input_cancel_with_validatorc C s2 t jdft j| jfg|� j_tj| jddd�}d S )Nr� r� Tr� �r r! �valid_directory�directory_selectr& r �validated_directoryr� r� r r r � test_directory_select_validation� s � z/ValidatorTests.test_directory_select_validationc C s* t j| jfg|� j_tj| jddd�}d S r� r� r� r r r �-test_directory_select_validation_with_default� s z<ValidatorTests.test_directory_select_validation_with_defaultc C sT t j| jfg|� j_t�t��" tj | j ddd� W d � n1 sF0 Y d S r� ) r r! r� r� r& r r r� r r� r� rP r r r �1test_directory_select_validation_with_bad_default� s z@ValidatorTests.test_directory_select_validation_with_bad_defaultN)r0 r1 r2 r3 r� r� r� � staticmethodr� r5 r6 r� r� r� r� r� r� r� r r r r r� � s( r� c @ sL e Zd ZdZedd� �Ze�� dd� �Ze�� dd� �Z e�� dd � �Z d S ) �ChooseValuesTestzTest choose_values.c C s ddl m} |||�S )Nr )� choose_values)r r� )r �valuesrh r� r r r r � s zChooseValuesTest._callc C s. g d�}t j|d gf|� j_| �|d �}d S )N��first�second�third� �r r! r� r r )r rQ �items�resultr r r �test_choose_names_success� s z*ChooseValuesTest.test_choose_names_successc C s2 g d�}d}t j|d gf|� j_| �||�}d S )Nr� z Which one?rT r� �r rQ r� rh r� r r r �"test_choose_names_success_question� s z3ChooseValuesTest.test_choose_names_success_questionc C s, g d�}d}t jg f|� j_| �||�}d S )Nr� zWant to cancel?)r r r� r r r� r r r � test_choose_names_user_cancel� s z.ChooseValuesTest.test_choose_names_user_cancelN) r0 r1 r2 r3 r4 r r5 r6 r� r� r� r r r r r� � s r� zcertbot.display.ops.loggerr� c @ s@ e Zd ZdZeeeeed�dd��Zdd� Zdd� Z d d � Z d S ) �ReportExecutedCommandz Test report_executed_command)�cmd_name�rc�out�errc C s ddl m} |||||� d S )Nr )�report_executed_command)r r� )r r� r� r� r� r� r r r r � s zReportExecutedCommand._callc C s | � dddd� d S )N� some-hookr � Did a thing� Some warningri �r r� Z mock_loggerr r r �test_mixed_success� s z(ReportExecutedCommand.test_mixed_successc C s | � dddd� d S )Nr� i����r� r� ri r� r r r �test_mixed_error� s z&ReportExecutedCommand.test_mixed_errorc C s | � dddd� d S )Nr� r � � ri r� r r r �test_empty_success s z(ReportExecutedCommand.test_empty_successN) r0 r1 r2 r3 r4 �str�intr r� r� r� r r r r r� � s r� �__main__rT )0r3 rB Zunittestr ZjosepyZjoser Zacmer Zcertbotr Zcertbot._internalr Zcertbot._internal.displayr r? Zcertbot.compatr r Zcertbot.displayr r r Zcertbot.tests.utilZtestsr5 ZJWKRSA�loadZ load_vectorrH ZTestCaser ZTempDirTestCaser7 rX re r� r� r� r� r� r" r� r0 �exit�main�argv�__file__r r r r �<module> s< B+- E% display/__pycache__/ops_test.cpython-39.pyc 0000644 00000050305 15114562471 0014723 0 ustar 00 a }|�g3O � @ s� d Z ddlZddlZddlmZ ddlZddlZddlmZ ddl m Z ddl m Z ddl mZ ddlmZ dd lmZ dd lmZ dd lmZ ddlm mZ ej�e� d ��Z G d d� dej �Z G dd� dej �Z!G dd� dej �Z"G dd� dej �Z#G dd� dej �Z$G dd� dej �Z%G dd� dej �Z&G dd � d ej �Z'G d d � d ej �Z(e�)d �e�)d �G d!d"� d"ej ���Z*e+d#k�r�e�,e�-ej.d$d� e/g �� dS )%zTest certbot.display.ops.� N)�mock)�messages)�errors)�account)�obj)� filesystem)�os)�ops)�utilzrsa512_key.pemc @ s| e Zd ZdZedd� �Ze�� dd� �Ze�� dd� �Z e�� dd � �Z e�� d d � �Z e�� d d � �Z e�� dd� �Z dS )� GetEmailTestz(Tests for certbot.display.ops.get_email.c K s ddl m} |f i |��S )Nr )� get_email)�certbot.display.opsr )�cls�kwargsr � r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/ops_test.py�_call s zGetEmailTest._callc C s� |� j }tjdf|_t�tj�� | �� W d � n1 s>0 Y t�tj�� | jdd� W d � n1 sv0 Y d S )N� foo@bar.bazF�Zoptional) �input� display_util�CANCEL� return_value�pytest�raisesr �Errorr )�self�mock_get_utility� mock_inputr r r �test_cancel_none s &z GetEmailTest.test_cancel_nonec C sX |� j }tjdf|_t�d��&}d|_| �� dks6J �W d � n1 sJ0 Y d S )Nr �#certbot.display.ops.util.safe_emailT)r r �OKr r �patchr �r r r �mock_safe_emailr r r � test_ok_safe( s zGetEmailTest.test_ok_safec C s\ |� j }tjdf|_t�d��*}ddg|_| �� dks:J �W d � n1 sN0 Y d S )Nr r FT)r r r! r r r" � side_effectr r# r r r �test_ok_not_safe0 s z GetEmailTest.test_ok_not_safec C s� d}|� j }tjdf|_t�d��V}d|_| �� ||jd d vsHJ �| jdd� ||jd d v sjJ �W d � n1 s~0 Y d S )N�There seem to be problemsr r Tr �Zinvalid)r r r! r r r" r � call_args�r r Z invalid_txtr r$ r r r �test_invalid_flag8 s z GetEmailTest.test_invalid_flagc C sx |� j }tjdf|_t�d��F}ddg|_| jdd� |jD ]}d|d d vs<J �q<W d � n1 sj0 Y d S )Nr r FTr z!--register-unsafely-without-emailr ) r r r! r r r" r& r �call_args_list)r r r r$ �callr r r �test_optional_flagD s z GetEmailTest.test_optional_flagc C sr d}|� j }tjdf|_t�d��<}ddg|_| jdd� ||jd d v sPJ �W d � n1 sd0 Y d S )Nr( r r FTr) r ) r r r! r r r" r& r r* r+ r r r � test_optional_invalid_unsafeN s z)GetEmailTest.test_optional_invalid_unsafeN)�__name__� __module__� __qualname__�__doc__� classmethodr � test_util�patch_display_utilr r% r' r, r/ r0 r r r r r s r c s\ e Zd ZdZ� fdd�Zedd� �Ze�� dd� �Z e�� dd � �Z e�� d d � �Z � Z S ) �ChooseAccountTestz-Tests for certbot.display.ops.choose_account.c s� t � �� t�t�tjd�� tj� | j d�| _ t � | j d� tj| j | j dd�| _t| _t�tjd tjjdd�d�| j�| _t�tjd tjjd d d �d�| j�| _d S ) NF�keysi� zcertbot-demo.org)Z accounts_dir�account_keys_dirZserverz email1@g.com)�email)Zuri�bodyz email2@g.com�phone)r; r= )�super�setUp� display_obj� set_display� FileDisplay�sys�stdoutr �path�joinZtempdirr: r �makedirsr � MagicMockZconfig�KEY�keyr ZAccountr ZRegistrationResourceZ RegistrationZ from_data�acc1�acc2�r �� __class__r r r? [ s0 �������zChooseAccountTest.setUpc C s t �|�S �N)r Zchoose_account)r Zaccountsr r r r p s zChooseAccountTest._callc C s, t jdf|� j_| �| jg�| jks(J �d S )Nr )r r! �menur r rK �r � mock_utilr r r �test_onet s zChooseAccountTest.test_onec C s0 t jdf|� j_| �| j| jg�| jks,J �d S �N� )r r! rQ r r rK rL rR r r r �test_twoy s zChooseAccountTest.test_twoc C s. t jdf|� j_| �| j| jg�d u s*J �d S rU )r r rQ r r rK rL rR r r r � test_cancel~ s z ChooseAccountTest.test_cancel) r1 r2 r3 r4 r? r5 r r6 r7 rT rW rX � __classcell__r r rN r r8 Y s r8 c @ sL e Zd ZdZdd� Zedd� �Zdd� Zdd � Zd d � Z d d � Z dd� Z dS )�GenHttpsNamesTestzTest _gen_https_names.c C s t �t �tjd�� d S �NF)r@ rA rB rC rD rM r r r r? � s zGenHttpsNamesTest.setUpc C s ddl m} ||�S )Nr )�_gen_https_names)r r\ )r Zdomainsr\ r r r r � s zGenHttpsNamesTest._callc C s | � g �dksJ �d S �N� �r rM r r r � test_zero� s zGenHttpsNamesTest.test_zeroc C s. ddg}|D ] }| � |g�d| ks J �q d S )N� example.comzasllkjsadfljasdf.cz https://%sr_ )r �doms�domr r r rT � s �zGenHttpsNamesTest.test_onec C s8 ddgddgg}|D ] }| � |�dj|d�ksJ �qd S )Nz foo.bar.orgzbar.orgz paypal.google.facebook.live.comz*.zombo.example.comz%https://{dom[0]} and https://{dom[1]}�rc �r �format)r Z domains_listrb r r r rW � s � �zGenHttpsNamesTest.test_twoc C s& g d�}| � |�dj|d�ks"J �d S )N)�a.org�b.org�c.orgz8https://{dom[0]}, https://{dom[1]}, and https://{dom[2]}rd re )r rb r r r � test_three� s ��z GenHttpsNamesTest.test_threec C s* g d�}dj |d�}| �|�|ks&J �d S )N)rg rh ri zd.orgzJhttps://{dom[0]}, https://{dom[1]}, https://{dom[2]}, and https://{dom[3]}rd )rf r )r rb Zexpr r r � test_four� s �zGenHttpsNamesTest.test_fourN) r1 r2 r3 r4 r? r5 r r` rT rW rj rk r r r r rZ � s rZ c @ s� e Zd ZdZdd� Zed dd��Ze�d�dd � �Z e � � d d � �Z e � � d d � �Z dd� Zdd� Ze � � dd� �Ze � � dd� �Ze � � dd� �Ze � � dd� �Zdd� Ze � � d d � �Ze � � d d � �ZdS )!�ChooseNamesTestzTest choose names.c C s" t �t �tjd�� t�� | _d S r[ )r@ rA rB rC rD r rH � mock_installrM r r r r? � s zChooseNamesTest.setUpNc C s ddl m} |||�S )Nr )� choose_names)r rn )r Z installer�questionrn r r r r � s zChooseNamesTest._callz*certbot.display.ops._choose_names_manuallyc C s | � d � |jdksJ �d S rU )r � call_count)r Z mock_manualr r r �test_no_installer� s z!ChooseNamesTest.test_no_installerc C s& t jg f|� j_| �d �g ks"J �d S rP )r r r r r rR r r r �test_no_installer_cancel� s z(ChooseNamesTest.test_no_installer_cancelc C sR t � | �� j_d}tj|f|� j_| �| j�}|� jjdks@J �||gksNJ �d S �Nra rV ) �setrm � get_all_namesr r r! r r rp )r rS �domainZ actual_domsr r r �test_no_names_choose� s z$ChooseNamesTest.test_no_names_choosec s� ddl m} |g �g ks J �g d�}||�g d�ks8J �d� g d�}� fdd�|D �}t|�}� fd d�|D �}||�|ks�J �d S ) Nr �� _sort_names)�ex.com�zx.com�ax.com)r| rz r{ z.ex.com)�e�a�z�yc s g | ] }|� �qS r r ��.0�us�rv r r � <listcomp>� � z;ChooseNamesTest.test_sort_names_trivial.<locals>.<listcomp>c s g | ] }|� �qS r r r� r� r r r� � r� )r ry �sorted)r ry Z some_domains�unsorted_shortZ unsorted_long� sorted_shortZ sorted_longr r� r �test_sort_names_trivial� s z'ChooseNamesTest.test_sort_names_trivialc C s� ddl m} g d�}g d�}g d�}g }|D ] }|D ]}|�|| � q4q,g }t|�D ] }|D ]}|�|| � q^qV||�|ks�J �d S )Nr rx )z.cx.comz.bx.comz.ax.comz.dx.com)�www�bnother.long.subdomainr~ �a.long.subdomainr �b)r~ r� r� r� r� r )r ry �appendr� ) r ry Zunsorted_domainsr� r� Zto_sortZshortrv Zsortdr r r �test_sort_names_many� s z$ChooseNamesTest.test_sort_names_manyc C sN dh| j j_tjdgf|� j_| �| j �}|dgks8J �|� jjdksJJ �d S rs )rm ru r r r! � checklistr rp �r rS �namesr r r � test_filter_names_valid_return� s z.ChooseNamesTest.test_filter_names_valid_returnc C sj dh| j j_tjdgf|� j_| �| j d�}|dgks:J �|� jjdksLJ �|� jjd d dksfJ �d S )Nra ZCustomrV r ) rm ru r r r! r� r rp r* r� r r r �$test_filter_namees_override_question s z4ChooseNamesTest.test_filter_namees_override_questionc C s4 dh| j j_tjg f|� j_| �| j �g ks0J �d S �Nra )rm ru r r r! r� r rR r r r �"test_filter_names_nothing_selected s z2ChooseNamesTest.test_filter_names_nothing_selectedc C s6 dh| j j_tjdgf|� j_| �| j �g ks2J �d S r� )rm ru r r r r� r rR r r r �test_filter_names_cancel s � z(ChooseNamesTest.test_filter_names_cancelc C s\ ddl m} g d�}ddg}g d�}||�|ks4J �||�g ksDJ �t||��dksXJ �d S )Nr )�get_valid_domains)ra zsecond.example.com�also.example.com�under_score.example.com�justtldz*.wildcard.comu öóòps.net� uniçodé.com)ra u úniçøde.comr� � )r r� �len)r r� Z all_validZ all_invalidZ two_validr r r �test_get_valid_domains s z&ChooseNamesTest.test_get_valid_domainsc C s� ddl m} |� }d|j_tjdf|j_|� g ks6J �t�d��4}t ddddd�}||_ |� g ksfJ �W d � n1 sz0 Y tjd f|j_|� g d �ks�J �d S ) Nr ��_choose_names_manuallyFr� z=certbot.display.ops.internal_display_util.separate_list_inputr r^ rV z=example.com,under_score.example.com,justtld,valid.example.com)ra r� r� zvalid.example.com) r r� �yesnor r r! r r r" �UnicodeEncodeErrorr& )r rS r� � utility_mockZmock_sliZ unicode_errorr r r �test_choose_manually# s( ��,��z$ChooseNamesTest.test_choose_manuallyc C sF ddl m} |� }tjdf|j_g d�|j_|� |jjdksBJ �d S )Nr r� r� )TTF� ) r r� r r! r r r� r& rp )r rS r� r� r r r �test_choose_manually_retry> s � z*ChooseNamesTest.test_choose_manually_retry)N)r1 r2 r3 r4 r? r5 r r r" rq r6 r7 rr rw r� r� r� r� r� r� r� r� r� r r r r rl � s2 rl c @ s6 e Zd ZdZedd� �Ze�� e� d�dd� ��Z dS )�SuccessInstallationTestz&Test the success installation message.c C s ddl m} ||� d S )Nr )�success_installation)r r� )r r� r� r r r r L s z SuccessInstallationTest._call�certbot.display.util.notifyc C sV d |� j _ddg}| �|� |jdks*J �|jd d d }|D ]}||v s@J �q@d S )Nra �abc.comrV r )� notificationr r rp r- )r � mock_notify� mock_displayr� �arg�namer r r �test_success_installationQ s z1SuccessInstallationTest.test_success_installationN) r1 r2 r3 r4 r5 r r6 r7 r r" r� r r r r r� J s r� c @ s6 e Zd ZdZedd� �Ze�� e� d�dd� ��Z dS )�SuccessRenewalTestz!Test the success renewal message.c C s ddl m} ||� d S )Nr )�success_renewal)r r� )r r� r� r r r r b s zSuccessRenewalTest._callr� c C s. d |� j _ddg}| �|� |jdks*J �d S )Nra r� rV )r� r r rp )r r� r� r� r r r �test_success_renewalg s z'SuccessRenewalTest.test_success_renewalN) r1 r2 r3 r4 r5 r r6 r7 r r" r� r r r r r� ` s r� c @ s6 e Zd ZdZedd� �Ze�� e� d�dd� ��Z dS )�SuccessRevocationTestz$Test the success revocation message.c C s ddl m} ||� d S )Nr )�success_revocation)r r� )r rE r� r r r r t s zSuccessRevocationTest._callr� c C s" d}| � |� |�d�|�� d S )Nz/path/to/cert.pemzWCongratulations! You have successfully revoked the certificate that was located at {0}.)r Zassert_called_once_withrf )r r� Zunused_mock_displayrE r r r �test_success_revocationy s ��z-SuccessRevocationTest.test_success_revocationN) r1 r2 r3 r4 r5 r r6 r7 r r" r� r r r r r� r s r� c @ s� e Zd ZdZdZdZdZedd� �Ze � � dd� �Z e � � d d � �Z e � � d d � �Z e � � d d� �Ze � � dd� �Ze � � dd� �Ze � � dd� �ZdS )�ValidatorTestsz6Tests for `validated_input` and `validated_directory`.zMust be non-emptyZasdfz /var/www/htmlc C s | dkrt �tj��d S r] )r Z PluginErrorr� �_ValidatorTests__ERROR)�mr r r Z __validator� s zValidatorTests.__validatorc C sr t jdft jdft jdft j| jfg|� j_tj| jddd�}tj |� j j d d ksZJ �|t j| jfksnJ �d S )Nr^ �messageT�Zforce_interactiver ) r r! � valid_inputr r& r �validated_input�_ValidatorTests__validatorr� r� r� r* �r rS Zreturnedr r r � test_input_blank_with_validator� s � z.ValidatorTests.test_input_blank_with_validatorc C s> t j| jfg|� j_tj| jddd�}|t j| jfks:J �d S �N�msg�other��default)r r! r� r r& r r� r� r� r r r �"test_input_validation_with_default� s z1ValidatorTests.test_input_validation_with_defaultc C sT t j| jfg|� j_t�t��" tj | j ddd� W d � n1 sF0 Y d S �Nr� r^ r� ) r r! r� r r& r r �AssertionErrorr r� r� rR r r r �&test_input_validation_with_bad_default� s z5ValidatorTests.test_input_validation_with_bad_defaultc C s: t jdfg|� j_tj| jddd�\}}|t jks6J �d S )Nr^ r� Tr� )r r r r& r r� r� )r rS �codeZ unused_rawr r r � test_input_cancel_with_validator� s z/ValidatorTests.test_input_cancel_with_validatorc C sb t jdft j| jfg|� j_tj| jddd�}tj |� j j d d ksJJ �|t j| jfks^J �d S )Nr^ r� Tr� r ) r r! �valid_directory�directory_selectr& r �validated_directoryr� r� r� r� r* r� r r r � test_directory_select_validation� s � z/ValidatorTests.test_directory_select_validationc C s> t j| jfg|� j_tj| jddd�}|t j| jfks:J �d S r� )r r! r� r� r& r r� r� r� r r r �-test_directory_select_validation_with_default� s z<ValidatorTests.test_directory_select_validation_with_defaultc C sT t j| jfg|� j_t�t��" tj | j ddd� W d � n1 sF0 Y d S r� ) r r! r� r� r& r r r� r r� r� rR r r r �1test_directory_select_validation_with_bad_default� s z@ValidatorTests.test_directory_select_validation_with_bad_defaultN)r1 r2 r3 r4 r� r� r� � staticmethodr� r6 r7 r� r� r� r� r� r� r� r r r r r� � s( r� c @ sL e Zd ZdZedd� �Ze�� dd� �Ze�� dd� �Z e�� dd � �Z d S ) �ChooseValuesTestzTest choose_values.c C s ddl m} |||�S )Nr )� choose_values)r r� )r �valuesro r� r r r r � s zChooseValuesTest._callc C sl g d�}t j|d gf|� j_| �|d �}||d gks<J �|� jjdu sNJ �|� jjd d dkshJ �d S )N��first�second�thirdr� Tr r^ �r r! r� r r �calledr* )r rS �items�resultr r r �test_choose_names_success� s z*ChooseValuesTest.test_choose_names_successc C sp g d�}d}t j|d gf|� j_| �||�}||d gks@J �|� jjdu sRJ �|� jjd d |kslJ �d S )Nr� z Which one?rV Tr r� �r rS r� ro r� r r r �"test_choose_names_success_question� s z3ChooseValuesTest.test_choose_names_success_questionc C sd g d�}d}t jg f|� j_| �||�}|g ks4J �|� jjdu sFJ �|� jjd d |ks`J �d S )Nr� zWant to cancel?Tr )r r r� r r r� r* r� r r r � test_choose_names_user_cancel� s z.ChooseValuesTest.test_choose_names_user_cancelN) r1 r2 r3 r4 r5 r r6 r7 r� r� r� r r r r r� � s r� zcertbot.display.ops.loggerr� c @ s@ e Zd ZdZeeeeed�dd��Zdd� Zdd� Z d d � Z d S ) �ReportExecutedCommandz Test report_executed_command)�cmd_name�rc�out�errc C s ddl m} |||||� d S )Nr )�report_executed_command)r r� )r r� r� r� r� r� r r r r � s zReportExecutedCommand._callc C s2 | � dddd� |jjdks J �|jdks.J �d S )N� some-hookr � Did a thing� Some warningrV �r Zwarningrp �r r� Z mock_loggerr r r �test_mixed_success� s z(ReportExecutedCommand.test_mixed_successc C s2 | � dddd� |jjdks J �|jdks.J �d S )Nr� i����r� r� r� rV r� r� r r r �test_mixed_error� s z&ReportExecutedCommand.test_mixed_errorc C s2 | � dddd� |jjdks J �|jdks.J �d S )Nr� r � � r� r� r r r �test_empty_success s z(ReportExecutedCommand.test_empty_successN) r1 r2 r3 r4 r5 �str�intr r� r� r� r r r r r� � s r� �__main__rV )0r4 rC Zunittestr ZjosepyZjoser Zacmer Zcertbotr Zcertbot._internalr Zcertbot._internal.displayr r@ Zcertbot.compatr r Zcertbot.displayr r r Zcertbot.tests.utilZtestsr6 ZJWKRSA�loadZ load_vectorrI ZTestCaser ZTempDirTestCaser8 rZ rl r� r� r� r� r� r" r� r1 �exit�main�argv�__file__r r r r �<module> s< B+- E% display/__pycache__/util_test.cpython-39.opt-1.pyc 0000644 00000004276 15114562471 0016044 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlm mZ e�� dd� �Ze�� dd� �Z e�� dd� �Z e�� d d � �Z e�� d d � �Z e�� d d� �Z e�� dd� �Zedkr�e�e�ejdd� eg �� dS )z!Test :mod:`certbot.display.util`.� Nc C s. ddl m} |d� | � jjddddd� d S )Nr )�notify� Hello WorldF)�pause�decorate�wrap)�certbot.display.utilr � notification�assert_called_with)� mock_utilr � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/util_test.py� test_notify s �r c C s0 ddl m} |d� | � jjdddddd� d S )Nr )r r TF)r r r �force_interactive)r r r )r r r r r �test_notification s �r c C s> ddl m} |dddgdd� | � jjdddgdd dd� d S ) Nr )�menur �one�two��defaultF�r �cli_flagr )r r r )r r r r r � test_menu s �r c C s2 ddl m} |ddd� | � jjddd dd� d S )Nr )� input_textr � somethingr Fr )r r �inputr )r r r r r �test_input_text$ s �r c C s6 ddl m} |ddd� | � jjddddd dd � d S ) Nr )�yesnor Tr ZYesZNoF)Z yes_labelZno_labelr r r )r r r )r r r r r � test_yesno- s �r c C s> ddl m} |dddgdd� | � jjdddgdd dd� d S ) Nr )� checklistr r r r Fr )r r r )r r r r r �test_checklist7 s �r c C s2 ddl m} |ddd� | � jjddd dd� d S )Nr )�directory_selectr r r Fr )r r r )r r r r r �test_directory_select@ s �r! �__main__� )�__doc__�sysZpytestZcertbot.tests.utilZtests�utilZ test_utilZpatch_display_utilr r r r r r r! �__name__�exit�main�argv�__file__r r r r �<module> s& display/__pycache__/util_test.cpython-39.pyc 0000644 00000004276 15114562471 0015105 0 ustar 00 a }|�g� � @ s� d Z ddlZddlZddlm mZ e�� dd� �Ze�� dd� �Z e�� dd� �Z e�� d d � �Z e�� d d � �Z e�� d d� �Z e�� dd� �Zedkr�e�e�ejdd� eg �� dS )z!Test :mod:`certbot.display.util`.� Nc C s. ddl m} |d� | � jjddddd� d S )Nr )�notify� Hello WorldF)�pause�decorate�wrap)�certbot.display.utilr � notification�assert_called_with)� mock_utilr � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/display/util_test.py� test_notify s �r c C s0 ddl m} |d� | � jjdddddd� d S )Nr )r r TF)r r r �force_interactive)r r r )r r r r r �test_notification s �r c C s> ddl m} |dddgdd� | � jjdddgdd dd� d S ) Nr )�menur �one�two��defaultF�r �cli_flagr )r r r )r r r r r � test_menu s �r c C s2 ddl m} |ddd� | � jjddd dd� d S )Nr )� input_textr � somethingr Fr )r r �inputr )r r r r r �test_input_text$ s �r c C s6 ddl m} |ddd� | � jjddddd dd � d S ) Nr )�yesnor Tr ZYesZNoF)Z yes_labelZno_labelr r r )r r r )r r r r r � test_yesno- s �r c C s> ddl m} |dddgdd� | � jjdddgdd dd� d S ) Nr )� checklistr r r r Fr )r r r )r r r r r �test_checklist7 s �r c C s2 ddl m} |ddd� | � jjddd dd� d S )Nr )�directory_selectr r r Fr )r r r )r r r r r �test_directory_select@ s �r! �__main__� )�__doc__�sysZpytestZcertbot.tests.utilZtests�utilZ test_utilZpatch_display_utilr r r r r r r! �__name__�exit�main�argv�__file__r r r r �<module> s& display/__init__.py 0000644 00000000034 15114562471 0010325 0 ustar 00 """Certbot Display Tests""" display/completer_test.py 0000644 00000007204 15114562471 0011625 0 ustar 00 """Test certbot._internal.display.completer.""" from importlib import reload as reload_module import string import sys from typing import List import unittest from unittest import mock import pytest from certbot.compat import filesystem from certbot.compat import os import certbot.tests.util as test_util try: import readline # pylint: disable=import-error except ImportError: import certbot._internal.display.dummy_readline as readline # type: ignore class CompleterTest(test_util.TempDirTestCase): """Test certbot._internal.display.completer.Completer.""" def setUp(self): super().setUp() # directories must end with os.sep for completer to # search inside the directory for possible completions if self.tempdir[-1] != os.sep: self.tempdir += os.sep self.paths: List[str] = [] # create some files and directories in temp_dir for c in string.ascii_lowercase: path = os.path.join(self.tempdir, c) self.paths.append(path) if ord(c) % 2: filesystem.mkdir(path) else: with open(path, 'w'): pass def test_complete(self): from certbot._internal.display import completer my_completer = completer.Completer() num_paths = len(self.paths) for i in range(num_paths): completion = my_completer.complete(self.tempdir, i) assert completion in self.paths self.paths.remove(completion) assert len(self.paths) == 0 completion = my_completer.complete(self.tempdir, num_paths) assert completion is None @unittest.skipIf('readline' not in sys.modules, reason='Not relevant if readline is not available.') def test_import_error(self): original_readline = sys.modules['readline'] sys.modules['readline'] = None self.test_context_manager_with_unmocked_readline() sys.modules['readline'] = original_readline def test_context_manager_with_unmocked_readline(self): from certbot._internal.display import completer reload_module(completer) original_completer = readline.get_completer() original_delims = readline.get_completer_delims() with completer.Completer(): pass assert readline.get_completer() == original_completer assert readline.get_completer_delims() == original_delims @mock.patch('certbot._internal.display.completer.readline', autospec=True) def test_context_manager_libedit(self, mock_readline): mock_readline.__doc__ = 'libedit' self._test_context_manager_with_mock_readline(mock_readline) @mock.patch('certbot._internal.display.completer.readline', autospec=True) def test_context_manager_readline(self, mock_readline): mock_readline.__doc__ = 'GNU readline' self._test_context_manager_with_mock_readline(mock_readline) def _test_context_manager_with_mock_readline(self, mock_readline): from certbot._internal.display import completer mock_readline.parse_and_bind.side_effect = enable_tab_completion with completer.Completer(): pass assert mock_readline.parse_and_bind.called is True def enable_tab_completion(unused_command): """Enables readline tab completion using the system specific syntax.""" libedit = readline.__doc__ is not None and 'libedit' in readline.__doc__ command = 'bind ^I rl_complete' if libedit else 'tab: complete' readline.parse_and_bind(command) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover display/internal_util_test.py 0000644 00000012041 15114562471 0012477 0 ustar 00 """Test :mod:`certbot._internal.display.util`.""" import io import socket import sys import tempfile import unittest from unittest import mock import pytest from acme import messages as acme_messages from certbot import errors class WrapLinesTest(unittest.TestCase): def test_wrap_lines(self): from certbot._internal.display.util import wrap_lines msg = ("This is just a weak test{0}" "This function is only meant to be for easy viewing{0}" "Test a really really really really really really really really " "really really really really long line...".format('\n')) text = wrap_lines(msg) assert text.count('\n') == 3 class PlaceParensTest(unittest.TestCase): @classmethod def _call(cls, label): from certbot._internal.display.util import parens_around_char return parens_around_char(label) def test_single_letter(self): assert "(a)" == self._call("a") def test_multiple(self): assert "(L)abel" == self._call("Label") assert "(y)es please" == self._call("yes please") class InputWithTimeoutTest(unittest.TestCase): """Tests for certbot._internal.display.util.input_with_timeout.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.display.util import input_with_timeout return input_with_timeout(*args, **kwargs) def test_eof(self): with tempfile.TemporaryFile("r+") as f: with mock.patch("certbot._internal.display.util.sys.stdin", new=f): with pytest.raises(EOFError): self._call() def test_input(self, prompt=None): expected = "foo bar" stdin = io.StringIO(expected + "\n") with mock.patch("certbot.compat.misc.select.select") as mock_select: mock_select.return_value = ([stdin], [], [],) assert self._call(prompt) == expected @mock.patch("certbot._internal.display.util.sys.stdout") def test_input_with_prompt(self, mock_stdout): prompt = "test prompt: " self.test_input(prompt) mock_stdout.write.assert_called_once_with(prompt) mock_stdout.flush.assert_called_once_with() def test_timeout(self): stdin = socket.socket(socket.AF_INET, socket.SOCK_STREAM) stdin.bind(('', 0)) stdin.listen(1) with mock.patch("certbot._internal.display.util.sys.stdin", stdin): with pytest.raises(errors.Error): self._call(timeout=0.001) stdin.close() class SeparateListInputTest(unittest.TestCase): """Test Module functions.""" def setUp(self): self.exp = ["a", "b", "c", "test"] @classmethod def _call(cls, input_): from certbot._internal.display.util import separate_list_input return separate_list_input(input_) def test_commas(self): assert self._call("a,b,c,test") == self.exp def test_spaces(self): assert self._call("a b c test") == self.exp def test_both(self): assert self._call("a, b, c, test") == self.exp def test_mess(self): actual = [ self._call(" a , b c \t test"), self._call(",a, ,, , b c test "), self._call(",,,,, , a b,,, , c,test"), ] for act in actual: assert act == self.exp class SummarizeDomainListTest(unittest.TestCase): @classmethod def _call(cls, domains): from certbot._internal.display.util import summarize_domain_list return summarize_domain_list(domains) def test_single_domain(self): assert "example.com" == self._call(["example.com"]) def test_two_domains(self): assert "example.com and example.org" == \ self._call(["example.com", "example.org"]) def test_many_domains(self): assert "example.com and 2 more domains" == \ self._call(["example.com", "example.org", "a.example.com"]) def test_empty_domains(self): assert "" == self._call([]) class DescribeACMEErrorTest(unittest.TestCase): @classmethod def _call(cls, typ: str = "urn:ietf:params:acme:error:badCSR", title: str = "Unacceptable CSR", detail: str = "CSR contained unknown extensions"): from certbot._internal.display.util import describe_acme_error return describe_acme_error( acme_messages.Error(typ=typ, title=title, detail=detail)) def test_title_and_detail(self): assert "Unacceptable CSR :: CSR contained unknown extensions" == self._call() def test_detail(self): assert "CSR contained unknown extensions" == self._call(title=None) def test_description(self): assert acme_messages.ERROR_CODES["badCSR"] == self._call(title=None, detail=None) def test_unknown_type(self): assert "urn:ietf:params:acme:error:unknownErrorType" == \ self._call(typ="urn:ietf:params:acme:error:unknownErrorType", title=None, detail=None) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover display/obj_test.py 0000644 00000032752 15114562471 0010413 0 ustar 00 """Test :mod:`certbot._internal.display.obj`.""" import sys import unittest from unittest import mock import pytest from certbot import errors from certbot._internal.display import obj as display_obj from certbot.display import util as display_util CHOICES = [("First", "Description1"), ("Second", "Description2")] TAGS = ["tag1", "tag2", "tag3"] class FileOutputDisplayTest(unittest.TestCase): """Test stdout display. Most of this class has to deal with visual output. In order to test how the functions look to a user, uncomment the test_visual function. """ def setUp(self): super().setUp() self.mock_stdout = mock.MagicMock() self.displayer = display_obj.FileDisplay(self.mock_stdout, False) @mock.patch("certbot._internal.display.obj.logger") def test_notification_no_pause(self, mock_logger): self.displayer.notification("message", False) string = self.mock_stdout.write.call_args[0][0] assert "message" in string mock_logger.debug.assert_called_with("Notifying user: %s", "message") def test_notification_pause(self): input_with_timeout = "certbot._internal.display.util.input_with_timeout" with mock.patch(input_with_timeout, return_value="enter"): self.displayer.notification("message", force_interactive=True) assert "message" in self.mock_stdout.write.call_args[0][0] def test_notification_noninteractive(self): self._force_noninteractive(self.displayer.notification, "message") string = self.mock_stdout.write.call_args[0][0] assert "message" in string def test_notification_noninteractive2(self): # The main purpose of this test is to make sure we only call # logger.warning once which _force_noninteractive checks internally self._force_noninteractive(self.displayer.notification, "message") string = self.mock_stdout.write.call_args[0][0] assert "message" in string assert self.displayer.skipped_interaction self._force_noninteractive(self.displayer.notification, "message2") string = self.mock_stdout.write.call_args[0][0] assert "message2" in string def test_notification_decoration(self): from certbot.compat import os self.displayer.notification("message", pause=False, decorate=False) string = self.mock_stdout.write.call_args[0][0] assert string == "message" + os.linesep self.displayer.notification("message2", pause=False) string = self.mock_stdout.write.call_args[0][0] assert "- - - " in string assert "message2" + os.linesep in string @mock.patch("certbot._internal.display.obj." "FileDisplay._get_valid_int_ans") def test_menu(self, mock_ans): mock_ans.return_value = (display_util.OK, 1) ret = self.displayer.menu("message", CHOICES, force_interactive=True) assert ret == (display_util.OK, 0) def test_menu_noninteractive(self): default = 0 result = self._force_noninteractive( self.displayer.menu, "msg", CHOICES, default=default) assert result == (display_util.OK, default) def test_input_cancel(self): input_with_timeout = "certbot._internal.display.util.input_with_timeout" with mock.patch(input_with_timeout, return_value="c"): code, _ = self.displayer.input("message", force_interactive=True) assert code, display_util.CANCEL def test_input_normal(self): input_with_timeout = "certbot._internal.display.util.input_with_timeout" with mock.patch(input_with_timeout, return_value="domain.com"): code, input_ = self.displayer.input("message", force_interactive=True) assert code == display_util.OK assert input_ == "domain.com" def test_input_noninteractive(self): default = "foo" code, input_ = self._force_noninteractive( self.displayer.input, "message", default=default) assert code == display_util.OK assert input_ == default def test_input_assertion_fail(self): # If the call to util.assert_valid_call is commented out, an # error.Error is raised, otherwise, an AssertionError is raised. with pytest.raises(Exception): self._force_noninteractive(self.displayer.input, "message", cli_flag="--flag") def test_input_assertion_fail2(self): with mock.patch("certbot.display.util.assert_valid_call"): with pytest.raises(errors.Error): self._force_noninteractive(self.displayer.input, "msg", cli_flag="--flag") def test_yesno(self): input_with_timeout = "certbot._internal.display.util.input_with_timeout" with mock.patch(input_with_timeout, return_value="Yes"): assert self.displayer.yesno( "message", force_interactive=True) with mock.patch(input_with_timeout, return_value="y"): assert self.displayer.yesno( "message", force_interactive=True) with mock.patch(input_with_timeout, side_effect=["maybe", "y"]): assert self.displayer.yesno( "message", force_interactive=True) with mock.patch(input_with_timeout, return_value="No"): assert not self.displayer.yesno( "message", force_interactive=True) with mock.patch(input_with_timeout, side_effect=["cancel", "n"]): assert not self.displayer.yesno( "message", force_interactive=True) with mock.patch(input_with_timeout, return_value="a"): assert self.displayer.yesno( "msg", yes_label="Agree", force_interactive=True) def test_yesno_noninteractive(self): assert self._force_noninteractive( self.displayer.yesno, "message", default=True) @mock.patch("certbot._internal.display.util.input_with_timeout") def test_checklist_valid(self, mock_input): mock_input.return_value = "2 1" code, tag_list = self.displayer.checklist( "msg", TAGS, force_interactive=True) assert (code, set(tag_list)) == (display_util.OK, {"tag1", "tag2"}) @mock.patch("certbot._internal.display.util.input_with_timeout") def test_checklist_empty(self, mock_input): mock_input.return_value = "" code, tag_list = self.displayer.checklist("msg", TAGS, force_interactive=True) assert (code, set(tag_list)) == (display_util.OK, {"tag1", "tag2", "tag3"}) @mock.patch("certbot._internal.display.util.input_with_timeout") def test_checklist_miss_valid(self, mock_input): mock_input.side_effect = ["10", "tag1 please", "1"] ret = self.displayer.checklist("msg", TAGS, force_interactive=True) assert ret == (display_util.OK, ["tag1"]) @mock.patch("certbot._internal.display.util.input_with_timeout") def test_checklist_miss_quit(self, mock_input): mock_input.side_effect = ["10", "c"] ret = self.displayer.checklist("msg", TAGS, force_interactive=True) assert ret == (display_util.CANCEL, []) def test_checklist_noninteractive(self): default = TAGS code, input_ = self._force_noninteractive( self.displayer.checklist, "msg", TAGS, default=default) assert code == display_util.OK assert input_ == default def test_scrub_checklist_input_valid(self): # pylint: disable=protected-access indices = [ ["1"], ["1", "2", "1"], ["2", "3"], ] exp = [ {"tag1"}, {"tag1", "tag2"}, {"tag2", "tag3"}, ] for i, list_ in enumerate(indices): set_tags = set( self.displayer._scrub_checklist_input(list_, TAGS)) assert set_tags == exp[i] def test_scrub_checklist_maintain_indices_order(self): # pylint: disable=protected-access source_tags = ["T1", "T2", "T3", "T4", "T5", "T6", "T7", "T8", "T9"] indices = [ ["4", "9"], ["9", "4"], ["4", "9", "4"], ["9", "4", "9"], ] exp = [ ["T4", "T9"], ["T9", "T4"], ["T4", "T9"], ["T9", "T4"], ] for i, list_ in enumerate(indices): tags = self.displayer._scrub_checklist_input(list_, source_tags) assert tags == exp[i] @mock.patch("certbot._internal.display.util.input_with_timeout") def test_directory_select(self, mock_input): args = ["msg", "/var/www/html", "--flag", True] user_input = "/var/www/html" mock_input.return_value = user_input returned = self.displayer.directory_select(*args) assert returned == (display_util.OK, user_input) def test_directory_select_noninteractive(self): default = "/var/www/html" code, input_ = self._force_noninteractive( self.displayer.directory_select, "msg", default=default) assert code == display_util.OK assert input_ == default def _force_noninteractive(self, func, *args, **kwargs): skipped_interaction = self.displayer.skipped_interaction with mock.patch("certbot._internal.display.obj.sys.stdin") as mock_stdin: mock_stdin.isatty.return_value = False with mock.patch("certbot._internal.display.obj.logger") as mock_logger: result = func(*args, **kwargs) if skipped_interaction: assert mock_logger.warning.called is False else: assert mock_logger.warning.call_count == 1 return result def test_scrub_checklist_input_invalid(self): # pylint: disable=protected-access indices = [ ["0"], ["4"], ["tag1"], ["1", "tag1"], ["2", "o"] ] for list_ in indices: assert self.displayer._scrub_checklist_input(list_, TAGS) == [] def test_print_menu(self): # pylint: disable=protected-access # This is purely cosmetic... just make sure there aren't any exceptions self.displayer._print_menu("msg", CHOICES) self.displayer._print_menu("msg", TAGS) def test_get_valid_int_ans_valid(self): # pylint: disable=protected-access input_with_timeout = "certbot._internal.display.util.input_with_timeout" with mock.patch(input_with_timeout, return_value="1"): assert self.displayer._get_valid_int_ans(1) == (display_util.OK, 1) ans = "2" with mock.patch(input_with_timeout, return_value=ans): assert self.displayer._get_valid_int_ans(3) == \ (display_util.OK, int(ans)) def test_get_valid_int_ans_invalid(self): # pylint: disable=protected-access answers = [ ["0", "c"], ["4", "one", "C"], ["c"], ] input_with_timeout = "certbot._internal.display.util.input_with_timeout" for ans in answers: with mock.patch(input_with_timeout, side_effect=ans): assert self.displayer._get_valid_int_ans(3) == \ (display_util.CANCEL, -1) class NoninteractiveDisplayTest(unittest.TestCase): """Test non-interactive display. These tests are pretty easy!""" def setUp(self): self.mock_stdout = mock.MagicMock() self.displayer = display_obj.NoninteractiveDisplay(self.mock_stdout) @mock.patch("certbot._internal.display.obj.logger") def test_notification_no_pause(self, mock_logger): self.displayer.notification("message", 10) string = self.mock_stdout.write.call_args[0][0] assert "message" in string mock_logger.debug.assert_called_with("Notifying user: %s", "message") def test_notification_decoration(self): from certbot.compat import os self.displayer.notification("message", pause=False, decorate=False) string = self.mock_stdout.write.call_args[0][0] assert string == "message" + os.linesep self.displayer.notification("message2", pause=False) string = self.mock_stdout.write.call_args[0][0] assert "- - - " in string assert "message2" + os.linesep in string def test_input(self): d = "an incomputable value" ret = self.displayer.input("message", default=d) assert ret == (display_util.OK, d) with pytest.raises(errors.MissingCommandlineFlag): self.displayer.input("message") def test_menu(self): ret = self.displayer.menu("message", CHOICES, default=1) assert ret == (display_util.OK, 1) with pytest.raises(errors.MissingCommandlineFlag): self.displayer.menu("message", CHOICES) def test_yesno(self): d = False ret = self.displayer.yesno("message", default=d) assert ret == d with pytest.raises(errors.MissingCommandlineFlag): self.displayer.yesno("message") def test_checklist(self): d = [1, 3] ret = self.displayer.checklist("message", TAGS, default=d) assert ret == (display_util.OK, d) with pytest.raises(errors.MissingCommandlineFlag): self.displayer.checklist("message", TAGS) def test_directory_select(self): default = "/var/www/html" expected = (display_util.OK, default) actual = self.displayer.directory_select("msg", default) assert expected == actual with pytest.raises(errors.MissingCommandlineFlag): self.displayer.directory_select("msg") if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover display/ops_test.py 0000644 00000047463 15114562471 0010447 0 ustar 00 # coding=utf-8 """Test certbot.display.ops.""" import sys import unittest from unittest import mock import josepy as jose import pytest from acme import messages from certbot import errors from certbot._internal import account from certbot._internal.display import obj as display_obj from certbot.compat import filesystem from certbot.compat import os from certbot.display import ops from certbot.display import util as display_util import certbot.tests.util as test_util KEY = jose.JWKRSA.load(test_util.load_vector("rsa512_key.pem")) class GetEmailTest(unittest.TestCase): """Tests for certbot.display.ops.get_email.""" @classmethod def _call(cls, **kwargs): from certbot.display.ops import get_email return get_email(**kwargs) @test_util.patch_display_util() def test_cancel_none(self, mock_get_utility): mock_input = mock_get_utility().input mock_input.return_value = (display_util.CANCEL, "foo@bar.baz") with pytest.raises(errors.Error): self._call() with pytest.raises(errors.Error): self._call(optional=False) @test_util.patch_display_util() def test_ok_safe(self, mock_get_utility): mock_input = mock_get_utility().input mock_input.return_value = (display_util.OK, "foo@bar.baz") with mock.patch("certbot.display.ops.util.safe_email") as mock_safe_email: mock_safe_email.return_value = True assert self._call() == "foo@bar.baz" @test_util.patch_display_util() def test_ok_not_safe(self, mock_get_utility): mock_input = mock_get_utility().input mock_input.return_value = (display_util.OK, "foo@bar.baz") with mock.patch("certbot.display.ops.util.safe_email") as mock_safe_email: mock_safe_email.side_effect = [False, True] assert self._call() == "foo@bar.baz" @test_util.patch_display_util() def test_invalid_flag(self, mock_get_utility): invalid_txt = "There seem to be problems" mock_input = mock_get_utility().input mock_input.return_value = (display_util.OK, "foo@bar.baz") with mock.patch("certbot.display.ops.util.safe_email") as mock_safe_email: mock_safe_email.return_value = True self._call() assert invalid_txt not in mock_input.call_args[0][0] self._call(invalid=True) assert invalid_txt in mock_input.call_args[0][0] @test_util.patch_display_util() def test_optional_flag(self, mock_get_utility): mock_input = mock_get_utility().input mock_input.return_value = (display_util.OK, "foo@bar.baz") with mock.patch("certbot.display.ops.util.safe_email") as mock_safe_email: mock_safe_email.side_effect = [False, True] self._call(optional=False) for call in mock_input.call_args_list: assert "--register-unsafely-without-email" not in call[0][0] @test_util.patch_display_util() def test_optional_invalid_unsafe(self, mock_get_utility): invalid_txt = "There seem to be problems" mock_input = mock_get_utility().input mock_input.return_value = (display_util.OK, "foo@bar.baz") with mock.patch("certbot.display.ops.util.safe_email") as mock_safe_email: mock_safe_email.side_effect = [False, True] self._call(invalid=True) assert invalid_txt in mock_input.call_args[0][0] class ChooseAccountTest(test_util.TempDirTestCase): """Tests for certbot.display.ops.choose_account.""" def setUp(self): super().setUp() display_obj.set_display(display_obj.FileDisplay(sys.stdout, False)) self.account_keys_dir = os.path.join(self.tempdir, "keys") filesystem.makedirs(self.account_keys_dir, 0o700) self.config = mock.MagicMock( accounts_dir=self.tempdir, account_keys_dir=self.account_keys_dir, server="certbot-demo.org") self.key = KEY self.acc1 = account.Account(messages.RegistrationResource( uri=None, body=messages.Registration.from_data( email="email1@g.com")), self.key) self.acc2 = account.Account(messages.RegistrationResource( uri=None, body=messages.Registration.from_data( email="email2@g.com", phone="phone")), self.key) @classmethod def _call(cls, accounts): return ops.choose_account(accounts) @test_util.patch_display_util() def test_one(self, mock_util): mock_util().menu.return_value = (display_util.OK, 0) assert self._call([self.acc1]) == self.acc1 @test_util.patch_display_util() def test_two(self, mock_util): mock_util().menu.return_value = (display_util.OK, 1) assert self._call([self.acc1, self.acc2]) == self.acc2 @test_util.patch_display_util() def test_cancel(self, mock_util): mock_util().menu.return_value = (display_util.CANCEL, 1) assert self._call([self.acc1, self.acc2]) is None class GenHttpsNamesTest(unittest.TestCase): """Test _gen_https_names.""" def setUp(self): display_obj.set_display(display_obj.FileDisplay(sys.stdout, False)) @classmethod def _call(cls, domains): from certbot.display.ops import _gen_https_names return _gen_https_names(domains) def test_zero(self): assert self._call([]) == "" def test_one(self): doms = [ "example.com", "asllkjsadfljasdf.c", ] for dom in doms: assert self._call([dom]) == "https://%s" % dom def test_two(self): domains_list = [ ["foo.bar.org", "bar.org"], ["paypal.google.facebook.live.com", "*.zombo.example.com"], ] for doms in domains_list: assert self._call(doms) == \ "https://{dom[0]} and https://{dom[1]}".format(dom=doms) def test_three(self): doms = ["a.org", "b.org", "c.org"] # We use an oxford comma assert self._call(doms) == \ "https://{dom[0]}, https://{dom[1]}, and https://{dom[2]}".format( dom=doms) def test_four(self): doms = ["a.org", "b.org", "c.org", "d.org"] exp = ("https://{dom[0]}, https://{dom[1]}, https://{dom[2]}, " "and https://{dom[3]}".format(dom=doms)) assert self._call(doms) == exp class ChooseNamesTest(unittest.TestCase): """Test choose names.""" def setUp(self): display_obj.set_display(display_obj.FileDisplay(sys.stdout, False)) self.mock_install = mock.MagicMock() @classmethod def _call(cls, installer, question=None): from certbot.display.ops import choose_names return choose_names(installer, question) @mock.patch("certbot.display.ops._choose_names_manually") def test_no_installer(self, mock_manual): self._call(None) assert mock_manual.call_count == 1 @test_util.patch_display_util() def test_no_installer_cancel(self, mock_util): mock_util().input.return_value = (display_util.CANCEL, []) assert self._call(None) == [] @test_util.patch_display_util() def test_no_names_choose(self, mock_util): self.mock_install().get_all_names.return_value = set() domain = "example.com" mock_util().input.return_value = (display_util.OK, domain) actual_doms = self._call(self.mock_install) assert mock_util().input.call_count == 1 assert actual_doms == [domain] def test_sort_names_trivial(self): from certbot.display.ops import _sort_names #sort an empty list assert _sort_names([]) == [] #sort simple domains some_domains = ["ex.com", "zx.com", "ax.com"] assert _sort_names(some_domains) == ["ax.com", "ex.com", "zx.com"] #Sort subdomains of a single domain domain = ".ex.com" unsorted_short = ["e", "a", "z", "y"] unsorted_long = [us + domain for us in unsorted_short] sorted_short = sorted(unsorted_short) sorted_long = [us + domain for us in sorted_short] assert _sort_names(unsorted_long) == sorted_long def test_sort_names_many(self): from certbot.display.ops import _sort_names unsorted_domains = [".cx.com", ".bx.com", ".ax.com", ".dx.com"] unsorted_short = ["www", "bnother.long.subdomain", "a", "a.long.subdomain", "z", "b"] #Of course sorted doesn't work here ;-) sorted_short = ["a", "b", "a.long.subdomain", "bnother.long.subdomain", "www", "z"] to_sort = [] for short in unsorted_short: for domain in unsorted_domains: to_sort.append(short+domain) sortd = [] for domain in sorted(unsorted_domains): for short in sorted_short: sortd.append(short+domain) assert _sort_names(to_sort) == sortd @test_util.patch_display_util() def test_filter_names_valid_return(self, mock_util): self.mock_install.get_all_names.return_value = {"example.com"} mock_util().checklist.return_value = (display_util.OK, ["example.com"]) names = self._call(self.mock_install) assert names == ["example.com"] assert mock_util().checklist.call_count == 1 @test_util.patch_display_util() def test_filter_namees_override_question(self, mock_util): self.mock_install.get_all_names.return_value = {"example.com"} mock_util().checklist.return_value = (display_util.OK, ["example.com"]) names = self._call(self.mock_install, "Custom") assert names == ["example.com"] assert mock_util().checklist.call_count == 1 assert mock_util().checklist.call_args[0][0] == "Custom" @test_util.patch_display_util() def test_filter_names_nothing_selected(self, mock_util): self.mock_install.get_all_names.return_value = {"example.com"} mock_util().checklist.return_value = (display_util.OK, []) assert self._call(self.mock_install) == [] @test_util.patch_display_util() def test_filter_names_cancel(self, mock_util): self.mock_install.get_all_names.return_value = {"example.com"} mock_util().checklist.return_value = ( display_util.CANCEL, ["example.com"]) assert self._call(self.mock_install) == [] def test_get_valid_domains(self): from certbot.display.ops import get_valid_domains all_valid = ["example.com", "second.example.com", "also.example.com", "under_score.example.com", "justtld", "*.wildcard.com"] all_invalid = ["öóòps.net", "uniçodé.com"] two_valid = ["example.com", "úniçøde.com", "also.example.com"] assert get_valid_domains(all_valid) == all_valid assert get_valid_domains(all_invalid) == [] assert len(get_valid_domains(two_valid)) == 2 @test_util.patch_display_util() def test_choose_manually(self, mock_util): from certbot.display.ops import _choose_names_manually utility_mock = mock_util() # No retry utility_mock.yesno.return_value = False # IDN and no retry utility_mock.input.return_value = (display_util.OK, "uniçodé.com") assert _choose_names_manually() == [] # IDN exception with previous mocks with mock.patch( "certbot.display.ops.internal_display_util.separate_list_input" ) as mock_sli: unicode_error = UnicodeEncodeError('mock', u'', 0, 1, 'mock') mock_sli.side_effect = unicode_error assert _choose_names_manually() == [] # Valid domains utility_mock.input.return_value = (display_util.OK, ("example.com," "under_score.example.com," "justtld," "valid.example.com")) assert _choose_names_manually() == \ ["example.com", "under_score.example.com", "justtld", "valid.example.com"] @test_util.patch_display_util() def test_choose_manually_retry(self, mock_util): from certbot.display.ops import _choose_names_manually utility_mock = mock_util() # Three iterations utility_mock.input.return_value = (display_util.OK, "uniçodé.com") utility_mock.yesno.side_effect = [True, True, False] _choose_names_manually() assert utility_mock.yesno.call_count == 3 class SuccessInstallationTest(unittest.TestCase): """Test the success installation message.""" @classmethod def _call(cls, names): from certbot.display.ops import success_installation success_installation(names) @test_util.patch_display_util() @mock.patch("certbot.display.util.notify") def test_success_installation(self, mock_notify, mock_display): mock_display().notification.return_value = None names = ["example.com", "abc.com"] self._call(names) assert mock_notify.call_count == 1 arg = mock_notify.call_args_list[0][0][0] for name in names: assert name in arg class SuccessRenewalTest(unittest.TestCase): """Test the success renewal message.""" @classmethod def _call(cls, names): from certbot.display.ops import success_renewal success_renewal(names) @test_util.patch_display_util() @mock.patch("certbot.display.util.notify") def test_success_renewal(self, mock_notify, mock_display): mock_display().notification.return_value = None names = ["example.com", "abc.com"] self._call(names) assert mock_notify.call_count == 1 class SuccessRevocationTest(unittest.TestCase): """Test the success revocation message.""" @classmethod def _call(cls, path): from certbot.display.ops import success_revocation success_revocation(path) @test_util.patch_display_util() @mock.patch("certbot.display.util.notify") def test_success_revocation(self, mock_notify, unused_mock_display): path = "/path/to/cert.pem" self._call(path) mock_notify.assert_called_once_with( "Congratulations! You have successfully revoked the certificate " "that was located at {0}.".format(path) ) class ValidatorTests(unittest.TestCase): """Tests for `validated_input` and `validated_directory`.""" __ERROR = "Must be non-empty" valid_input = "asdf" valid_directory = "/var/www/html" @staticmethod def __validator(m): if m == "": raise errors.PluginError(ValidatorTests.__ERROR) @test_util.patch_display_util() def test_input_blank_with_validator(self, mock_util): mock_util().input.side_effect = [(display_util.OK, ""), (display_util.OK, ""), (display_util.OK, ""), (display_util.OK, self.valid_input)] returned = ops.validated_input(self.__validator, "message", force_interactive=True) assert ValidatorTests.__ERROR == mock_util().notification.call_args[0][0] assert returned == (display_util.OK, self.valid_input) @test_util.patch_display_util() def test_input_validation_with_default(self, mock_util): mock_util().input.side_effect = [(display_util.OK, self.valid_input)] returned = ops.validated_input(self.__validator, "msg", default="other") assert returned == (display_util.OK, self.valid_input) @test_util.patch_display_util() def test_input_validation_with_bad_default(self, mock_util): mock_util().input.side_effect = [(display_util.OK, self.valid_input)] with pytest.raises(AssertionError): ops.validated_input(self.__validator, "msg", default="") @test_util.patch_display_util() def test_input_cancel_with_validator(self, mock_util): mock_util().input.side_effect = [(display_util.CANCEL, "")] code, unused_raw = ops.validated_input(self.__validator, "message", force_interactive=True) assert code == display_util.CANCEL @test_util.patch_display_util() def test_directory_select_validation(self, mock_util): mock_util().directory_select.side_effect = [(display_util.OK, ""), (display_util.OK, self.valid_directory)] returned = ops.validated_directory(self.__validator, "msg", force_interactive=True) assert ValidatorTests.__ERROR == mock_util().notification.call_args[0][0] assert returned == (display_util.OK, self.valid_directory) @test_util.patch_display_util() def test_directory_select_validation_with_default(self, mock_util): mock_util().directory_select.side_effect = [(display_util.OK, self.valid_directory)] returned = ops.validated_directory(self.__validator, "msg", default="other") assert returned == (display_util.OK, self.valid_directory) @test_util.patch_display_util() def test_directory_select_validation_with_bad_default(self, mock_util): mock_util().directory_select.side_effect = [(display_util.OK, self.valid_directory)] with pytest.raises(AssertionError): ops.validated_directory(self.__validator, "msg", default="") class ChooseValuesTest(unittest.TestCase): """Test choose_values.""" @classmethod def _call(cls, values, question): from certbot.display.ops import choose_values return choose_values(values, question) @test_util.patch_display_util() def test_choose_names_success(self, mock_util): items = ["first", "second", "third"] mock_util().checklist.return_value = (display_util.OK, [items[2]]) result = self._call(items, None) assert result == [items[2]] assert mock_util().checklist.called is True assert mock_util().checklist.call_args[0][0] == "" @test_util.patch_display_util() def test_choose_names_success_question(self, mock_util): items = ["first", "second", "third"] question = "Which one?" mock_util().checklist.return_value = (display_util.OK, [items[1]]) result = self._call(items, question) assert result == [items[1]] assert mock_util().checklist.called is True assert mock_util().checklist.call_args[0][0] == question @test_util.patch_display_util() def test_choose_names_user_cancel(self, mock_util): items = ["first", "second", "third"] question = "Want to cancel?" mock_util().checklist.return_value = (display_util.CANCEL, []) result = self._call(items, question) assert result == [] assert mock_util().checklist.called is True assert mock_util().checklist.call_args[0][0] == question @mock.patch('certbot.display.ops.logger') @mock.patch('certbot.display.util.notify') class ReportExecutedCommand(unittest.TestCase): """Test report_executed_command""" @classmethod def _call(cls, cmd_name: str, rc: int, out: str, err: str): from certbot.display.ops import report_executed_command report_executed_command(cmd_name, rc, out, err) def test_mixed_success(self, mock_notify, mock_logger): self._call("some-hook", 0, "Did a thing", "Some warning") assert mock_logger.warning.call_count == 1 assert mock_notify.call_count == 1 def test_mixed_error(self, mock_notify, mock_logger): self._call("some-hook", -127, "Did a thing", "Some warning") assert mock_logger.warning.call_count == 2 assert mock_notify.call_count == 1 def test_empty_success(self, mock_notify, mock_logger): self._call("some-hook", 0, "\n", " ") assert mock_logger.warning.call_count == 0 assert mock_notify.call_count == 0 if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover display/util_test.py 0000644 00000004352 15114562471 0010611 0 ustar 00 """Test :mod:`certbot.display.util`.""" import sys import pytest import certbot.tests.util as test_util @test_util.patch_display_util() def test_notify(mock_util): from certbot.display.util import notify notify("Hello World") mock_util().notification.assert_called_with( "Hello World", pause=False, decorate=False, wrap=False ) @test_util.patch_display_util() def test_notification(mock_util): from certbot.display.util import notification notification("Hello World") mock_util().notification.assert_called_with( "Hello World", pause=True, decorate=True, wrap=True, force_interactive=False ) @test_util.patch_display_util() def test_menu(mock_util): from certbot.display.util import menu menu("Hello World", ["one", "two"], default=0) mock_util().menu.assert_called_with( "Hello World", ["one", "two"], default=0, cli_flag=None, force_interactive=False ) @test_util.patch_display_util() def test_input_text(mock_util): from certbot.display.util import input_text input_text("Hello World", default="something") mock_util().input.assert_called_with( "Hello World", default='something', cli_flag=None, force_interactive=False ) @test_util.patch_display_util() def test_yesno(mock_util): from certbot.display.util import yesno yesno("Hello World", default=True) mock_util().yesno.assert_called_with( "Hello World", yes_label='Yes', no_label='No', default=True, cli_flag=None, force_interactive=False ) @test_util.patch_display_util() def test_checklist(mock_util): from certbot.display.util import checklist checklist("Hello World", ["one", "two"], default="one") mock_util().checklist.assert_called_with( "Hello World", ['one', 'two'], default='one', cli_flag=None, force_interactive=False ) @test_util.patch_display_util() def test_directory_select(mock_util): from certbot.display.util import directory_select directory_select("Hello World", default="something") mock_util().directory_select.assert_called_with( "Hello World", default='something', cli_flag=None, force_interactive=False ) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/__pycache__/__init__.cpython-39.opt-1.pyc 0000644 00000000310 15114562471 0015564 0 ustar 00 a }|�g � @ s d Z dS )zCertbot Plugins TestsN)�__doc__� r r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/__init__.py�<module> � plugins/__pycache__/__init__.cpython-39.pyc 0000644 00000000310 15114562471 0014625 0 ustar 00 a }|�g � @ s d Z dS )zCertbot Plugins TestsN)�__doc__� r r �L/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/__init__.py�<module> � plugins/__pycache__/common_test.cpython-39.opt-1.pyc 0000644 00000033620 15114562471 0016366 0 ustar 00 a }|�gn8 � @ sz d Z ddlZddlZddlZddlZddlmZ ddlZddlZddl m Z ddl m Z ddl m Z ddl mZ ddl mZ dd lmZ dd lmZ dd lmZ dd lmZ ej�e�d ��Ze je� e j dd�e j �ded�Z G dd� dej �Z!G dd� dej �Z"G dd� dej#�Z$G dd� dej �Z%G dd� dej �Z&G d d � d ej'�Z(e)d k�rve�*e�+ej,d d� e-g �� dS ) z!Tests for certbot.plugins.common.� N)�mock)� challenges)�messages)� achallenges)� crypto_util)�errors)� filesystem)�os)� acme_util)�utilzrsa512_key.pems token1)�tokenzencryption-example.demo)Zchallb�domainZ account_keyc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �NamespaceFunctionsTestz7Tests for certbot.plugins.common.*_namespace functions.c C s ddl m} d S )Nr )�option_namespace)�certbot.plugins.commonr )�selfr � r �O/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/common_test.py�test_option_namespace s z,NamespaceFunctionsTest.test_option_namespacec C s ddl m} d S �Nr )�dest_namespace�r r �r r r r r �test_dest_namespace# s z*NamespaceFunctionsTest.test_dest_namespacec C s ddl m} d S r r r r r r � test_dest_namespace_with_dashes' s z6NamespaceFunctionsTest.test_dest_namespace_with_dashesN)�__name__� __module__� __qualname__�__doc__r r r r r r r r s r c @ sX e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dS )� PluginTestz'Test for certbot.plugins.common.Plugin.c C s@ ddl m} G dd� d|�}|| _t�� | _|| jdd�| _d S )Nr )�Pluginc @ s4 e Zd Zdd�dd�Zed�dd�Zedd� �ZdS ) z$PluginTest.setUp.<locals>.MockPluginN)�returnc S s d S �Nr �r r r r �prepare3 s z,PluginTest.setUp.<locals>.MockPlugin.preparec S s dS )N�infor r# r r r � more_info6 s z.PluginTest.setUp.<locals>.MockPlugin.more_infoc S s |dddd d� d S )Nzfoo-bar�different_to_foo_bar� ��dest�x�yr )�cls�addr r r �add_parser_arguments9 s z9PluginTest.setUp.<locals>.MockPlugin.add_parser_arguments)r r r r$ �strr& � classmethodr/ r r r r � MockPlugin2 s r2 r ��config�name)r r � plugin_clsr � MagicMockr4 Zplugin)r r r2 r r r �setUp/ s zPluginTest.setUpc C s d S r" r r# r r r � test_initA s zPluginTest.test_initc C s d S r" r r# r r r r E s z PluginTest.test_option_namespacec C s d S r" r r# r r r �test_option_nameH s zPluginTest.test_option_namec C s d S r" r r# r r r r K s z PluginTest.test_dest_namespacec C s d S r" r r# r r r � test_destN s zPluginTest.test_destc C s d S r" r r# r r r � test_confR s zPluginTest.test_confc C s. t �� }| j�|d� |jjdddd d� d S )Nr z--mock-foo-barr' r( r) )r r7 r6 Zinject_parser_options� add_argument�assert_called_once_with)r �parserr r r �test_inject_parser_optionsU s �z%PluginTest.test_inject_parser_optionsc C s d S r" r r# r r r �test_fallback_auth_hint] s z"PluginTest.test_fallback_auth_hintN) r r r r r8 r9 r r: r r; r< r@ rA r r r r r , s r c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd d � Z� ZS ) � InstallerTestz+Tests for certbot.plugins.common.Installer.c sB t � �� t�| jj� ddlm} || jdd�| _| jj | _ d S )Nr )�DummyInstallerZ Installerr3 ) �superr8 r �mkdirr4 Z config_dirZcertbot.tests.utilrC � installer�reverter)r rC �� __class__r r r8 h s �zInstallerTest.setUpc C s ddh}d}| � d||� d S )N�foo.bar�baz.qux�foo bar baz qux�add_to_checkpoint��_test_wrapped_method)r �files� save_notesr r r �test_add_to_real_checkpointq s z)InstallerTest.test_add_to_real_checkpointc C s | � d� d S )NF�� _test_add_to_checkpoint_commonr# r r r � test_add_to_real_checkpoint2v s z*InstallerTest.test_add_to_real_checkpoint2c C s | � d� d S )NTrS r# r r r � test_add_to_temporary_checkpointy s z.InstallerTest.test_add_to_temporary_checkpointc C s@ ddh}d}t j| jj|d�}|r(d}nd}| �||||� d S )NrJ rK rL )� temporaryZadd_to_temp_checkpointrM )� functools�partialrF rM �_test_adapted_method)r rW rP rQ �installer_func�reverter_func_namer r r rT | s �z,InstallerTest._test_add_to_checkpoint_commonc C s | � dd� d S )NZfinalize_checkpointZfoorN r# r r r �test_finalize_checkpoint� s z&InstallerTest.test_finalize_checkpointc C s | � d� d S )NZrecovery_routinerN r# r r r �test_recovery_routine� s z#InstallerTest.test_recovery_routinec C s | � d� d S )NZrevert_temporary_configrN r# r r r � test_revert_temporary_config� s z*InstallerTest.test_revert_temporary_configc C s | � dd� d S )NZrollback_checkpoints�* rN r# r r r �test_rollback_checkpoints� s z'InstallerTest.test_rollback_checkpointsc O s* t | j|�}| j||g|�R i |�� dS )z�Test a wrapped reverter method. :param str name: name of the method to test :param tuple args: position arguments to method :param dict kwargs: keyword arguments to method N)�getattrrF rZ )r r5 �args�kwargsr[ r r r rO � s z"InstallerTest._test_wrapped_methodc O s� t j�| j|��p}||i |�� |j|i |�� tj|_t� tj �� ||i |�� W d � n1 sh0 Y W d � n1 s�0 Y dS )a� Test an adapted reverter method :param callable installer_func: installer method to test :param str reverter_func_name: name of the method on the reverter that should be called :param tuple passed_args: positional arguments passed from installer method to the reverter method :param dict passed_kargs: keyword arguments passed from installer method to the reverter method N) r �patch�objectrG r> r Z ReverterErrorZ side_effect�pytest�raisesZ PluginError)r r[ r\ Z passed_argsZ passed_kwargsZ reverter_funcr r r rZ � s z"InstallerTest._test_adapted_methodc C s | j �� d S r" )rF Zinstall_ssl_dhparamsr# r r r �test_install_ssl_dhparams� s z'InstallerTest.test_install_ssl_dhparamsc C s ddl m} t�|�S )Nr )�SSL_DHPARAMS_SRC)�certbot._internal.constantsrj r � sha256sum)r rj r r r �_current_ssl_dhparams_hash� s z(InstallerTest._current_ssl_dhparams_hashc C s ddl m} d S )Nr )�ALL_SSL_DHPARAMS_HASHES)rk rn )r rn r r r �$test_current_file_hash_in_all_hashes� s z2InstallerTest.test_current_file_hash_in_all_hashes)r r r r r8 rR rU rV rT r] r^ r_ ra rO rZ ri rm ro � __classcell__r r rH r rB e s rB c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�AddrTestz&Tests for certbot.plugins.common.Addr.c C sp ddl m} |�d�| _|�d�| _|�d�| _|�d�| _|�d�| _|�d�| _|�d �| _ |�d �| _ d S ) Nr ��Addr� 192.168.1.1� 192.168.1.1:*z192.168.1.1:80� [fe00::1]� [fe00::1]:*z [fe00::1]:80z [fe00::1]:5z [fe00:1:2:3:4:5:6:7:8:9]:8080) r rs � fromstring�addr1�addr2Zaddr3�addr4�addr5Zaddr6Zaddr7Zaddr8�r rs r r r r8 � s zAddrTest.setUpc C s d S r" r r# r r r �test_fromstring� s zAddrTest.test_fromstringc C s d S r" r r# r r r �test_str� s zAddrTest.test_strc C s d S r" r r# r r r �test_get_addr_obj� s zAddrTest.test_get_addr_objc C s ddl m} d S )Nr rr )r rs r} r r r �test_eq� s zAddrTest.test_eqc C s` ddl m} | j| jh}|�d�}|�d�}||h}| j| jh}|�d�}|�d�}||h} d S )Nr rr rt ru rv rw )r rs ry rz rx r{ r| ) r rs Zset_aZaddr1bZaddr2bZset_bZset_cZaddr4bZaddr5bZset_dr r r �test_set_inclusion s zAddrTest.test_set_inclusionN) r r r r r8 r~ r r� r� r� r r r r rq � s rq c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �ChallengePerformerTestz4Tests for certbot.plugins.common.ChallengePerformer.c C s" t �� }ddlm} ||�| _d S )Nr )�ChallengePerformer)r r7 r r� � performer)r Z configuratorr� r r r r8 s z ChallengePerformerTest.setUpc C s | j �td� d S )Nr )r� Z add_chall�ACHALLr# r r r �test_add_chall s z%ChallengePerformerTest.test_add_challc C s8 t �t�� | j�� W d � n1 s*0 Y d S r" )rg rh �NotImplementedErrorr� Zperformr# r r r � test_perform# s z#ChallengePerformerTest.test_performN)r r r r r8 r� r� r r r r r� s r� c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )� InstallVersionControlledFileTestzATests for certbot.plugins.common.install_version_controlled_file.c s� t � �� dg| _tj�| jd�| _tj�| jd�| _tj�| jd�| _ tj�| jd�| _ | j | j fD ]J}t |d��}|� |� W d � n1 s�0 Y | j� t�|�� qfd S )NZ someotherhashzoptions-ssl-dest.confz.options-ssl-conf.txtzoptions-ssl-old.confzoptions-ssl-src.conf�w)rD r8 �hashesr �path�joinZtempdir� dest_path� hash_path�old_path� source_path�open�write�appendr rl )r r� �frH r r r8 + s (z&InstallVersionControlledFileTest.setUpc C s& ddl m} || j| j| j| j� d S )Nr )� install_version_controlled_file)r r� r� r� r� r� )r r� r r r �_call7 s �z&InstallVersionControlledFileTest._callc C s t �| j�S r" )r rl r� r# r r r �_current_file_hash> s z3InstallVersionControlledFileTest._current_file_hashc C s d S r" r r# r r r �_assert_current_fileA s z5InstallVersionControlledFileTest._assert_current_filec C s | � � | �� d S r" )r� r� r# r r r � test_no_fileF s z-InstallVersionControlledFileTest.test_no_filec C s" t d�D ]}| �� | �� qd S )N� )�ranger� r� )r �_r r r �test_current_fileK s z2InstallVersionControlledFileTest.test_current_filec C s$ t �| j| j� | �� | �� d S r" )�shutil�copyfiler� r� r� r� r# r r r �!test_prev_file_updates_to_currentQ s zBInstallVersionControlledFileTest.test_prev_file_updates_to_currentc C st | � � t| jd��}|�d� W d � n1 s40 Y t�d��}| � � W d � n1 sf0 Y d S )N�a� a new line for the wrong hash � certbot.plugins.common.logger)r� r� r� r� r re )r � mod_ssl_conf� mock_loggerr r r �3test_manually_modified_current_file_does_not_updateV s ( zTInstallVersionControlledFileTest.test_manually_modified_current_file_does_not_updatec C s� t | jd��}|�d� W d � n1 s,0 Y t | jd��}|�d� W d � n1 sb0 Y t�d��}| �� W d � n1 s�0 Y t�d��}| �� W d � n1 s�0 Y d S )Nr� r� r� Zhashofanoldversionr� )r� r� r� r� r re r� )r r� r� r� r r r �&test_manually_modified_past_file_warnsc s (( zGInstallVersionControlledFileTest.test_manually_modified_past_file_warns)r r r r r8 r� r� r� r� r� r� r� r� rp r r rH r r� ( s r� �__main__r( ).r rX r� �sysZunittestr ZjosepyZjoserg Zacmer r Zcertbotr r r Zcertbot.compatr r Z certbot.testsr r Z test_utilZJWKRSA�loadZ load_vectorZAUTH_KEYZ"KeyAuthorizationAnnotatedChallengeZchall_to_challbZHTTP01ZSTATUS_PENDINGr� ZTestCaser r ZConfigTestCaserB rq r� ZTempDirTestCaser� r �exit�main�argv�__file__r r r r �<module> s> ��9_QL plugins/__pycache__/common_test.cpython-39.pyc 0000644 00000040566 15114562471 0015436 0 ustar 00 a }|�gn8 � @ sz d Z ddlZddlZddlZddlZddlmZ ddlZddlZddl m Z ddl m Z ddl m Z ddl mZ ddl mZ dd lmZ dd lmZ dd lmZ dd lmZ ej�e�d ��Ze je� e j dd�e j �ded�Z G dd� dej �Z!G dd� dej �Z"G dd� dej#�Z$G dd� dej �Z%G dd� dej �Z&G d d � d ej'�Z(e)d k�rve�*e�+ej,d d� e-g �� dS ) z!Tests for certbot.plugins.common.� N)�mock)� challenges)�messages)� achallenges)� crypto_util)�errors)� filesystem)�os)� acme_util)�utilzrsa512_key.pems token1)�tokenzencryption-example.demo)Zchallb�domainZ account_keyc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �NamespaceFunctionsTestz7Tests for certbot.plugins.common.*_namespace functions.c C s ddl m} d|d�ks J �d S )Nr )�option_namespacezfoo-�foo)�certbot.plugins.commonr )�selfr � r �O/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/common_test.py�test_option_namespace s z,NamespaceFunctionsTest.test_option_namespacec C s ddl m} d|d�ks J �d S )Nr ��dest_namespaceZfoo_r �r r �r r r r r �test_dest_namespace# s z*NamespaceFunctionsTest.test_dest_namespacec C s ddl m} d|d�ks J �d S )Nr r Zfoo_bar_�foo-barr r r r r � test_dest_namespace_with_dashes' s z6NamespaceFunctionsTest.test_dest_namespace_with_dashesN)�__name__� __module__� __qualname__�__doc__r r r r r r r r s r c @ sX e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dS )� PluginTestz'Test for certbot.plugins.common.Plugin.c C s@ ddl m} G dd� d|�}|| _t�� | _|| jdd�| _d S )Nr )�Pluginc @ s4 e Zd Zdd�dd�Zed�dd�Zedd� �ZdS ) z$PluginTest.setUp.<locals>.MockPluginN)�returnc S s d S �Nr �r r r r �prepare3 s z,PluginTest.setUp.<locals>.MockPlugin.preparec S s dS )N�infor r% r r r � more_info6 s z.PluginTest.setUp.<locals>.MockPlugin.more_infoc S s |dddd d� d S )Nr �different_to_foo_bar� ��dest�x�yr )�cls�addr r r �add_parser_arguments9 s z9PluginTest.setUp.<locals>.MockPlugin.add_parser_arguments)r r r r& �strr( � classmethodr1 r r r r � MockPlugin2 s r4 r ��config�name)r r" � plugin_clsr � MagicMockr6 �plugin)r r" r4 r r r �setUp/ s zPluginTest.setUpc C s& d| j jksJ �| j| j jks"J �d S )Nr )r: r7 r6 r% r r r � test_initA s zPluginTest.test_initc C s d| j jksJ �d S )Nzmock-)r: r r% r r r r E s z PluginTest.test_option_namespacec C s d| j �d�ksJ �d S )Nz mock-foo_bar�foo_bar)r: Z option_namer% r r r �test_option_nameH s zPluginTest.test_option_namec C s d| j jksJ �d S )NZmock_)r: r r% r r r r K s z PluginTest.test_dest_namespacec C s, d| j �d�ksJ �d| j �d�ks(J �d S )N� mock_foo_barr r= )r: r, r% r r r � test_destN s zPluginTest.test_destc C s | j j| j�d�ksJ �d S )Nr )r6 r? r: Zconfr% r r r � test_confR s zPluginTest.test_confc C s. t �� }| j�|d� |jjdddd d� d S )Nr z--mock-foo-barr) r* r+ )r r9 r8 Zinject_parser_options� add_argument�assert_called_once_with)r �parserr r r �test_inject_parser_optionsU s �z%PluginTest.test_inject_parser_optionsc C s@ d| j �tjtjg�v s J �d| j �tjtjtjg�v s<J �d S )Nz8the mock plugin completed the required dns-01 challengeszDthe mock plugin completed the required dns-01 and http-01 challenges)r: Z auth_hintr ZDNS01_AZHTTP01_Ar% r r r �test_fallback_auth_hint] s ���z"PluginTest.test_fallback_auth_hintN) r r r r r; r< r r> r r@ rA rE rF r r r r r! , s r! c s� e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd d � Z� ZS ) � InstallerTestz+Tests for certbot.plugins.common.Installer.c sB t � �� t�| jj� ddlm} || jdd�| _| jj | _ d S )Nr )�DummyInstallerZ Installerr5 ) �superr; r �mkdirr6 Z config_dirZcertbot.tests.utilrH � installer�reverter)r rH �� __class__r r r; h s �zInstallerTest.setUpc C s ddh}d}| � d||� d S )N�foo.bar�baz.qux�foo bar baz qux�add_to_checkpoint��_test_wrapped_method)r �files� save_notesr r r �test_add_to_real_checkpointq s z)InstallerTest.test_add_to_real_checkpointc C s | � d� d S )NF�� _test_add_to_checkpoint_commonr% r r r � test_add_to_real_checkpoint2v s z*InstallerTest.test_add_to_real_checkpoint2c C s | � d� d S )NTrX r% r r r � test_add_to_temporary_checkpointy s z.InstallerTest.test_add_to_temporary_checkpointc C s@ ddh}d}t j| jj|d�}|r(d}nd}| �||||� d S )NrO rP rQ )� temporaryZadd_to_temp_checkpointrR )� functools�partialrK rR �_test_adapted_method)r r\ rU rV �installer_func�reverter_func_namer r r rY | s �z,InstallerTest._test_add_to_checkpoint_commonc C s | � dd� d S )NZfinalize_checkpointr rS r% r r r �test_finalize_checkpoint� s z&InstallerTest.test_finalize_checkpointc C s | � d� d S )NZrecovery_routinerS r% r r r �test_recovery_routine� s z#InstallerTest.test_recovery_routinec C s | � d� d S )NZrevert_temporary_configrS r% r r r � test_revert_temporary_config� s z*InstallerTest.test_revert_temporary_configc C s | � dd� d S )NZrollback_checkpoints�* rS r% r r r �test_rollback_checkpoints� s z'InstallerTest.test_rollback_checkpointsc O s* t | j|�}| j||g|�R i |�� dS )z�Test a wrapped reverter method. :param str name: name of the method to test :param tuple args: position arguments to method :param dict kwargs: keyword arguments to method N)�getattrrK r_ )r r7 �args�kwargsr` r r r rT � s z"InstallerTest._test_wrapped_methodc O s� t j�| j|��p}||i |�� |j|i |�� tj|_t� tj �� ||i |�� W d � n1 sh0 Y W d � n1 s�0 Y dS )a� Test an adapted reverter method :param callable installer_func: installer method to test :param str reverter_func_name: name of the method on the reverter that should be called :param tuple passed_args: positional arguments passed from installer method to the reverter method :param dict passed_kargs: keyword arguments passed from installer method to the reverter method N) r �patch�objectrL rC r Z ReverterErrorZ side_effect�pytest�raisesZ PluginError)r r` ra Z passed_argsZ passed_kwargsZ reverter_funcr r r r_ � s z"InstallerTest._test_adapted_methodc C s" | j �� tj�| j j�s J �d S r$ )rK Zinstall_ssl_dhparamsr �path�isfileZ ssl_dhparamsr% r r r �test_install_ssl_dhparams� s z'InstallerTest.test_install_ssl_dhparamsc C s ddl m} t�|�S )Nr )�SSL_DHPARAMS_SRC)�certbot._internal.constantsrq r � sha256sum)r rq r r r �_current_ssl_dhparams_hash� s z(InstallerTest._current_ssl_dhparams_hashc C s$ ddl m} | �� |v s J d��d S )Nr )�ALL_SSL_DHPARAMS_HASHESzwConstants.ALL_SSL_DHPARAMS_HASHES must be appended with the sha256 hash of self.config.ssl_dhparams when it is updated.)rr ru rt )r ru r r r �$test_current_file_hash_in_all_hashes� s �z2InstallerTest.test_current_file_hash_in_all_hashes)r r r r r; rW rZ r[ rY rb rc rd rf rT r_ rp rt rv � __classcell__r r rM r rG e s rG c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�AddrTestz&Tests for certbot.plugins.common.Addr.c C sp ddl m} |�d�| _|�d�| _|�d�| _|�d�| _|�d�| _|�d�| _|�d �| _ |�d �| _ d S ) Nr ��Addr� 192.168.1.1� 192.168.1.1:*�192.168.1.1:80� [fe00::1]� [fe00::1]:*� [fe00::1]:80z [fe00::1]:5z [fe00:1:2:3:4:5:6:7:8:9]:8080) r rz � fromstring�addr1�addr2�addr3�addr4�addr5�addr6�addr7�addr8�r rz r r r r; � s zAddrTest.setUpc C s( | j �� dksJ �| j �� dks$J �| j�� dks6J �| j�� dksHJ �| j�� dksZJ �| j�� dkslJ �| j�� dks~J �| j�� dks�J �| j�� dks�J �| j�� dks�J �| j�� dks�J �| j�� dks�J �| j�� dks�J �| j �� dks�J �| j �� dk�sJ �| j �� dk�s$J �d S ) Nr{ � �*Z80r~ zfe00:0:0:0:0:0:0:1�5zfe00:1:2:3:4:5:6:7) r� Zget_addrZget_portr� r� r� r� r� Zget_ipv6_explodedr� r� r% r r r �test_fromstring� s, ���zAddrTest.test_fromstringc C sp t | j�dksJ �t | j�dks$J �t | j�dks6J �t | j�dksHJ �t | j�dksZJ �t | j�dkslJ �d S )Nr{ r| r} r~ r r� )r2 r� r� r� r� r� r� r% r r r �test_str� s zAddrTest.test_strc C s� t | j�d��dksJ �t | j�d��dks0J �t | j�d��dksHJ �t | j�d��dks`J �t | j�d��dksxJ �t | j�d��d ks�J �d S ) NZ443z192.168.1.1:443r� r{ r� r| z [fe00::1]:443r~ r )r2 r� � get_addr_objr� r� r� r% r r r �test_get_addr_obj� s zAddrTest.test_get_addr_objc C s� | j | j�d�ksJ �| j | jks&J �| j dks4J �| j| j�d�ksJJ �| j| jksZJ �| jdkshJ �ddlm} | j|�d�ks�J �| j|�d�ks�J �d S )Nr� i r ry z [fe00:0:0::1]z[fe00:0::0:0:1])r� r� r� r� r� r rz r� r� r r r �test_eq� s zAddrTest.test_eqc C sx ddl m} | j| jh}|�d�}|�d�}||h}||ks@J �| j| jh}|�d�}|�d�}||h} || kstJ �d S )Nr ry r{ r| r~ r )r rz r� r� r� r� r� ) r rz Zset_aZaddr1bZaddr2bZset_bZset_cZaddr4bZaddr5bZset_dr r r �test_set_inclusion s zAddrTest.test_set_inclusionN) r r r r r; r� r� r� r� r� r r r r rx � s rx c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �ChallengePerformerTestz4Tests for certbot.plugins.common.ChallengePerformer.c C s" t �� }ddlm} ||�| _d S )Nr )�ChallengePerformer)r r9 r r� � performer)r Z configuratorr� r r r r; s z ChallengePerformerTest.setUpc C s8 | j �td� dt| j j�ks"J �dg| j jks4J �d S )Nr r* )r� Z add_chall�ACHALL�lenZachalls�indicesr% r r r �test_add_chall s z%ChallengePerformerTest.test_add_challc C s8 t �t�� | j�� W d � n1 s*0 Y d S r$ )rl rm �NotImplementedErrorr� Zperformr% r r r � test_perform# s z#ChallengePerformerTest.test_performN)r r r r r; r� r� r r r r r� s r� c s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )� InstallVersionControlledFileTestzATests for certbot.plugins.common.install_version_controlled_file.c s� t � �� dg| _tj�| jd�| _tj�| jd�| _tj�| jd�| _ tj�| jd�| _ | j | j fD ]J}t |d��}|� |� W d � n1 s�0 Y | j� t�|�� qfd S )NZ someotherhashzoptions-ssl-dest.confz.options-ssl-conf.txtzoptions-ssl-old.confzoptions-ssl-src.conf�w)rI r; �hashesr rn �joinZtempdir� dest_path� hash_path�old_path� source_path�open�write�appendr rs )r rn �frM r r r; + s (z&InstallVersionControlledFileTest.setUpc C s& ddl m} || j| j| j| j� d S )Nr )� install_version_controlled_file)r r� r� r� r� r� )r r� r r r �_call7 s �z&InstallVersionControlledFileTest._callc C s t �| j�S r$ )r rs r� r% r r r �_current_file_hash> s z3InstallVersionControlledFileTest._current_file_hashc C s. t j�| j�sJ �t�| j�| �� ks*J �d S r$ )r rn ro r� r rs r� r% r r r �_assert_current_fileA s �z5InstallVersionControlledFileTest._assert_current_filec C s& t j�| j�rJ �| �� | �� d S r$ )r rn ro r� r� r� r% r r r � test_no_fileF s z-InstallVersionControlledFileTest.test_no_filec C s" t d�D ]}| �� | �� qd S )N� )�ranger� r� )r �_r r r �test_current_fileK s z2InstallVersionControlledFileTest.test_current_filec C s$ t �| j| j� | �� | �� d S r$ )�shutil�copyfiler� r� r� r� r% r r r �!test_prev_file_updates_to_currentQ s zBInstallVersionControlledFileTest.test_prev_file_updates_to_currentc C s� | � � t| jd��}|�d� W d � n1 s40 Y t�d��(}| � � |jjdu sbJ �W d � n1 sv0 Y tj � | j�s�J �t � | j �| �� ks�J �t � | j�| �� ks�J �d S )N�a� a new line for the wrong hash � certbot.plugins.common.loggerF)r� r� r� r� r rj �warning�calledr rn ro r rs r� r� )r � mod_ssl_conf� mock_loggerr r r �3test_manually_modified_current_file_does_not_updateV s ( . � �zTInstallVersionControlledFileTest.test_manually_modified_current_file_does_not_updatec C s t | jd��}|�d� W d � n1 s,0 Y t | jd��}|�d� W d � n1 sb0 Y t�d��0}| �� |jjd d dks�J �W d � n1 s�0 Y t � | j �| � � ks�J �t�d��(}| �� |jj du s�J �W d � n1 �s0 Y d S ) Nr� r� r� Zhashofanoldversionr� r zh%s has been manually modified; updated file saved to %s. We recommend updating %s for security purposes.F)r� r� r� r� r rj r� r� Z call_argsr rs r� r� r� )r r� r� r� r r r �&test_manually_modified_past_file_warnsc s (( �& � zGInstallVersionControlledFileTest.test_manually_modified_past_file_warns)r r r r r; r� r� r� r� r� r� r� r� rw r r rM r r� ( s r� �__main__r* ).r r] r� �sysZunittestr ZjosepyZjoserl Zacmer r Zcertbotr r r Zcertbot.compatr r Z certbot.testsr r Z test_utilZJWKRSA�loadZ load_vectorZAUTH_KEYZ"KeyAuthorizationAnnotatedChallengeZchall_to_challbZHTTP01ZSTATUS_PENDINGr� ZTestCaser r! ZConfigTestCaserG rx r� ZTempDirTestCaser� r �exit�main�argv�__file__r r r r �<module> s> ��9_QL plugins/__pycache__/disco_test.cpython-39.opt-1.pyc 0000644 00000022145 15114562471 0016177 0 ustar 00 a }|�g�, � @ s2 d Z ddlZddlZddlZddlmZ ddlZddlmZ ddlZddl m Z ddl m Z ddl m Z ddl mZ dd l mZ ejd kr�ddlmZ nddlZG d d � d ej�Zejd ddd�Zejdddd�Zed ddd�ZG dd� dej�ZG dd� dej�Ze dk�r.e� e� ej dd� e g �� dS )z*Tests for certbot._internal.plugins.disco.� N)�List)�mock)�errors)� interfaces)�null)� standalone)�webroot)� � c @ s e Zd Zdd� ZdS )�_EntryPointLoadFailc C s t d��d S )NzLoading failure)� RuntimeError��self� r �N/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/disco_test.py�load s z_EntryPointLoadFail.loadN)�__name__� __module__� __qualname__r r r r r r s r �saz2certbot._internal.plugins.standalone:Authenticator�certbot.plugins��name�value�group�wrz/certbot._internal.plugins.webroot:Authenticatorc @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd d � Zd d � Zd S )!�PluginEntryPointTestz;Tests for certbot._internal.plugins.disco.PluginEntryPoint.c C sb t jdddd�| _t jdddd�| _t jdddd�| _t jdd dd�| _d d lm} |t�| _ d S ) N�ep1zp1.ep1:Authenticatorr r zp2.pe2:Authenticator�ep2zp2.foo.ep2:Authenticator�ep3za.ep3:Authenticatorr ��PluginEntryPoint) �importlib_metadata� EntryPointr �ep1primr r � certbot._internal.plugins.discor! �EP_SA� plugin_ep)r r! r r r �setUp/ s, ���� zPluginEntryPointTest.setUpc C sB ddl m} | jd| jd| jd| jdtdi}|�� D ]\}}q4d S )Nr r r r r r )r% r! r r$ r r r& �items)r r! �namesZ entry_pointr r r r �,test_entry_point_to_plugin_name_not_prefixedF s �zAPluginEntryPointTest.test_entry_point_to_plugin_name_not_prefixedc C s d S �Nr r r r r �test_descriptionT s z%PluginEntryPointTest.test_descriptionc C s t jdd�| j_d S )NZDesc)� description�r � MagicMockr' Z plugin_clsr r r r �test_description_with_nameW s z/PluginEntryPointTest.test_description_with_namec C s t jdd�| j_d S )Nz Long desc)Zlong_descriptionr/ r r r r �test_long_description[ s � z*PluginEntryPointTest.test_long_descriptionc C s t jddgd�| j_d S )NzLong desc not foundr. )r. �specr/ r r r r �!test_long_description_nonexistent` s � z6PluginEntryPointTest.test_long_description_nonexistentc C s d S r, r r r r r � test_ifacese s z PluginEntryPointTest.test_ifacesc C s d S r, r r r r r � test__init__k s z!PluginEntryPointTest.test__init__c C s t �� }| jj|d�}d S �N)�config)r r0 r' �init)r r8 �pluginr r r � test_initv s z PluginEntryPointTest.test_initc C s. t �� }| jj|d� | j�� t| j� d S r7 )r r0 r' r9 �prepare�str)r r8 r r r � test_prepare� s z!PluginEntryPointTest.test_preparec C s t �� }tj|j_|| j_d S r, )r r0 r ZMisconfigurationErrorr< � side_effectr' � _initialized�r r: r r r �test_prepare_misconfigured� s z/PluginEntryPointTest.test_prepare_misconfiguredc C s t �� }tj|j_|| j_d S r, )r r0 r ZNoInstallationErrorr< r? r' r@ rA r r r � test_prepare_no_installation� s z1PluginEntryPointTest.test_prepare_no_installationc C s t �� }tj|j_|| j_d S r, )r r0 r � PluginErrorr< r? r' r@ rA r r r �!test_prepare_generic_plugin_error� s z6PluginEntryPointTest.test_prepare_generic_plugin_errorc C s t | j�}d S r, )r= r' )r �outputr r r �test_str� s z PluginEntryPointTest.test_strc C s d S r, r r r r r � test_repr� s z PluginEntryPointTest.test_reprN)r r r �__doc__r( r+ r- r1 r2 r4 r5 r6 r; r> rB rC rE rG rH r r r r r , s r c @ s� e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"S )#�PluginsRegistryTestz:Tests for certbot._internal.plugins.disco.PluginsRegistry.c C s ddl m} ||�S )Nr ��PluginsRegistry)r% rL )�cls�pluginsrL r r r �_create_new_registry� s z(PluginsRegistryTest._create_new_registryc C sP t �� | _d| j_t| jj_| jj| ji| _| �| j�| _ t j dddd�| _ d S )Nr r zp1.ep1r r ) r r0 r' r � TypeError�__hash__r? rN rO �regr" r# r r r r r r( � s �zPluginsRegistryTest.setUpc C s� ddl m} t�d��r}tgt| jgg|j_tj� t j d��.}t j tj tjtjg|_|�� }W d � n1 sp0 Y W d � n1 s�0 Y d S )Nr rK �2certbot._internal.plugins.disco.importlib_metadatar )r% rL r �patchr& �EP_WRr � entry_pointsr? �objectr" r# r Z Authenticatorr r Z Installer�find_all)r rL � mock_metaZ mock_loadrN r r r � test_find_all� s ��Dz!PluginsRegistryTest.test_find_allc C s� ddl m} t�d��X}tgt| jgg|j_| � t j ��}|� � W d � n1 sV0 Y W d � n1 st0 Y d S )Nr rK rS ) r% rL r rT �EP_SA_LOADFAILrU r rV r? Z assertRaisesr rD rX )r rL rY �cmr r r �test_find_all_error_message� s �&z/PluginsRegistryTest.test_find_all_error_messagec C s d S r, r r r r r � test_getitem� s z PluginsRegistryTest.test_getitemc C s d S r, r r r r r � test_iter� s z PluginsRegistryTest.test_iterc C s d S r, r r r r r �test_len� s z PluginsRegistryTest.test_lenc C s d| j j_| j j�d� d S )N�bazZbar)r' r9 � return_value�assert_called_once_withr r r r r; � s z PluginsRegistryTest.test_initc C s d S r, r r r r r � test_filter� s z PluginsRegistryTest.test_filterc C s d| j j_d| j j_d S �NTF)r' Zifacesrb r r r r r5 � s z PluginsRegistryTest.test_ifacesc C s d| j j_| j j�� d S )Nra )r' r< rb rc r r r r r> s z PluginsRegistryTest.test_preparec s. g � � fdd�t jD �}| �|�}|�� d S )Nc s$ i | ] }|t jt�� j|�d ��qS ))r< )r r0 � functools�partial�append)�.0�c��orderr r � <dictcomp> s �z:PluginsRegistryTest.test_prepare_order.<locals>.<dictcomp>)�string� ascii_lettersrO r< �r rN rR r rk r �test_prepare_order s � z&PluginsRegistryTest.test_prepare_orderc C s d| j _d| j _d S re )r' Z availabler r r r �test_available s z"PluginsRegistryTest.test_availablec C s d| j _d S )NT)r' Z initializedr r r r �test_find_init s z"PluginsRegistryTest.test_find_initc C s dd� | j _d S )Nc S s dS )NzPluginEntryPoint#mockr ��_r r r �<lambda># � z/PluginsRegistryTest.test_repr.<locals>.<lambda>)r' �__repr__r r r r rH " s z PluginsRegistryTest.test_reprc C s, dd� | j _| j j| j ddi}| �|�}d S )Nc S s dS )NZMockr rt r r r rv ) rw z.PluginsRegistryTest.test_str.<locals>.<lambda>ZfooZBar)r' �__str__r rO rp r r r rG ' s z PluginsRegistryTest.test_strN)r r r rI � classmethodrO r( rZ r] r^ r_ r` r; rd r5 r> rq rr rs rH rG r r r r rJ � s$ rJ �__main__� )!rI rf rn �sys�typingr Zunittestr ZpytestZcertbotr r Zcertbot._internal.pluginsr r r � version_info�importlib.metadata�metadatar" r# r r& rU r[ ZTestCaser rJ r �exit�main�argv�__file__r r r r �<module> sH ��� w plugins/__pycache__/disco_test.cpython-39.pyc 0000644 00000026514 15114562471 0015244 0 ustar 00 a }|�g�, � @ s2 d Z ddlZddlZddlZddlmZ ddlZddlmZ ddlZddl m Z ddl m Z ddl m Z ddl mZ dd l mZ ejd kr�ddlmZ nddlZG d d � d ej�Zejd ddd�Zejdddd�Zed ddd�ZG dd� dej�ZG dd� dej�Ze dk�r.e� e� ej dd� e g �� dS )z*Tests for certbot._internal.plugins.disco.� N)�List)�mock)�errors)� interfaces)�null)� standalone)�webroot)� � c @ s e Zd Zdd� ZdS )�_EntryPointLoadFailc C s t d��d S )NzLoading failure)� RuntimeError��self� r �N/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/disco_test.py�load s z_EntryPointLoadFail.loadN)�__name__� __module__� __qualname__r r r r r r s r �saz2certbot._internal.plugins.standalone:Authenticator�certbot.plugins��name�value�group�wrz/certbot._internal.plugins.webroot:Authenticatorc @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd d � Zd d � Zd S )!�PluginEntryPointTestz;Tests for certbot._internal.plugins.disco.PluginEntryPoint.c C sb t jdddd�| _t jdddd�| _t jdddd�| _t jdd dd�| _d d lm} |t�| _ d S ) N�ep1zp1.ep1:Authenticatorr r zp2.pe2:Authenticator�ep2zp2.foo.ep2:Authenticator�ep3za.ep3:Authenticatorr ��PluginEntryPoint) �importlib_metadata� EntryPointr �ep1primr r � certbot._internal.plugins.discor! �EP_SA� plugin_ep)r r! r r r �setUp/ s, ���� zPluginEntryPointTest.setUpc C sT ddl m} | jd| jd| jd| jdtdi}|�� D ]\}}||�|�ks4J �q4d S )Nr r r r r r ) r% r! r r$ r r r& �itemsZentry_point_to_plugin_name)r r! �names� entry_pointr r r r �,test_entry_point_to_plugin_name_not_prefixedF s �zAPluginEntryPointTest.test_entry_point_to_plugin_name_not_prefixedc C s d| j jv sJ �d S )Nzserver locally)r' � descriptionr r r r �test_descriptionT s z%PluginEntryPointTest.test_descriptionc C s$ t jdd�| j_d| jjks J �d S )NZDesc)r- z Desc (sa))r � MagicMockr' � plugin_clsZdescription_with_namer r r r �test_description_with_nameW s z/PluginEntryPointTest.test_description_with_namec C s$ t jdd�| j_d| jjks J �d S )Nz Long desc)�long_description�r r/ r' r0 r2 r r r r �test_long_description[ s � z*PluginEntryPointTest.test_long_descriptionc C s( t jddgd�| j_d| jjks$J �d S )NzLong desc not foundr- )r- �specr3 r r r r �!test_long_description_nonexistent` s � z6PluginEntryPointTest.test_long_description_nonexistentc C sD | j �tjf�sJ �| j �tjf�r(J �| j �tjtjf�r@J �d S �N)r' �ifacesr � Authenticator� Installerr r r r � test_ifacese s �z PluginEntryPointTest.test_ifacesc C s� | j jdu sJ �| j jdu s J �| j jdu s0J �| j jdu s@J �| j jd u sPJ �| j jtu s`J �d| j jkspJ �| j j t j u s�J �d S )NFr ) r' � initialized�prepared� misconfigured� available�problemr+ r& r r0 r r9 r r r r � test__init__k s z!PluginEntryPointTest.test__init__c C s� t �� }| jj|d�}| jjdu s&J �|j|u s4J �| j�� |u sFJ �|j|u sTJ �| j�d�|u shJ �|j|u svJ �| jjdu s�J �| jjdu s�J �| jjdu s�J �d S )N��configT�{ F) r r/ r' �initr< rC r= r> r? )r rC �pluginr r r � test_initv s z PluginEntryPointTest.test_initc C sJ t �� }| jj|d� | j�� | jjs,J �| jjdu s<J �t| j� d S )NrB F)r r/ r' rE �preparer= r> �str)r rC r r r � test_prepare� s z!PluginEntryPointTest.test_preparec C sl t �� }tj|j_|| j_t| j�� tj�s0J �| jj s<J �| jj sHJ �t| jj tj�s\J �| jj shJ �d S r7 ) r r/ r ZMisconfigurationErrorrH � side_effectr' � _initialized� isinstancer= r> r@ r? �r rF r r r �test_prepare_misconfigured� s z/PluginEntryPointTest.test_prepare_misconfiguredc C sd t �� }tj|j_|| j_t| j�� tj�s0J �| jj du s@J �| jj du sPJ �| jj du s`J �d S �NTF) r r/ r ZNoInstallationErrorrH rK r' rL rM r= r> r? rN r r r � test_prepare_no_installation� s z1PluginEntryPointTest.test_prepare_no_installationc C s` t �� }tj|j_|| j_t| j�� tj�s0J �| jj s<J �| jj du sLJ �| jj du s\J �d S )NF) r r/ r � PluginErrorrH rK r' rL rM r= r> r? rN r r r �!test_prepare_generic_plugin_error� s z6PluginEntryPointTest.test_prepare_generic_plugin_errorc C s2 t | j�}d|v sJ �d|vs"J �d|v s.J �d S )Nr9 r: ZPlugin)rI r' )r �outputr r r �test_str� s z PluginEntryPointTest.test_strc C s dt | j�ksJ �d S )NzPluginEntryPoint#sa)�reprr' r r r r � test_repr� s z PluginEntryPointTest.test_reprN)r r r �__doc__r( r, r. r1 r4 r6 r; rA rG rJ rO rQ rS rU rW r r r r r , s r c @ s� e Zd ZdZedd� �Zdd� Zdd� Zdd � Zd d � Z d d � Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"S )#�PluginsRegistryTestz:Tests for certbot._internal.plugins.disco.PluginsRegistry.c C s ddl m} ||�S )Nr ��PluginsRegistry)r% r[ )�cls�pluginsr[ r r r �_create_new_registry� s z(PluginsRegistryTest._create_new_registryc C sP t �� | _d| j_t| jj_| jj| ji| _| �| j�| _ t j dddd�| _ d S )Nr r zp1.ep1r r ) r r/ r' r � TypeError�__hash__rK r] r^ �regr" r# r r r r r r( � s �zPluginsRegistryTest.setUpc C s ddl m} t�d��r}tgt| jgg|j_tj� t j d��.}t j tj tjtjg|_|�� }W d � n1 sp0 Y W d � n1 s�0 Y |d jt j u s�J �|d jtu s�J �|d jtj u s�J �|d jtu s�J �|d jtju s�J �|d j| ju �sJ �d|v�s J �d S ) Nr rZ �2certbot._internal.plugins.disco.importlib_metadatar r r r zp1:ep1)r% r[ r �patchr& �EP_WRr � entry_pointsrK �objectr" r# r r9 r r r: �find_allr0 r+ )r r[ � mock_metaZ mock_loadr] r r r � test_find_all� s ��Dz!PluginsRegistryTest.test_find_allc C s� ddl m} t�d��j}tgt| jgg|j_| � t j ��}|� � W d � n1 sV0 Y dt |j�v srJ �W d � n1 s�0 Y d S )Nr rZ rb zstandalone' plugin errored)r% r[ r rc �EP_SA_LOADFAILrd r re rK Z assertRaisesr rR rg rI � exception)r r[ rh �cmr r r �test_find_all_error_message� s �&z/PluginsRegistryTest.test_find_all_error_messagec C s | j | jd ksJ �d S �Nr )r' ra r r r r � test_getitem� s z PluginsRegistryTest.test_getitemc C s dgt | j�ksJ �d S rn )�listra r r r r � test_iter� s z PluginsRegistryTest.test_iterc C s, dt | �i ��ksJ �dt | j�ks(J �d S )Nr � )�lenr^ ra r r r r �test_len� s z PluginsRegistryTest.test_lenc C s2 d| j j_dg| j�d�ks J �| j j�d� d S )N�bazZbar)r' rE � return_valuera �assert_called_once_withr r r r rG � s z PluginsRegistryTest.test_initc C s6 | j | j�dd� �ksJ �i | j�dd� �ks2J �d S )Nc S s | j �d�S )N�m�r � startswith�Zp_epr r r �<lambda>� � z1PluginsRegistryTest.test_filter.<locals>.<lambda>c S s | j �d�S )N�bry r{ r r r r| � r} )r] ra �filterr r r r � test_filter� s �z PluginsRegistryTest.test_filterc C sB d| j j_| j| j�� jks J �d| j j_i | j�� jks>J �d S rP )r' r8 rv r] ra �_pluginsr r r r r; � s z PluginsRegistryTest.test_ifacesc C s. d| j j_dg| j�� ks J �| j j�� d S )Nru )r' rH rv ra rw r r r r rJ s z PluginsRegistryTest.test_preparec s@ g � � fdd�t jD �}| �|�}|�� � tt j�ks<J �d S )Nc s$ i | ] }|t jt�� j|�d ��qS ))rH )r r/ � functools�partial�append)�.0�c��orderr r � <dictcomp> s �z:PluginsRegistryTest.test_prepare_order.<locals>.<dictcomp>)�string� ascii_lettersr^ rH �sorted�r r] ra r r� r �test_prepare_order s � z&PluginsRegistryTest.test_prepare_orderc C s> d| j _| j| j�� jks J �d| j _i | j�� jks:J �d S rP )r' r? r] ra r� r r r r �test_available s z"PluginsRegistryTest.test_availablec C s@ | j �t�� �d u sJ �d| j_| j �| j�� �| ju s<J �d S )NT)ra Z find_initr �Mockr' r< rE r r r r �test_find_init s z"PluginsRegistryTest.test_find_initc C s" dd� | j _dt| j�ks J �d S )Nc S s dS )NzPluginEntryPoint#mockr ��_r r r r| # r} z/PluginsRegistryTest.test_repr.<locals>.<lambda>z&PluginsRegistry(PluginEntryPoint#mock))r' �__repr__rV ra r r r r rW " s �z PluginsRegistryTest.test_reprc C sd dt | �i ��ksJ �dd� | j_dt | j�ks4J �| jj| jddi}| �|�}dt |�ks`J �d S )Nz No pluginsc S s dS )Nr� r r� r r r r| ) r} z.PluginsRegistryTest.test_str.<locals>.<lambda>r� ZfooZBarz Bar Mock)rI r^ r' �__str__ra r r� r r r rU ' s z PluginsRegistryTest.test_strN)r r r rX � classmethodr^ r( ri rm ro rq rt rG r� r; rJ r� r� r� rW rU r r r r rY � s$ rY �__main__rr )!rX r� r� �sys�typingr Zunittestr ZpytestZcertbotr r Zcertbot._internal.pluginsr r r � version_info�importlib.metadata�metadatar" r# r r& rd rj ZTestCaser rY r �exit�main�argv�__file__r r r r �<module> sH ��� w plugins/__pycache__/dns_common_test.cpython-39.opt-1.pyc 0000644 00000022637 15114562471 0017240 0 ustar 00 a }|�gJ! � @ s d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddlm Z ddl m Z ddl m Z ddlmZ ddlmZ ddlm Z G d d � d ejej�ZG d d � d ej�ZG d d� dej�ZG dd� dej�Zedk�re�e� ej dd� e g �� dS )z%Tests for certbot.plugins.dns_common.� N)�mock)�errors)�util)�os)� dns_common)�dns_test_commonc s� e Zd ZG dd� dej�ZG dd� d�Z� fdd�Ze� � dd� �Z d d � Z e� � d d � �Z e� � d d� �Z e� � dd� �Ze� � dd� �Zdd� Ze� � dd� �Zdd� Z� ZS )�DNSAuthenticatorTestc @ s, e Zd Ze�� Ze�� Ze�� Zdd� ZdS )z*DNSAuthenticatorTest._FakeDNSAuthenticatorc C s dS )Nz!A fake authenticator for testing.� ��selfr r �S/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/dns_common_test.py� more_info s z4DNSAuthenticatorTest._FakeDNSAuthenticator.more_infoN) �__name__� __module__� __qualname__r Z MagicMockZ_setup_credentials�_perform�_cleanupr r r r r �_FakeDNSAuthenticator s r c @ s e Zd ZdZdZdZdZdS )z DNSAuthenticatorTest._FakeConfigr � N)r r r Zfake_propagation_secondsZfake_config_keyZfake_other_keyZfake_file_pathr r r r � _FakeConfig s r c s( t � �� t�� | _t�| jd�| _d S )NZfake)�super�setUpr r �configr �authr �� __class__r r r % s zDNSAuthenticatorTest.setUpc C s, | j �| jg� | j j�tjtjtj� d S �N) r Zperform�achallr �assert_called_once_withr �DOMAINr �ANY)r Zunused_mock_get_utilityr r r � test_perform, s z!DNSAuthenticatorTest.test_performc C s4 d| j _| j �| jg� | j j�tjtj tj � d S )NT) r Z_attempt_cleanupZcleanupr r r r r r r r r r r � test_cleanup2 s z!DNSAuthenticatorTest.test_cleanupc C s0 |� }t jdft jdff|j_| j�dd� d S )N� �value� other_key)� display_util�OK�input� side_effectr � _configure�r �mock_get_utility� mock_displayr r r � test_prompt9 s �z DNSAuthenticatorTest.test_promptc C sT |� }t jdff|j_t�tj�� | j� dd� W d � n1 sF0 Y d S )N�cr% r# ) r& �CANCELr( r) �pytest�raisesr � PluginErrorr r* r+ r r r �test_prompt_canceledB s z)DNSAuthenticatorTest.test_prompt_canceledc C s` t j�| jd�}t|d��� |� }tjdftjdftj| jftj|ff|j_ | j � dd� d S )N�file.ini�wbr# �not-a-file.ini� file_path) r �path�join�tempdir�open�closer& r' �directory_selectr) r �_configure_file)r r, r9 r- r r r �test_prompt_fileJ s �z%DNSAuthenticatorTest.test_prompt_filec C sT |� }t jdff|j_t�tj�� | j� dd� W d � n1 sF0 Y d S )Nr/ r8 r# ) r& r0 r> r) r1 r2 r r3 r r? r+ r r r �test_prompt_file_canceledX s z.DNSAuthenticatorTest.test_prompt_file_canceledc C sF t j�| jd�}t�ddi|� t| jd|� | j� ddddi�}d S )Nr5 � fake_testr$ �fake_credentials� credentialsr# �test) r r9 r: r; r �write�setattrr r �_configure_credentials)r r9 rD r r r �test_configure_credentials` s z/DNSAuthenticatorTest.test_configure_credentialsc C s� t j�| jd�}t�ddi|� t j�| jd�}t�ddi|� t| jdd� |� }tj dftj d ftj | jftj |ftj |ff|j _ | j � d dd di�}d S ) Nz bad-file.iniZ fake_otherZ other_valuer5 rB r$ rC r# r7 rD rE )r r9 r: r; r rF rG r r& r' r> r) r rH )r r, Zbad_pathr9 r- rD r r r �test_prompt_credentialsi s �z,DNSAuthenticatorTest.test_prompt_credentialsc C s d S r r r r r r �test_auth_hint| s z#DNSAuthenticatorTest.test_auth_hint)r r r r ZDNSAuthenticatorr r r � test_utilZpatch_display_utilr! r" r. r4 r@ rA rI rJ rK � __classcell__r r r r r s$ r c @ s6 e Zd ZG dd� dej�Zdd� Zdd� Zdd� Zd S ) � CredentialsConfigurationTestc s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )z0CredentialsConfigurationTest._MockLoggingHandlerNc s | � � t� j|i |�� d S r )�resetr �__init__)r �args�kwargsr r r rP � s z9CredentialsConfigurationTest._MockLoggingHandler.__init__c C s | j |j�� �|�� � d S r )�messagesZ levelname�lower�appendZ getMessage)r �recordr r r �emit� s z5CredentialsConfigurationTest._MockLoggingHandler.emitc C s t �t�| _dS )z-Allows the handler to be reset between tests.N)� collections� defaultdict�listrS r r r r rO � s z6CredentialsConfigurationTest._MockLoggingHandler.reset)r r r rS rP rW rO rM r r r r �_MockLoggingHandler� s r[ c C s0 t j�| jd�}t�ddd�|� t�|�}d S )N�too-permissive-file.inir$ r �rE �other)r r9 r: r; r rF r �CredentialsConfiguration)r r9 �credentials_configurationr r r �test_valid_file� s z,CredentialsConfigurationTest.test_valid_filec C sJ t j�| jd�}t�tj�� t� |� W d � n1 s<0 Y d S )Nr7 ) r r9 r: r; r1 r2 r r3 r r_ )r r9 r r r �test_nonexistent_file� s z2CredentialsConfigurationTest.test_nonexistent_filec C sD | � � }tj�|� tj�| jd�}t� |dd�� � t� |� d S )Nr\ r6 i� ) r[ r �loggerZ addHandlerr r9 r: r; r Z safe_openr= r_ )r �logr9 r r r �'test_valid_file_with_unsafe_permissions� s zDCredentialsConfigurationTest.test_valid_file_with_unsafe_permissionsN) r r r �loggingZHandlerr[ ra rb re r r r r rN � s rN c sT e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z � Z S )�#CredentialsConfigurationRequireTestc s t � �� tj�| jd�| _d S )Nr5 )r r r r9 r: r; r r r r r � s z)CredentialsConfigurationRequireTest.setUpc C s t �|| j� d S r )r rF r9 )r �valuesr r r �_write� s z*CredentialsConfigurationRequireTest._writec C s0 | � ddd�� t�| j�}|�ddd�� d S )Nr$ r r] r# �ri r r_ r9 �require�r r` r r r � test_valid� s z.CredentialsConfigurationRequireTest.test_validc C s. | � ddd�� t�| j�}|�ddi� d S )Nr$ r r] rE r# rj rl r r r �test_valid_but_extra� s z8CredentialsConfigurationRequireTest.test_valid_but_extrac C s$ | � i � t�| j�}|�i � d S r rj rl r r r �test_valid_empty� s z4CredentialsConfigurationRequireTest.test_valid_emptyc C sT | � i � t�| j�}t�tj�� |�ddi� W d � n1 sF0 Y d S �NrE r# � ri r r_ r9 r1 r2 r r3 rk rl r r r � test_missing� s z0CredentialsConfigurationRequireTest.test_missingc C sX | � ddi� t�| j�}t�tj�� |�ddi� W d � n1 sJ0 Y d S rp rq rl r r r � test_blank� s z.CredentialsConfigurationRequireTest.test_blankc C sX | � ddi� t�| j�}t�tj�� |�ddi� W d � n1 sJ0 Y d S )NZtetsztypo!rE r# rq rl r r r � test_typo� s z-CredentialsConfigurationRequireTest.test_typo) r r r r ri rm rn ro rr rs rt rM r r r r rg � s rg c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�DomainNameGuessTestc C s d S r r r r r r �test_simple_case� s z$DomainNameGuessTest.test_simple_casec C s d S r r r r r r �test_sub_domain� s z#DomainNameGuessTest.test_sub_domainc C s d S r r r r r r �test_second_level_domain� s z,DomainNameGuessTest.test_second_level_domainN)r r r rv rw rx r r r r ru � s ru �__main__r ) �__doc__rX rf �sysZunittestr r1 Zcertbotr r Zcertbot.compatr Zcertbot.displayr& Zcertbot.pluginsr r Z certbot.testsrL ZTempDirTestCaseZBaseAuthenticatorTestr rN rg ZTestCaseru r �exit�main�argv�__file__r r r r �<module> s& m*2 plugins/__pycache__/dns_common_test.cpython-39.pyc 0000644 00000024157 15114562471 0016300 0 ustar 00 a }|�gJ! � @ s d Z ddlZddlZddlZddlZddlmZ ddlZddlmZ ddlm Z ddl m Z ddl m Z ddlmZ ddlmZ ddlm Z G d d � d ejej�ZG d d � d ej�ZG d d� dej�ZG dd� dej�Zedk�re�e� ej dd� e g �� dS )z%Tests for certbot.plugins.dns_common.� N)�mock)�errors)�util)�os)� dns_common)�dns_test_commonc s� e Zd ZG dd� dej�ZG dd� d�Z� fdd�Ze� � dd� �Z d d � Z e� � d d � �Z e� � d d� �Z e� � dd� �Ze� � dd� �Zdd� Ze� � dd� �Zdd� Z� ZS )�DNSAuthenticatorTestc @ s, e Zd Ze�� Ze�� Ze�� Zdd� ZdS )z*DNSAuthenticatorTest._FakeDNSAuthenticatorc C s dS )Nz!A fake authenticator for testing.� ��selfr r �S/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/dns_common_test.py� more_info s z4DNSAuthenticatorTest._FakeDNSAuthenticator.more_infoN) �__name__� __module__� __qualname__r � MagicMockZ_setup_credentials�_perform�_cleanupr r r r r �_FakeDNSAuthenticator s r c @ s e Zd ZdZdZdZdZdS )z DNSAuthenticatorTest._FakeConfigr � N)r r r Zfake_propagation_secondsZfake_config_key�fake_other_key�fake_file_pathr r r r � _FakeConfig s r c s( t � �� t�� | _t�| jd�| _d S )NZfake)�super�setUpr r �configr �authr �� __class__r r r % s zDNSAuthenticatorTest.setUpc C s, | j �| jg� | j j�tjtjtj� d S �N) r Zperform�achallr �assert_called_once_withr �DOMAINr �ANY)r Zunused_mock_get_utilityr r r � test_perform, s z!DNSAuthenticatorTest.test_performc C s4 d| j _| j �| jg� | j j�tjtj tj � d S )NT) r Z_attempt_cleanupZcleanupr r r! r r" r r# r r r r � test_cleanup2 s z!DNSAuthenticatorTest.test_cleanupc C sB |� }t jdft jdff|j_| j�dd� | jjjdks>J �d S )N� �value� other_key)� display_util�OK�input� side_effectr � _configurer r �r �mock_get_utility� mock_displayr r r � test_prompt9 s �z DNSAuthenticatorTest.test_promptc C sT |� }t jdff|j_t�tj�� | j� dd� W d � n1 sF0 Y d S )N�cr( r& ) r) �CANCELr+ r, �pytest�raisesr � PluginErrorr r- r. r r r �test_prompt_canceledB s z)DNSAuthenticatorTest.test_prompt_canceledc C sr t j�| jd�}t|d��� |� }tjdftjdftj| jftj|ff|j_ | j � dd� | j j j |ksnJ �d S )N�file.ini�wbr& �not-a-file.ini� file_path)r �path�join�tempdir�open�closer) r* �directory_selectr, r �_configure_filer r )r r/ r< r0 r r r �test_prompt_fileJ s �z%DNSAuthenticatorTest.test_prompt_filec C sT |� }t jdff|j_t�tj�� | j� dd� W d � n1 sF0 Y d S )Nr2 r; r& ) r) r3 rA r, r4 r5 r r6 r rB r. r r r �test_prompt_file_canceledX s z.DNSAuthenticatorTest.test_prompt_file_canceledc C sX t j�| jd�}t�ddi|� t| jd|� | j� ddddi�}|� d�dksTJ �d S )Nr8 � fake_testr' �fake_credentials� credentialsr& �test) r r< r= r> r �write�setattrr r �_configure_credentials�conf)r r< rG r r r �test_configure_credentials` s z/DNSAuthenticatorTest.test_configure_credentialsc C s� t j�| jd�}t�ddi|� t j�| jd�}t�ddi|� t| jdd� |� }tj dftj d ftj | jftj |ftj |ff|j _ | j � d dd di�}|�d �dks�J �d S ) Nz bad-file.iniZ fake_otherZ other_valuer8 rE r' rF r& r: rG rH )r r< r= r> r rI rJ r r) r* rA r, r rK rL )r r/ Zbad_pathr< r0 rG r r r �test_prompt_credentialsi s �z,DNSAuthenticatorTest.test_prompt_credentialsc C s d| j �t�� g�v sJ �d S )Nz@try increasing --fake-propagation-seconds (currently 0 seconds).)r Z auth_hintr r r r r r �test_auth_hint| s �z#DNSAuthenticatorTest.test_auth_hint)r r r r ZDNSAuthenticatorr r r � test_utilZpatch_display_utilr$ r% r1 r7 rC rD rM rN rO � __classcell__r r r r r s$ r c @ s6 e Zd ZG dd� dej�Zdd� Zdd� Zdd� Zd S ) � CredentialsConfigurationTestc s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )z0CredentialsConfigurationTest._MockLoggingHandlerNc s | � � t� j|i |�� d S r )�resetr �__init__)r �args�kwargsr r r rT � s z9CredentialsConfigurationTest._MockLoggingHandler.__init__c C s | j |j�� �|�� � d S r )�messagesZ levelname�lower�appendZ getMessage)r �recordr r r �emit� s z5CredentialsConfigurationTest._MockLoggingHandler.emitc C s t �t�| _dS )z-Allows the handler to be reset between tests.N)� collections� defaultdict�listrW r r r r rS � s z6CredentialsConfigurationTest._MockLoggingHandler.reset)r r r rW rT r[ rS rQ r r r r �_MockLoggingHandler� s r_ c C sT t j�| jd�}t�ddd�|� t�|�}d|�d�ks>J �d|�d�ksPJ �d S )N�too-permissive-file.inir' r �rH �otherrH �1rb ) r r< r= r> r rI r �CredentialsConfigurationrL )r r< �credentials_configurationr r r �test_valid_file� s z,CredentialsConfigurationTest.test_valid_filec C sJ t j�| jd�}t�tj�� t� |� W d � n1 s<0 Y d S )Nr: ) r r< r= r> r4 r5 r r6 r rd )r r< r r r �test_nonexistent_file� s z2CredentialsConfigurationTest.test_nonexistent_filec C sd | � � }tj�|� tj�| jd�}t� |dd�� � t� |� dt dd� |j d D ��ks`J �d S )Nr` r9 i� r c S s g | ]}|� d �r|�qS )ZUnsafe)� startswith)�.0�_r r r � <listcomp>� � zXCredentialsConfigurationTest.test_valid_file_with_unsafe_permissions.<locals>.<listcomp>Zwarning)r_ r �loggerZ addHandlerr r< r= r> r Z safe_openr@ rd �lenrW )r �logr< r r r �'test_valid_file_with_unsafe_permissions� s zDCredentialsConfigurationTest.test_valid_file_with_unsafe_permissionsN) r r r �loggingZHandlerr_ rf rg rp r r r r rR � s rR c sT e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z � Z S )�#CredentialsConfigurationRequireTestc s t � �� tj�| jd�| _d S )Nr8 )r r r r< r= r> r r r r r � s z)CredentialsConfigurationRequireTest.setUpc C s t �|| j� d S r )r rI r< )r �valuesr r r �_write� s z*CredentialsConfigurationRequireTest._writec C s0 | � ddd�� t�| j�}|�ddd�� d S )Nr' r ra r& �rt r rd r< �require�r re r r r � test_valid� s z.CredentialsConfigurationRequireTest.test_validc C s. | � ddd�� t�| j�}|�ddi� d S )Nr' r ra rH r& ru rw r r r �test_valid_but_extra� s z8CredentialsConfigurationRequireTest.test_valid_but_extrac C s$ | � i � t�| j�}|�i � d S r ru rw r r r �test_valid_empty� s z4CredentialsConfigurationRequireTest.test_valid_emptyc C sT | � i � t�| j�}t�tj�� |�ddi� W d � n1 sF0 Y d S �NrH r& � rt r rd r< r4 r5 r r6 rv rw r r r � test_missing� s z0CredentialsConfigurationRequireTest.test_missingc C sX | � ddi� t�| j�}t�tj�� |�ddi� W d � n1 sJ0 Y d S r{ r| rw r r r � test_blank� s z.CredentialsConfigurationRequireTest.test_blankc C sX | � ddi� t�| j�}t�tj�� |�ddi� W d � n1 sJ0 Y d S )NZtetsztypo!rH r& r| rw r r r � test_typo� s z-CredentialsConfigurationRequireTest.test_typo) r r r r rt rx ry rz r} r~ r rQ r r r r rr � s rr c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�DomainNameGuessTestc C s dt �d�v sJ �d S )N� example.com�r Zbase_domain_name_guessesr r r r �test_simple_case� s �z$DomainNameGuessTest.test_simple_casec C s dt �d�v sJ �d S )Nr� zfoo.bar.baz.example.comr� r r r r �test_sub_domain� s �z#DomainNameGuessTest.test_sub_domainc C s dt �d�v sJ �d S )Nz example.co.ukzfoo.bar.baz.example.co.ukr� r r r r �test_second_level_domain� s �z,DomainNameGuessTest.test_second_level_domainN)r r r r� r� r� r r r r r� � s r� �__main__r ) �__doc__r\ rq �sysZunittestr r4 Zcertbotr r Zcertbot.compatr Zcertbot.displayr) Zcertbot.pluginsr r Z certbot.testsrP ZTempDirTestCaseZBaseAuthenticatorTestr rR rr ZTestCaser� r �exit�main�argv�__file__r r r r �<module> s& m*2 plugins/__pycache__/enhancements_test.cpython-39.opt-1.pyc 0000644 00000004261 15114562471 0017545 0 ustar 00 a }|�g� � @ s� d Z ddlZddlmZ ddlZddlmZ ddlmZ ddl m m Z G dd� de j �Zedkr�e�e�ejd d� eg �� dS ) z Tests for new style enhancements� N)�mock)�null)� enhancementsc sH e Zd ZdZ� fdd�Ze�� dd� �Zdd� Zdd � Z d d � Z � Z S ) �EnhancementTestz@Tests for new style enhancements in certbot.plugins.enhancementsc s t � �� tjtjd�| _d S )N)�spec)�super�setUpr Z MagicMockr ZAutoHSTSEnhancement� mockinstaller��self�� __class__� �U/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/enhancements_test.pyr s zEnhancementTest.setUpc C sd ddd�ddd�g}t �d|��0 d| j_d| j_tt�| j��}W d � n1 sV0 Y d S )NZautohsts� auto_hsts)�nameZcli_destZ somethingelse� somethingz#certbot.plugins.enhancements._INDEXT)r Zpatch�configr r �listr Zenabled_enhancements)r �_Z FAKEINDEXZenabledr r r �%test_enhancement_enabled_enhancements s ��� .z5EnhancementTest.test_enhancement_enabled_enhancementsc C s d| j _d S )NT)r r r r r r �test_are_requested' s z"EnhancementTest.test_are_requestedc C s d| j _t�| j d�}d S )NTr )r r r Z Installer)r Z unsupportedr r r �test_are_supported. s z"EnhancementTest.test_are_supportedc C s, d| j _ddg}d}t�||| j| j � d S )NTz example.comzwww.example.com�lineage)r r r �enabler )r Zdomainsr r r r � test_enable4 s zEnhancementTest.test_enable) �__name__� __module__� __qualname__�__doc__r � test_utilZpatch_display_utilr r r r � __classcell__r r r r r s r �__main__� )r �sysZunittestr ZpytestZcertbot._internal.pluginsr Zcertbot.pluginsr Zcertbot.tests.utilZtests�utilr ZConfigTestCaser r �exit�main�argv�__file__r r r r �<module> s 1 plugins/__pycache__/enhancements_test.cpython-39.pyc 0000644 00000005502 15114562471 0016605 0 ustar 00 a }|�g� � @ s� d Z ddlZddlmZ ddlZddlmZ ddlmZ ddl m m Z G dd� de j �Zedkr�e�e�ejd d� eg �� dS ) z Tests for new style enhancements� N)�mock)�null)� enhancementsc sH e Zd ZdZ� fdd�Ze�� dd� �Zdd� Zdd � Z d d � Z � Z S ) �EnhancementTestz@Tests for new style enhancements in certbot.plugins.enhancementsc s t � �� tjtjd�| _d S )N)�spec)�super�setUpr Z MagicMockr ZAutoHSTSEnhancement� mockinstaller��self�� __class__� �U/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/enhancements_test.pyr s zEnhancementTest.setUpc C s� ddd�ddd�g}t �d|��0 d| j_d| j_tt�| j��}W d � n1 sV0 Y t|�dkspJ �d d � |D �s�J �d d � |D �s�J �d S ) N�autohsts� auto_hsts)�nameZcli_dest� somethingelse� somethingz#certbot.plugins.enhancements._INDEXT� c S s g | ]}|d dkr|�qS )r r r ��.0�ir r r � <listcomp>$ � zIEnhancementTest.test_enhancement_enabled_enhancements.<locals>.<listcomp>c S s g | ]}|d dkr|�qS )r r r r r r r r % r ) r Zpatch�configr r �listr �enabled_enhancements�len)r �_Z FAKEINDEXZenabledr r r �%test_enhancement_enabled_enhancements s ��� .z5EnhancementTest.test_enhancement_enabled_enhancementsc C sd t tt�| j���dks J �t�| j�r,J �d| j_t tt�| j���dksPJ �t�| j�s`J �d S )Nr T� )r r r r r Z are_requestedr r r r r �test_are_requested' s z"EnhancementTest.test_are_requestedc C s@ d| j _t�| j d�}t�| j | j�s*J �t�| j |�r<J �d S )NTr )r r r Z Installerr Z are_supportedr )r Z unsupportedr r r �test_are_supported. s z"EnhancementTest.test_are_supportedc C sT d| j _ddg}d}t�||| j| j � | jjjs6J �| jjjd ||fksPJ �d S )NTz example.comzwww.example.com�lineager )r r r �enabler Zenable_autohstsZcalledZ call_args)r Zdomainsr$ r r r � test_enable4 s zEnhancementTest.test_enable) �__name__� __module__� __qualname__�__doc__r � test_utilZpatch_display_utilr r" r# r& � __classcell__r r r r r s r �__main__r! )r* �sysZunittestr ZpytestZcertbot._internal.pluginsr Zcertbot.pluginsr Zcertbot.tests.utilZtests�utilr+ ZConfigTestCaser r' �exit�main�argv�__file__r r r r �<module> s 1 plugins/__pycache__/manual_test.cpython-39.opt-1.pyc 0000644 00000011715 15114562471 0016354 0 ustar 00 a }|�g � @ s� d Z ddlZddlZddlZddlmZ ddlZddlmZ ddlm Z ddl m Z ddl m Z ddl mZ dd l mZ G d d � d ej�Zed kr�e�e�ejd d� eg �� dS )z*Tests for certbot._internal.plugins.manual� N)�mock)� challenges)�errors)� filesystem)�os)� acme_util)�utilc sh e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z � ZS )�AuthenticatorTestz9Tests for certbot._internal.plugins.manual.Authenticator.c s� t � �� t�� }|�� | _| �|j� tj | _ tj | _ tj | _| j | j | jg| _dD ]}t�tj�| j|�� qVtjdd d ddtj�| jd�tj�| jd�tj�| jd�tj�| jd�tj�| jd�d � | _dd lm} || jd d �| _d S ) N)� config_dir�work_dirZ in_progressr Fr r � backup_dir�temp_checkpoint_dirZ in_progess) Z http01_port�manual_auth_hook�manual_cleanup_hook�noninteractive_mode�validate_hooksr r r r Zin_progress_dir)� AuthenticatorZmanual)�name) �super�setUp� test_utilZpatch_display_util�start�mock_get_displayZ addCleanup�stopr ZHTTP01_A� http_achallZDNS01_A� dns_achallZ DNS01_A_2Z dns_achall_2�achallsr �mkdirr �path�joinZtempdirr Z MagicMock�configZ certbot._internal.plugins.manualr �auth)�selfZget_display_patch�dr �� __class__� �O/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/manual_test.pyr s. �� zAuthenticatorTest.setUpc C sB d| j _t�tj�� | j�� W d � n1 s40 Y d S �NT)r r �pytest�raisesr Z PluginErrorr! �prepare�r" r& r& r' �#test_prepare_no_hook_noninteractive0 s z5AuthenticatorTest.test_prepare_no_hook_noninteractivec C sT t j�t j�| j_d| j_t�t j �� | j � � W d � n1 sF0 Y d S r( ) r r �abspath�sepr r r r) r* r ZHookCommandNotFoundr! r+ r, r& r& r' �test_prepare_bad_hook5 s z'AuthenticatorTest.test_prepare_bad_hookc C s d S �Nr& r, r& r& r' �test_more_info; s z AuthenticatorTest.test_more_infoc C s d S r1 r& r, r& r& r' �test_get_chall_pref> s z%AuthenticatorTest.test_get_chall_prefc C s� d� tj�| j_d� | jjd| j�| jj�d� dd� | j D ��t | j �| j � | j� d �}d� | j j| j j�d�| j �| j j�d� d d� | j D ��t | j �| j � | j � d �}t| �� jj�D ]*\}\}}t�| jj| j | d d �}q�d S ) Na {0} -c "from certbot.compat import os;print(os.environ.get('CERTBOT_DOMAIN'));print(os.environ.get('CERTBOT_TOKEN', 'notoken'));print(os.environ.get('CERTBOT_VALIDATION', 'novalidation'));print(os.environ.get('CERTBOT_ALL_DOMAINS'));print(os.environ.get('CERTBOT_REMAINING_CHALLENGES'));"z{0} {1} {2} {3} {4}Znotoken�,c s s | ] }|j V qd S r1 ��domain��.0�achallr& r& r' � <genexpr>O � z8AuthenticatorTest.test_script_perform.<locals>.<genexpr>� �tokenc s s | ] }|j V qd S r1 r5 r7 r& r& r' r: T r; ZCERTBOT_AUTH_OUTPUT� )�format�sys� executabler r r r6 Z validationZ account_keyr r �len�indexr �chall�encode� enumerater � notification�call_args_list�textwrap�indentr! �env)r" Z dns_expectedZ http_expected�i�args�_Zneedler& r& r' �test_script_performB s& �� �� z%AuthenticatorTest.test_script_performc C s, t | �� jj�D ]\}\}}| j| }qd S r1 )rF r rG rH r )r" rL rM �kwargsr9 r& r& r' �test_manual_performd s z%AuthenticatorTest.test_manual_performc C sh d� tj�| j_d| j_| j�| j� | jD ]6}| j� |g� t |j t j t jf�rRt |j t j �r,q,q,d S )Nz,{0} -c "import sys; sys.stdout.write('foo')"z # cleanup)r? r@ rA r r r r! Zperformr Zcleanup� isinstancerD r ZHTTP01ZDNS01)r" r9 r& r& r' � test_cleanupn s � z AuthenticatorTest.test_cleanupc C s d| j _d S )Nz /bin/true)r r r, r& r& r' �test_auth_hint_hook� s z%AuthenticatorTest.test_auth_hint_hookc C s d S r1 r& r, r& r& r' �test_auth_hint_no_hook� s z(AuthenticatorTest.test_auth_hint_no_hook)�__name__� __module__� __qualname__�__doc__r r- r0 r2 r3 rO rQ rS rT rU � __classcell__r& r& r$ r' r s " r �__main__r< )rY r@ rI Zunittestr r) Zacmer Zcertbotr Zcertbot.compatr r Z certbot.testsr r r ZTempDirTestCaser rV �exit�main�argv�__file__r& r& r& r' �<module> s plugins/__pycache__/manual_test.cpython-39.pyc 0000644 00000015712 15114562471 0015416 0 ustar 00 a }|�g � @ s� d Z ddlZddlZddlZddlmZ ddlZddlmZ ddlm Z ddl m Z ddl m Z ddl mZ dd l mZ G d d � d ej�Zed kr�e�e�ejd d� eg �� dS )z*Tests for certbot._internal.plugins.manual� N)�mock)� challenges)�errors)� filesystem)�os)� acme_util)�utilc sh e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z � ZS )�AuthenticatorTestz9Tests for certbot._internal.plugins.manual.Authenticator.c s� t � �� t�� }|�� | _| �|j� tj | _ tj | _ tj | _| j | j | jg| _dD ]}t�tj�| j|�� qVtjdd d ddtj�| jd�tj�| jd�tj�| jd�tj�| jd�tj�| jd�d � | _dd lm} || jd d �| _d S ) N)� config_dir�work_dirZ in_progressr Fr r � backup_dir�temp_checkpoint_dirZ in_progess) Z http01_port�manual_auth_hook�manual_cleanup_hook�noninteractive_mode�validate_hooksr r r r Zin_progress_dir)� AuthenticatorZmanual)�name) �super�setUp� test_utilZpatch_display_util�start�mock_get_displayZ addCleanup�stopr �HTTP01_A� http_achall�DNS01_A� dns_achallZ DNS01_A_2Z dns_achall_2�achallsr �mkdirr �path�joinZtempdirr Z MagicMock�configZ certbot._internal.plugins.manualr �auth)�selfZget_display_patch�dr �� __class__� �O/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/manual_test.pyr s. �� zAuthenticatorTest.setUpc C sB d| j _t�tj�� | j�� W d � n1 s40 Y d S �NT)r" r �pytest�raisesr Z PluginErrorr# �prepare�r$ r( r( r) �#test_prepare_no_hook_noninteractive0 s z5AuthenticatorTest.test_prepare_no_hook_noninteractivec C sT t j�t j�| j_d| j_t�t j �� | j � � W d � n1 sF0 Y d S r* ) r r �abspath�sepr" r r r+ r, r ZHookCommandNotFoundr# r- r. r( r( r) �test_prepare_bad_hook5 s z'AuthenticatorTest.test_prepare_bad_hookc C s t | j�� t�sJ �d S �N)� isinstancer# Z more_info�strr. r( r( r) �test_more_info; s z AuthenticatorTest.test_more_infoc C s | j �d�tjtjgks J �d S )Nz example.org)r# Zget_chall_prefr �HTTP01�DNS01r. r( r( r) �test_get_chall_pref> s �z%AuthenticatorTest.test_get_chall_prefc C sz d� tj�| j_d� | jjd| j�| jj�d� dd� | j D ��t | j �| j � | j� d �}d� | j j| j j�d�| j �| j j�d� d d� | j D ��t | j �| j � | j � d �}| j�| j �d d � | j D �ks�J �| jj| j d |ks�J �| jj| j d |k�s J �| �� jjt | j �k�s&J �t| �� jj�D ]>\}\}}t�| jj| j | d d �}||d v �s6J ��q6d S )Na {0} -c "from certbot.compat import os;print(os.environ.get('CERTBOT_DOMAIN'));print(os.environ.get('CERTBOT_TOKEN', 'notoken'));print(os.environ.get('CERTBOT_VALIDATION', 'novalidation'));print(os.environ.get('CERTBOT_ALL_DOMAINS'));print(os.environ.get('CERTBOT_REMAINING_CHALLENGES'));"z{0} {1} {2} {3} {4}Znotoken�,c s s | ] }|j V qd S r3 ��domain��.0�achallr( r( r) � <genexpr>O � z8AuthenticatorTest.test_script_perform.<locals>.<genexpr>� �tokenc s s | ] }|j V qd S r3 r; r= r( r( r) r@ T rA c S s g | ]}|� |j��qS r( �Zresponse� account_keyr= r( r( r) � <listcomp>X rA z9AuthenticatorTest.test_script_perform.<locals>.<listcomp>�CERTBOT_AUTH_OUTPUT� r )�format�sys� executabler" r r r< � validationrE r! r �len�indexr �chall�encoder# �perform�envr � notification� call_count� enumerate�call_args_list�textwrap�indent)r$ Z dns_expectedZ http_expected�i�args�_Zneedler( r( r) �test_script_performB s: �� �� ��� z%AuthenticatorTest.test_script_performc C s� | j �| j�dd� | jD �ks"J �| �� jjt| j�ks<J �t| �� jj�D ]>\}\}}| j| }|� |j �|d v szJ �|d du sLJ �qLd S )Nc S s g | ]}|� |j��qS r( rD r= r( r( r) rF f rA z9AuthenticatorTest.test_manual_perform.<locals>.<listcomp>r �wrapF) r# rQ r r rS rT rM rU rV rL rE )r$ rY rZ �kwargsr? r( r( r) �test_manual_performd s � z%AuthenticatorTest.test_manual_performc C s� d� tj�| j_d| j_| j�| j� | jD ]�}| j� |g� t j d dksPJ �t j d |j ksdJ �t |jtjtjf�r�t j d |�|j�ks�J �t |jtj�r�t j d |j�d�ks�J �q,dt j vs,J �q,d S ) Nz,{0} -c "import sys; sys.stdout.write('foo')"z # cleanuprG ZfooZCERTBOT_DOMAINZCERTBOT_VALIDATIONZ CERTBOT_TOKENrC )rI rJ rK r" r r r# rQ r Zcleanupr �environr< r4 rO r r7 r8 rL rE rP )r$ r? r( r( r) � test_cleanupn s$ � � � z AuthenticatorTest.test_cleanupc C s@ d| j _| j�tjtjg�dks$J �| j�tjg�dks<J �d S )Nz /bin/truea& The Certificate Authority failed to verify the DNS TXT records and challenge files created by the --manual-auth-hook. Ensure that this hook is functioning correctly and that it waits a sufficient duration of time for DNS propagation. Refer to "certbot --help manual" and the Certbot User Guide.z�The Certificate Authority failed to verify the challenge files created by the --manual-auth-hook. Ensure that this hook is functioning correctly. Refer to "certbot --help manual" and the Certbot User Guide.)r" r r# � auth_hintr r r r. r( r( r) �test_auth_hint_hook� s ��z%AuthenticatorTest.test_auth_hint_hookc C s@ | j �tjtjg�dks J �| j �tjtjtjg�dks<J �d S )Nz�The Certificate Authority failed to verify the manually created DNS TXT records and challenge files. Ensure that you created these in the correct location, or try waiting longer for DNS propagation on the next attempt.z�The Certificate Authority failed to verify the manually created challenge files. Ensure that you created these in the correct location.)r# rb r r r r. r( r( r) �test_auth_hint_no_hook� s ��z(AuthenticatorTest.test_auth_hint_no_hook)�__name__� __module__� __qualname__�__doc__r r/ r2 r6 r9 r\ r_ ra rc rd � __classcell__r( r( r& r) r s " r �__main__rB )rh rJ rW Zunittestr r+ Zacmer Zcertbotr Zcertbot.compatr r Z certbot.testsr r r ZTempDirTestCaser re �exit�main�argv�__file__r( r( r( r) �<module> s plugins/__pycache__/null_test.cpython-39.opt-1.pyc 0000644 00000001765 15114562471 0016055 0 ustar 00 a }|�g� � @ sf d Z ddlZddlZddlmZ ddlZG dd� dej�Zedkrbe�e� ej dd� e g �� dS )z)Tests for certbot._internal.plugins.null.� N)�mockc @ s e Zd ZdZdd� Zdd� ZdS )� InstallerTestz3Tests for certbot._internal.plugins.null.Installer.c C s" ddl m} |t�� dd�| _d S )Nr )� InstallerZnull)Zconfig�name)Z certbot._internal.plugins.nullr r Z MagicMockZ installer)�selfr � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/null_test.py�setUp s zInstallerTest.setUpc C s d S )Nr )r r r r �test_it s zInstallerTest.test_itN)�__name__� __module__� __qualname__�__doc__r r r r r r r s r �__main__� ) r �sysZunittestr ZpytestZTestCaser r �exit�main�argv�__file__r r r r �<module> s plugins/__pycache__/null_test.cpython-39.pyc 0000644 00000002166 15114562471 0015112 0 ustar 00 a }|�g� � @ sf d Z ddlZddlZddlmZ ddlZG dd� dej�Zedkrbe�e� ej dd� e g �� dS )z)Tests for certbot._internal.plugins.null.� N)�mockc @ s e Zd ZdZdd� Zdd� ZdS )� InstallerTestz3Tests for certbot._internal.plugins.null.Installer.c C s" ddl m} |t�� dd�| _d S )Nr )� InstallerZnull)Zconfig�name)Z certbot._internal.plugins.nullr r Z MagicMock� installer)�selfr � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/null_test.py�setUp s zInstallerTest.setUpc C s< t | j�� t�sJ �g | j�� ks&J �g | j�� ks8J �d S )N)� isinstancer Z more_info�strZ get_all_namesZsupported_enhancements)r r r r �test_it s zInstallerTest.test_itN)�__name__� __module__� __qualname__�__doc__r r r r r r r s r �__main__� ) r �sysZunittestr ZpytestZTestCaser r �exit�main�argv�__file__r r r r �<module> s plugins/__pycache__/selection_test.cpython-39.opt-1.pyc 0000644 00000024560 15114562471 0017066 0 ustar 00 a }|�g�& � @ s d Z ddlZddlmZ ddlZddlmZ ddlZddlmZ ddlm Z ddl m Z ddl mZ dd lmZ dd lmZ G d d � d ej�ZG d d � d ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Zedkr�e� e� ej dd� e g �� dS )z'Tests for letsencrypt.plugins.selection� N)�List)�mock)�errors)� interfaces)�obj)�PluginsRegistry)�utilc @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �ConveniencePickPluginTestz5Tests for certbot._internal.plugins.selection.pick_*.c C s^ t �� }t �� }t �� }t �d��}d|_W d � n1 s>0 Y |�|||d|� d S )Nz/certbot._internal.plugins.selection.pick_plugin�foo� Question?)r �Mock�patch� return_value�assert_called_once_with)�selfZfun�ifaces�config�default�pluginsZmock_p� r �R/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/selection_test.py�_test s �z ConveniencePickPluginTest._testc C s ddl m} | �|tjf� d S )Nr )�pick_authenticator)�#certbot._internal.plugins.selectionr r r � Authenticator)r r r r r �test_authenticator s z,ConveniencePickPluginTest.test_authenticatorc C s ddl m} | �|tjf� d S )Nr )�pick_installer)r r r r � Installer)r r r r r �test_installer# s z(ConveniencePickPluginTest.test_installerc C s$ ddl m} | �|tjtjf� d S )Nr )�pick_configurator)r r r r r r )r r r r r �test_configurator' s �z+ConveniencePickPluginTest.test_configuratorN)�__name__� __module__� __qualname__�__doc__r r r r r r r r r s r c @ s` e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dS )�PickPluginTestz:Tests for certbot._internal.plugins.selection.pick_plugin.c C s. t jdd�| _d | _t �� | _d| _g | _d S )NF)Znoninteractive_moder )r r r r � MagicMock�reg�questionr �r r r r �setUp0 s zPickPluginTest.setUpc C s& ddl m} || j| j| j| j| j�S )Nr )� pick_plugin)r r+ r r r' r( r )r r+ r r r �_call7 s �zPickPluginTest._callc C s d| _ | �� d S �Nr )r r, r) r r r �test_default_provided< s z$PickPluginTest.test_default_providedc C s | � � d S �N)r, r) r r r �test_no_defaultA s z PickPluginTest.test_no_defaultc C s d S r/ r r) r r r �test_no_candidateE s z PickPluginTest.test_no_candidatec C s0 t �� }d|j_d|_d|i| j�� �� j_d S )Nr F�bar� r r& �initr � misconfiguredr' �visibler � available�r � plugin_epr r r � test_singleH s �zPickPluginTest.test_singlec C s0 t �� }d|j_d|_d|i| j�� �� j_d S )Nr Tr2 r3 r8 r r r �test_single_misconfiguredQ s �z(PickPluginTest.test_single_misconfiguredc C sn t �� }d|j_||d�| j�� �� j_t �d��}||_W d � n1 sN0 Y |� ||g| j � d S )Nr �r2 Zbaz�1certbot._internal.plugins.selection.choose_plugin) r r& r4 r r' r6 r r7 r r r( )r r9 � mock_chooser r r � test_multipleZ s � �z PickPluginTest.test_multiplec C sL d d d�| j �� �� j_t�d��}d |_W d � n1 s>0 Y d S )Nr< r= )r' r6 r r7 r r r )r r> r r r �test_choose_plugin_noneg s � z&PickPluginTest.test_choose_plugin_nonec C s$ d| _ t�� }|| jj_| �� d S r- )r r r& r' �filterr r, )r Zfilteredr r r � test_default_must_be_filteredq s z,PickPluginTest.test_default_must_be_filteredN)r! r" r# r$ r* r, r. r0 r1 r: r; r? r@ rB r r r r r% - s r% c @ sP e Zd ZdZdd� Zdd� Ze�� dd� �Ze�� dd � �Z e�� d d � �Z d S ) �ChoosePluginTestz<Tests for certbot._internal.plugins.selection.choose_plugin.c C s\ t �t �tjd�� tjddd�| _d| j_tjddd�| _ d| j � � j _ | j| j g| _ d S )NF�aT)�description_with_namer5 �apache�sZ standalone)� display_objZ set_displayZ FileDisplay�sys�stdoutr r Z mock_apache�nameZ mock_standr4 Z more_infor r r) r r r r* } s ���zChoosePluginTest.setUpc C s ddl m} || jd�S )Nr )� choose_pluginr )r rL r )r rL r r r r, � s zChoosePluginTest._callc C s t jdft jdfg|� j_d S )Nr � �� display_utilZOK�menuZ side_effect�r Z mock_utilr r r �test_selection� s � z ChoosePluginTest.test_selectionc C s t jdfg|� j_d S )NrM rN rQ r r r �test_more_info� s � z ChoosePluginTest.test_more_infoc C s t jdf|� j_d S )Nr )rO ZCANCELrP r rQ r r r �test_no_choice� s z ChoosePluginTest.test_no_choiceN) r! r" r# r$ r* r, � test_utilZpatch_display_utilrR rS rT r r r r rC z s rC c sH e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z � Z S )�GetUnpreparedInstallerTestzGTests for certbot._internal.plugins.selection.get_unprepared_installer.c sl t � �� tjdd�| _dd� | j_tjdd�| _dd� | j_t�� | _| j| jj _ t | j| jd��| _ d S )N�afail�rE c S s | dkS )NrW r �rK r r r �<lambda>� � z2GetUnpreparedInstallerTest.setUp.<locals>.<lambda>rF c S s | dkS �NrF r rY r r r rZ � r[ )rW rF ) �superr* r r �mock_apache_fail_ep� check_nameZmock_apache_epr& Zmock_apache_pluginr4 r r r r) �� __class__r r r* � s � � �z GetUnpreparedInstallerTest.setUpc C s ddl m} || j| j�S )Nr )�get_unprepared_installer)r rb r r )r rb r r r r, � s z GetUnpreparedInstallerTest._callc C s d | j _d S r/ )r � configuratorr) r r r �test_no_installer_defined� s z4GetUnpreparedInstallerTest.test_no_installer_definedc C sJ d| j _ti �| _t�tj�� | �� W d � n1 s<0 Y d S r\ ) r rc r r �pytest�raisesr �PluginSelectionErrorr, r) r r r � test_no_available_installers� s z7GetUnpreparedInstallerTest.test_no_available_installersc C s d| j _| �� }d S r\ )r rc r, )r Z installerr r r �test_get_plugin� s z*GetUnpreparedInstallerTest.test_get_pluginc C sL d| j _dd� | j_t�tj�� | �� W d � n1 s>0 Y d S )NrF c S s | dkS r\ r rY r r r rZ � r[ zNGetUnpreparedInstallerTest.test_multiple_installers_returned.<locals>.<lambda>) r rc r^ r_ re rf r rg r, r) r r r �!test_multiple_installers_returned� s z<GetUnpreparedInstallerTest.test_multiple_installers_returned) r! r" r# r$ r* r, rd rh ri rj � __classcell__r r r` r rV � s rV c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )� TestChooseConfiguratorPluginszJTests for certbot._internal.plugins.selection.choose_configurator_plugins.c s: t j� d�}� fdd�|_t �� }� |_||j_d|_|S )NrX c s | � kS r/ r )�nrY r r rZ � r[ z@TestChooseConfiguratorPlugins._setupMockPlugin.<locals>.<lambda>F)r r r_ r& rK r4 r r5 )r rK Zmock_epZ mock_pluginr rY r �_setupMockPlugin� s �z.TestChooseConfiguratorPlugins._setupMockPluginc C s* ddl m} ddlm} |�| j|�� �S )Nr )� configuration)�cli)�certbotro Zcertbot._internalrp Zprepare_and_parse_argsr �split)r �argsro rp r r r � _parseArgs� s z(TestChooseConfiguratorPlugins._parseArgsc C s( t | �d�| �d�| �d�d��| _d S )N�nginxrF �manual)ru rF rv )r rn r r) r r r r* � s �z#TestChooseConfiguratorPlugins.setUpc C s ddl m} || �|�| jd�S )Nr )�choose_configurator_pluginsZcertonly)r rw rt r )r rs rw r r r � _runWithArgs� s z*TestChooseConfiguratorPlugins._runWithArgsc C s | � d�\}}| � d�\}}d S )Nzcertonly --nginxzcertonly --apache�rx �r �instZauthr r r � test_noninteractive_configurator� s z>TestChooseConfiguratorPlugins.test_noninteractive_configuratorc C sX | � d�\}}| � d�\}}| � d�\}}| � d�\}}| � d�\}}| � d�\}}d S )Nzcertonly -a nginx -i nginxz certonly -a apache -i apachezcertonly -a nginxzcertonly -a nginx -i nonezcertonly -a apachezcertonly -a apache -i nonery rz r r r � test_noninteractive_inst_arg� s z:TestChooseConfiguratorPlugins.test_noninteractive_inst_argN) r! r" r# r$ rn rt r* rx r| r} r r r r rl � s rl �__main__rM ) r$ rI �typingr Zunittestr re rq r r Zcertbot._internal.displayr rH Z certbot._internal.plugins.discor Zcertbot.displayr rO Z certbot.testsrU ZTestCaser r% rC ZConfigTestCaserV rl r! �exit�main�argv�__file__r r r r �<module> s$ M*-B plugins/__pycache__/selection_test.cpython-39.pyc 0000644 00000026022 15114562471 0016122 0 ustar 00 a }|�g�& � @ s d Z ddlZddlmZ ddlZddlmZ ddlZddlmZ ddlm Z ddl m Z ddl mZ dd lmZ dd lmZ G d d � d ej�ZG d d � d ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Zedkr�e� e� ej dd� e g �� dS )z'Tests for letsencrypt.plugins.selection� N)�List)�mock)�errors)� interfaces)�obj)�PluginsRegistry)�utilc @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd S ) �ConveniencePickPluginTestz5Tests for certbot._internal.plugins.selection.pick_*.c C st t �� }t �� }t �� }t �d��,}d|_d||||d�ks@J �W d � n1 sT0 Y |�|||d|� d S )Nz/certbot._internal.plugins.selection.pick_plugin�foo� Question?)r �Mock�patch� return_value�assert_called_once_with)�selfZfun�ifaces�config�default�pluginsZmock_p� r �R/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/selection_test.py�_test s 4 �z ConveniencePickPluginTest._testc C s ddl m} | �|tjf� d S )Nr )�pick_authenticator)�#certbot._internal.plugins.selectionr r r � Authenticator)r r r r r �test_authenticator s z,ConveniencePickPluginTest.test_authenticatorc C s ddl m} | �|tjf� d S )Nr )�pick_installer)r r r r � Installer)r r r r r �test_installer# s z(ConveniencePickPluginTest.test_installerc C s$ ddl m} | �|tjtjf� d S )Nr )�pick_configurator)r r r r r r )r r r r r �test_configurator' s �z+ConveniencePickPluginTest.test_configuratorN)�__name__� __module__� __qualname__�__doc__r r r r r r r r r s r c @ s` e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dS )�PickPluginTestz:Tests for certbot._internal.plugins.selection.pick_plugin.c C s. t jdd�| _d | _t �� | _d| _g | _d S )NF)Znoninteractive_moder )r r r r � MagicMock�reg�questionr �r r r r �setUp0 s zPickPluginTest.setUpc C s& ddl m} || j| j| j| j| j�S )Nr )� pick_plugin)r r+ r r r' r( r )r r+ r r r �_call7 s �zPickPluginTest._callc C s$ d| _ | �� d| jjjks J �d S �Nr � )r r, r' �filter� call_countr) r r r �test_default_provided< s z$PickPluginTest.test_default_providedc C s" | � � d| j�� jjks J �d S �Nr. )r, r' �visibler r0 r) r r r �test_no_defaultA s z PickPluginTest.test_no_defaultc C s | � � d u sJ �d S �N)r, r) r r r �test_no_candidateE s z PickPluginTest.test_no_candidatec C s@ t �� }d|j_d|_d|i| j�� �� j_d| � � ks<J �d S )Nr F�bar� r r& �initr � misconfiguredr' r3 r � availabler, �r � plugin_epr r r � test_singleH s �zPickPluginTest.test_singlec C s@ t �� }d|j_d|_d|i| j�� �� j_| � � d u s<J �d S )Nr Tr7 r8 r< r r r �test_single_misconfiguredQ s �z(PickPluginTest.test_single_misconfiguredc C s~ t �� }d|j_||d�| j�� �� j_t �d��&}||_d| � � ksJJ �W d � n1 s^0 Y |� ||g| j � d S )Nr �r7 Zbaz�1certbot._internal.plugins.selection.choose_plugin) r r& r9 r r' r3 r r; r r, r r( )r r= � mock_chooser r r � test_multipleZ s � . �z PickPluginTest.test_multiplec C s\ d d d�| j �� �� j_t�d��&}d |_| �� d u s:J �W d � n1 sN0 Y d S )Nr@ rA )r' r3 r r; r r r r, )r rB r r r �test_choose_plugin_noneg s � z&PickPluginTest.test_choose_plugin_nonec C s4 d| _ t�� }|| jj_| �� |jjdks0J �d S r- ) r r r& r' r/ r r, r r0 )r Zfilteredr r r � test_default_must_be_filteredq s z,PickPluginTest.test_default_must_be_filteredN)r! r" r# r$ r* r, r1 r4 r6 r> r? rC rD rE r r r r r% - s r% c @ sP e Zd ZdZdd� Zdd� Ze�� dd� �Ze�� dd � �Z e�� d d � �Z d S ) �ChoosePluginTestz<Tests for certbot._internal.plugins.selection.choose_plugin.c C s\ t �t �tjd�� tjddd�| _d| j_tjddd�| _ d| j � � j _ | j| j g| _ d S )NF�aT)�description_with_namer: �apache�sZ standalone)� display_objZ set_displayZ FileDisplay�sys�stdoutr r Z mock_apache�name� mock_standr9 Z more_infor r r) r r r r* } s ���zChoosePluginTest.setUpc C s ddl m} || jd�S )Nr )� choose_pluginr )r rP r )r rP r r r r, � s zChoosePluginTest._callc C sB t jdft jdfg|� j_| j| �� ks,J �|� jjdks>J �d S )Nr r. )� display_util�OK�menu� side_effectrO r, Z notificationr0 �r Z mock_utilr r r �test_selection� s � z ChoosePluginTest.test_selectionc C s( t jdfg|� j_| j| �� ks$J �d S r2 )rQ rR rS rT rO r, rU r r r �test_more_info� s � z ChoosePluginTest.test_more_infoc C s$ t jdf|� j_| �� d u s J �d S )Nr )rQ ZCANCELrS r r, rU r r r �test_no_choice� s z ChoosePluginTest.test_no_choiceN) r! r" r# r$ r* r, � test_utilZpatch_display_utilrV rW rX r r r r rF z s rF c sH e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z � Z S )�GetUnpreparedInstallerTestzGTests for certbot._internal.plugins.selection.get_unprepared_installer.c sl t � �� tjdd�| _dd� | j_tjdd�| _dd� | j_t�� | _| j| jj _ t | j| jd��| _ d S )N�afail�rH c S s | dkS )Nr[ r �rN r r r �<lambda>� � z2GetUnpreparedInstallerTest.setUp.<locals>.<lambda>rI c S s | dkS �NrI r r] r r r r^ � r_ )r[ rI ) �superr* r r �mock_apache_fail_ep� check_nameZmock_apache_epr& �mock_apache_pluginr9 r r r r) �� __class__r r r* � s � � �z GetUnpreparedInstallerTest.setUpc C s ddl m} || j| j�S )Nr )�get_unprepared_installer)r rg r r )r rg r r r r, � s z GetUnpreparedInstallerTest._callc C s d | j _| �� d u sJ �d S r5 )r � configuratorr, r) r r r �test_no_installer_defined� s z4GetUnpreparedInstallerTest.test_no_installer_definedc C sJ d| j _ti �| _t�tj�� | �� W d � n1 s<0 Y d S r` ) r rh r r �pytest�raisesr �PluginSelectionErrorr, r) r r r � test_no_available_installers� s z7GetUnpreparedInstallerTest.test_no_available_installersc C s" d| j _| �� }|| ju s J �d S r` )r rh r, rd )r Z installerr r r �test_get_plugin� s z*GetUnpreparedInstallerTest.test_get_pluginc C sL d| j _dd� | j_t�tj�� | �� W d � n1 s>0 Y d S )NrI c S s | dkS r` r r] r r r r^ � r_ zNGetUnpreparedInstallerTest.test_multiple_installers_returned.<locals>.<lambda>) r rh rb rc rj rk r rl r, r) r r r �!test_multiple_installers_returned� s z<GetUnpreparedInstallerTest.test_multiple_installers_returned) r! r" r# r$ r* r, ri rm rn ro � __classcell__r r re r rZ � s rZ c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )� TestChooseConfiguratorPluginszJTests for certbot._internal.plugins.selection.choose_configurator_plugins.c s: t j� d�}� fdd�|_t �� }� |_||j_d|_|S )Nr\ c s | � kS r5 r )�nr] r r r^ � r_ z@TestChooseConfiguratorPlugins._setupMockPlugin.<locals>.<lambda>F)r r rc r& rN r9 r r: )r rN Zmock_epZ mock_pluginr r] r �_setupMockPlugin� s �z.TestChooseConfiguratorPlugins._setupMockPluginc C s* ddl m} ddlm} |�| j|�� �S )Nr )� configuration)�cli)�certbotrt Zcertbot._internalru Zprepare_and_parse_argsr �split)r �argsrt ru r r r � _parseArgs� s z(TestChooseConfiguratorPlugins._parseArgsc C s( t | �d�| �d�| �d�d��| _d S )N�nginxrI �manual)rz rI r{ )r rs r r) r r r r* � s �z#TestChooseConfiguratorPlugins.setUpc C s ddl m} || �|�| jd�S )Nr )�choose_configurator_pluginsZcertonly)r r| ry r )r rx r| r r r � _runWithArgs� s z*TestChooseConfiguratorPlugins._runWithArgsc C sX | � d�\}}|jdks J �|jdks*J �| � d�\}}|jdksFJ �|jdksTJ �d S )Nzcertonly --nginxrz zcertonly --apacherI �r} rN �r �instZauthr r r � test_noninteractive_configurator� s z>TestChooseConfiguratorPlugins.test_noninteractive_configuratorc C s� | � d�\}}|jdks J �|jdks*J �| � d�\}}|jdksFJ �|jdksTJ �| � d�\}}|d u snJ �|jdks|J �| � d�\}}|d u s�J �|jdks�J �| � d�\}}|d u s�J �|jdks�J �| � d�\}}|d u s�J �|jdks�J �d S ) Nzcertonly -a nginx -i nginxrz z certonly -a apache -i apacherI zcertonly -a nginxzcertonly -a nginx -i nonezcertonly -a apachezcertonly -a apache -i noner~ r r r r � test_noninteractive_inst_arg� s$ z:TestChooseConfiguratorPlugins.test_noninteractive_inst_argN) r! r" r# r$ rs ry r* r} r� r� r r r r rq � s rq �__main__r. ) r$ rL �typingr Zunittestr rj rv r r Zcertbot._internal.displayr rK Z certbot._internal.plugins.discor Zcertbot.displayr rQ Z certbot.testsrY ZTestCaser r% rF ZConfigTestCaserZ rq r! �exit�main�argv�__file__r r r r �<module> s$ M*-B plugins/__pycache__/standalone_test.cpython-39.opt-1.pyc 0000644 00000015706 15114562471 0017233 0 ustar 00 a }|�g� � @ s d Z ddlZddlZddlZddlmZ ddlmZ ddlmZ ddlZddlm Z ddl Z ddl Z ddlZddlmZ ddlmZ dd lmZ dd lmZ dd lmZ dd lmZ G d d� dej�Zdd� Z G dd� dej�Z e dk�r e� e� ej!dd� e"g �� dS )z/Tests for certbot._internal.plugins.standalone.� N)�Dict)�Set)�Tuple)�mock)� challenges)� standalone)� achallenges)�errors)� acme_util)�utilc @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�ServerManagerTestz=Tests for certbot._internal.plugins.standalone.ServerManager.c C s, ddl m} i | _i | _|| j| j�| _d S )Nr )� ServerManager)�$certbot._internal.plugins.standaloner ZcertsZhttp_01_resources�mgr)�selfr � r �S/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/standalone_test.py�setUp s zServerManagerTest.setUpc C s d S �Nr �r r r r � test_init s zServerManagerTest.test_initc C s2 | j jd|d�}|�� d d }| j j|d� d S )Nr ��port�challenge_type� )r )r �run� getsocknames�stop)r r �serverr r r r �_test_run_stop$ s z ServerManagerTest._test_run_stopc C s | � tj� d S r )r r �HTTP01r r r r �test_run_stop_http_01+ s z'ServerManagerTest.test_run_stop_http_01c C sD | j jdtjd�}|�� d d }| j j|tjd�}| j �|� d S )Nr r r )r r r r r r )r r r �server2r r r �test_run_idempotent. s z%ServerManagerTest.test_run_idempotentc C s� t � t j�}|�d� |�� d }t � � }z|�d|f� W n tyN Y n0 t�tj��" | j j |t j d� W d � n1 s�0 Y |� � |� � d S )N�� r r r% )r )�socketZAF_INET6�bind� getsockname�OSError�pytest�raisesr �StandaloneBindErrorr r r r �close)r Z some_serverr Zmaybe_another_serverr r r �test_run_bind_error7 s �$z%ServerManagerTest.test_run_bind_errorN) �__name__� __module__� __qualname__�__doc__r r r r! r# r. r r r r r s r c C s4 t � t jt jd�} | �d� | �� d }| �� |S )z%Gets an open port number from the OS.r r$ r )r& ZAF_INETZ SOCK_STREAMr' r( r- )Z open_socketr r r r � get_open_portH s r3 c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Ze� � d d � �Z e� � d d � �Z dd� Z dd� Z dd� Zdd� Zedd� �Zdd� Zdd� Zd S ) �AuthenticatorTestz=Tests for certbot._internal.plugins.standalone.Authenticator.c C s< ddl m} tjt� d�| _|| jdd�| _t�� | j_d S )Nr )� Authenticator)� http01_portr )�name)r r5 r � MagicMockr3 �config�auth�servers)r r5 r r r r T s zAuthenticatorTest.setUpc C s d S r r r r r r �test_more_info[ s z AuthenticatorTest.test_more_infoc C s d S r r r r r r �test_get_chall_pref^ s z%AuthenticatorTest.test_get_chall_prefc C s& | � � }| j�|�}dd� |D �}d S )Nc S s g | ]}|� |j��qS r )�response� account_key)�.0Zachallr r r � <listcomp>f � z2AuthenticatorTest.test_perform.<locals>.<listcomp>)� _get_achallsr: �perform)r Zachallsr> Zexpectedr r r � test_performb s z AuthenticatorTest.test_performc C s^ |� }t j}t�tj|d�d�}|gdt�� g | jjj_ |j }d|_ | � � | � |� d S )N��errno���� T)rG � EADDRINUSEr r, r r8 r: r; r � side_effect�yesno� return_valuerE �_assert_correct_yesno_call)r �mock_get_utility� mock_utility�encountered_errno�error� mock_yesnor r r � test_perform_eaddrinuse_retryi s z/AuthenticatorTest.test_perform_eaddrinuse_retryc C s\ |� }|j }d|_tj}t�tj�� | �|� W d � n1 sD0 Y | � |� d S )NF) rL rM rG rJ r* r+ r � PluginError� _fail_performrN )r rO rP rS rQ r r r � test_perform_eaddrinuse_no_retryu s (z2AuthenticatorTest.test_perform_eaddrinuse_no_retryc C s |j \}}d S r )Z call_args)r rS Z yesno_argsZ yesno_kwargsr r r rN � s z,AuthenticatorTest._assert_correct_yesno_callc C s@ t j}t�tj�� | �|� W d � n1 s20 Y d S r )rG ZEACCESr* r+ r rU rV �r rQ r r r �test_perform_eacces� s z%AuthenticatorTest.test_perform_eaccesc C s@ t j}t�tj�� | �|� W d � n1 s20 Y d S r )rG ZENOTCONNr* r+ r r, rV rX r r r �$test_perform_unexpected_socket_error� s z6AuthenticatorTest.test_perform_unexpected_socket_errorc C s4 t �tj|d�d�}|| jjj_| j�| � � � d S )NrF rH ) r r, r r8 r: r; r rK rD rC )r rQ rR r r r rV � s z AuthenticatorTest._fail_performc C s. d}t j�t�d��}tjtj||d�}|gS )Ns localhostzrsa512_key.pem)Zchallb�domainr? ) �joseZJWK�load� test_utilZ load_vectorr Z"KeyAuthorizationAnnotatedChallenger ZHTTP01_P)�clsr[ �keyZhttp_01r r r rC � s �z AuthenticatorTest._get_achallsc C s� ddd�| j jj_| j jd �d� | j jd �ddg� | j �dg� | j jj� d� ddi| j jj_| j �dg� | j �dg� | j jj� d� d S ) NZserver1r" )r rI Zchall1Zchall2Zchall3r rI ) r: r; ZrunningrM Zserved�add�updateZcleanupr Zassert_called_once_withZassert_called_withr r r r � test_cleanup� s �� z AuthenticatorTest.test_cleanupc C s d| j _d | j _d| j _d S )NZ80z 127.0.0.1)r9 r6 Zhttp01_addressr r r r �test_auth_hint� s z AuthenticatorTest.test_auth_hintN)r/ r0 r1 r2 r r< r= rE r^ Zpatch_display_utilrT rW rN rY rZ rV � classmethodrC rc rd r r r r r4 Q s" r4 �__main__r )#r2 rG r& �sys�typingr r r Zunittestr Zjosepyr\ ZOpenSSL.cryptoZOpenSSLr* Zacmer r Zacme_standaloneZcertbotr r Z certbot.testsr r r^ ZTestCaser r3 r4 r/ �exit�main�argv�__file__r r r r �<module> s, 1 n plugins/__pycache__/standalone_test.cpython-39.pyc 0000644 00000017042 15114562471 0016267 0 ustar 00 a }|�g� � @ s d Z ddlZddlZddlZddlmZ ddlmZ ddlmZ ddlZddlm Z ddl Z ddl Z ddlZddlmZ ddlmZ dd lmZ dd lmZ dd lmZ dd lmZ G d d� dej�Zdd� Z G dd� dej�Z e dk�r e� e� ej!dd� e"g �� dS )z/Tests for certbot._internal.plugins.standalone.� N)�Dict)�Set)�Tuple)�mock)� challenges)� standalone)� achallenges)�errors)� acme_util)�utilc @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�ServerManagerTestz=Tests for certbot._internal.plugins.standalone.ServerManager.c C s, ddl m} i | _i | _|| j| j�| _d S )Nr )� ServerManager)�$certbot._internal.plugins.standaloner �certs�http_01_resources�mgr)�selfr � r �S/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/standalone_test.py�setUp s zServerManagerTest.setUpc C s( | j j| ju sJ �| j j| ju s$J �d S �N)r r r �r r r r � test_init s zServerManagerTest.test_initc C sZ | j jd|d�}|�� d d }| j �� ||iks6J �| j j|d� | j �� i ksVJ �d S )Nr ��port�challenge_type� )r )r �run� getsocknames�running�stop)r r �serverr r r r �_test_run_stop$ s z ServerManagerTest._test_run_stopc C s | � tj� d S r )r" r �HTTP01r r r r �test_run_stop_http_01+ s z'ServerManagerTest.test_run_stop_http_01c C sx | j jdtjd�}|�� d d }| j j|tjd�}| j �� ||iksJJ �||u sVJ �| j �|� | j �� i kstJ �d S )Nr r r )r r r r# r r r )r r! r �server2r r r �test_run_idempotent. s z%ServerManagerTest.test_run_idempotentc C s� t � t j�}|�d� |�� d }t � � }z|�d|f� W n tyN Y n0 t�tj��" | j j |t j d� W d � n1 s�0 Y | j � � i ks�J �|�� |�� d S )N�� r r r( )r )�socketZAF_INET6�bind� getsockname�OSError�pytest�raisesr �StandaloneBindErrorr r r r# r �close)r Z some_serverr Zmaybe_another_serverr r r �test_run_bind_error7 s �$z%ServerManagerTest.test_run_bind_errorN) �__name__� __module__� __qualname__�__doc__r r r" r$ r& r1 r r r r r s r c C s4 t � t jt jd�} | �d� | �� d }| �� |S )z%Gets an open port number from the OS.r r' r )r) ZAF_INETZ SOCK_STREAMr* r+ r0 )Z open_socketr r r r � get_open_portH s r6 c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Ze� � d d � �Z e� � d d � �Z dd� Z dd� Z dd� Zdd� Zedd� �Zdd� Zdd� Zd S ) �AuthenticatorTestz=Tests for certbot._internal.plugins.standalone.Authenticator.c C s< ddl m} tjt� d�| _|| jdd�| _t�� | j_d S )Nr )� Authenticator)� http01_portr )�name)r r8 r � MagicMockr6 �config�auth�servers)r r8 r r r r T s zAuthenticatorTest.setUpc C s t | j�� t�sJ �d S r )� isinstancer= Z more_info�strr r r r �test_more_info[ s z AuthenticatorTest.test_more_infoc C s | j jd d�tjgksJ �d S )N)�domain)r= Zget_chall_prefr r# r r r r �test_get_chall_pref^ s �z%AuthenticatorTest.test_get_chall_prefc C s2 | � � }| j�|�}dd� |D �}||ks.J �d S )Nc S s g | ]}|� |j��qS r )�response� account_key)�.0Zachallr r r � <listcomp>f � z2AuthenticatorTest.test_perform.<locals>.<listcomp>)� _get_achallsr= �perform)r ZachallsrD Zexpectedr r r � test_performb s z AuthenticatorTest.test_performc C s^ |� }t j}t�tj|d�d�}|gdt�� g | jjj_ |j }d|_ | � � | � |� d S )N��errno���� T)rM � EADDRINUSEr r/ r r; r= r> r � side_effect�yesno� return_valuerK �_assert_correct_yesno_call)r �mock_get_utility� mock_utility�encountered_errno�error� mock_yesnor r r � test_perform_eaddrinuse_retryi s z/AuthenticatorTest.test_perform_eaddrinuse_retryc C s\ |� }|j }d|_tj}t�tj�� | �|� W d � n1 sD0 Y | � |� d S )NF) rR rS rM rP r- r. r � PluginError� _fail_performrT )r rU rV rY rW r r r � test_perform_eaddrinuse_no_retryu s (z2AuthenticatorTest.test_perform_eaddrinuse_no_retryc C s. |j \}}d|d v sJ �|�dd�r*J �d S )Nzin user �defaultT)Z call_args�get)r rY Z yesno_argsZ yesno_kwargsr r r rT � s z,AuthenticatorTest._assert_correct_yesno_callc C s@ t j}t�tj�� | �|� W d � n1 s20 Y d S r )rM ZEACCESr- r. r r[ r\ �r rW r r r �test_perform_eacces� s z%AuthenticatorTest.test_perform_eaccesc C s@ t j}t�tj�� | �|� W d � n1 s20 Y d S r )rM ZENOTCONNr- r. r r/ r\ r` r r r �$test_perform_unexpected_socket_error� s z6AuthenticatorTest.test_perform_unexpected_socket_errorc C s4 t �tj|d�d�}|| jjj_| j�| � � � d S )NrL rN ) r r/ r r; r= r> r rQ rJ rI )r rW rX r r r r\ � s z AuthenticatorTest._fail_performc C s. d}t j�t�d��}tjtj||d�}|gS )Ns localhostzrsa512_key.pem)ZchallbrB rE ) �joseZJWK�load� test_utilZ load_vectorr Z"KeyAuthorizationAnnotatedChallenger ZHTTP01_P)�clsrB �keyZhttp_01r r r rI � s �z AuthenticatorTest._get_achallsc C s� ddd�| j jj_| j jd �d� | j jd �ddg� | j �dg� | j jt� ddhd�ksdJ �| j jj � d� d di| j jj_| j �dg� | j jt� dhd�ks�J �d| j jj j ks�J �| j �dg� | j jt� t� d�ks�J �| j jj � d � d S ) N�server1r% )r rO Zchall1Zchall2Zchall3)rh r% r rO ) r= r> r rS Zserved�add�updateZcleanup�setr Zassert_called_once_withZ call_countZassert_called_withr r r r � test_cleanup� s, � � � � � z AuthenticatorTest.test_cleanupc C sD d| j _d | j _d| j�g �v s$J �d| j _d| j�g �v s@J �d S )NZ80z on port 80z 127.0.0.1zon 127.0.0.1:80)r< r9 Zhttp01_addressr= Z auth_hintr r r r �test_auth_hint� s z AuthenticatorTest.test_auth_hintN)r2 r3 r4 r5 r rA rC rK re Zpatch_display_utilrZ r] rT ra rb r\ � classmethodrI rl rm r r r r r7 Q s" r7 �__main__r )#r5 rM r) �sys�typingr r r Zunittestr Zjosepyrc ZOpenSSL.cryptoZOpenSSLr- Zacmer r Zacme_standaloneZcertbotr r Z certbot.testsr r re ZTestCaser r6 r7 r2 �exit�main�argv�__file__r r r r �<module> s, 1 n plugins/__pycache__/storage_test.cpython-39.opt-1.pyc 0000644 00000012330 15114562471 0016535 0 ustar 00 a }|�gE � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlm Z ddlm Z ddl m Z G dd � d e j�Zed kr�e�e�ejd d� eg �� dS ) z/Tests for certbot.plugins.storage.PluginStorage� N)�mock)�errors)� filesystem)�os)�utilc s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�PluginStorageTestz.Test for certbot.plugins.storage.PluginStoragec s` t � �� tj| _t�| jj� t � d��" | j| jdd�| _ W d � n1 sR0 Y d S )N�certbot.reverter.util� mockplugin)�config�name) �super�setUp� test_utilZDummyInstaller� plugin_clsr �mkdirr � config_dirr �patch�plugin��self�� __class__� �P/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/storage_test.pyr s zPluginStorageTest.setUpc C s* t tj�| jjd�d��}|�d� W d � n1 s80 Y t�� }t |_ tj�| jjd�| j j _ t�d|��� tjddd��r t�d��H t�tj�� | j j �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 �s 0 Y d S ) N�.pluginstorage.json�wZdummyz builtins.openz certbot.compat.os.path.isfileT)Z return_valuer )�openr �path�joinr r �writer � mock_open�IOError� side_effectr �storage� _storagepathr �pytest�raisesr �PluginStorageError�_load)r �fhr r r r �test_load_errors_cant_read s" ��( � z,PluginStorageTest.test_load_errors_cant_readc C s� t tj�| jjd�d��}|�d� W d � n1 s80 Y t�d��~}t�d�� | � | jd�}W d � n1 s|0 Y t � t �� |j �d� W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr r � z$certbot.plugins.storage.logger.debugr r �value)r r r r r r r r r r r% r& �KeyErrorr# �fetch)r r) �mock_logZ nocontentr r r �test_load_errors_empty' s ( , *z(PluginStorageTest.test_load_errors_emptyc C s� t tj�| jjd�d��}|�d� W d � n1 s80 Y t�d���}t�d�� | � | jd�}W d � n1 s|0 Y t � t j �� |j�d� W d � n1 s�0 Y W d � n1 s�0 Y d S )Nr r z invalid json�$certbot.plugins.storage.logger.errorr r r, )r r r r r r r r r r r% r& r Z PluginErrorr# r. )r r) r/ Z corruptedr r r �test_load_errors_corrupted3 s ��( ,*z,PluginStorageTest.test_load_errors_corruptedc C s� t �d��h}d| jj_d| jj_| j| jj_t� t j �� | jj� � W d � n1 sZ0 Y W d � n1 sx0 Y d S )Nr1 T� /tmp/whatever) r r r r# � _initializedr$ r �_datar% r& r r' �save)r r/ r r r � test_save_errors_cant_serialize> s *z1PluginStorageTest.test_save_errors_cant_serializec C s� t �� }t|_t �d|��� t �d��j}ddi| jj_d| jj_d| jj_ t � t j �� | jj�� W d � n1 sx0 Y W d � n1 s�0 Y W d � n1 s�0 Y d S )Nz certbot.compat.filesystem.openr1 Zvalid�dataTr3 )r r r! r" r r r# r5 r4 r$ r% r& r r' r6 )r r r/ r r r �%test_save_errors_unable_to_write_fileH s *z7PluginStorageTest.test_save_errors_unable_to_write_filec C sn t �d��P t�tj��$ | �| jd�j� � W d � n1 sB0 Y W d � n1 s`0 Y d S )Nr �x) r r r% r& r r' r r r# r6 r r r r �test_save_uninitializedT s z)PluginStorageTest.test_save_uninitializedc C s� t �d��, | �| jd�}| �| jd�}W d � n1 s<0 Y |j�dd� t�t�� |j� d� W d � n1 s�0 Y t�t�� |j� d� W d � n1 s�0 Y d S )Nr �first�secondZ first_keyZ first_value) r r r r r# �putr% r& r- r. )r Zplugin1Zplugin2r r r �test_namespace_isolationY s , * *z*PluginStorageTest.test_namespace_isolationc C s� | j j�dd� | j j�� t�d�� | �| jd�}W d � n1 sJ0 Y tt j � | jj d�d��}|� � }W d � n1 s�0 Y t�|�}d S )NZtestkeyZ testvaluer r r �r)r r# r> r6 r r r r r r r r r �read�json�loads)r Zanotherr) ZpsdataZpsjsonr r r �test_saved_stated s ,��& z"PluginStorageTest.test_saved_state)�__name__� __module__� __qualname__�__doc__r r* r0 r2 r7 r9 r; r? rD � __classcell__r r r r r s r �__main__� )rH rB �sysZunittestr r% Zcertbotr Zcertbot.compatr r Z certbot.testsr r ZConfigTestCaser rE �exit�main�argv�__file__r r r r �<module> s g plugins/__pycache__/storage_test.cpython-39.pyc 0000644 00000013057 15114562471 0015605 0 ustar 00 a }|�gE � @ s� d Z ddlZddlZddlmZ ddlZddlmZ ddlm Z ddlm Z ddl m Z G dd � d e j�Zed kr�e�e�ejd d� eg �� dS ) z/Tests for certbot.plugins.storage.PluginStorage� N)�mock)�errors)� filesystem)�os)�utilc s` e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z � Z S )�PluginStorageTestz.Test for certbot.plugins.storage.PluginStoragec s` t � �� tj| _t�| jj� t � d��" | j| jdd�| _ W d � n1 sR0 Y d S )N�certbot.reverter.util� mockplugin)�config�name) �super�setUp� test_utilZDummyInstaller� plugin_clsr �mkdirr � config_dirr �patch�plugin��self�� __class__� �P/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/storage_test.pyr s zPluginStorageTest.setUpc C s* t tj�| jjd�d��}|�d� W d � n1 s80 Y t�� }t |_ tj�| jjd�| j j _ t�d|��� tjddd��r t�d��H t�tj�� | j j �� W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 s�0 Y W d � n1 �s 0 Y d S ) N�.pluginstorage.json�wZdummyz builtins.openz certbot.compat.os.path.isfileT)Z return_valuer )�openr �path�joinr r �writer � mock_open�IOError� side_effectr �storage� _storagepathr �pytest�raisesr �PluginStorageError�_load)r �fhr r r r �test_load_errors_cant_read s" ��( � z,PluginStorageTest.test_load_errors_cant_readc C s� t tj�| jjd�d��}|�d� W d � n1 s80 Y t�d���}t�d�� | � | jd�}W d � n1 s|0 Y t � t �� |j �d� W d � n1 s�0 Y |js�J �d|jd d v s�J �W d � n1 s�0 Y d S ) Nr r � z$certbot.plugins.storage.logger.debugr r �valuezno values loadedr )r r r r r r r r r r r% r& �KeyErrorr# �fetchZcalled� call_args)r r) �mock_logZ nocontentr r r �test_load_errors_empty' s ( , * z(PluginStorageTest.test_load_errors_emptyc C s� t tj�| jjd�d��}|�d� W d � n1 s80 Y t�d���}t�d�� | � | jd�}W d � n1 s|0 Y t � t j �� |j�d� W d � n1 s�0 Y d|jd d v s�J �W d � n1 s�0 Y d S ) Nr r z invalid json�$certbot.plugins.storage.logger.errorr r r, z is corruptedr )r r r r r r r r r r r% r& r Z PluginErrorr# r. r/ )r r) r0 Z corruptedr r r �test_load_errors_corrupted3 s ��( ,*z,PluginStorageTest.test_load_errors_corruptedc C s� t �d��~}d| jj_d| jj_| j| jj_t� t j �� | jj� � W d � n1 sZ0 Y d|j d d v szJ �W d � n1 s�0 Y d S )Nr2 T� /tmp/whateverzCould not serializer )r r r r# � _initializedr$ r �_datar% r& r r' �saver/ )r r0 r r r � test_save_errors_cant_serialize> s *z1PluginStorageTest.test_save_errors_cant_serializec C s� t �� }t|_t �d|��� t �d���}ddi| jj_d| jj_d| jj_ t � t j �� | jj�� W d � n1 sx0 Y d|jd d v s�J �W d � n1 s�0 Y W d � n1 s�0 Y d S ) Nz certbot.compat.filesystem.openr2 Zvalid�dataTr4 zCould not writer )r r r! r" r r r# r6 r5 r$ r% r& r r' r7 r/ )r r r0 r r r �%test_save_errors_unable_to_write_fileH s *z7PluginStorageTest.test_save_errors_unable_to_write_filec C sn t �d��P t�tj��$ | �| jd�j� � W d � n1 sB0 Y W d � n1 s`0 Y d S )Nr �x) r r r% r& r r' r r r# r7 r r r r �test_save_uninitializedT s z)PluginStorageTest.test_save_uninitializedc C s� t �d��, | �| jd�}| �| jd�}W d � n1 s<0 Y |j�dd� t�t�� |j� d� W d � n1 s�0 Y t�t�� |j� d� W d � n1 s�0 Y |j� d�dks�J �d S )Nr �first�secondZ first_keyZ first_value) r r r r r# �putr% r& r- r. )r Zplugin1Zplugin2r r r �test_namespace_isolationY s , * *z*PluginStorageTest.test_namespace_isolationc C s� | j j�dd� | j j�� t�d�� | �| jd�}W d � n1 sJ0 Y |j�d�dkshJ �t t j � | jj d�d��}|�� }W d � n1 s�0 Y t�|�}d|�� v s�J �t|�dks�J �|d d dks�J �d S )NZtestkeyZ testvaluer r r �r� )r r# r? r7 r r r r r. r r r r r �read�json�loads�keys�len)r Zanotherr) ZpsdataZpsjsonr r r �test_saved_stated s ,��& z"PluginStorageTest.test_saved_state)�__name__� __module__� __qualname__�__doc__r r* r1 r3 r8 r: r< r@ rH � __classcell__r r r r r s r �__main__rB )rL rD �sysZunittestr r% Zcertbotr Zcertbot.compatr r Z certbot.testsr r ZConfigTestCaser rI �exit�main�argv�__file__r r r r �<module> s g plugins/__pycache__/util_test.cpython-39.opt-1.pyc 0000644 00000002251 15114562471 0016047 0 ustar 00 a }|�g� � @ sr d Z ddlZddlmZ ddlZddlmZ dd� Ze�d�dd � �Z e d krne� e� ej d d� eg �� dS ) z Tests for certbot.plugins.util.� N)�mock)�osc C s ddl m} d S )Nr �� get_prefixes)�certbot.plugins.utilr r � r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/util_test.py�test_get_prefix s r z!certbot.plugins.util.logger.debugc C s� ddl m} ddi}tj�d|��@ t�d��}d|_W d � n1 sJ0 Y W d � n1 sh0 Y tjdkr�dd i}tj�d|�� |d � W d � n1 s�0 Y d S ) Nr )� path_surgery�PATHz0/usr/local/bin:/bin/:/usr/sbin/:/usr/local/sbin/z os.environzcertbot.util.exe_existsT�ntz/tmp/Zthingy)r r r �patch�dictZ return_valuer �name)Z mock_debugr Zall_pathZ mock_existsZno_pathr r r �test_path_surgery s < r �__main__� )�__doc__�sysZunittestr ZpytestZcertbot.compatr r r r �__name__�exit�main�argv�__file__r r r r �<module> s plugins/__pycache__/util_test.cpython-39.pyc 0000644 00000003302 15114562471 0015106 0 ustar 00 a }|�g� � @ sr d Z ddlZddlmZ ddlZddlmZ dd� Ze�d�dd � �Z e d krne� e� ej d d� eg �� dS ) z Tests for certbot.plugins.util.� N)�mock)�osc C sV ddl m} | d�dd� dD �ks&J �| d�tj�d�gks@J �| d�dgksRJ �d S ) Nr �� get_prefixes�/a/b/cc S s g | ]}t j�|��qS � )r �path�normpath)�.0r r r �M/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/util_test.py� <listcomp> � z#test_get_prefix.<locals>.<listcomp>)r z/a/bz/a�/r �a)�certbot.plugins.utilr r r r r r r r �test_get_prefix s �r z!certbot.plugins.util.logger.debugc C sR ddl m} ddi}tj�d|��t t�d��J}d|_|d�du sFJ �| jdksTJ �tjd |d ksjJ �W d � n1 s~0 Y W d � n1 s�0 Y tj d k�rNdd i}tj�d|��t |d � | jtj d kr�d nd ks�J �d| j d d v �sJ �dtjd v �sJ �dtjd v �s.J �W d � n1 �sD0 Y d S )Nr )� path_surgery�PATHz0/usr/local/bin:/bin/:/usr/sbin/:/usr/local/sbin/z os.environzcertbot.util.exe_existsTZeg�ntz/tmp/Zthingy� � zFailed to findz/usr/local/binz/tmp) r r r �patch�dictZ return_valueZ call_countr �environ�nameZ call_args)Z mock_debugr Zall_pathZ mock_existsZno_pathr r r �test_path_surgery s R r �__main__r )�__doc__�sysZunittestr ZpytestZcertbot.compatr r r r �__name__�exit�main�argv�__file__r r r r �<module> s plugins/__pycache__/webroot_test.cpython-39.opt-1.pyc 0000644 00000030021 15114562471 0016547 0 ustar 00 a }|�g< � @ s( d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl Z ddl Z ddlmZ ddlmZ ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ dd lmZ e j � e� d ��Z G d d� de j �Z!G dd� de j �Z"e#dk�r$e�$e �%ej&dd� e'g �� dS )z,Tests for certbot._internal.plugins.webroot.� )�print_functionN)�mock)� challenges)� achallenges)�errors)� filesystem)�os)�util)� acme_utilzrsa512_key.pemc @ sN e Zd ZdZejejded�Z dd� Z dd� Z dd � Z d d � Z d d � Ze�� dd� �Zejejdd�e�� dd� ��Zejejdd�e�� dd� ��Zejejdd�dd� �Ze�� dd� �Ze�� dd� �Ze�� d d � �Zd d � Z d d!� Z e � d"�d#d$� �Z e�� d%d&� �Z!d'd(� Z"d)d*� Z#d+d,� Z$d-d.� Z%d/d0� Z&e � d1�d2d3� �Z'd4S )5�AuthenticatorTestz:Tests for certbot._internal.plugins.webroot.Authenticator.� thing.com�Zchallb�domainZ account_keyc C s� ddl m} t�� | _tj�| jd�| _t� | j� tj�| jd�| _ tj�| jdd�| _ tj�| j d�| _ t j| jd| jid�| _|| jd�| _d S ) Nr �� Authenticator�webroot� .well-known�acme-challengeZ:ZXZhR3hmQURzNnBTUmIyTEF2OUlaZjE3RHQzanV4R0orUEN0OTJ3citvQQr )� webroot_path� webroot_map)�!certbot._internal.plugins.webrootr �tempfile�mkdtempZ workspacer �path�joinr �mkdir�partial_root_challenge_path�root_challenge_path�validation_pathr � MagicMock�config�auth��selfr � r$ �P/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/webroot_test.py�setUp# s$ ����zAuthenticatorTest.setUpc C s t �| j� d S �N)�shutil�rmtreer �r# r$ r$ r% �tearDown8 s zAuthenticatorTest.tearDownc C s | j �� }d S r' )r! � more_info)r# r, r$ r$ r% �test_more_info; s z AuthenticatorTest.test_more_infoc C s t �� }| j�|� d S r' )r r r! Zadd_parser_arguments)r# �addr$ r$ r% �test_add_parser_arguments@ s z+AuthenticatorTest.test_add_parser_argumentsc C s | j �� d S r' )r! �preparer* r$ r$ r% � test_prepareE s z AuthenticatorTest.test_preparec sL g | j _d| ji| j _|� }tjdf|j_| j� | j g� |jj D ]� qBd S )N�otherthing.com� ) r r r r � display_util�OK�menu� return_valuer! �perform�achall�call_args_list�r# �mock_get_utility� mock_displayr$ ��callr% �test_webroot_from_listH s z(AuthenticatorTest.test_webroot_from_listzTest specific to Windows)�reasonc C s8 |� }t jdf|j_| j�| jg� | j�| jg� d S )Nr3 )r4 r5 r6 r7 r! r8 r9 �cleanupr; r$ r$ r% �(test_webconfig_file_generate_and_cleanupY s z:AuthenticatorTest.test_webconfig_file_generate_and_cleanupc C s� |� }t jdf|j_tj�| jdd�}t�|� tj�|d�}t |d��}|� d� W d � n1 sh0 Y | j � | j g� ddlm} |�|�}dd lm} d S ) Nr3 r r � web.config�w� somethingr )� crypto_util)�_WEB_CONFIG_SHA256SUMS)r4 r5 r6 r7 r r r r �makedirs�open�writer! r8 r9 �certbotrG Z sha256sumr rH ) r# r< r= �challenge_path�webconfig_path�filerG Zwebconfig_hashrH r$ r$ r% �$test_foreign_webconfig_file_handlingd s ( z6AuthenticatorTest.test_foreign_webconfig_file_handlingc C s� t jt�tjdd�d�dtd�}| j| jj d< t j� | jdd�}t � |� t j� |d�}t|d ��}|�d � W d � n1 s�0 Y | j�| j|g� d S ) N� bingo��token�pendingzsecond-thing.comr r r rD rE rF )r �"KeyAuthorizationAnnotatedChallenger �chall_to_challbr �HTTP01�KEYr r r r r r rI rJ rK r! r8 r9 )r# Zachall_2rM rN rO r$ r$ r% �'test_foreign_webconfig_multiple_domainsv s � (z9AuthenticatorTest.test_foreign_webconfig_multiple_domainsc sz g | j _d| ji| j _|� }tjdff|j_t� t j �� | j � | jg� W d � n1 s^0 Y |jjD ]� qpd S )Nr2 ���)r r r r r4 �CANCELr6 � side_effect�pytest�raisesr � PluginErrorr! r8 r9 r: r; r$ r> r% �&test_webroot_from_list_help_and_cancel� s . z8AuthenticatorTest.test_webroot_from_list_help_and_cancelc C s� g | j _d| ji| j _|� }tjdf|j_t� d��8}tj dftj| jff|_ | j � | jg� W d � n1 sr0 Y d S )N� something.comr �'certbot.display.ops.validated_directoryrZ )r r r r r4 r5 r6 r7 r �patchr[ r\ r! r8 r9 �r# r< r= �mr$ r$ r% �test_new_webroot� s �.z"AuthenticatorTest.test_new_webrootc C s� g | j _i | j _|� }tjdf|j_t�d��X}tj df|_t � t j �� | j�| jg� W d � n1 sn0 Y W d � n1 s�0 Y d S )Nr rb rZ )r r r r4 r5 r6 r7 r rc r[ r] r^ r r_ r! r8 r9 rd r$ r$ r% �!test_new_webroot_empty_map_cancel� s z3AuthenticatorTest.test_new_webroot_empty_map_cancelc C sL d | j _i | j _t�tj�� | j�g � W d � n1 s>0 Y d S r' ) r r r r] r^ r r_ r! r8 r* r$ r$ r% �test_perform_missing_root� s z+AuthenticatorTest.test_perform_missing_rootc C s� t j�| jd�| j_t j�| jd�}t|d��}|�d� W d � n1 sN0 Y t�| jd� z6t|d�� W d � n1 s�0 Y t d� W nJ t y� t � t j�� | j�g � W d � n1 s�0 Y Y n0 t�| jd� d S ) NZnullZrndrE Zthingimyr �rz9Warning, running tests as root skips permissions tests...i� )r r r r! � full_pathrJ rK r �chmod�print�OSErrorr] r^ r r_ r8 )r# Zpermission_canary�fr$ r$ r% �"test_perform_reraises_other_errors� s ( 0z4AuthenticatorTest.test_perform_reraises_other_errorszJcertbot._internal.plugins.webroot.filesystem.copy_ownership_and_apply_modec C s" t tjd�|_| j�| jg� d S )N�msg)rm �errno�EACCESr\ r! r8 r9 )r# Zmock_ownershipr$ r$ r% �test_failed_chown� s z#AuthenticatorTest.test_failed_chownc C s� t �� }g | j_d| ji| j_|� }tjdftj|ff|j_ t j t j dtd�}t�d��*}tj|f|_| j�|g� W d � n1 s�0 Y d S )Nz whatever.comr ra r rb )r r r r r r r4 r5 r6 r\ r rU r �HTTP01_PrX r rc r7 r! r8 )r# r< Z new_webrootr= r9 re r$ r$ r% �#test_perform_new_webroot_not_in_map� s �� ,z5AuthenticatorTest.test_perform_new_webroot_not_in_mapc C sN | j �� | j �| jg� t�| j�D ]"\}}}|D ]}tj�||�}q4q&d S r' )r! r0 r8 r9 r �walkr r )r# �dirpath�dirnames�_Z directoryrj r$ r$ r% �test_perform_permissions� s z*AuthenticatorTest.test_perform_permissionsc C s` | j �� | j �| jg�}t| j��}|�� }W d � n1 sB0 Y | j �| jg� d S r' )r! r0 r8 r9 rJ r �readrB )r# Z responsesZ validation_fZ validationr$ r$ r% �test_perform_cleanup� s &z&AuthenticatorTest.test_perform_cleanupc C s: t �| j� | j�� | j�| jg� | j�| jg� d S r' )r r r r! r0 r8 r9 rB r* r$ r$ r% �"test_perform_cleanup_existing_dirs� s z4AuthenticatorTest.test_perform_cleanup_existing_dirsc C sn t jt�tjdd�d�dtd�}d}t�| j � | j � � | j � || j g� | j �| j g� | j �|g� d S )NrQ rR rT r r ZYmluZ28)r rU r rV r rW rX r r r r! r0 r8 r9 rB )r# Z bingo_achallZbingo_validation_pathr$ r$ r% �(test_perform_cleanup_multiple_challenges s �� z:AuthenticatorTest.test_perform_cleanup_multiple_challengesc C sR | j �� | j �| jg� tj�| jd�}t� |� | j � | jg� t� |� d S )NZleftover) r! r0 r8 r9 r r r r r r rB �rmdir)r# Z leftover_pathr$ r$ r% �test_cleanup_leftovers s z(AuthenticatorTest.test_cleanup_leftoverszcertbot.compat.os.rmdirc C sB | j �� | j �| jg� t� }tj|_||_| j �| jg� d S r' ) r! r0 r8 r9 rm rq rr r\ rB )r# Z mock_rmdirZos_errorr$ r$ r% �test_cleanup_failure$ s z&AuthenticatorTest.test_cleanup_failureN)(�__name__� __module__� __qualname__�__doc__r rU r rt rX r9 r& r+ r- r/ r1 � test_utilZpatch_display_utilr@ �unittestZskipIfr Z POSIX_MODErC rP rY r` rf rg rh ro r rc rs ru rz r| r} r~ r� r� r$ r$ r$ r% r sL � r c @ sZ e Zd ZdZejejded�Z dd� Z dd� Z dd � Z d d � Z d d � Zdd� Zdd� ZdS )�WebrootActionTestz#Tests for webroot argparse actions.r r c C sF ddl m} t�� | _t�� | _| jjdddg d� |� | jd� d S )Nr r z-dz --domains�append)�action�defaultr ) r r r r r �argparse�ArgumentParser�parser� add_argumentZinject_parser_optionsr" r$ r$ r% r& 8 s �zWebrootActionTest.setUpc C s | j �dt�d| ji�g�}d S )Nz --webroot-mapr )r� � parse_args�json�dumpsr )r# �argsr$ r$ r% �test_webroot_map_action@ s �z)WebrootActionTest.test_webroot_map_actionc C s, | j �d�| jj| j��� �}| �|�}d S )Nz -d {0} -w {1})r� r� �formatr9 r r �split�_get_config_after_perform�r# r� r r$ r$ r% �test_domain_before_webrootE s � z,WebrootActionTest.test_domain_before_webrootc C s| t �tj�� | j�d�� � W d � n1 s20 Y t �tj�� | j�d�� � W d � n1 sn0 Y d S )Nz-d foo -w bar -w bazz-d foo -w bar -d baz -w qux)r] r^ r r_ r� r� r� r* r$ r$ r% � test_domain_before_webroot_errorK s .z2WebrootActionTest.test_domain_before_webroot_errorc C s2 | j �d�| j| jjt�� ��� �}| � |�}d S �Nz-w {0} -d {1} -w {2} -d bar) r� r� r� r r9 r r r r� r� r� r$ r$ r% �test_multiwebrootQ s � z#WebrootActionTest.test_multiwebrootc C s, t �� }| j�d�| j| jj|��� �}d S r� ) r r r� r� r� r r9 r r� )r# Zother_webroot_pathr� r$ r$ r% �(test_webroot_map_partial_without_performX s � z:WebrootActionTest.test_webroot_map_partial_without_performc C s* ddl m} ||d�}|�| jg� |jS )Nr r r )r r r8 r9 r )r# r r r! r$ r$ r% r� e s z+WebrootActionTest._get_config_after_performN)r� r� r� r� r rU r rt rX r9 r& r� r� r� r� r� r� r$ r$ r$ r% r� 2 s � r� �__main__r3 )(r� Z __future__r r� rq r� r( �sysr r� r ZjosepyZjoser] Zacmer rL r r Zcertbot.compatr r Zcertbot.displayr r4 Z certbot.testsr r� ZJWKRSA�loadZ load_vectorrX ZTestCaser r� r� �exit�main�argv�__file__r$ r$ r$ r% �<module> s4 : plugins/__pycache__/webroot_test.cpython-39.pyc 0000644 00000033227 15114562471 0015623 0 ustar 00 a }|�g< � @ s( d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl Z ddl Z ddlmZ ddlmZ ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ dd lmZ e j � e� d ��Z G d d� de j �Z!G dd� de j �Z"e#dk�r$e�$e �%ej&dd� e'g �� dS )z,Tests for certbot._internal.plugins.webroot.� )�print_functionN)�mock)� challenges)� achallenges)�errors)� filesystem)�os)�util)� acme_utilzrsa512_key.pemc @ sN e Zd ZdZejejded�Z dd� Z dd� Z dd � Z d d � Z d d � Ze�� dd� �Zejejdd�e�� dd� ��Zejejdd�e�� dd� ��Zejejdd�dd� �Ze�� dd� �Ze�� dd� �Ze�� d d � �Zd d � Z d d!� Z e � d"�d#d$� �Z e�� d%d&� �Z!d'd(� Z"d)d*� Z#d+d,� Z$d-d.� Z%d/d0� Z&e � d1�d2d3� �Z'd4S )5�AuthenticatorTestz:Tests for certbot._internal.plugins.webroot.Authenticator.� thing.com�Zchallb�domainZ account_keyc C s� ddl m} t�� | _tj�| jd�| _t� | j� tj�| jd�| _ tj�| jdd�| _ tj�| j d�| _ t j| jd| jid�| _|| jd�| _d S ) Nr �� Authenticator�webroot� .well-known�acme-challengeZ:ZXZhR3hmQURzNnBTUmIyTEF2OUlaZjE3RHQzanV4R0orUEN0OTJ3citvQQr )� webroot_path� webroot_map)�!certbot._internal.plugins.webrootr �tempfile�mkdtempZ workspacer �path�joinr �mkdir�partial_root_challenge_path�root_challenge_path�validation_pathr � MagicMock�config�auth��selfr � r$ �P/usr/lib/python3.9/site-packages/certbot/_internal/tests/plugins/webroot_test.py�setUp# s$ ����zAuthenticatorTest.setUpc C s t �| j� d S �N)�shutil�rmtreer �r# r$ r$ r% �tearDown8 s zAuthenticatorTest.tearDownc C s* | j �� }t|t�sJ �| j|v s&J �d S r' )r! � more_info� isinstance�strr )r# r, r$ r$ r% �test_more_info; s z AuthenticatorTest.test_more_infoc C s& t �� }| j�|� d|jks"J �d S )N� )r r r! Zadd_parser_argumentsZ call_count)r# �addr$ r$ r% �test_add_parser_arguments@ s z+AuthenticatorTest.test_add_parser_argumentsc C s | j �� d S r' )r! �preparer* r$ r$ r% � test_prepareE s z AuthenticatorTest.test_preparec s� g | j _d| ji| j _|� }tjdf|j_| j� | j g� |jj sFJ �|jj D ]>� | j j � d d v sjJ �t� fdd�| j j�� D ��sNJ �qN| j j| j j | jks�J �d S )N�otherthing.com� r c 3 s | ]}|� d d v V qdS �r r6 Nr$ ��.0r ��callr$ r% � <genexpr>S s �z;AuthenticatorTest.test_webroot_from_list.<locals>.<genexpr>)r r r r � display_util�OK�menu� return_valuer! �perform�achall�called�call_args_listr �all�values�r# �mock_get_utility� mock_displayr$ r: r% �test_webroot_from_listH s ��z(AuthenticatorTest.test_webroot_from_listzTest specific to Windows)�reasonc C sp |� }t jdf|j_| j�| jg� tj� tj� | j d��s@J �| j� | jg� tj� tj� | j d��rlJ �d S )Nr6 � web.config) r= r> r? r@ r! rA rB r r �existsr r �cleanuprG r$ r$ r% �(test_webconfig_file_generate_and_cleanupY s z:AuthenticatorTest.test_webconfig_file_generate_and_cleanupc C s� |� }t jdf|j_tj�| jdd�}t�|� tj�|d�}t |d��}|� d� W d � n1 sh0 Y | j � | j g� ddlm} |�|�}dd lm} ||vs�J �d S ) Nr6 r r rL �w� somethingr )� crypto_util)�_WEB_CONFIG_SHA256SUMS)r= r> r? r@ r r r r �makedirs�open�writer! rA rB �certbotrR Z sha256sumr rS ) r# rH rI �challenge_path�webconfig_path�filerR Zwebconfig_hashrS r$ r$ r% �$test_foreign_webconfig_file_handlingd s ( z6AuthenticatorTest.test_foreign_webconfig_file_handlingc C s� t jt�tjdd�d�dtd�}| j| jj d< t j� | jdd�}t � |� t j� |d�}t|d ��}|�d � W d � n1 s�0 Y | j�| j|g� d S ) N� bingo��token�pendingzsecond-thing.comr r r rL rP rQ )r �"KeyAuthorizationAnnotatedChallenger �chall_to_challbr �HTTP01�KEYr r r r r r rT rU rV r! rA rB )r# Zachall_2rX rY rZ r$ r$ r% �'test_foreign_webconfig_multiple_domainsv s � (z9AuthenticatorTest.test_foreign_webconfig_multiple_domainsc s� g | j _d| ji| j _|� }tjdff|j_t� t j �� | j � | jg� W d � n1 s^0 Y |jjstJ �|jjD ]>� | jj� d d v s�J �t� fdd�| j j�� D ��s|J �q|d S )Nr5 ���r c 3 s | ]}|� d d v V qdS r7 r$ r8 r: r$ r% r< � s �zKAuthenticatorTest.test_webroot_from_list_help_and_cancel.<locals>.<genexpr>)r r r r r= �CANCELr? � side_effect�pytest�raisesr � PluginErrorr! rA rB rC rD r rE rF rG r$ r: r% �&test_webroot_from_list_help_and_cancel� s . �z8AuthenticatorTest.test_webroot_from_list_help_and_cancelc C s� g | j _d| ji| j _|� }tjdf|j_t� d��8}tj dftj| jff|_ | j � | jg� W d � n1 sr0 Y | j j| jj | jks�J �d S )N� something.comr �'certbot.display.ops.validated_directoryre )r r r r r= r> r? r@ r �patchrf rg r! rA rB r �r# rH rI �mr$ r$ r% �test_new_webroot� s �.z"AuthenticatorTest.test_new_webrootc C s� g | j _i | j _|� }tjdf|j_t�d��X}tj df|_t � t j �� | j�| jg� W d � n1 sn0 Y W d � n1 s�0 Y d S )Nr rm re )r r r r= r> r? r@ r rn rf rh ri r rj r! rA rB ro r$ r$ r% �!test_new_webroot_empty_map_cancel� s z3AuthenticatorTest.test_new_webroot_empty_map_cancelc C sL d | j _i | j _t�tj�� | j�g � W d � n1 s>0 Y d S r' ) r r r rh ri r rj r! rA r* r$ r$ r% �test_perform_missing_root� s z+AuthenticatorTest.test_perform_missing_rootc C s� t j�| jd�| j_t j�| jd�}t|d��}|�d� W d � n1 sN0 Y t�| jd� z6t|d�� W d � n1 s�0 Y t d� W nJ t y� t � t j�� | j�g � W d � n1 s�0 Y Y n0 t�| jd� d S ) NZnullZrndrP Zthingimyr �rz9Warning, running tests as root skips permissions tests...i� )r r r r! � full_pathrU rV r �chmod�print�OSErrorrh ri r rj rA )r# Zpermission_canary�fr$ r$ r% �"test_perform_reraises_other_errors� s ( 0z4AuthenticatorTest.test_perform_reraises_other_errorszJcertbot._internal.plugins.webroot.filesystem.copy_ownership_and_apply_modec C s" t tjd�|_| j�| jg� d S )N�msg)rx �errno�EACCESrg r! rA rB )r# Zmock_ownershipr$ r$ r% �test_failed_chown� s z#AuthenticatorTest.test_failed_chownc C s� t �� }g | j_d| ji| j_|� }tjdftj|ff|j_ t j t j dtd�}t�d��*}tj|f|_| j�|g� W d � n1 s�0 Y | jj|j |ks�J �d S )Nz whatever.comr rl r rm )r r r r r r r= r> r? rg r r` r �HTTP01_Prc r rn r@ r! rA r )r# rH Z new_webrootrI rB rp r$ r$ r% �#test_perform_new_webroot_not_in_map� s �� ,z5AuthenticatorTest.test_perform_new_webroot_not_in_mapc C s� | j �� | j �| jg� t�| jd�s,J �t�| j �D ]2\}}}|D ]"}tj � ||�}t�|d�sFJ �qFq8t� | j| j �s�J �d S )Ni� i� ) r! r3 rA rB r Z check_moder r �walkr r Zhas_same_ownership)r# �dirpath�dirnames�_Z directoryru r$ r$ r% �test_perform_permissions� s z*AuthenticatorTest.test_perform_permissionsc C s� | j �� | j �| jg�}dt|�ks*J �tj�| j�s<J �t | j��}|� � }W d � n1 sd0 Y t j |d�� | jjt�� �s�J �| j �| jg� tj�| j�r�J �tj�| j�r�J �tj�| j�r�J �d S )Nr6 )Zkey_authorization)r! r3 rA rB �lenr r rM r rU �readr Z!KeyAuthorizationChallengeResponseZverifyZchallrc Z public_keyrN r r )r# Z responsesZ validation_fZ validationr$ r$ r% �test_perform_cleanup� s &� �z&AuthenticatorTest.test_perform_cleanupc C s^ t �| j� | j�� | j�| jg� | j�| jg� tj � | j �rHJ �tj � | j �rZJ �d S r' ) r r r r! r3 rA rB rN r r rM r r r* r$ r$ r% �"test_perform_cleanup_existing_dirs� s z4AuthenticatorTest.test_perform_cleanup_existing_dirsc C s� t jt�tjdd�d�dtd�}d}t�| j � | j � � | j � || j g� | j �| j g� tj�|�rlJ �tj�| j�s~J �| j �|g� tj�| j�r�J �tj�| j�r�J �d S )Nr\ r] r_ r r ZYmluZ28)r r` r ra r rb rc r r r r! r3 rA rB rN r r rM r r )r# Z bingo_achallZbingo_validation_pathr$ r$ r% �(test_perform_cleanup_multiple_challenges s �� z:AuthenticatorTest.test_perform_cleanup_multiple_challengesc C sv | j �� | j �| jg� tj�| jd�}t� |� | j � | jg� tj� | j �rVJ �tj� | j�shJ �t� |� d S )NZleftover)r! r3 rA rB r r r r r r rN rM r �rmdir)r# Z leftover_pathr$ r$ r% �test_cleanup_leftovers s z(AuthenticatorTest.test_cleanup_leftoverszcertbot.compat.os.rmdirc C sf | j �� | j �| jg� t� }tj|_||_| j �| jg� t j � | j �rPJ �t j � | j �sbJ �d S r' )r! r3 rA rB rx r| r} rg rN r r rM r r )r# Z mock_rmdirZos_errorr$ r$ r% �test_cleanup_failure$ s z&AuthenticatorTest.test_cleanup_failureN)(�__name__� __module__� __qualname__�__doc__r r` r r rc rB r& r+ r/ r2 r4 � test_utilZpatch_display_utilrJ �unittestZskipIfr Z POSIX_MODErO r[ rd rk rq rr rs rz r rn r~ r� r� r� r� r� r� r� r$ r$ r$ r% r sL � r c @ sZ e Zd ZdZejejded�Z dd� Z dd� Z dd � Z d d � Z d d � Zdd� Zdd� ZdS )�WebrootActionTestz#Tests for webroot argparse actions.r r c C sF ddl m} t�� | _t�� | _| jjdddg d� |� | jd� d S )Nr r z-dz --domains�append)�action�defaultr ) r r r r r �argparse�ArgumentParser�parser� add_argumentZinject_parser_optionsr" r$ r$ r% r& 8 s �zWebrootActionTest.setUpc C s4 | j �dt�d| ji�g�}|jd | jks0J �d S )Nz --webroot-mapr )r� � parse_args�json�dumpsr r )r# �argsr$ r$ r% �test_webroot_map_action@ s �z)WebrootActionTest.test_webroot_map_actionc C sD | j �d�| jj| j��� �}| �|�}|j| jj | jks@J �d S )Nz -d {0} -w {1}) r� r� �formatrB r r �split�_get_config_after_performr �r# r� r r$ r$ r% �test_domain_before_webrootE s � z,WebrootActionTest.test_domain_before_webrootc C s| t �tj�� | j�d�� � W d � n1 s20 Y t �tj�� | j�d�� � W d � n1 sn0 Y d S )Nz-d foo -w bar -w bazz-d foo -w bar -d baz -w qux)rh ri r rj r� r� r� r* r$ r$ r% � test_domain_before_webroot_errorK s .z2WebrootActionTest.test_domain_before_webroot_errorc C sb | j �d�| j| jjt�� ��� �}|j | jj | jks<J �| � |�}|j | jj | jks^J �d S �Nz-w {0} -d {1} -w {2} -d bar) r� r� r� r rB r r r r� r r� r� r$ r$ r% �test_multiwebrootQ s � z#WebrootActionTest.test_multiwebrootc C sX t �� }| j�d�| j| jj|��� �}|j | jj| jiks@J �|j | j|gksTJ �d S r� ) r r r� r� r� r rB r r� r r )r# Zother_webroot_pathr� r$ r$ r% �(test_webroot_map_partial_without_performX s � z:WebrootActionTest.test_webroot_map_partial_without_performc C s* ddl m} ||d�}|�| jg� |jS )Nr r r )r r rA rB r )r# r r r! r$ r$ r% r� e s z+WebrootActionTest._get_config_after_performN)r� r� r� r� r r` r r rc rB r& r� r� r� r� r� r� r$ r$ r$ r% r� 2 s � r� �__main__r6 )(r� Z __future__r r� r| r� r( �sysr r� r ZjosepyZjoserh Zacmer rW r r Zcertbot.compatr r Zcertbot.displayr r= Z certbot.testsr r� ZJWKRSA�loadZ load_vectorrc ZTestCaser r� r� �exit�main�argv�__file__r$ r$ r$ r% �<module> s4 : plugins/__init__.py 0000644 00000000034 15114562471 0010341 0 ustar 00 """Certbot Plugins Tests""" plugins/common_test.py 0000644 00000034156 15114562471 0011145 0 ustar 00 """Tests for certbot.plugins.common.""" import functools import shutil import sys import unittest from unittest import mock import josepy as jose import pytest from acme import challenges from acme import messages from certbot import achallenges from certbot import crypto_util from certbot import errors from certbot.compat import filesystem from certbot.compat import os from certbot.tests import acme_util from certbot.tests import util as test_util AUTH_KEY = jose.JWKRSA.load(test_util.load_vector("rsa512_key.pem")) ACHALL = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.chall_to_challb(challenges.HTTP01(token=b'token1'), messages.STATUS_PENDING), domain="encryption-example.demo", account_key=AUTH_KEY) class NamespaceFunctionsTest(unittest.TestCase): """Tests for certbot.plugins.common.*_namespace functions.""" def test_option_namespace(self): from certbot.plugins.common import option_namespace assert "foo-" == option_namespace("foo") def test_dest_namespace(self): from certbot.plugins.common import dest_namespace assert "foo_" == dest_namespace("foo") def test_dest_namespace_with_dashes(self): from certbot.plugins.common import dest_namespace assert "foo_bar_" == dest_namespace("foo-bar") class PluginTest(unittest.TestCase): """Test for certbot.plugins.common.Plugin.""" def setUp(self): from certbot.plugins.common import Plugin class MockPlugin(Plugin): # pylint: disable=missing-docstring def prepare(self) -> None: pass def more_info(self) -> str: return "info" @classmethod def add_parser_arguments(cls, add): add("foo-bar", dest="different_to_foo_bar", x=1, y=None) self.plugin_cls = MockPlugin self.config = mock.MagicMock() self.plugin = MockPlugin(config=self.config, name="mock") def test_init(self): assert "mock" == self.plugin.name assert self.config == self.plugin.config def test_option_namespace(self): assert "mock-" == self.plugin.option_namespace def test_option_name(self): assert "mock-foo_bar" == self.plugin.option_name("foo_bar") def test_dest_namespace(self): assert "mock_" == self.plugin.dest_namespace def test_dest(self): assert "mock_foo_bar" == self.plugin.dest("foo-bar") assert "mock_foo_bar" == self.plugin.dest("foo_bar") def test_conf(self): assert self.config.mock_foo_bar == self.plugin.conf("foo-bar") def test_inject_parser_options(self): parser = mock.MagicMock() self.plugin_cls.inject_parser_options(parser, "mock") # note that inject_parser_options doesn't check if dest has # correct prefix parser.add_argument.assert_called_once_with( "--mock-foo-bar", dest="different_to_foo_bar", x=1, y=None) def test_fallback_auth_hint(self): assert "the mock plugin completed the required dns-01 challenges" in \ self.plugin.auth_hint([acme_util.DNS01_A, acme_util.DNS01_A]) assert "the mock plugin completed the required dns-01 and http-01 challenges" in \ self.plugin.auth_hint([acme_util.DNS01_A, acme_util.HTTP01_A, acme_util.DNS01_A]) class InstallerTest(test_util.ConfigTestCase): """Tests for certbot.plugins.common.Installer.""" def setUp(self): super().setUp() filesystem.mkdir(self.config.config_dir) from certbot.tests.util import DummyInstaller self.installer = DummyInstaller(config=self.config, name="Installer") self.reverter = self.installer.reverter def test_add_to_real_checkpoint(self): files = {"foo.bar", "baz.qux",} save_notes = "foo bar baz qux" self._test_wrapped_method("add_to_checkpoint", files, save_notes) def test_add_to_real_checkpoint2(self): self._test_add_to_checkpoint_common(False) def test_add_to_temporary_checkpoint(self): self._test_add_to_checkpoint_common(True) def _test_add_to_checkpoint_common(self, temporary): files = {"foo.bar", "baz.qux",} save_notes = "foo bar baz qux" installer_func = functools.partial(self.installer.add_to_checkpoint, temporary=temporary) if temporary: reverter_func_name = "add_to_temp_checkpoint" else: reverter_func_name = "add_to_checkpoint" self._test_adapted_method(installer_func, reverter_func_name, files, save_notes) def test_finalize_checkpoint(self): self._test_wrapped_method("finalize_checkpoint", "foo") def test_recovery_routine(self): self._test_wrapped_method("recovery_routine") def test_revert_temporary_config(self): self._test_wrapped_method("revert_temporary_config") def test_rollback_checkpoints(self): self._test_wrapped_method("rollback_checkpoints", 42) def _test_wrapped_method(self, name, *args, **kwargs): """Test a wrapped reverter method. :param str name: name of the method to test :param tuple args: position arguments to method :param dict kwargs: keyword arguments to method """ installer_func = getattr(self.installer, name) self._test_adapted_method(installer_func, name, *args, **kwargs) def _test_adapted_method(self, installer_func, reverter_func_name, *passed_args, **passed_kwargs): """Test an adapted reverter method :param callable installer_func: installer method to test :param str reverter_func_name: name of the method on the reverter that should be called :param tuple passed_args: positional arguments passed from installer method to the reverter method :param dict passed_kargs: keyword arguments passed from installer method to the reverter method """ with mock.patch.object(self.reverter, reverter_func_name) as reverter_func: installer_func(*passed_args, **passed_kwargs) reverter_func.assert_called_once_with(*passed_args, **passed_kwargs) reverter_func.side_effect = errors.ReverterError with pytest.raises(errors.PluginError): installer_func(*passed_args, **passed_kwargs) def test_install_ssl_dhparams(self): self.installer.install_ssl_dhparams() assert os.path.isfile(self.installer.ssl_dhparams) def _current_ssl_dhparams_hash(self): from certbot._internal.constants import SSL_DHPARAMS_SRC return crypto_util.sha256sum(SSL_DHPARAMS_SRC) def test_current_file_hash_in_all_hashes(self): from certbot._internal.constants import ALL_SSL_DHPARAMS_HASHES assert self._current_ssl_dhparams_hash() in ALL_SSL_DHPARAMS_HASHES, \ "Constants.ALL_SSL_DHPARAMS_HASHES must be appended" \ " with the sha256 hash of self.config.ssl_dhparams when it is updated." class AddrTest(unittest.TestCase): """Tests for certbot.plugins.common.Addr.""" def setUp(self): from certbot.plugins.common import Addr self.addr1 = Addr.fromstring("192.168.1.1") self.addr2 = Addr.fromstring("192.168.1.1:*") self.addr3 = Addr.fromstring("192.168.1.1:80") self.addr4 = Addr.fromstring("[fe00::1]") self.addr5 = Addr.fromstring("[fe00::1]:*") self.addr6 = Addr.fromstring("[fe00::1]:80") self.addr7 = Addr.fromstring("[fe00::1]:5") self.addr8 = Addr.fromstring("[fe00:1:2:3:4:5:6:7:8:9]:8080") def test_fromstring(self): assert self.addr1.get_addr() == "192.168.1.1" assert self.addr1.get_port() == "" assert self.addr2.get_addr() == "192.168.1.1" assert self.addr2.get_port() == "*" assert self.addr3.get_addr() == "192.168.1.1" assert self.addr3.get_port() == "80" assert self.addr4.get_addr() == "[fe00::1]" assert self.addr4.get_port() == "" assert self.addr5.get_addr() == "[fe00::1]" assert self.addr5.get_port() == "*" assert self.addr6.get_addr() == "[fe00::1]" assert self.addr6.get_port() == "80" assert self.addr6.get_ipv6_exploded() == \ "fe00:0:0:0:0:0:0:1" assert self.addr1.get_ipv6_exploded() == \ "" assert self.addr7.get_port() == "5" assert self.addr8.get_ipv6_exploded() == \ "fe00:1:2:3:4:5:6:7" def test_str(self): assert str(self.addr1) == "192.168.1.1" assert str(self.addr2) == "192.168.1.1:*" assert str(self.addr3) == "192.168.1.1:80" assert str(self.addr4) == "[fe00::1]" assert str(self.addr5) == "[fe00::1]:*" assert str(self.addr6) == "[fe00::1]:80" def test_get_addr_obj(self): assert str(self.addr1.get_addr_obj("443")) == "192.168.1.1:443" assert str(self.addr2.get_addr_obj("")) == "192.168.1.1" assert str(self.addr1.get_addr_obj("*")) == "192.168.1.1:*" assert str(self.addr4.get_addr_obj("443")) == "[fe00::1]:443" assert str(self.addr5.get_addr_obj("")) == "[fe00::1]" assert str(self.addr4.get_addr_obj("*")) == "[fe00::1]:*" def test_eq(self): assert self.addr1 == self.addr2.get_addr_obj("") assert self.addr1 != self.addr2 assert self.addr1 != 3333 assert self.addr4 == self.addr4.get_addr_obj("") assert self.addr4 != self.addr5 assert self.addr4 != 3333 from certbot.plugins.common import Addr assert self.addr4 == Addr.fromstring("[fe00:0:0::1]") assert self.addr4 == Addr.fromstring("[fe00:0::0:0:1]") def test_set_inclusion(self): from certbot.plugins.common import Addr set_a = {self.addr1, self.addr2} addr1b = Addr.fromstring("192.168.1.1") addr2b = Addr.fromstring("192.168.1.1:*") set_b = {addr1b, addr2b} assert set_a == set_b set_c = {self.addr4, self.addr5} addr4b = Addr.fromstring("[fe00::1]") addr5b = Addr.fromstring("[fe00::1]:*") set_d = {addr4b, addr5b} assert set_c == set_d class ChallengePerformerTest(unittest.TestCase): """Tests for certbot.plugins.common.ChallengePerformer.""" def setUp(self): configurator = mock.MagicMock() from certbot.plugins.common import ChallengePerformer self.performer = ChallengePerformer(configurator) def test_add_chall(self): self.performer.add_chall(ACHALL, 0) assert 1 == len(self.performer.achalls) assert [0] == self.performer.indices def test_perform(self): with pytest.raises(NotImplementedError): self.performer.perform() class InstallVersionControlledFileTest(test_util.TempDirTestCase): """Tests for certbot.plugins.common.install_version_controlled_file.""" def setUp(self): super().setUp() self.hashes = ["someotherhash"] self.dest_path = os.path.join(self.tempdir, "options-ssl-dest.conf") self.hash_path = os.path.join(self.tempdir, ".options-ssl-conf.txt") self.old_path = os.path.join(self.tempdir, "options-ssl-old.conf") self.source_path = os.path.join(self.tempdir, "options-ssl-src.conf") for path in (self.source_path, self.old_path,): with open(path, "w") as f: f.write(path) self.hashes.append(crypto_util.sha256sum(path)) def _call(self): from certbot.plugins.common import install_version_controlled_file install_version_controlled_file(self.dest_path, self.hash_path, self.source_path, self.hashes) def _current_file_hash(self): return crypto_util.sha256sum(self.source_path) def _assert_current_file(self): assert os.path.isfile(self.dest_path) assert crypto_util.sha256sum(self.dest_path) == \ self._current_file_hash() def test_no_file(self): assert not os.path.isfile(self.dest_path) self._call() self._assert_current_file() def test_current_file(self): # 1st iteration installs the file, the 2nd checks if it needs updating for _ in range(2): self._call() self._assert_current_file() def test_prev_file_updates_to_current(self): shutil.copyfile(self.old_path, self.dest_path) self._call() self._assert_current_file() def test_manually_modified_current_file_does_not_update(self): self._call() with open(self.dest_path, "a") as mod_ssl_conf: mod_ssl_conf.write("a new line for the wrong hash\n") with mock.patch("certbot.plugins.common.logger") as mock_logger: self._call() assert mock_logger.warning.called is False assert os.path.isfile(self.dest_path) assert crypto_util.sha256sum(self.source_path) == \ self._current_file_hash() assert crypto_util.sha256sum(self.dest_path) != \ self._current_file_hash() def test_manually_modified_past_file_warns(self): with open(self.dest_path, "a") as mod_ssl_conf: mod_ssl_conf.write("a new line for the wrong hash\n") with open(self.hash_path, "w") as f: f.write("hashofanoldversion") with mock.patch("certbot.plugins.common.logger") as mock_logger: self._call() assert mock_logger.warning.call_args[0][0] == \ "%s has been manually modified; updated file " \ "saved to %s. We recommend updating %s for security purposes." assert crypto_util.sha256sum(self.source_path) == \ self._current_file_hash() # only print warning once with mock.patch("certbot.plugins.common.logger") as mock_logger: self._call() assert mock_logger.warning.called is False if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/disco_test.py 0000644 00000026232 15114562471 0010752 0 ustar 00 """Tests for certbot._internal.plugins.disco.""" import functools import string import sys from typing import List import unittest from unittest import mock import pytest from certbot import errors from certbot import interfaces from certbot._internal.plugins import null from certbot._internal.plugins import standalone from certbot._internal.plugins import webroot if sys.version_info >= (3, 10): # pragma: no cover import importlib.metadata as importlib_metadata else: import importlib_metadata class _EntryPointLoadFail(importlib_metadata.EntryPoint): def load(self): raise RuntimeError("Loading failure") EP_SA = importlib_metadata.EntryPoint( name="sa", value="certbot._internal.plugins.standalone:Authenticator", group="certbot.plugins") EP_WR = importlib_metadata.EntryPoint( name="wr", value="certbot._internal.plugins.webroot:Authenticator", group="certbot.plugins") EP_SA_LOADFAIL = _EntryPointLoadFail( name="sa", value="certbot._internal.plugins.standalone:Authenticator", group="certbot.plugins") class PluginEntryPointTest(unittest.TestCase): """Tests for certbot._internal.plugins.disco.PluginEntryPoint.""" def setUp(self): self.ep1 = importlib_metadata.EntryPoint( name="ep1", value="p1.ep1:Authenticator", group="certbot.plugins") self.ep1prim = importlib_metadata.EntryPoint( name="ep1", value="p2.pe2:Authenticator", group="certbot.plugins") # nested self.ep2 = importlib_metadata.EntryPoint( name="ep2", value="p2.foo.ep2:Authenticator", group="certbot.plugins") # project name != top-level package name self.ep3 = importlib_metadata.EntryPoint( name="ep3", value="a.ep3:Authenticator", group="certbot.plugins") from certbot._internal.plugins.disco import PluginEntryPoint self.plugin_ep = PluginEntryPoint(EP_SA) def test_entry_point_to_plugin_name_not_prefixed(self): from certbot._internal.plugins.disco import PluginEntryPoint names = { self.ep1: "ep1", self.ep1prim: "ep1", self.ep2: "ep2", self.ep3: "ep3", EP_SA: "sa", } for entry_point, name in names.items(): assert name == PluginEntryPoint.entry_point_to_plugin_name(entry_point) def test_description(self): assert "server locally" in self.plugin_ep.description def test_description_with_name(self): self.plugin_ep.plugin_cls = mock.MagicMock(description="Desc") assert "Desc (sa)" == self.plugin_ep.description_with_name def test_long_description(self): self.plugin_ep.plugin_cls = mock.MagicMock( long_description="Long desc") assert "Long desc" == self.plugin_ep.long_description def test_long_description_nonexistent(self): self.plugin_ep.plugin_cls = mock.MagicMock( description="Long desc not found", spec=["description"]) assert "Long desc not found" == self.plugin_ep.long_description def test_ifaces(self): assert self.plugin_ep.ifaces((interfaces.Authenticator,)) assert not self.plugin_ep.ifaces((interfaces.Installer,)) assert not self.plugin_ep.ifaces(( interfaces.Installer, interfaces.Authenticator)) def test__init__(self): assert self.plugin_ep.initialized is False assert self.plugin_ep.prepared is False assert self.plugin_ep.misconfigured is False assert self.plugin_ep.available is False assert self.plugin_ep.problem is None assert self.plugin_ep.entry_point is EP_SA assert "sa" == self.plugin_ep.name assert self.plugin_ep.plugin_cls is standalone.Authenticator def test_init(self): config = mock.MagicMock() plugin = self.plugin_ep.init(config=config) assert self.plugin_ep.initialized is True assert plugin.config is config # memoize! assert self.plugin_ep.init() is plugin assert plugin.config is config # try to give different config assert self.plugin_ep.init(123) is plugin assert plugin.config is config assert self.plugin_ep.prepared is False assert self.plugin_ep.misconfigured is False assert self.plugin_ep.available is False def test_prepare(self): config = mock.MagicMock() self.plugin_ep.init(config=config) self.plugin_ep.prepare() assert self.plugin_ep.prepared assert self.plugin_ep.misconfigured is False # output doesn't matter that much, just test if it runs str(self.plugin_ep) def test_prepare_misconfigured(self): plugin = mock.MagicMock() plugin.prepare.side_effect = errors.MisconfigurationError # pylint: disable=protected-access self.plugin_ep._initialized = plugin assert isinstance(self.plugin_ep.prepare(), errors.MisconfigurationError) assert self.plugin_ep.prepared assert self.plugin_ep.misconfigured assert isinstance(self.plugin_ep.problem, errors.MisconfigurationError) assert self.plugin_ep.available def test_prepare_no_installation(self): plugin = mock.MagicMock() plugin.prepare.side_effect = errors.NoInstallationError # pylint: disable=protected-access self.plugin_ep._initialized = plugin assert isinstance(self.plugin_ep.prepare(), errors.NoInstallationError) assert self.plugin_ep.prepared is True assert self.plugin_ep.misconfigured is False assert self.plugin_ep.available is False def test_prepare_generic_plugin_error(self): plugin = mock.MagicMock() plugin.prepare.side_effect = errors.PluginError # pylint: disable=protected-access self.plugin_ep._initialized = plugin assert isinstance(self.plugin_ep.prepare(), errors.PluginError) assert self.plugin_ep.prepared assert self.plugin_ep.misconfigured is False assert self.plugin_ep.available is False def test_str(self): output = str(self.plugin_ep) assert "Authenticator" in output assert "Installer" not in output assert "Plugin" in output def test_repr(self): assert "PluginEntryPoint#sa" == repr(self.plugin_ep) class PluginsRegistryTest(unittest.TestCase): """Tests for certbot._internal.plugins.disco.PluginsRegistry.""" @classmethod def _create_new_registry(cls, plugins): from certbot._internal.plugins.disco import PluginsRegistry return PluginsRegistry(plugins) def setUp(self): self.plugin_ep = mock.MagicMock() self.plugin_ep.name = "mock" self.plugin_ep.__hash__.side_effect = TypeError self.plugins = {self.plugin_ep.name: self.plugin_ep} self.reg = self._create_new_registry(self.plugins) self.ep1 = importlib_metadata.EntryPoint( name="ep1", value="p1.ep1", group="certbot.plugins") def test_find_all(self): from certbot._internal.plugins.disco import PluginsRegistry with mock.patch("certbot._internal.plugins.disco.importlib_metadata") as mock_meta: mock_meta.entry_points.side_effect = [ [EP_SA], [EP_WR, self.ep1], ] with mock.patch.object(importlib_metadata.EntryPoint, 'load') as mock_load: mock_load.side_effect = [ standalone.Authenticator, webroot.Authenticator, null.Installer, null.Installer] plugins = PluginsRegistry.find_all() assert plugins["sa"].plugin_cls is standalone.Authenticator assert plugins["sa"].entry_point is EP_SA assert plugins["wr"].plugin_cls is webroot.Authenticator assert plugins["wr"].entry_point is EP_WR assert plugins["ep1"].plugin_cls is null.Installer assert plugins["ep1"].entry_point is self.ep1 assert "p1:ep1" not in plugins def test_find_all_error_message(self): from certbot._internal.plugins.disco import PluginsRegistry with mock.patch("certbot._internal.plugins.disco.importlib_metadata") as mock_meta: #EP_SA.load = None # This triggers a TypeError when the entrypoint loads mock_meta.entry_points.side_effect = [ [EP_SA_LOADFAIL], [EP_WR, self.ep1], ] with self.assertRaises(errors.PluginError) as cm: PluginsRegistry.find_all() assert "standalone' plugin errored" in str(cm.exception) def test_getitem(self): assert self.plugin_ep == self.reg["mock"] def test_iter(self): assert ["mock"] == list(self.reg) def test_len(self): assert 0 == len(self._create_new_registry({})) assert 1 == len(self.reg) def test_init(self): self.plugin_ep.init.return_value = "baz" assert ["baz"] == self.reg.init("bar") self.plugin_ep.init.assert_called_once_with("bar") def test_filter(self): assert self.plugins == \ self.reg.filter(lambda p_ep: p_ep.name.startswith("m")) assert {} == self.reg.filter(lambda p_ep: p_ep.name.startswith("b")) def test_ifaces(self): self.plugin_ep.ifaces.return_value = True # pylint: disable=protected-access assert self.plugins == self.reg.ifaces()._plugins self.plugin_ep.ifaces.return_value = False assert {} == self.reg.ifaces()._plugins def test_prepare(self): self.plugin_ep.prepare.return_value = "baz" assert ["baz"] == self.reg.prepare() self.plugin_ep.prepare.assert_called_once_with() def test_prepare_order(self): order: List[str] = [] plugins = { c: mock.MagicMock(prepare=functools.partial(order.append, c)) for c in string.ascii_letters } reg = self._create_new_registry(plugins) reg.prepare() # order of prepare calls must be sorted to prevent deadlock # caused by plugins acquiring locks during prepare assert order == sorted(string.ascii_letters) def test_available(self): self.plugin_ep.available = True # pylint: disable=protected-access assert self.plugins == self.reg.available()._plugins self.plugin_ep.available = False assert {} == self.reg.available()._plugins def test_find_init(self): assert self.reg.find_init(mock.Mock()) is None self.plugin_ep.initialized = True assert self.reg.find_init(self.plugin_ep.init()) is self.plugin_ep def test_repr(self): self.plugin_ep.__repr__ = lambda _: "PluginEntryPoint#mock" assert "PluginsRegistry(PluginEntryPoint#mock)" == \ repr(self.reg) def test_str(self): assert "No plugins" == str(self._create_new_registry({})) self.plugin_ep.__str__ = lambda _: "Mock" assert "Mock" == str(self.reg) plugins = {self.plugin_ep.name: self.plugin_ep, "foo": "Bar"} reg = self._create_new_registry(plugins) assert "Bar\n\nMock" == str(reg) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/dns_common_test.py 0000644 00000020512 15114562471 0012000 0 ustar 00 """Tests for certbot.plugins.dns_common.""" import collections import logging import sys import unittest from unittest import mock import pytest from certbot import errors from certbot import util from certbot.compat import os from certbot.display import util as display_util from certbot.plugins import dns_common from certbot.plugins import dns_test_common from certbot.tests import util as test_util class DNSAuthenticatorTest(test_util.TempDirTestCase, dns_test_common.BaseAuthenticatorTest): # pylint: disable=protected-access class _FakeDNSAuthenticator(dns_common.DNSAuthenticator): _setup_credentials = mock.MagicMock() _perform = mock.MagicMock() _cleanup = mock.MagicMock() def more_info(self): # pylint: disable=missing-docstring,no-self-use return 'A fake authenticator for testing.' class _FakeConfig: fake_propagation_seconds = 0 fake_config_key = 1 fake_other_key = None fake_file_path = None def setUp(self): super().setUp() self.config = DNSAuthenticatorTest._FakeConfig() self.auth = DNSAuthenticatorTest._FakeDNSAuthenticator(self.config, "fake") @test_util.patch_display_util() def test_perform(self, unused_mock_get_utility): self.auth.perform([self.achall]) self.auth._perform.assert_called_once_with(dns_test_common.DOMAIN, mock.ANY, mock.ANY) def test_cleanup(self): self.auth._attempt_cleanup = True self.auth.cleanup([self.achall]) self.auth._cleanup.assert_called_once_with(dns_test_common.DOMAIN, mock.ANY, mock.ANY) @test_util.patch_display_util() def test_prompt(self, mock_get_utility): mock_display = mock_get_utility() mock_display.input.side_effect = ((display_util.OK, "",), (display_util.OK, "value",)) self.auth._configure("other_key", "") assert self.auth.config.fake_other_key == "value" @test_util.patch_display_util() def test_prompt_canceled(self, mock_get_utility): mock_display = mock_get_utility() mock_display.input.side_effect = ((display_util.CANCEL, "c",),) with pytest.raises(errors.PluginError): self.auth._configure("other_key", "") @test_util.patch_display_util() def test_prompt_file(self, mock_get_utility): path = os.path.join(self.tempdir, 'file.ini') open(path, "wb").close() mock_display = mock_get_utility() mock_display.directory_select.side_effect = ((display_util.OK, "",), (display_util.OK, "not-a-file.ini",), (display_util.OK, self.tempdir), (display_util.OK, path,)) self.auth._configure_file("file_path", "") assert self.auth.config.fake_file_path == path @test_util.patch_display_util() def test_prompt_file_canceled(self, mock_get_utility): mock_display = mock_get_utility() mock_display.directory_select.side_effect = ((display_util.CANCEL, "c",),) with pytest.raises(errors.PluginError): self.auth._configure_file("file_path", "") def test_configure_credentials(self): path = os.path.join(self.tempdir, 'file.ini') dns_test_common.write({"fake_test": "value"}, path) setattr(self.config, "fake_credentials", path) credentials = self.auth._configure_credentials("credentials", "", {"test": ""}) assert credentials.conf("test") == "value" @test_util.patch_display_util() def test_prompt_credentials(self, mock_get_utility): bad_path = os.path.join(self.tempdir, 'bad-file.ini') dns_test_common.write({"fake_other": "other_value"}, bad_path) path = os.path.join(self.tempdir, 'file.ini') dns_test_common.write({"fake_test": "value"}, path) setattr(self.config, "fake_credentials", "") mock_display = mock_get_utility() mock_display.directory_select.side_effect = ((display_util.OK, "",), (display_util.OK, "not-a-file.ini",), (display_util.OK, self.tempdir), (display_util.OK, bad_path), (display_util.OK, path,)) credentials = self.auth._configure_credentials("credentials", "", {"test": ""}) assert credentials.conf("test") == "value" def test_auth_hint(self): assert 'try increasing --fake-propagation-seconds (currently 0 seconds).' in \ self.auth.auth_hint([mock.MagicMock()]) class CredentialsConfigurationTest(test_util.TempDirTestCase): class _MockLoggingHandler(logging.Handler): messages = None def __init__(self, *args, **kwargs): self.reset() super().__init__(*args, **kwargs) def emit(self, record): self.messages[record.levelname.lower()].append(record.getMessage()) def reset(self): """Allows the handler to be reset between tests.""" self.messages = collections.defaultdict(list) def test_valid_file(self): path = os.path.join(self.tempdir, 'too-permissive-file.ini') dns_test_common.write({"test": "value", "other": 1}, path) credentials_configuration = dns_common.CredentialsConfiguration(path) assert "value" == credentials_configuration.conf("test") assert "1" == credentials_configuration.conf("other") def test_nonexistent_file(self): path = os.path.join(self.tempdir, 'not-a-file.ini') with pytest.raises(errors.PluginError): dns_common.CredentialsConfiguration(path) def test_valid_file_with_unsafe_permissions(self): log = self._MockLoggingHandler() dns_common.logger.addHandler(log) path = os.path.join(self.tempdir, 'too-permissive-file.ini') util.safe_open(path, "wb", 0o744).close() dns_common.CredentialsConfiguration(path) assert 1 == len([_ for _ in log.messages['warning'] if _.startswith("Unsafe")]) class CredentialsConfigurationRequireTest(test_util.TempDirTestCase): def setUp(self): super().setUp() self.path = os.path.join(self.tempdir, 'file.ini') def _write(self, values): dns_test_common.write(values, self.path) def test_valid(self): self._write({"test": "value", "other": 1}) credentials_configuration = dns_common.CredentialsConfiguration(self.path) credentials_configuration.require({"test": "", "other": ""}) def test_valid_but_extra(self): self._write({"test": "value", "other": 1}) credentials_configuration = dns_common.CredentialsConfiguration(self.path) credentials_configuration.require({"test": ""}) def test_valid_empty(self): self._write({}) credentials_configuration = dns_common.CredentialsConfiguration(self.path) credentials_configuration.require({}) def test_missing(self): self._write({}) credentials_configuration = dns_common.CredentialsConfiguration(self.path) with pytest.raises(errors.PluginError): credentials_configuration.require({"test": ""}) def test_blank(self): self._write({"test": ""}) credentials_configuration = dns_common.CredentialsConfiguration(self.path) with pytest.raises(errors.PluginError): credentials_configuration.require({"test": ""}) def test_typo(self): self._write({"tets": "typo!"}) credentials_configuration = dns_common.CredentialsConfiguration(self.path) with pytest.raises(errors.PluginError): credentials_configuration.require({"test": ""}) class DomainNameGuessTest(unittest.TestCase): def test_simple_case(self): assert 'example.com' in \ dns_common.base_domain_name_guesses("example.com") def test_sub_domain(self): assert 'example.com' in \ dns_common.base_domain_name_guesses("foo.bar.baz.example.com") def test_second_level_domain(self): assert 'example.co.uk' in \ dns_common.base_domain_name_guesses("foo.bar.baz.example.co.uk") if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/enhancements_test.py 0000644 00000004367 15114562471 0012326 0 ustar 00 """Tests for new style enhancements""" import sys from unittest import mock import pytest from certbot._internal.plugins import null from certbot.plugins import enhancements import certbot.tests.util as test_util class EnhancementTest(test_util.ConfigTestCase): """Tests for new style enhancements in certbot.plugins.enhancements""" def setUp(self): super().setUp() self.mockinstaller = mock.MagicMock(spec=enhancements.AutoHSTSEnhancement) @test_util.patch_display_util() def test_enhancement_enabled_enhancements(self, _): FAKEINDEX = [ { "name": "autohsts", "cli_dest": "auto_hsts", }, { "name": "somethingelse", "cli_dest": "something", } ] with mock.patch("certbot.plugins.enhancements._INDEX", FAKEINDEX): self.config.auto_hsts = True self.config.something = True enabled = list(enhancements.enabled_enhancements(self.config)) assert len(enabled) == 2 assert [i for i in enabled if i["name"] == "autohsts"] assert [i for i in enabled if i["name"] == "somethingelse"] def test_are_requested(self): assert len(list(enhancements.enabled_enhancements(self.config))) == 0 assert not enhancements.are_requested(self.config) self.config.auto_hsts = True assert len(list(enhancements.enabled_enhancements(self.config))) == 1 assert enhancements.are_requested(self.config) def test_are_supported(self): self.config.auto_hsts = True unsupported = null.Installer(self.config, "null") assert enhancements.are_supported(self.config, self.mockinstaller) assert not enhancements.are_supported(self.config, unsupported) def test_enable(self): self.config.auto_hsts = True domains = ["example.com", "www.example.com"] lineage = "lineage" enhancements.enable(lineage, domains, self.mockinstaller, self.config) assert self.mockinstaller.enable_autohsts.called assert self.mockinstaller.enable_autohsts.call_args[0] == (lineage, domains) if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/manual_test.py 0000644 00000016401 15114562471 0011123 0 ustar 00 """Tests for certbot._internal.plugins.manual""" import sys import textwrap import unittest from unittest import mock import pytest from acme import challenges from certbot import errors from certbot.compat import filesystem from certbot.compat import os from certbot.tests import acme_util from certbot.tests import util as test_util class AuthenticatorTest(test_util.TempDirTestCase): """Tests for certbot._internal.plugins.manual.Authenticator.""" def setUp(self): super().setUp() get_display_patch = test_util.patch_display_util() self.mock_get_display = get_display_patch.start() self.addCleanup(get_display_patch.stop) self.http_achall = acme_util.HTTP01_A self.dns_achall = acme_util.DNS01_A self.dns_achall_2 = acme_util.DNS01_A_2 self.achalls = [self.http_achall, self.dns_achall, self.dns_achall_2] for d in ["config_dir", "work_dir", "in_progress"]: filesystem.mkdir(os.path.join(self.tempdir, d)) # "backup_dir" and "temp_checkpoint_dir" get created in # certbot.util.make_or_verify_dir() during the Reverter # initialization. self.config = mock.MagicMock( http01_port=0, manual_auth_hook=None, manual_cleanup_hook=None, noninteractive_mode=False, validate_hooks=False, config_dir=os.path.join(self.tempdir, "config_dir"), work_dir=os.path.join(self.tempdir, "work_dir"), backup_dir=os.path.join(self.tempdir, "backup_dir"), temp_checkpoint_dir=os.path.join( self.tempdir, "temp_checkpoint_dir"), in_progress_dir=os.path.join(self.tempdir, "in_progess")) from certbot._internal.plugins.manual import Authenticator self.auth = Authenticator(self.config, name='manual') def test_prepare_no_hook_noninteractive(self): self.config.noninteractive_mode = True with pytest.raises(errors.PluginError): self.auth.prepare() def test_prepare_bad_hook(self): self.config.manual_auth_hook = os.path.abspath(os.sep) # is / on UNIX self.config.validate_hooks = True with pytest.raises(errors.HookCommandNotFound): self.auth.prepare() def test_more_info(self): assert isinstance(self.auth.more_info(), str) def test_get_chall_pref(self): assert self.auth.get_chall_pref('example.org') == \ [challenges.HTTP01, challenges.DNS01] def test_script_perform(self): self.config.manual_auth_hook = ( '{0} -c "' 'from certbot.compat import os;' 'print(os.environ.get(\'CERTBOT_DOMAIN\'));' 'print(os.environ.get(\'CERTBOT_TOKEN\', \'notoken\'));' 'print(os.environ.get(\'CERTBOT_VALIDATION\', \'novalidation\'));' 'print(os.environ.get(\'CERTBOT_ALL_DOMAINS\'));' 'print(os.environ.get(\'CERTBOT_REMAINING_CHALLENGES\'));"' .format(sys.executable)) dns_expected = '{0}\n{1}\n{2}\n{3}\n{4}'.format( self.dns_achall.domain, 'notoken', self.dns_achall.validation(self.dns_achall.account_key), ','.join(achall.domain for achall in self.achalls), len(self.achalls) - self.achalls.index(self.dns_achall) - 1) http_expected = '{0}\n{1}\n{2}\n{3}\n{4}'.format( self.http_achall.domain, self.http_achall.chall.encode('token'), self.http_achall.validation(self.http_achall.account_key), ','.join(achall.domain for achall in self.achalls), len(self.achalls) - self.achalls.index(self.http_achall) - 1) assert self.auth.perform(self.achalls) == \ [achall.response(achall.account_key) for achall in self.achalls] assert self.auth.env[self.dns_achall]['CERTBOT_AUTH_OUTPUT'] == \ dns_expected assert self.auth.env[self.http_achall]['CERTBOT_AUTH_OUTPUT'] == \ http_expected # Successful hook output should be sent to notify assert self.mock_get_display().notification.call_count == len(self.achalls) for i, (args, _) in enumerate(self.mock_get_display().notification.call_args_list): needle = textwrap.indent(self.auth.env[self.achalls[i]]['CERTBOT_AUTH_OUTPUT'], ' ') assert needle in args[0] def test_manual_perform(self): assert self.auth.perform(self.achalls) == \ [achall.response(achall.account_key) for achall in self.achalls] assert self.mock_get_display().notification.call_count == len(self.achalls) for i, (args, kwargs) in enumerate(self.mock_get_display().notification.call_args_list): achall = self.achalls[i] assert achall.validation(achall.account_key) in args[0] assert kwargs['wrap'] is False def test_cleanup(self): self.config.manual_auth_hook = ('{0} -c "import sys; sys.stdout.write(\'foo\')"' .format(sys.executable)) self.config.manual_cleanup_hook = '# cleanup' self.auth.perform(self.achalls) for achall in self.achalls: self.auth.cleanup([achall]) assert os.environ['CERTBOT_AUTH_OUTPUT'] == 'foo' assert os.environ['CERTBOT_DOMAIN'] == achall.domain if isinstance(achall.chall, (challenges.HTTP01, challenges.DNS01)): assert os.environ['CERTBOT_VALIDATION'] == \ achall.validation(achall.account_key) if isinstance(achall.chall, challenges.HTTP01): assert os.environ['CERTBOT_TOKEN'] == \ achall.chall.encode('token') else: assert 'CERTBOT_TOKEN' not in os.environ def test_auth_hint_hook(self): self.config.manual_auth_hook = '/bin/true' assert self.auth.auth_hint([acme_util.DNS01_A, acme_util.HTTP01_A]) == \ 'The Certificate Authority failed to verify the DNS TXT records and challenge ' \ 'files created by the --manual-auth-hook. Ensure that this hook is functioning ' \ 'correctly and that it waits a sufficient duration of time for DNS propagation. ' \ 'Refer to "certbot --help manual" and the Certbot User Guide.' assert self.auth.auth_hint([acme_util.HTTP01_A]) == \ 'The Certificate Authority failed to verify the challenge files created by the ' \ '--manual-auth-hook. Ensure that this hook is functioning correctly. Refer to ' \ '"certbot --help manual" and the Certbot User Guide.' def test_auth_hint_no_hook(self): assert self.auth.auth_hint([acme_util.DNS01_A, acme_util.HTTP01_A]) == \ 'The Certificate Authority failed to verify the manually created DNS TXT records ' \ 'and challenge files. Ensure that you created these in the correct location, or ' \ 'try waiting longer for DNS propagation on the next attempt.' assert self.auth.auth_hint([acme_util.HTTP01_A, acme_util.HTTP01_A, acme_util.HTTP01_A]) == \ 'The Certificate Authority failed to verify the manually created challenge files. ' \ 'Ensure that you created these in the correct location.' if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/null_test.py 0000644 00000001242 15114562471 0010615 0 ustar 00 """Tests for certbot._internal.plugins.null.""" import sys import unittest from unittest import mock import pytest class InstallerTest(unittest.TestCase): """Tests for certbot._internal.plugins.null.Installer.""" def setUp(self): from certbot._internal.plugins.null import Installer self.installer = Installer(config=mock.MagicMock(), name="null") def test_it(self): assert isinstance(self.installer.more_info(), str) assert [] == self.installer.get_all_names() assert [] == self.installer.supported_enhancements() if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/selection_test.py 0000644 00000023343 15114562471 0011636 0 ustar 00 """Tests for letsencrypt.plugins.selection""" import sys from typing import List import unittest from unittest import mock import pytest from certbot import errors from certbot import interfaces from certbot._internal.display import obj as display_obj from certbot._internal.plugins.disco import PluginsRegistry from certbot.display import util as display_util from certbot.tests import util as test_util class ConveniencePickPluginTest(unittest.TestCase): """Tests for certbot._internal.plugins.selection.pick_*.""" def _test(self, fun, ifaces): config = mock.Mock() default = mock.Mock() plugins = mock.Mock() with mock.patch("certbot._internal.plugins.selection.pick_plugin") as mock_p: mock_p.return_value = "foo" assert "foo" == fun(config, default, plugins, "Question?") mock_p.assert_called_once_with( config, default, plugins, "Question?", ifaces) def test_authenticator(self): from certbot._internal.plugins.selection import pick_authenticator self._test(pick_authenticator, (interfaces.Authenticator,)) def test_installer(self): from certbot._internal.plugins.selection import pick_installer self._test(pick_installer, (interfaces.Installer,)) def test_configurator(self): from certbot._internal.plugins.selection import pick_configurator self._test(pick_configurator, (interfaces.Authenticator, interfaces.Installer)) class PickPluginTest(unittest.TestCase): """Tests for certbot._internal.plugins.selection.pick_plugin.""" def setUp(self): self.config = mock.Mock(noninteractive_mode=False) self.default = None self.reg = mock.MagicMock() self.question = "Question?" self.ifaces: List[interfaces.Plugin] = [] def _call(self): from certbot._internal.plugins.selection import pick_plugin return pick_plugin(self.config, self.default, self.reg, self.question, self.ifaces) def test_default_provided(self): self.default = "foo" self._call() assert 1 == self.reg.filter.call_count def test_no_default(self): self._call() assert 1 == self.reg.visible().ifaces.call_count def test_no_candidate(self): assert self._call() is None def test_single(self): plugin_ep = mock.MagicMock() plugin_ep.init.return_value = "foo" plugin_ep.misconfigured = False self.reg.visible().ifaces().available.return_value = { "bar": plugin_ep} assert "foo" == self._call() def test_single_misconfigured(self): plugin_ep = mock.MagicMock() plugin_ep.init.return_value = "foo" plugin_ep.misconfigured = True self.reg.visible().ifaces().available.return_value = { "bar": plugin_ep} assert self._call() is None def test_multiple(self): plugin_ep = mock.MagicMock() plugin_ep.init.return_value = "foo" self.reg.visible().ifaces().available.return_value = { "bar": plugin_ep, "baz": plugin_ep, } with mock.patch("certbot._internal.plugins.selection.choose_plugin") as mock_choose: mock_choose.return_value = plugin_ep assert "foo" == self._call() mock_choose.assert_called_once_with( [plugin_ep, plugin_ep], self.question) def test_choose_plugin_none(self): self.reg.visible().ifaces().available.return_value = { "bar": None, "baz": None, } with mock.patch("certbot._internal.plugins.selection.choose_plugin") as mock_choose: mock_choose.return_value = None assert self._call() is None def test_default_must_be_filtered(self): # https://github.com/certbot/certbot/issues/9664 self.default = "foo" filtered = mock.MagicMock() self.reg.filter.return_value = filtered self._call() assert filtered.ifaces.call_count == 1 class ChoosePluginTest(unittest.TestCase): """Tests for certbot._internal.plugins.selection.choose_plugin.""" def setUp(self): display_obj.set_display(display_obj.FileDisplay(sys.stdout, False)) self.mock_apache = mock.Mock( description_with_name="a", misconfigured=True) self.mock_apache.name = "apache" self.mock_stand = mock.Mock( description_with_name="s", misconfigured=False) self.mock_stand.init().more_info.return_value = "standalone" self.plugins = [ self.mock_apache, self.mock_stand, ] def _call(self): from certbot._internal.plugins.selection import choose_plugin return choose_plugin(self.plugins, "Question?") @test_util.patch_display_util() def test_selection(self, mock_util): mock_util().menu.side_effect = [(display_util.OK, 0), (display_util.OK, 1)] assert self.mock_stand == self._call() assert mock_util().notification.call_count == 1 @test_util.patch_display_util() def test_more_info(self, mock_util): mock_util().menu.side_effect = [ (display_util.OK, 1), ] assert self.mock_stand == self._call() @test_util.patch_display_util() def test_no_choice(self, mock_util): mock_util().menu.return_value = (display_util.CANCEL, 0) assert self._call() is None class GetUnpreparedInstallerTest(test_util.ConfigTestCase): """Tests for certbot._internal.plugins.selection.get_unprepared_installer.""" def setUp(self): super().setUp() self.mock_apache_fail_ep = mock.Mock( description_with_name="afail") self.mock_apache_fail_ep.check_name = lambda name: name == "afail" self.mock_apache_ep = mock.Mock( description_with_name="apache") self.mock_apache_ep.check_name = lambda name: name == "apache" self.mock_apache_plugin = mock.MagicMock() self.mock_apache_ep.init.return_value = self.mock_apache_plugin self.plugins = PluginsRegistry({ "afail": self.mock_apache_fail_ep, "apache": self.mock_apache_ep, }) def _call(self): from certbot._internal.plugins.selection import get_unprepared_installer return get_unprepared_installer(self.config, self.plugins) def test_no_installer_defined(self): self.config.configurator = None assert self._call() is None def test_no_available_installers(self): self.config.configurator = "apache" self.plugins = PluginsRegistry({}) with pytest.raises(errors.PluginSelectionError): self._call() def test_get_plugin(self): self.config.configurator = "apache" installer = self._call() assert installer is self.mock_apache_plugin def test_multiple_installers_returned(self): self.config.configurator = "apache" # Two plugins with the same name self.mock_apache_fail_ep.check_name = lambda name: name == "apache" with pytest.raises(errors.PluginSelectionError): self._call() class TestChooseConfiguratorPlugins(unittest.TestCase): """Tests for certbot._internal.plugins.selection.choose_configurator_plugins.""" def _setupMockPlugin(self, name): mock_ep = mock.Mock( description_with_name=name) mock_ep.check_name = lambda n: n == name mock_plugin = mock.MagicMock() mock_plugin.name = name mock_ep.init.return_value = mock_plugin mock_ep.misconfigured = False return mock_ep def _parseArgs(self, args): from certbot import configuration from certbot._internal import cli return cli.prepare_and_parse_args(self.plugins, args.split()) def setUp(self): self.plugins = PluginsRegistry({ "nginx": self._setupMockPlugin("nginx"), "apache": self._setupMockPlugin("apache"), "manual": self._setupMockPlugin("manual"), }) def _runWithArgs(self, args): from certbot._internal.plugins.selection import choose_configurator_plugins return choose_configurator_plugins(self._parseArgs(args), self.plugins, "certonly") def test_noninteractive_configurator(self): # For certonly, setting either the nginx or apache configurators should # return both an installer and authenticator inst, auth = self._runWithArgs("certonly --nginx") assert inst.name == "nginx" assert auth.name == "nginx" inst, auth = self._runWithArgs("certonly --apache") assert inst.name == "apache" assert auth.name == "apache" def test_noninteractive_inst_arg(self): # For certonly, if an installer arg is set, it should be returned as expected inst, auth = self._runWithArgs("certonly -a nginx -i nginx") assert inst.name == "nginx" assert auth.name == "nginx" inst, auth = self._runWithArgs("certonly -a apache -i apache") assert inst.name == "apache" assert auth.name == "apache" # if no installer arg is set (or it's set to none), one shouldn't be returned inst, auth = self._runWithArgs("certonly -a nginx") assert inst is None assert auth.name == "nginx" inst, auth = self._runWithArgs("certonly -a nginx -i none") assert inst is None assert auth.name == "nginx" inst, auth = self._runWithArgs("certonly -a apache") assert inst is None assert auth.name == "apache" inst, auth = self._runWithArgs("certonly -a apache -i none") assert inst is None assert auth.name == "apache" if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/standalone_test.py 0000644 00000015234 15114562471 0012001 0 ustar 00 """Tests for certbot._internal.plugins.standalone.""" import errno import socket import sys from typing import Dict from typing import Set from typing import Tuple import unittest from unittest import mock import josepy as jose import OpenSSL.crypto import pytest from acme import challenges from acme import standalone as acme_standalone from certbot import achallenges from certbot import errors from certbot.tests import acme_util from certbot.tests import util as test_util class ServerManagerTest(unittest.TestCase): """Tests for certbot._internal.plugins.standalone.ServerManager.""" def setUp(self): from certbot._internal.plugins.standalone import ServerManager self.certs: Dict[bytes, Tuple[OpenSSL.crypto.PKey, OpenSSL.crypto.X509]] = {} self.http_01_resources: Set[acme_standalone.HTTP01RequestHandler.HTTP01Resource] = {} self.mgr = ServerManager(self.certs, self.http_01_resources) def test_init(self): assert self.mgr.certs is self.certs assert self.mgr.http_01_resources is self.http_01_resources def _test_run_stop(self, challenge_type): server = self.mgr.run(port=0, challenge_type=challenge_type) port = server.getsocknames()[0][1] assert self.mgr.running() == {port: server} self.mgr.stop(port=port) assert self.mgr.running() == {} def test_run_stop_http_01(self): self._test_run_stop(challenges.HTTP01) def test_run_idempotent(self): server = self.mgr.run(port=0, challenge_type=challenges.HTTP01) port = server.getsocknames()[0][1] server2 = self.mgr.run(port=port, challenge_type=challenges.HTTP01) assert self.mgr.running() == {port: server} assert server is server2 self.mgr.stop(port) assert self.mgr.running() == {} def test_run_bind_error(self): some_server = socket.socket(socket.AF_INET6) some_server.bind(("", 0)) port = some_server.getsockname()[1] maybe_another_server = socket.socket() try: maybe_another_server.bind(("", port)) except OSError: pass with pytest.raises(errors.StandaloneBindError): self.mgr.run(port, challenge_type=challenges.HTTP01) assert self.mgr.running() == {} some_server.close() maybe_another_server.close() def get_open_port(): """Gets an open port number from the OS.""" open_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM, 0) open_socket.bind(("", 0)) port = open_socket.getsockname()[1] open_socket.close() return port class AuthenticatorTest(unittest.TestCase): """Tests for certbot._internal.plugins.standalone.Authenticator.""" def setUp(self): from certbot._internal.plugins.standalone import Authenticator self.config = mock.MagicMock(http01_port=get_open_port()) self.auth = Authenticator(self.config, name="standalone") self.auth.servers = mock.MagicMock() def test_more_info(self): assert isinstance(self.auth.more_info(), str) def test_get_chall_pref(self): assert self.auth.get_chall_pref(domain=None) == \ [challenges.HTTP01] def test_perform(self): achalls = self._get_achalls() response = self.auth.perform(achalls) expected = [achall.response(achall.account_key) for achall in achalls] assert response == expected @test_util.patch_display_util() def test_perform_eaddrinuse_retry(self, mock_get_utility): mock_utility = mock_get_utility() encountered_errno = errno.EADDRINUSE error = errors.StandaloneBindError(mock.MagicMock(errno=encountered_errno), -1) self.auth.servers.run.side_effect = [error] + 2 * [mock.MagicMock()] mock_yesno = mock_utility.yesno mock_yesno.return_value = True self.test_perform() self._assert_correct_yesno_call(mock_yesno) @test_util.patch_display_util() def test_perform_eaddrinuse_no_retry(self, mock_get_utility): mock_utility = mock_get_utility() mock_yesno = mock_utility.yesno mock_yesno.return_value = False encountered_errno = errno.EADDRINUSE with pytest.raises(errors.PluginError): self._fail_perform(encountered_errno) self._assert_correct_yesno_call(mock_yesno) def _assert_correct_yesno_call(self, mock_yesno): yesno_args, yesno_kwargs = mock_yesno.call_args assert "in use" in yesno_args[0] assert not yesno_kwargs.get("default", True) def test_perform_eacces(self): encountered_errno = errno.EACCES with pytest.raises(errors.PluginError): self._fail_perform(encountered_errno) def test_perform_unexpected_socket_error(self): encountered_errno = errno.ENOTCONN with pytest.raises(errors.StandaloneBindError): self._fail_perform(encountered_errno) def _fail_perform(self, encountered_errno): error = errors.StandaloneBindError(mock.MagicMock(errno=encountered_errno), -1) self.auth.servers.run.side_effect = error self.auth.perform(self._get_achalls()) @classmethod def _get_achalls(cls): domain = b'localhost' key = jose.JWK.load(test_util.load_vector('rsa512_key.pem')) http_01 = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.HTTP01_P, domain=domain, account_key=key) return [http_01] def test_cleanup(self): self.auth.servers.running.return_value = { 1: "server1", 2: "server2", } self.auth.served["server1"].add("chall1") self.auth.served["server2"].update(["chall2", "chall3"]) self.auth.cleanup(["chall1"]) assert self.auth.served == { "server1": set(), "server2": {"chall2", "chall3"}} self.auth.servers.stop.assert_called_once_with(1) self.auth.servers.running.return_value = { 2: "server2", } self.auth.cleanup(["chall2"]) assert self.auth.served == { "server1": set(), "server2": {"chall3"}} assert 1 == self.auth.servers.stop.call_count self.auth.cleanup(["chall3"]) assert self.auth.served == { "server1": set(), "server2": set()} self.auth.servers.stop.assert_called_with(2) def test_auth_hint(self): self.config.http01_port = "80" self.config.http01_address = None assert "on port 80" in self.auth.auth_hint([]) self.config.http01_address = "127.0.0.1" assert "on 127.0.0.1:80" in self.auth.auth_hint([]) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/storage_test.py 0000644 00000012505 15114562471 0011313 0 ustar 00 """Tests for certbot.plugins.storage.PluginStorage""" import json import sys from unittest import mock import pytest from certbot import errors from certbot.compat import filesystem from certbot.compat import os from certbot.tests import util as test_util class PluginStorageTest(test_util.ConfigTestCase): """Test for certbot.plugins.storage.PluginStorage""" def setUp(self): super().setUp() self.plugin_cls = test_util.DummyInstaller filesystem.mkdir(self.config.config_dir) with mock.patch("certbot.reverter.util"): self.plugin = self.plugin_cls(config=self.config, name="mockplugin") def test_load_errors_cant_read(self): with open(os.path.join(self.config.config_dir, ".pluginstorage.json"), "w") as fh: fh.write("dummy") # When unable to read file that exists mock_open = mock.mock_open() mock_open.side_effect = IOError self.plugin.storage._storagepath = os.path.join(self.config.config_dir, ".pluginstorage.json") with mock.patch("builtins.open", mock_open): with mock.patch('certbot.compat.os.path.isfile', return_value=True): with mock.patch("certbot.reverter.util"): with pytest.raises(errors.PluginStorageError): self.plugin.storage._load() # pylint: disable=protected-access def test_load_errors_empty(self): with open(os.path.join(self.config.config_dir, ".pluginstorage.json"), "w") as fh: fh.write('') with mock.patch("certbot.plugins.storage.logger.debug") as mock_log: # Should not error out but write a debug log line instead with mock.patch("certbot.reverter.util"): nocontent = self.plugin_cls(self.config, "mockplugin") with pytest.raises(KeyError): nocontent.storage.fetch("value") assert mock_log.called assert "no values loaded" in mock_log.call_args[0][0] def test_load_errors_corrupted(self): with open(os.path.join(self.config.config_dir, ".pluginstorage.json"), "w") as fh: fh.write('invalid json') with mock.patch("certbot.plugins.storage.logger.error") as mock_log: with mock.patch("certbot.reverter.util"): corrupted = self.plugin_cls(self.config, "mockplugin") with pytest.raises(errors.PluginError): corrupted.storage.fetch("value") assert "is corrupted" in mock_log.call_args[0][0] def test_save_errors_cant_serialize(self): with mock.patch("certbot.plugins.storage.logger.error") as mock_log: # Set data as something that can't be serialized self.plugin.storage._initialized = True # pylint: disable=protected-access self.plugin.storage._storagepath = "/tmp/whatever" self.plugin.storage._data = self.plugin_cls # pylint: disable=protected-access with pytest.raises(errors.PluginStorageError): self.plugin.storage.save() assert "Could not serialize" in mock_log.call_args[0][0] def test_save_errors_unable_to_write_file(self): mock_open = mock.mock_open() mock_open.side_effect = IOError with mock.patch("certbot.compat.filesystem.open", mock_open): with mock.patch("certbot.plugins.storage.logger.error") as mock_log: self.plugin.storage._data = {"valid": "data"} # pylint: disable=protected-access self.plugin.storage._initialized = True # pylint: disable=protected-access self.plugin.storage._storagepath = "/tmp/whatever" with pytest.raises(errors.PluginStorageError): self.plugin.storage.save() assert "Could not write" in mock_log.call_args[0][0] def test_save_uninitialized(self): with mock.patch("certbot.reverter.util"): with pytest.raises(errors.PluginStorageError): self.plugin_cls(self.config, "x").storage.save() def test_namespace_isolation(self): with mock.patch("certbot.reverter.util"): plugin1 = self.plugin_cls(self.config, "first") plugin2 = self.plugin_cls(self.config, "second") plugin1.storage.put("first_key", "first_value") with pytest.raises(KeyError): plugin2.storage.fetch("first_key") with pytest.raises(KeyError): plugin2.storage.fetch("first") assert plugin1.storage.fetch("first_key") == "first_value" def test_saved_state(self): self.plugin.storage.put("testkey", "testvalue") # Write to disk self.plugin.storage.save() with mock.patch("certbot.reverter.util"): another = self.plugin_cls(self.config, "mockplugin") assert another.storage.fetch("testkey") == "testvalue" with open(os.path.join(self.config.config_dir, ".pluginstorage.json"), 'r') as fh: psdata = fh.read() psjson = json.loads(psdata) assert "mockplugin" in psjson.keys() assert len(psjson) == 1 assert psjson["mockplugin"]["testkey"] == "testvalue" if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/util_test.py 0000644 00000002747 15114562471 0010633 0 ustar 00 """Tests for certbot.plugins.util.""" import sys from unittest import mock import pytest from certbot.compat import os def test_get_prefix(): from certbot.plugins.util import get_prefixes assert get_prefixes('/a/b/c') == \ [os.path.normpath(path) for path in ['/a/b/c', '/a/b', '/a', '/']] assert get_prefixes('/') == [os.path.normpath('/')] assert get_prefixes('a') == ['a'] @mock.patch("certbot.plugins.util.logger.debug") def test_path_surgery(mock_debug): from certbot.plugins.util import path_surgery all_path = {"PATH": "/usr/local/bin:/bin/:/usr/sbin/:/usr/local/sbin/"} with mock.patch.dict('os.environ', all_path): with mock.patch('certbot.util.exe_exists') as mock_exists: mock_exists.return_value = True assert path_surgery("eg") is True assert mock_debug.call_count == 0 assert os.environ["PATH"] == all_path["PATH"] if os.name != 'nt': # This part is specific to Linux since on Windows no PATH surgery is ever done. no_path = {"PATH": "/tmp/"} with mock.patch.dict('os.environ', no_path): path_surgery("thingy") assert mock_debug.call_count == (2 if os.name != 'nt' else 1) assert "Failed to find" in mock_debug.call_args[0][0] assert "/usr/local/bin" in os.environ["PATH"] assert "/tmp" in os.environ["PATH"] if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover plugins/webroot_test.py 0000644 00000036032 15114562471 0011331 0 ustar 00 """Tests for certbot._internal.plugins.webroot.""" from __future__ import print_function import argparse import errno import json import shutil import sys import tempfile import unittest from unittest import mock import josepy as jose import pytest from acme import challenges from certbot import achallenges from certbot import errors from certbot.compat import filesystem from certbot.compat import os from certbot.display import util as display_util from certbot.tests import acme_util from certbot.tests import util as test_util KEY = jose.JWKRSA.load(test_util.load_vector("rsa512_key.pem")) class AuthenticatorTest(unittest.TestCase): """Tests for certbot._internal.plugins.webroot.Authenticator.""" achall = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.HTTP01_P, domain="thing.com", account_key=KEY) def setUp(self): from certbot._internal.plugins.webroot import Authenticator # On Linux directories created by tempfile.mkdtemp inherit their permissions from their # parent directory. So the actual permissions are inconsistent over various tests env. # To circumvent this, a dedicated sub-workspace is created under the workspace, using # filesystem.mkdir to get consistent permissions. self.workspace = tempfile.mkdtemp() self.path = os.path.join(self.workspace, 'webroot') filesystem.mkdir(self.path) self.partial_root_challenge_path = os.path.join( self.path, ".well-known") self.root_challenge_path = os.path.join( self.path, ".well-known", "acme-challenge") self.validation_path = os.path.join( self.root_challenge_path, "ZXZhR3hmQURzNnBTUmIyTEF2OUlaZjE3RHQzanV4R0orUEN0OTJ3citvQQ") self.config = mock.MagicMock(webroot_path=self.path, webroot_map={"thing.com": self.path}) self.auth = Authenticator(self.config, "webroot") def tearDown(self): shutil.rmtree(self.path) def test_more_info(self): more_info = self.auth.more_info() assert isinstance(more_info, str) assert self.path in more_info def test_add_parser_arguments(self): add = mock.MagicMock() self.auth.add_parser_arguments(add) assert 2 == add.call_count def test_prepare(self): self.auth.prepare() # shouldn't raise any exceptions @test_util.patch_display_util() def test_webroot_from_list(self, mock_get_utility): self.config.webroot_path = [] self.config.webroot_map = {"otherthing.com": self.path} mock_display = mock_get_utility() mock_display.menu.return_value = (display_util.OK, 1,) self.auth.perform([self.achall]) assert mock_display.menu.called for call in mock_display.menu.call_args_list: assert self.achall.domain in call[0][0] assert all( webroot in call[0][1] for webroot in self.config.webroot_map.values()) assert self.config.webroot_map[self.achall.domain] == \ self.path @unittest.skipIf(filesystem.POSIX_MODE, reason='Test specific to Windows') @test_util.patch_display_util() def test_webconfig_file_generate_and_cleanup(self, mock_get_utility): mock_display = mock_get_utility() mock_display.menu.return_value = (display_util.OK, 1,) self.auth.perform([self.achall]) assert os.path.exists(os.path.join(self.root_challenge_path, "web.config")) self.auth.cleanup([self.achall]) assert not os.path.exists(os.path.join(self.root_challenge_path, "web.config")) @unittest.skipIf(filesystem.POSIX_MODE, reason='Test specific to Windows') @test_util.patch_display_util() def test_foreign_webconfig_file_handling(self, mock_get_utility): mock_display = mock_get_utility() mock_display.menu.return_value = (display_util.OK, 1,) challenge_path = os.path.join(self.path, ".well-known", "acme-challenge") filesystem.makedirs(challenge_path) webconfig_path = os.path.join(challenge_path, "web.config") with open(webconfig_path, "w") as file: file.write("something") self.auth.perform([self.achall]) from certbot import crypto_util webconfig_hash = crypto_util.sha256sum(webconfig_path) from certbot._internal.plugins.webroot import _WEB_CONFIG_SHA256SUMS assert webconfig_hash not in _WEB_CONFIG_SHA256SUMS @unittest.skipIf(filesystem.POSIX_MODE, reason='Test specific to Windows') def test_foreign_webconfig_multiple_domains(self): # Covers bug https://github.com/certbot/certbot/issues/9091 achall_2 = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.chall_to_challb(challenges.HTTP01(token=b"bingo"), "pending"), domain="second-thing.com", account_key=KEY) self.config.webroot_map["second-thing.com"] = self.path challenge_path = os.path.join(self.path, ".well-known", "acme-challenge") filesystem.makedirs(challenge_path) webconfig_path = os.path.join(challenge_path, "web.config") with open(webconfig_path, "w") as file: file.write("something") self.auth.perform([self.achall, achall_2]) @test_util.patch_display_util() def test_webroot_from_list_help_and_cancel(self, mock_get_utility): self.config.webroot_path = [] self.config.webroot_map = {"otherthing.com": self.path} mock_display = mock_get_utility() mock_display.menu.side_effect = ((display_util.CANCEL, -1),) with pytest.raises(errors.PluginError): self.auth.perform([self.achall]) assert mock_display.menu.called for call in mock_display.menu.call_args_list: assert self.achall.domain in call[0][0] assert all( webroot in call[0][1] for webroot in self.config.webroot_map.values()) @test_util.patch_display_util() def test_new_webroot(self, mock_get_utility): self.config.webroot_path = [] self.config.webroot_map = {"something.com": self.path} mock_display = mock_get_utility() mock_display.menu.return_value = (display_util.OK, 0,) with mock.patch('certbot.display.ops.validated_directory') as m: m.side_effect = ((display_util.CANCEL, -1), (display_util.OK, self.path,)) self.auth.perform([self.achall]) assert self.config.webroot_map[self.achall.domain] == self.path @test_util.patch_display_util() def test_new_webroot_empty_map_cancel(self, mock_get_utility): self.config.webroot_path = [] self.config.webroot_map = {} mock_display = mock_get_utility() mock_display.menu.return_value = (display_util.OK, 0,) with mock.patch('certbot.display.ops.validated_directory') as m: m.return_value = (display_util.CANCEL, -1) with pytest.raises(errors.PluginError): self.auth.perform([self.achall]) def test_perform_missing_root(self): self.config.webroot_path = None self.config.webroot_map = {} with pytest.raises(errors.PluginError): self.auth.perform([]) def test_perform_reraises_other_errors(self): self.auth.full_path = os.path.join(self.path, "null") permission_canary = os.path.join(self.path, "rnd") with open(permission_canary, "w") as f: f.write("thingimy") filesystem.chmod(self.path, 0o000) try: with open(permission_canary, "r"): pass print("Warning, running tests as root skips permissions tests...") except OSError: # ok, permissions work, test away... with pytest.raises(errors.PluginError): self.auth.perform([]) filesystem.chmod(self.path, 0o700) @mock.patch("certbot._internal.plugins.webroot.filesystem.copy_ownership_and_apply_mode") def test_failed_chown(self, mock_ownership): mock_ownership.side_effect = OSError(errno.EACCES, "msg") self.auth.perform([self.achall]) # exception caught and logged @test_util.patch_display_util() def test_perform_new_webroot_not_in_map(self, mock_get_utility): new_webroot = tempfile.mkdtemp() self.config.webroot_path = [] self.config.webroot_map = {"whatever.com": self.path} mock_display = mock_get_utility() mock_display.menu.side_effect = ((display_util.OK, 0), (display_util.OK, new_webroot)) achall = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.HTTP01_P, domain="something.com", account_key=KEY) with mock.patch('certbot.display.ops.validated_directory') as m: m.return_value = (display_util.OK, new_webroot,) self.auth.perform([achall]) assert self.config.webroot_map[achall.domain] == new_webroot def test_perform_permissions(self): self.auth.prepare() # Remove exec bit from permission check, so that it # matches the file self.auth.perform([self.achall]) assert filesystem.check_mode(self.validation_path, 0o644) # Check permissions of the directories for dirpath, dirnames, _ in os.walk(self.path): for directory in dirnames: full_path = os.path.join(dirpath, directory) assert filesystem.check_mode(full_path, 0o755) assert filesystem.has_same_ownership(self.validation_path, self.path) def test_perform_cleanup(self): self.auth.prepare() responses = self.auth.perform([self.achall]) assert 1 == len(responses) assert os.path.exists(self.validation_path) with open(self.validation_path) as validation_f: validation = validation_f.read() assert challenges.KeyAuthorizationChallengeResponse( key_authorization=validation).verify( self.achall.chall, KEY.public_key()) self.auth.cleanup([self.achall]) assert not os.path.exists(self.validation_path) assert not os.path.exists(self.root_challenge_path) assert not os.path.exists(self.partial_root_challenge_path) def test_perform_cleanup_existing_dirs(self): filesystem.mkdir(self.partial_root_challenge_path) self.auth.prepare() self.auth.perform([self.achall]) self.auth.cleanup([self.achall]) # Ensure we don't "clean up" directories that previously existed assert not os.path.exists(self.validation_path) assert not os.path.exists(self.root_challenge_path) def test_perform_cleanup_multiple_challenges(self): bingo_achall = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.chall_to_challb( challenges.HTTP01(token=b"bingo"), "pending"), domain="thing.com", account_key=KEY) bingo_validation_path = "YmluZ28" filesystem.mkdir(self.partial_root_challenge_path) self.auth.prepare() self.auth.perform([bingo_achall, self.achall]) self.auth.cleanup([self.achall]) assert not os.path.exists(bingo_validation_path) assert os.path.exists(self.root_challenge_path) self.auth.cleanup([bingo_achall]) assert not os.path.exists(self.validation_path) assert not os.path.exists(self.root_challenge_path) def test_cleanup_leftovers(self): self.auth.prepare() self.auth.perform([self.achall]) leftover_path = os.path.join(self.root_challenge_path, 'leftover') filesystem.mkdir(leftover_path) self.auth.cleanup([self.achall]) assert not os.path.exists(self.validation_path) assert os.path.exists(self.root_challenge_path) os.rmdir(leftover_path) @mock.patch('certbot.compat.os.rmdir') def test_cleanup_failure(self, mock_rmdir): self.auth.prepare() self.auth.perform([self.achall]) os_error = OSError() os_error.errno = errno.EACCES mock_rmdir.side_effect = os_error self.auth.cleanup([self.achall]) assert not os.path.exists(self.validation_path) assert os.path.exists(self.root_challenge_path) class WebrootActionTest(unittest.TestCase): """Tests for webroot argparse actions.""" achall = achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.HTTP01_P, domain="thing.com", account_key=KEY) def setUp(self): from certbot._internal.plugins.webroot import Authenticator self.path = tempfile.mkdtemp() self.parser = argparse.ArgumentParser() self.parser.add_argument("-d", "--domains", action="append", default=[]) Authenticator.inject_parser_options(self.parser, "webroot") def test_webroot_map_action(self): args = self.parser.parse_args( ["--webroot-map", json.dumps({'thing.com': self.path})]) assert args.webroot_map["thing.com"] == self.path def test_domain_before_webroot(self): args = self.parser.parse_args( "-d {0} -w {1}".format(self.achall.domain, self.path).split()) config = self._get_config_after_perform(args) assert config.webroot_map[self.achall.domain] == self.path def test_domain_before_webroot_error(self): with pytest.raises(errors.PluginError): self.parser.parse_args("-d foo -w bar -w baz".split()) with pytest.raises(errors.PluginError): self.parser.parse_args("-d foo -w bar -d baz -w qux".split()) def test_multiwebroot(self): args = self.parser.parse_args("-w {0} -d {1} -w {2} -d bar".format( self.path, self.achall.domain, tempfile.mkdtemp()).split()) assert args.webroot_map[self.achall.domain] == self.path config = self._get_config_after_perform(args) assert config.webroot_map[self.achall.domain] == self.path def test_webroot_map_partial_without_perform(self): # This test acknowledges the fact that webroot_map content will be partial if webroot # plugin perform method is not invoked (corner case when all auths are already valid). # To not be a problem, the webroot_path must always been conserved during renew. # This condition is challenged by: # certbot.tests.renewal_tests::RenewalTest::test_webroot_params_conservation # See https://github.com/certbot/certbot/pull/7095 for details. other_webroot_path = tempfile.mkdtemp() args = self.parser.parse_args("-w {0} -d {1} -w {2} -d bar".format( self.path, self.achall.domain, other_webroot_path).split()) assert args.webroot_map == {self.achall.domain: self.path} assert args.webroot_path == [self.path, other_webroot_path] def _get_config_after_perform(self, config): from certbot._internal.plugins.webroot import Authenticator auth = Authenticator(config, "webroot") auth.perform([self.achall]) return auth.config if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover __init__.py 0000644 00000000024 15114562471 0006657 0 ustar 00 """certbot tests""" account_test.py 0000644 00000033700 15114562471 0007622 0 ustar 00 """Tests for certbot._internal.account.""" import datetime import sys import unittest from unittest import mock import josepy as jose import pytest import pytz from acme import messages from certbot import errors from certbot.compat import filesystem from certbot.compat import misc from certbot.compat import os import certbot.tests.util as test_util KEY = jose.JWKRSA.load(test_util.load_vector("rsa512_key.pem")) class AccountTest(unittest.TestCase): """Tests for certbot._internal.account.Account.""" def setUp(self): from certbot._internal.account import Account self.regr = mock.MagicMock() self.meta = Account.Meta( creation_host="test.certbot.org", creation_dt=datetime.datetime( 2015, 7, 4, 14, 4, 10, tzinfo=pytz.UTC)) self.acc = Account(self.regr, KEY, self.meta) self.regr.__repr__ = mock.MagicMock(return_value="i_am_a_regr") with mock.patch("certbot._internal.account.socket") as mock_socket: mock_socket.getfqdn.return_value = "test.certbot.org" with mock.patch("certbot._internal.account.datetime") as mock_dt: mock_dt.datetime.now.return_value = self.meta.creation_dt self.acc_no_meta = Account(self.regr, KEY) def test_init(self): assert self.regr == self.acc.regr assert KEY == self.acc.key assert self.meta == self.acc_no_meta.meta def test_id(self): assert self.acc.id == "7adac10320f585ddf118429c0c4af2cd" def test_slug(self): assert self.acc.slug == "test.certbot.org@2015-07-04T14:04:10Z (7ada)" def test_repr(self): assert repr(self.acc).startswith( "<Account(i_am_a_regr, 7adac10320f585ddf118429c0c4af2cd, Meta(") class MetaTest(unittest.TestCase): """Tests for certbot._internal.account.Meta.""" def test_deserialize_partial(self): from certbot._internal.account import Account meta = Account.Meta.json_loads( '{' ' "creation_dt": "2020-06-13T07:46:45Z",' ' "creation_host": "hyperion.localdomain"' '}') assert meta.creation_dt is not None assert meta.creation_host is not None assert meta.register_to_eff is None def test_deserialize_full(self): from certbot._internal.account import Account meta = Account.Meta.json_loads( '{' ' "creation_dt": "2020-06-13T07:46:45Z",' ' "creation_host": "hyperion.localdomain",' ' "register_to_eff": "bar"' '}') assert meta.creation_dt is not None assert meta.creation_host is not None assert meta.register_to_eff is not None class AccountMemoryStorageTest(unittest.TestCase): """Tests for certbot._internal.account.AccountMemoryStorage.""" def setUp(self): from certbot._internal.account import AccountMemoryStorage self.storage = AccountMemoryStorage() def test_it(self): account = mock.Mock(id="x") assert [] == self.storage.find_all() with pytest.raises(errors.AccountNotFound): self.storage.load("x") self.storage.save(account, None) assert [account] == self.storage.find_all() assert account == self.storage.load("x") self.storage.save(account, None) assert [account] == self.storage.find_all() class AccountFileStorageTest(test_util.ConfigTestCase): """Tests for certbot._internal.account.AccountFileStorage.""" def setUp(self): super().setUp() from certbot._internal.account import AccountFileStorage self.storage = AccountFileStorage(self.config) from certbot._internal.account import Account meta = Account.Meta( creation_host="test.example.org", creation_dt=datetime.datetime( 2021, 1, 5, 14, 4, 10, tzinfo=pytz.UTC)) self.acc = Account( regr=messages.RegistrationResource( uri=None, body=messages.Registration()), key=KEY, meta=meta) self.mock_client = mock.MagicMock() def test_init_creates_dir(self): assert os.path.isdir( misc.underscores_for_unsupported_characters_in_path(self.config.accounts_dir)) def test_save_and_restore(self): self.storage.save(self.acc, self.mock_client) account_path = os.path.join(self.config.accounts_dir, self.acc.id) assert os.path.exists(account_path) for file_name in "regr.json", "meta.json", "private_key.json": assert os.path.exists( os.path.join(account_path, file_name)) assert filesystem.check_mode(os.path.join(account_path, "private_key.json"), 0o400) # restore loaded = self.storage.load(self.acc.id) assert self.acc == loaded def test_update_regr(self): self.storage.update_regr(self.acc) account_path = os.path.join(self.config.accounts_dir, self.acc.id) assert os.path.exists(account_path) assert os.path.exists(os.path.join(account_path, "regr.json")) assert not os.path.exists(os.path.join(account_path, "meta.json")) assert not os.path.exists(os.path.join(account_path, "private_key.json")) def test_update_meta(self): self.storage.update_meta(self.acc) account_path = os.path.join(self.config.accounts_dir, self.acc.id) assert os.path.exists(account_path) assert os.path.exists(os.path.join(account_path, "meta.json")) assert not os.path.exists(os.path.join(account_path, "regr.json")) assert not os.path.exists(os.path.join(account_path, "private_key.json")) def test_find_all(self): self.storage.save(self.acc, self.mock_client) assert [self.acc] == self.storage.find_all() def test_find_all_none_empty_list(self): assert [] == self.storage.find_all() def test_find_all_accounts_dir_absent(self): os.rmdir(self.config.accounts_dir) assert [] == self.storage.find_all() def test_find_all_load_skips(self): # pylint: disable=protected-access self.storage._load_for_server_path = mock.MagicMock( side_effect=["x", errors.AccountStorageError, "z"]) with mock.patch("certbot._internal.account.os.listdir") as mock_listdir: mock_listdir.return_value = ["x", "y", "z"] assert ["x", "z"] == self.storage.find_all() def test_load_non_existent_raises_error(self): with pytest.raises(errors.AccountNotFound): self.storage.load("missing") def _set_server(self, server): self.config.server = server from certbot._internal.account import AccountFileStorage self.storage = AccountFileStorage(self.config) def test_find_all_neither_exists(self): self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') assert [] == self.storage.find_all() assert [] == self.storage.find_all() assert not os.path.islink(self.config.accounts_dir) def test_find_all_find_before_save(self): self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') assert [] == self.storage.find_all() self.storage.save(self.acc, self.mock_client) assert [self.acc] == self.storage.find_all() assert [self.acc] == self.storage.find_all() assert not os.path.islink(self.config.accounts_dir) # we shouldn't have created a v1 account prev_server_path = 'https://acme-staging.api.letsencrypt.org/directory' assert not os.path.isdir(self.config.accounts_dir_for_server_path(prev_server_path)) def test_find_all_save_before_find(self): self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) assert [self.acc] == self.storage.find_all() assert [self.acc] == self.storage.find_all() assert not os.path.islink(self.config.accounts_dir) assert os.path.isdir(self.config.accounts_dir) prev_server_path = 'https://acme-staging.api.letsencrypt.org/directory' assert not os.path.isdir(self.config.accounts_dir_for_server_path(prev_server_path)) def test_find_all_server_downgrade(self): # don't use v2 accounts with a v1 url self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') assert [] == self.storage.find_all() self.storage.save(self.acc, self.mock_client) assert [self.acc] == self.storage.find_all() self._set_server('https://acme-staging.api.letsencrypt.org/directory') assert [] == self.storage.find_all() def test_upgrade_version_staging(self): self._set_server('https://acme-staging.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') assert [self.acc] == self.storage.find_all() def test_upgrade_version_production(self): self._set_server('https://acme-v01.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) self._set_server('https://acme-v02.api.letsencrypt.org/directory') assert [self.acc] == self.storage.find_all() @mock.patch('certbot.compat.os.rmdir') def test_corrupted_account(self, mock_rmdir): # pylint: disable=protected-access self._set_server('https://acme-staging.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) mock_rmdir.side_effect = OSError self.storage._load_for_server_path = mock.MagicMock( side_effect=errors.AccountStorageError) self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') assert [] == self.storage.find_all() def test_upgrade_load(self): self._set_server('https://acme-staging.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) prev_account = self.storage.load(self.acc.id) self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') account = self.storage.load(self.acc.id) assert prev_account == account def test_upgrade_load_single_account(self): self._set_server('https://acme-staging.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) prev_account = self.storage.load(self.acc.id) self._set_server_and_stop_symlink('https://acme-staging-v02.api.letsencrypt.org/directory') account = self.storage.load(self.acc.id) assert prev_account == account def test_load_ioerror(self): self.storage.save(self.acc, self.mock_client) mock_open = mock.mock_open() mock_open.side_effect = IOError with mock.patch("builtins.open", mock_open): with pytest.raises(errors.AccountStorageError): self.storage.load(self.acc.id) def test_save_ioerrors(self): mock_open = mock.mock_open() mock_open.side_effect = IOError # TODO: [None, None, IOError] with mock.patch("builtins.open", mock_open): with pytest.raises(errors.AccountStorageError): self.storage.save(self.acc, self.mock_client) def test_delete(self): self.storage.save(self.acc, self.mock_client) self.storage.delete(self.acc.id) with pytest.raises(errors.AccountNotFound): self.storage.load(self.acc.id) def test_delete_no_account(self): with pytest.raises(errors.AccountNotFound): self.storage.delete(self.acc.id) def _assert_symlinked_account_removed(self): # create v1 account self._set_server('https://acme-staging.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) # ensure v2 isn't already linked to it with mock.patch('certbot._internal.constants.LE_REUSE_SERVERS', {}): self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') with pytest.raises(errors.AccountNotFound): self.storage.load(self.acc.id) def _test_delete_folders(self, server_url): # create symlinked servers self._set_server('https://acme-staging.api.letsencrypt.org/directory') self.storage.save(self.acc, self.mock_client) self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') self.storage.load(self.acc.id) # delete starting at given server_url self._set_server(server_url) self.storage.delete(self.acc.id) # make sure we're gone from both urls self._set_server('https://acme-staging.api.letsencrypt.org/directory') with pytest.raises(errors.AccountNotFound): self.storage.load(self.acc.id) self._set_server('https://acme-staging-v02.api.letsencrypt.org/directory') with pytest.raises(errors.AccountNotFound): self.storage.load(self.acc.id) def test_delete_folders_up(self): self._test_delete_folders('https://acme-staging.api.letsencrypt.org/directory') self._assert_symlinked_account_removed() def test_delete_folders_down(self): self._test_delete_folders('https://acme-staging-v02.api.letsencrypt.org/directory') self._assert_symlinked_account_removed() def _set_server_and_stop_symlink(self, server_path): self._set_server(server_path) with open(os.path.join(self.config.accounts_dir, 'foo'), 'w') as f: f.write('bar') def test_delete_shared_account_up(self): self._set_server_and_stop_symlink('https://acme-staging-v02.api.letsencrypt.org/directory') self._test_delete_folders('https://acme-staging.api.letsencrypt.org/directory') def test_delete_shared_account_down(self): self._set_server_and_stop_symlink('https://acme-staging-v02.api.letsencrypt.org/directory') self._test_delete_folders('https://acme-staging-v02.api.letsencrypt.org/directory') if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover auth_handler_test.py 0000644 00000060714 15114562471 0010631 0 ustar 00 """Tests for certbot._internal.auth_handler.""" import datetime import logging import sys import unittest from unittest import mock from josepy import b64encode import pytest from acme import challenges from acme import client as acme_client from acme import errors as acme_errors from acme import messages from certbot import achallenges from certbot import errors from certbot._internal.display import obj as display_obj from certbot.plugins import common as plugin_common from certbot.tests import acme_util from certbot.tests import util as test_util class ChallengeFactoryTest(unittest.TestCase): # pylint: disable=protected-access def setUp(self): from certbot._internal.auth_handler import AuthHandler # Account is mocked... self.handler = AuthHandler(None, None, mock.Mock(key="mock_key"), []) self.authzr = acme_util.gen_authzr( messages.STATUS_PENDING, "test", acme_util.CHALLENGES, [messages.STATUS_PENDING] * 6) def test_all(self): achalls = self.handler._challenge_factory( self.authzr, range(0, len(acme_util.CHALLENGES))) assert [achall.chall for achall in achalls] == acme_util.CHALLENGES def test_one_http(self): achalls = self.handler._challenge_factory(self.authzr, [0]) assert [achall.chall for achall in achalls] == [acme_util.HTTP01] def test_unrecognized(self): authzr = acme_util.gen_authzr( messages.STATUS_PENDING, "test", [mock.Mock(chall="chall", typ="unrecognized")], [messages.STATUS_PENDING]) achalls = self.handler._challenge_factory(authzr, [0]) assert type(achalls[0]) == achallenges.Other class HandleAuthorizationsTest(unittest.TestCase): """handle_authorizations test. This tests everything except for all functions under _poll_challenges. """ def setUp(self): from certbot._internal.auth_handler import AuthHandler self.mock_display = mock.Mock() self.mock_config = mock.Mock(debug_challenges=False) display_obj.set_display(self.mock_display) self.mock_auth = mock.MagicMock(name="Authenticator") self.mock_auth.get_chall_pref.return_value = [challenges.HTTP01] self.mock_auth.perform.side_effect = gen_auth_resp self.mock_account = mock.MagicMock() self.mock_net = mock.MagicMock(spec=acme_client.ClientV2) self.mock_net.retry_after.side_effect = acme_client.ClientV2.retry_after self.handler = AuthHandler( self.mock_auth, self.mock_net, self.mock_account, []) logging.disable(logging.CRITICAL) def tearDown(self): logging.disable(logging.NOTSET) def _test_name1_http_01_1_common(self): authzr = gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES) mock_order = mock.MagicMock(authorizations=[authzr]) self.mock_net.poll.side_effect = _gen_mock_on_poll(retry=1, wait_value=30) with mock.patch('certbot._internal.auth_handler.time') as mock_time: authzr = self.handler.handle_authorizations(mock_order, self.mock_config) assert self.mock_net.answer_challenge.call_count == 1 assert self.mock_net.poll.call_count == 2 # Because there is one retry assert mock_time.sleep.call_count == 2 # Retry-After header is 30 seconds, but at the time sleep is invoked, several # instructions are executed, and next pool is in less than 30 seconds. assert mock_time.sleep.call_args_list[1][0][0] <= 30 # However, assert that we did not took the default value of 3 seconds. assert mock_time.sleep.call_args_list[1][0][0] > 3 assert self.mock_auth.cleanup.call_count == 1 # Test if list first element is http-01, use typ because it is an achall assert self.mock_auth.cleanup.call_args[0][0][0].typ == "http-01" assert len(authzr) == 1 def test_name1_http_01_1_acme_2(self): self._test_name1_http_01_1_common() def test_name1_http_01_1_dns_1_acme_2(self): self.mock_net.poll.side_effect = _gen_mock_on_poll() self.mock_auth.get_chall_pref.return_value.append(challenges.DNS01) authzr = gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES) mock_order = mock.MagicMock(authorizations=[authzr]) authzr = self.handler.handle_authorizations(mock_order, self.mock_config) assert self.mock_net.answer_challenge.call_count == 1 assert self.mock_net.poll.call_count == 1 assert self.mock_auth.cleanup.call_count == 1 cleaned_up_achalls = self.mock_auth.cleanup.call_args[0][0] assert len(cleaned_up_achalls) == 1 assert cleaned_up_achalls[0].typ == "http-01" # Length of authorizations list assert len(authzr) == 1 def test_name3_http_01_3_common_acme_2(self): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES), gen_dom_authzr(domain="1", challs=acme_util.CHALLENGES), gen_dom_authzr(domain="2", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) self.mock_net.poll.side_effect = _gen_mock_on_poll() authzr = self.handler.handle_authorizations(mock_order, self.mock_config) assert self.mock_net.answer_challenge.call_count == 3 # Check poll call assert self.mock_net.poll.call_count == 3 assert self.mock_auth.cleanup.call_count == 1 assert len(authzr) == 3 def test_debug_challenges(self): config = mock.Mock(debug_challenges=True, verbose_count=0) authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) account_key_thumbprint = b"foobarbaz" self.mock_account.key.thumbprint.return_value = account_key_thumbprint self.mock_net.poll.side_effect = _gen_mock_on_poll() self.handler.handle_authorizations(mock_order, config) assert self.mock_net.answer_challenge.call_count == 1 assert self.mock_display.notification.call_count == 1 assert 'Pass "-v" for more info' in \ self.mock_display.notification.call_args[0][0] assert f"http://{authzrs[0].body.identifier.value}/.well-known/acme-challenge/" + \ b64encode(authzrs[0].body.challenges[0].chall.token).decode() not in \ self.mock_display.notification.call_args[0][0] assert b64encode(account_key_thumbprint).decode() not in \ self.mock_display.notification.call_args[0][0] def test_debug_challenges_verbose(self): config = mock.Mock(debug_challenges=True, verbose_count=1) authzrs = [gen_dom_authzr(domain="0", challs=[acme_util.HTTP01]), gen_dom_authzr(domain="1", challs=[acme_util.DNS01])] mock_order = mock.MagicMock(authorizations=authzrs) account_key_thumbprint = b"foobarbaz" self.mock_account.key.thumbprint.return_value = account_key_thumbprint self.mock_net.poll.side_effect = _gen_mock_on_poll() self.mock_auth.get_chall_pref.return_value = [challenges.HTTP01, challenges.DNS01] self.handler.handle_authorizations(mock_order, config) assert self.mock_net.answer_challenge.call_count == 2 assert self.mock_display.notification.call_count == 1 assert 'Pass "-v" for more info' not in \ self.mock_display.notification.call_args[0][0] assert f"http://{authzrs[0].body.identifier.value}/.well-known/acme-challenge/" + \ b64encode(authzrs[0].body.challenges[0].chall.token).decode() in \ self.mock_display.notification.call_args[0][0] assert b64encode(account_key_thumbprint).decode() in \ self.mock_display.notification.call_args[0][0] assert f"_acme-challenge.{authzrs[1].body.identifier.value}" in \ self.mock_display.notification.call_args[0][0] assert authzrs[1].body.challenges[0].validation(self.mock_account.key) in \ self.mock_display.notification.call_args[0][0] def test_perform_failure(self): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) self.mock_auth.perform.side_effect = errors.AuthorizationError with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) def test_max_retries_exceeded(self): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) # We will return STATUS_PENDING twice before returning STATUS_VALID. self.mock_net.poll.side_effect = _gen_mock_on_poll(retry=2) with pytest.raises(errors.AuthorizationError, match='All authorizations were not finalized by the CA.'): # We retry only once, so retries will be exhausted before STATUS_VALID is returned. self.handler.handle_authorizations(mock_order, self.mock_config, False, 1) @mock.patch('certbot._internal.auth_handler.time.sleep') def test_deadline_exceeded(self, mock_sleep): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) orig_now = datetime.datetime.now state = {'time_slept': 0} def mock_sleep_effect(secs): state['time_slept'] += secs mock_sleep.side_effect = mock_sleep_effect def mock_now_effect(): return orig_now() + datetime.timedelta(seconds=state["time_slept"]) # We will return STATUS_PENDING and ask Certbot to sleep for 20 minutes at a time. interval = datetime.timedelta(minutes=20).seconds self.mock_net.poll.side_effect = _gen_mock_on_poll(status=messages.STATUS_PENDING, wait_value=interval) with pytest.raises(errors.AuthorizationError, match='All authorizations were not finalized by the CA.'): with mock.patch('certbot._internal.auth_handler.datetime.datetime') as mock_dt: mock_dt.now.side_effect = mock_now_effect # Polling will only proceed for 30 minutes at most, so the second 20 minute sleep # should be truncated and the polling should be aborted. self.handler.handle_authorizations(mock_order, self.mock_config, False) assert mock_sleep.call_count == 3 # 1s, 20m and 10m sleep assert mock_sleep.call_args_list[0][0][0] == 1 assert abs(mock_sleep.call_args_list[1][0][0] - (interval - 1)) <= 1 assert abs(mock_sleep.call_args_list[2][0][0] - (interval/2 - 1)) <= 1 def test_no_domains(self): mock_order = mock.MagicMock(authorizations=[]) with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) def test_preferred_challenge_choice_common_acme_2(self): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) self.mock_auth.get_chall_pref.return_value.append(challenges.HTTP01) self.handler.pref_challs.extend((challenges.HTTP01.typ, challenges.DNS01.typ,)) self.mock_net.poll.side_effect = _gen_mock_on_poll() self.handler.handle_authorizations(mock_order, self.mock_config) assert self.mock_auth.cleanup.call_count == 1 assert self.mock_auth.cleanup.call_args[0][0][0].typ == "http-01" def test_preferred_challenges_not_supported_acme_2(self): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) self.handler.pref_challs.append(challenges.DNS01.typ) with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) def test_dns_only_challenge_not_supported(self): authzrs = [gen_dom_authzr(domain="0", challs=[acme_util.DNS01])] mock_order = mock.MagicMock(authorizations=authzrs) with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) def test_perform_error(self): self.mock_auth.perform.side_effect = errors.AuthorizationError authzr = gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES) mock_order = mock.MagicMock(authorizations=[authzr]) with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) assert self.mock_auth.cleanup.call_count == 1 assert self.mock_auth.cleanup.call_args[0][0][0].typ == "http-01" def test_answer_error(self): self.mock_net.answer_challenge.side_effect = errors.AuthorizationError authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) assert self.mock_auth.cleanup.call_count == 1 assert self.mock_auth.cleanup.call_args[0][0][0].typ == "http-01" def test_incomplete_authzr_error(self): authzrs = [gen_dom_authzr(domain="0", challs=acme_util.CHALLENGES)] mock_order = mock.MagicMock(authorizations=authzrs) self.mock_net.poll.side_effect = _gen_mock_on_poll(status=messages.STATUS_INVALID) with test_util.patch_display_util(): with pytest.raises(errors.AuthorizationError, match='Some challenges have failed.'): self.handler.handle_authorizations(mock_order, self.mock_config, False) assert self.mock_auth.cleanup.call_count == 1 assert self.mock_auth.cleanup.call_args[0][0][0].typ == "http-01" def test_best_effort(self): def _conditional_mock_on_poll(authzr): """This mock will invalidate one authzr, and invalidate the other one""" valid_mock = _gen_mock_on_poll(messages.STATUS_VALID) invalid_mock = _gen_mock_on_poll(messages.STATUS_INVALID) if authzr.body.identifier.value == 'will-be-invalid': return invalid_mock(authzr) return valid_mock(authzr) # Two authzrs. Only one will be valid. authzrs = [gen_dom_authzr(domain="will-be-valid", challs=acme_util.CHALLENGES), gen_dom_authzr(domain="will-be-invalid", challs=acme_util.CHALLENGES)] self.mock_net.poll.side_effect = _conditional_mock_on_poll mock_order = mock.MagicMock(authorizations=authzrs) with mock.patch('certbot._internal.auth_handler.AuthHandler._report_failed_authzrs') \ as mock_report: valid_authzr = self.handler.handle_authorizations(mock_order, self.mock_config, True) # Because best_effort=True, we did not blow up. Instead ... assert len(valid_authzr) == 1 # ... the valid authzr has been processed assert mock_report.call_count == 1 # ... the invalid authzr has been reported self.mock_net.poll.side_effect = _gen_mock_on_poll(status=messages.STATUS_INVALID) with test_util.patch_display_util(): with pytest.raises(errors.AuthorizationError, match='All challenges have failed.'): # Despite best_effort=True, process will fail because no authzr is valid. self.handler.handle_authorizations(mock_order, self.mock_config, True) def test_validated_challenge_not_rerun(self): # With a pending challenge that is not supported by the plugin, we # expect an exception to be raised. authzr = acme_util.gen_authzr( messages.STATUS_PENDING, "0", [acme_util.DNS01], [messages.STATUS_PENDING]) mock_order = mock.MagicMock(authorizations=[authzr]) with pytest.raises(errors.AuthorizationError): self.handler.handle_authorizations(mock_order, self.mock_config) # With a validated challenge that is not supported by the plugin, we # expect the challenge to not be solved again and # handle_authorizations() to succeed. authzr = acme_util.gen_authzr( messages.STATUS_VALID, "0", [acme_util.DNS01], [messages.STATUS_VALID]) mock_order = mock.MagicMock(authorizations=[authzr]) self.handler.handle_authorizations(mock_order, self.mock_config) def test_valid_authzrs_deactivated(self): """When we deactivate valid authzrs in an orderr, we expect them to become deactivated and to receive a list of deactivated authzrs in return.""" def _mock_deactivate(authzr): if authzr.body.status == messages.STATUS_VALID: if authzr.body.identifier.value == "is_valid_but_will_fail": raise acme_errors.Error("Mock deactivation ACME error") authzb = authzr.body.update(status=messages.STATUS_DEACTIVATED) authzr = messages.AuthorizationResource(body=authzb) else: # pragma: no cover raise errors.Error("Can't deactivate non-valid authz") return authzr to_deactivate = [("is_valid", messages.STATUS_VALID), ("is_pending", messages.STATUS_PENDING), ("is_valid_but_will_fail", messages.STATUS_VALID)] to_deactivate = [acme_util.gen_authzr(a[1], a[0], [acme_util.HTTP01], [a[1]]) for a in to_deactivate] orderr = mock.MagicMock(authorizations=to_deactivate) self.mock_net.deactivate_authorization.side_effect = _mock_deactivate authzrs, failed = self.handler.deactivate_valid_authorizations(orderr) assert self.mock_net.deactivate_authorization.call_count == 2 assert len(authzrs) == 1 assert len(failed) == 1 assert authzrs[0].body.identifier.value == "is_valid" assert authzrs[0].body.status == messages.STATUS_DEACTIVATED assert failed[0].body.identifier.value == "is_valid_but_will_fail" assert failed[0].body.status == messages.STATUS_VALID def _gen_mock_on_poll(status=messages.STATUS_VALID, retry=0, wait_value=1): state = {'count': retry} def _mock(authzr): state['count'] = state['count'] - 1 effective_status = status if state['count'] < 0 else messages.STATUS_PENDING updated_azr = acme_util.gen_authzr( effective_status, authzr.body.identifier.value, [challb.chall for challb in authzr.body.challenges], [effective_status] * len(authzr.body.challenges)) return updated_azr, mock.MagicMock(headers={'Retry-After': str(wait_value)}) return _mock class ChallbToAchallTest(unittest.TestCase): """Tests for certbot._internal.auth_handler.challb_to_achall.""" def _call(self, challb): from certbot._internal.auth_handler import challb_to_achall return challb_to_achall(challb, "account_key", "domain") def test_it(self): assert self._call(acme_util.HTTP01_P) == \ achallenges.KeyAuthorizationAnnotatedChallenge( challb=acme_util.HTTP01_P, account_key="account_key", domain="domain") class GenChallengePathTest(unittest.TestCase): """Tests for certbot._internal.auth_handler.gen_challenge_path. """ def setUp(self): logging.disable(logging.FATAL) def tearDown(self): logging.disable(logging.NOTSET) @classmethod def _call(cls, challbs, preferences): from certbot._internal.auth_handler import gen_challenge_path return gen_challenge_path(challbs, preferences) def test_common_case(self): """Given DNS01 and HTTP01 with appropriate combos.""" challbs = (acme_util.DNS01_P, acme_util.HTTP01_P) prefs = [challenges.DNS01, challenges.HTTP01] assert self._call(challbs, prefs) == (0,) assert self._call(challbs[::-1], prefs) == (1,) def test_not_supported(self): challbs = (acme_util.DNS01_P,) prefs = [challenges.HTTP01] # smart path fails because no challs in prefs satisfies combos with pytest.raises(errors.AuthorizationError): self._call(challbs, prefs) class ReportFailedAuthzrsTest(unittest.TestCase): """Tests for certbot._internal.auth_handler.AuthHandler._report_failed_authzrs.""" # pylint: disable=protected-access def setUp(self): from certbot._internal.auth_handler import AuthHandler self.mock_auth = mock.MagicMock(spec=plugin_common.Plugin, name="buzz") self.mock_auth.name = "buzz" self.mock_auth.auth_hint.return_value = "the buzz hint" self.handler = AuthHandler(self.mock_auth, mock.MagicMock(), mock.MagicMock(), []) kwargs = { "chall": acme_util.HTTP01, "uri": "uri", "status": messages.STATUS_INVALID, "error": messages.Error.with_code("tls", detail="detail"), } # Prevent future regressions if the error type changes assert kwargs["error"].description is not None http_01 = messages.ChallengeBody(**kwargs) kwargs["chall"] = acme_util.HTTP01 http_01 = messages.ChallengeBody(**kwargs) self.authzr1 = mock.MagicMock() self.authzr1.body.identifier.value = 'example.com' self.authzr1.body.challenges = [http_01, http_01] kwargs["error"] = messages.Error.with_code("dnssec", detail="detail") http_01_diff = messages.ChallengeBody(**kwargs) self.authzr2 = mock.MagicMock() self.authzr2.body.identifier.value = 'foo.bar' self.authzr2.body.challenges = [http_01_diff] @mock.patch('certbot._internal.auth_handler.display_util.notify') def test_same_error_and_domain(self, mock_notify): self.handler._report_failed_authzrs([self.authzr1]) mock_notify.assert_called_with( '\n' 'Certbot failed to authenticate some domains (authenticator: buzz). ' 'The Certificate Authority reported these problems:\n' ' Domain: example.com\n' ' Type: tls\n' ' Detail: detail\n' '\n' ' Domain: example.com\n' ' Type: tls\n' ' Detail: detail\n' '\nHint: the buzz hint\n' ) @mock.patch('certbot._internal.auth_handler.display_util.notify') def test_different_errors_and_domains(self, mock_notify): self.mock_auth.name = "quux" self.mock_auth.auth_hint.return_value = "quuuuuux" self.handler._report_failed_authzrs([self.authzr1, self.authzr2]) mock_notify.assert_called_with( '\n' 'Certbot failed to authenticate some domains (authenticator: quux). ' 'The Certificate Authority reported these problems:\n' ' Domain: foo.bar\n' ' Type: dnssec\n' ' Detail: detail\n' '\n' ' Domain: example.com\n' ' Type: tls\n' ' Detail: detail\n' '\n' ' Domain: example.com\n' ' Type: tls\n' ' Detail: detail\n' '\nHint: quuuuuux\n' ) @mock.patch('certbot._internal.auth_handler.display_util.notify') def test_non_subclassed_authenticator(self, mock_notify): """If authenticator not derived from common.Plugin, we shouldn't call .auth_hint""" from certbot._internal.auth_handler import AuthHandler self.mock_auth = mock.MagicMock(name="quuz") self.mock_auth.name = "quuz" self.mock_auth.auth_hint.side_effect = Exception self.handler = AuthHandler(self.mock_auth, mock.MagicMock(), mock.MagicMock(), []) self.handler._report_failed_authzrs([self.authzr1]) assert mock_notify.call_count == 1 def gen_auth_resp(chall_list): """Generate a dummy authorization response.""" return ["%s%s" % (chall.__class__.__name__, chall.domain) for chall in chall_list] def gen_dom_authzr(domain, challs): """Generates new authzr for domains.""" return acme_util.gen_authzr( messages.STATUS_PENDING, domain, challs, [messages.STATUS_PENDING] * len(challs)) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover cert_manager_test.py 0000644 00000071405 15114562471 0010621 0 ustar 00 """Tests for certbot._internal.cert_manager.""" # pylint: disable=protected-access import re import shutil import sys import tempfile import unittest from unittest import mock import configobj import pytest from certbot import configuration from certbot import errors from certbot._internal.storage import ALL_FOUR from certbot._internal.tests import storage_test from certbot.compat import filesystem from certbot.compat import os from certbot.display import util as display_util from certbot.tests import util as test_util class BaseCertManagerTest(test_util.ConfigTestCase): """Base class for setting up Cert Manager tests. """ def setUp(self): super().setUp() self.config.quiet = False filesystem.makedirs(self.config.renewal_configs_dir) self.domains = { "example.org": None, "other.com": os.path.join(self.config.config_dir, "specialarchive") } self.config_files = {domain: self._set_up_config(domain, self.domains[domain]) for domain in self.domains} # We also create a file that isn't a renewal config in the same # location to test that logic that reads in all-and-only renewal # configs will ignore it and NOT attempt to parse it. with open(os.path.join(self.config.renewal_configs_dir, "IGNORE.THIS"), "w") as junk: junk.write("This file should be ignored!") def _set_up_config(self, domain, custom_archive): # TODO: maybe provide NamespaceConfig.make_dirs? # TODO: main() should create those dirs, c.f. #902 filesystem.makedirs(os.path.join(self.config.live_dir, domain)) config_file = configobj.ConfigObj() if custom_archive is not None: filesystem.makedirs(custom_archive) config_file["archive_dir"] = custom_archive else: filesystem.makedirs(os.path.join(self.config.default_archive_dir, domain)) for kind in ALL_FOUR: config_file[kind] = os.path.join(self.config.live_dir, domain, kind + ".pem") config_file.filename = os.path.join(self.config.renewal_configs_dir, domain + ".conf") config_file.write() return config_file class DeleteTest(storage_test.BaseRenewableCertTest): """Tests for certbot._internal.cert_manager.delete """ def _call(self): from certbot._internal import cert_manager cert_manager.delete(self.config) @test_util.patch_display_util() @mock.patch('certbot.display.util.notify') @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.storage.delete_files') def test_delete_from_config_yes(self, mock_delete_files, mock_lineage_for_certname, mock_notify, mock_util): """Test delete""" mock_lineage_for_certname.return_value = self.test_rc mock_util().yesno.return_value = True self.config.certname = "example.org" self._call() mock_delete_files.assert_called_once_with(self.config, "example.org") mock_notify.assert_called_once_with( "Deleted all files relating to certificate example.org." ) @test_util.patch_display_util() @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.storage.delete_files') def test_delete_from_config_no(self, mock_delete_files, mock_lineage_for_certname, mock_util): """Test delete""" mock_lineage_for_certname.return_value = self.test_rc mock_util().yesno.return_value = False self.config.certname = "example.org" self._call() assert mock_delete_files.call_count == 0 @test_util.patch_display_util() @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.storage.delete_files') def test_delete_interactive_single_yes(self, mock_delete_files, mock_lineage_for_certname, mock_util): """Test delete""" mock_lineage_for_certname.return_value = self.test_rc mock_util().checklist.return_value = (display_util.OK, ["example.org"]) mock_util().yesno.return_value = True self._call() mock_delete_files.assert_called_once_with(self.config, "example.org") @test_util.patch_display_util() @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.storage.delete_files') def test_delete_interactive_single_no(self, mock_delete_files, mock_lineage_for_certname, mock_util): """Test delete""" mock_lineage_for_certname.return_value = self.test_rc mock_util().checklist.return_value = (display_util.OK, ["example.org"]) mock_util().yesno.return_value = False self._call() assert mock_delete_files.call_count == 0 @test_util.patch_display_util() @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.storage.delete_files') def test_delete_interactive_multiple_yes(self, mock_delete_files, mock_lineage_for_certname, mock_util): """Test delete""" mock_lineage_for_certname.return_value = self.test_rc mock_util().checklist.return_value = (display_util.OK, ["example.org", "other.org"]) mock_util().yesno.return_value = True self._call() mock_delete_files.assert_any_call(self.config, "example.org") mock_delete_files.assert_any_call(self.config, "other.org") assert mock_delete_files.call_count == 2 @test_util.patch_display_util() @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.storage.delete_files') def test_delete_interactive_multiple_no(self, mock_delete_files, mock_lineage_for_certname, mock_util): """Test delete""" mock_lineage_for_certname.return_value = self.test_rc mock_util().checklist.return_value = (display_util.OK, ["example.org", "other.org"]) mock_util().yesno.return_value = False self._call() assert mock_delete_files.call_count == 0 class CertificatesTest(BaseCertManagerTest): """Tests for certbot._internal.cert_manager.certificates """ def _certificates(self, *args, **kwargs): from certbot._internal.cert_manager import certificates return certificates(*args, **kwargs) @mock.patch('certbot._internal.cert_manager.logger') @test_util.patch_display_util() def test_certificates_parse_fail(self, mock_utility, mock_logger): self._certificates(self.config) assert mock_logger.warning.called #pylint: disable=no-member assert mock_utility.called @mock.patch('certbot._internal.cert_manager.logger') @test_util.patch_display_util() def test_certificates_quiet(self, mock_utility, mock_logger): self.config.quiet = True self._certificates(self.config) assert mock_utility.notification.called is False assert mock_logger.warning.called #pylint: disable=no-member @mock.patch('certbot.crypto_util.verify_renewable_cert') @mock.patch('certbot._internal.cert_manager.logger') @test_util.patch_display_util() @mock.patch("certbot._internal.storage.RenewableCert") @mock.patch('certbot._internal.cert_manager._report_human_readable') def test_certificates_parse_success(self, mock_report, mock_renewable_cert, mock_utility, mock_logger, mock_verifier): mock_verifier.return_value = None mock_report.return_value = "" self._certificates(self.config) assert mock_logger.warning.called is False assert mock_report.called assert mock_utility.called assert mock_renewable_cert.called @mock.patch('certbot._internal.cert_manager.logger') @test_util.patch_display_util() def test_certificates_no_files(self, mock_utility, mock_logger): empty_tempdir = tempfile.mkdtemp() empty_config = configuration.NamespaceConfig(mock.MagicMock( config_dir=os.path.join(empty_tempdir, "config"), work_dir=os.path.join(empty_tempdir, "work"), logs_dir=os.path.join(empty_tempdir, "logs"), quiet=False )) filesystem.makedirs(empty_config.renewal_configs_dir) self._certificates(empty_config) assert mock_logger.warning.called is False assert mock_utility.called shutil.rmtree(empty_tempdir) @mock.patch('certbot.crypto_util.get_serial_from_cert') @mock.patch('certbot._internal.cert_manager.ocsp.RevocationChecker.ocsp_revoked') def test_report_human_readable(self, mock_revoked, mock_serial): mock_revoked.return_value = None mock_serial.return_value = 1234567890 import datetime import pytz from certbot._internal import cert_manager expiry = datetime.datetime.now(pytz.UTC) cert = mock.MagicMock(lineagename="nameone") cert.target_expiry = expiry cert.names.return_value = ["nameone", "nametwo"] cert.is_test_cert = False parsed_certs = [cert] mock_config = mock.MagicMock(certname=None, lineagename=None) # pylint: disable=protected-access # pylint: disable=protected-access get_report = lambda: cert_manager._report_human_readable(mock_config, parsed_certs) out = get_report() assert "INVALID: EXPIRED" in out cert.target_expiry += datetime.timedelta(hours=2) # pylint: disable=protected-access out = get_report() assert ('1 hour' in out or '2 hour(s)' in out) is True assert 'VALID' in out assert 'INVALID' not in out cert.target_expiry += datetime.timedelta(days=1) # pylint: disable=protected-access out = get_report() assert '1 day' in out assert 'under' not in out assert 'VALID' in out assert 'INVALID' not in out cert.target_expiry += datetime.timedelta(days=2) # pylint: disable=protected-access out = get_report() assert '3 days' in out assert 'VALID' in out assert 'INVALID' not in out cert.is_test_cert = True mock_revoked.return_value = True out = get_report() assert 'INVALID: TEST_CERT, REVOKED' in out cert = mock.MagicMock(lineagename="indescribable") cert.target_expiry = expiry cert.names.return_value = ["nameone", "thrice.named"] cert.is_test_cert = True parsed_certs.append(cert) out = get_report() assert len(re.findall("INVALID:", out)) == 2 mock_config.domains = ["thrice.named"] out = get_report() assert len(re.findall("INVALID:", out)) == 1 mock_config.domains = ["nameone"] out = get_report() assert len(re.findall("INVALID:", out)) == 2 mock_config.certname = "indescribable" out = get_report() assert len(re.findall("INVALID:", out)) == 1 mock_config.certname = "horror" out = get_report() assert len(re.findall("INVALID:", out)) == 0 class SearchLineagesTest(BaseCertManagerTest): """Tests for certbot._internal.cert_manager._search_lineages.""" @mock.patch('certbot.util.make_or_verify_dir') @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.RenewableCert') def test_cert_storage_error(self, mock_renewable_cert, mock_renewal_conf_files, mock_make_or_verify_dir): mock_renewal_conf_files.return_value = ["badfile"] mock_renewable_cert.side_effect = errors.CertStorageError from certbot._internal import cert_manager # pylint: disable=protected-access assert cert_manager._search_lineages(self.config, lambda x: x, "check") == "check" assert mock_make_or_verify_dir.called class LineageForCertnameTest(BaseCertManagerTest): """Tests for certbot._internal.cert_manager.lineage_for_certname""" @mock.patch('certbot.util.make_or_verify_dir') @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.storage.RenewableCert') def test_found_match(self, mock_renewable_cert, mock_renewal_conf_file, mock_make_or_verify_dir): mock_renewal_conf_file.return_value = "somefile.conf" mock_match = mock.Mock(lineagename="example.com") mock_renewable_cert.return_value = mock_match from certbot._internal import cert_manager assert cert_manager.lineage_for_certname(self.config, "example.com") == mock_match assert mock_make_or_verify_dir.called @mock.patch('certbot.util.make_or_verify_dir') @mock.patch('certbot._internal.storage.renewal_file_for_certname') def test_no_match(self, mock_renewal_conf_file, mock_make_or_verify_dir): mock_renewal_conf_file.return_value = "other.com.conf" from certbot._internal import cert_manager assert cert_manager.lineage_for_certname(self.config, "example.com") is None assert mock_make_or_verify_dir.called @mock.patch('certbot.util.make_or_verify_dir') @mock.patch('certbot._internal.storage.renewal_file_for_certname') def test_no_renewal_file(self, mock_renewal_conf_file, mock_make_or_verify_dir): mock_renewal_conf_file.side_effect = errors.CertStorageError() from certbot._internal import cert_manager assert cert_manager.lineage_for_certname(self.config, "example.com") is None assert mock_make_or_verify_dir.called class DomainsForCertnameTest(BaseCertManagerTest): """Tests for certbot._internal.cert_manager.domains_for_certname""" @mock.patch('certbot.util.make_or_verify_dir') @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.storage.RenewableCert') def test_found_match(self, mock_renewable_cert, mock_renewal_conf_file, mock_make_or_verify_dir): mock_renewal_conf_file.return_value = "somefile.conf" mock_match = mock.Mock(lineagename="example.com") domains = ["example.com", "example.org"] mock_match.names.return_value = domains mock_renewable_cert.return_value = mock_match from certbot._internal import cert_manager assert cert_manager.domains_for_certname(self.config, "example.com") == \ domains assert mock_make_or_verify_dir.called @mock.patch('certbot.util.make_or_verify_dir') @mock.patch('certbot._internal.storage.renewal_file_for_certname') def test_no_match(self, mock_renewal_conf_file, mock_make_or_verify_dir): mock_renewal_conf_file.return_value = "somefile.conf" from certbot._internal import cert_manager assert cert_manager.domains_for_certname(self.config, "other.com") is None assert mock_make_or_verify_dir.called class RenameLineageTest(BaseCertManagerTest): """Tests for certbot._internal.cert_manager.rename_lineage""" def setUp(self): super().setUp() self.config.certname = "example.org" self.config.new_certname = "after" def _call(self, *args, **kwargs): from certbot._internal import cert_manager return cert_manager.rename_lineage(*args, **kwargs) @mock.patch('certbot._internal.storage.renewal_conf_files') @test_util.patch_display_util() def test_no_certname(self, mock_get_utility, mock_renewal_conf_files): self.config.certname = None self.config.new_certname = "two" # if not choices mock_renewal_conf_files.return_value = [] with pytest.raises(errors.Error): self._call(self.config) mock_renewal_conf_files.return_value = ["one.conf"] util_mock = mock_get_utility() util_mock.menu.return_value = (display_util.CANCEL, 0) with pytest.raises(errors.Error): self._call(self.config) util_mock.menu.return_value = (display_util.OK, -1) with pytest.raises(errors.Error): self._call(self.config) @test_util.patch_display_util() def test_no_new_certname(self, mock_get_utility): self.config.certname = "one" self.config.new_certname = None util_mock = mock_get_utility() util_mock.input.return_value = (display_util.CANCEL, "name") with pytest.raises(errors.Error): self._call(self.config) util_mock.input.return_value = (display_util.OK, None) with pytest.raises(errors.Error): self._call(self.config) @test_util.patch_display_util() @mock.patch('certbot._internal.cert_manager.lineage_for_certname') def test_no_existing_certname(self, mock_lineage_for_certname, unused_get_utility): self.config.certname = "one" self.config.new_certname = "two" mock_lineage_for_certname.return_value = None with pytest.raises(errors.ConfigurationError): self._call(self.config) @test_util.patch_display_util() @mock.patch("certbot._internal.storage.RenewableCert._check_symlinks") def test_rename_cert(self, mock_check, unused_get_utility): mock_check.return_value = True self._call(self.config) from certbot._internal import cert_manager updated_lineage = cert_manager.lineage_for_certname(self.config, self.config.new_certname) assert updated_lineage is not None assert updated_lineage.lineagename == self.config.new_certname @test_util.patch_display_util() @mock.patch("certbot._internal.storage.RenewableCert._check_symlinks") def test_rename_cert_interactive_certname(self, mock_check, mock_get_utility): mock_check.return_value = True self.config.certname = None util_mock = mock_get_utility() util_mock.menu.return_value = (display_util.OK, 0) self._call(self.config) from certbot._internal import cert_manager updated_lineage = cert_manager.lineage_for_certname(self.config, self.config.new_certname) assert updated_lineage is not None assert updated_lineage.lineagename == self.config.new_certname @test_util.patch_display_util() @mock.patch("certbot._internal.storage.RenewableCert._check_symlinks") def test_rename_cert_bad_new_certname(self, mock_check, unused_get_utility): mock_check.return_value = True # for example, don't rename to existing certname self.config.new_certname = "example.org" with pytest.raises(errors.ConfigurationError): self._call(self.config) self.config.new_certname = "one{0}two".format(os.path.sep) with pytest.raises(errors.ConfigurationError): self._call(self.config) class DuplicativeCertsTest(storage_test.BaseRenewableCertTest): """Test to avoid duplicate lineages.""" def setUp(self): super().setUp() self.config_file.write() self._write_out_ex_kinds() @mock.patch('certbot.util.make_or_verify_dir') def test_find_duplicative_names(self, unused_makedir): from certbot._internal.cert_manager import find_duplicative_certs test_cert = test_util.load_vector('cert-san_512.pem') with open(self.test_rc.cert, 'wb') as f: f.write(test_cert) # No overlap at all result = find_duplicative_certs( self.config, ['wow.net', 'hooray.org']) assert result == (None, None) # Totally identical result = find_duplicative_certs( self.config, ['example.com', 'www.example.com']) assert result[0].configfile.filename.endswith('example.org.conf') assert result[1] is None # Superset result = find_duplicative_certs( self.config, ['example.com', 'www.example.com', 'something.new']) assert result[0] is None assert result[1].configfile.filename.endswith('example.org.conf') # Partial overlap doesn't count result = find_duplicative_certs( self.config, ['example.com', 'something.new']) assert result == (None, None) class CertPathToLineageTest(storage_test.BaseRenewableCertTest): """Tests for certbot._internal.cert_manager.cert_path_to_lineage""" def setUp(self): super().setUp() self.config_file.write() self._write_out_ex_kinds() self.fullchain = os.path.join(self.config.config_dir, 'live', 'example.org', 'fullchain.pem') self.config.cert_path = self.fullchain def _call(self, cli_config): from certbot._internal.cert_manager import cert_path_to_lineage return cert_path_to_lineage(cli_config) def _archive_files(self, cli_config, filetype): from certbot._internal.cert_manager import _archive_files return _archive_files(cli_config, filetype) def test_basic_match(self): assert 'example.org' == self._call(self.config) def test_no_match_exists(self): bad_test_config = self.config bad_test_config.cert_path = os.path.join(self.config.config_dir, 'live', 'SailorMoon', 'fullchain.pem') with pytest.raises(errors.Error): self._call(bad_test_config) @mock.patch('certbot._internal.cert_manager._acceptable_matches') def test_options_fullchain(self, mock_acceptable_matches): mock_acceptable_matches.return_value = [lambda x: x.fullchain_path] self.config.fullchain_path = self.fullchain assert 'example.org' == self._call(self.config) @mock.patch('certbot._internal.cert_manager._acceptable_matches') def test_options_cert_path(self, mock_acceptable_matches): mock_acceptable_matches.return_value = [lambda x: x.cert_path] test_cert_path = os.path.join(self.config.config_dir, 'live', 'example.org', 'cert.pem') self.config.cert_path = test_cert_path assert 'example.org' == self._call(self.config) @mock.patch('certbot._internal.cert_manager._acceptable_matches') def test_options_archive_cert(self, mock_acceptable_matches): # Also this and the next test check that the regex of _archive_files is working. self.config.cert_path = os.path.join(self.config.config_dir, 'archive', 'example.org', 'cert11.pem') mock_acceptable_matches.return_value = [lambda x: self._archive_files(x, 'cert')] assert 'example.org' == self._call(self.config) @mock.patch('certbot._internal.cert_manager._acceptable_matches') def test_options_archive_fullchain(self, mock_acceptable_matches): self.config.cert_path = os.path.join(self.config.config_dir, 'archive', 'example.org', 'fullchain11.pem') mock_acceptable_matches.return_value = [lambda x: self._archive_files(x, 'fullchain')] assert 'example.org' == self._call(self.config) def test_only_path(self): self.config.cert_path = self.fullchain assert 'example.org' == self._call(self.config) class MatchAndCheckOverlaps(storage_test.BaseRenewableCertTest): """Tests for certbot._internal.cert_manager.match_and_check_overlaps w/o overlapping archive dirs.""" # A test with real overlapping archive dirs can be found in tests/boulder_integration.sh def setUp(self): super().setUp() self.config_file.write() self._write_out_ex_kinds() self.fullchain = os.path.join(self.config.config_dir, 'live', 'example.org', 'fullchain.pem') self.config.cert_path = self.fullchain def _call(self, cli_config, acceptable_matches, match_func, rv_func): from certbot._internal.cert_manager import match_and_check_overlaps return match_and_check_overlaps(cli_config, acceptable_matches, match_func, rv_func) def test_basic_match(self): from certbot._internal.cert_manager import _acceptable_matches assert ['example.org'] == self._call(self.config, _acceptable_matches(), lambda x: self.config.cert_path, lambda x: x.lineagename) @mock.patch('certbot._internal.cert_manager._search_lineages') def test_no_matches(self, mock_search_lineages): mock_search_lineages.return_value = [] with pytest.raises(errors.Error): self._call(self.config, None, None, None) @mock.patch('certbot._internal.cert_manager._search_lineages') def test_too_many_matches(self, mock_search_lineages): mock_search_lineages.return_value = ['spider', 'dance'] with pytest.raises(errors.OverlappingMatchFound): self._call(self.config, None, None, None) class GetCertnameTest(unittest.TestCase): """Tests for certbot._internal.cert_manager.""" def setUp(self): get_utility_patch = test_util.patch_display_util() self.mock_get_utility = get_utility_patch.start() self.addCleanup(get_utility_patch.stop) self.config = mock.MagicMock() self.config.certname = None @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.lineagename_for_filename') def test_get_certnames(self, mock_name, mock_files): mock_files.return_value = ['example.com.conf'] mock_name.return_value = 'example.com' from certbot._internal import cert_manager prompt = "Which certificate would you" self.mock_get_utility().menu.return_value = (display_util.OK, 0) assert cert_manager.get_certnames( self.config, "verb", allow_multiple=False) == ['example.com'] assert prompt in self.mock_get_utility().menu.call_args[0][0] @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.lineagename_for_filename') def test_get_certnames_custom_prompt(self, mock_name, mock_files): mock_files.return_value = ['example.com.conf'] mock_name.return_value = 'example.com' from certbot._internal import cert_manager prompt = "custom prompt" self.mock_get_utility().menu.return_value = (display_util.OK, 0) assert cert_manager.get_certnames( self.config, "verb", allow_multiple=False, custom_prompt=prompt) == \ ['example.com'] assert self.mock_get_utility().menu.call_args[0][0] == \ prompt @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.lineagename_for_filename') def test_get_certnames_user_abort(self, mock_name, mock_files): mock_files.return_value = ['example.com.conf'] mock_name.return_value = 'example.com' from certbot._internal import cert_manager self.mock_get_utility().menu.return_value = (display_util.CANCEL, 0) with pytest.raises(errors.Error): cert_manager.get_certnames(self.config, "erroring_anyway", allow_multiple=False) @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.lineagename_for_filename') def test_get_certnames_allow_multiple(self, mock_name, mock_files): mock_files.return_value = ['example.com.conf'] mock_name.return_value = 'example.com' from certbot._internal import cert_manager prompt = "Which certificate(s) would you" self.mock_get_utility().checklist.return_value = (display_util.OK, ['example.com']) assert cert_manager.get_certnames( self.config, "verb", allow_multiple=True) == ['example.com'] assert prompt in self.mock_get_utility().checklist.call_args[0][0] @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.lineagename_for_filename') def test_get_certnames_allow_multiple_custom_prompt(self, mock_name, mock_files): mock_files.return_value = ['example.com.conf'] mock_name.return_value = 'example.com' from certbot._internal import cert_manager prompt = "custom prompt" self.mock_get_utility().checklist.return_value = (display_util.OK, ['example.com']) assert cert_manager.get_certnames( self.config, "verb", allow_multiple=True, custom_prompt=prompt) == \ ['example.com'] assert self.mock_get_utility().checklist.call_args[0][0] == \ prompt @mock.patch('certbot._internal.storage.renewal_conf_files') @mock.patch('certbot._internal.storage.lineagename_for_filename') def test_get_certnames_allow_multiple_user_abort(self, mock_name, mock_files): mock_files.return_value = ['example.com.conf'] mock_name.return_value = 'example.com' from certbot._internal import cert_manager self.mock_get_utility().checklist.return_value = (display_util.CANCEL, []) with pytest.raises(errors.Error): cert_manager.get_certnames(self.config, "erroring_anyway", allow_multiple=True) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover cli_test.py 0000644 00000063140 15114562471 0006736 0 ustar 00 """Tests for certbot._internal.cli.""" import argparse import copy from importlib import reload as reload_module import io import sys import tempfile from typing import Any, List import unittest from unittest import mock import pytest from acme import challenges from certbot import errors from certbot.configuration import ArgumentSource, NamespaceConfig from certbot._internal import cli from certbot._internal import constants from certbot._internal.cli.cli_utils import flag_default from certbot._internal.plugins import disco from certbot.compat import filesystem from certbot.compat import os import certbot.tests.util as test_util from certbot.tests.util import TempDirTestCase PLUGINS = disco.PluginsRegistry.find_all() class TestReadFile(TempDirTestCase): """Test cli.read_file""" def test_read_file(self): curr_dir = os.getcwd() try: # On Windows current directory may be on a different drive than self.tempdir. # However a relative path between two different drives is invalid. So we move to # self.tempdir to ensure that we stay on the same drive. os.chdir(self.tempdir) # The read-only filesystem introduced with macOS Catalina can break # code using relative paths below. See # https://bugs.python.org/issue38295 for another example of this. # Eliminating any possible symlinks in self.tempdir before passing # it to os.path.relpath solves the problem. This is done by calling # filesystem.realpath which removes any symlinks in the path on # POSIX systems. real_path = filesystem.realpath(os.path.join(self.tempdir, 'foo')) relative_path = os.path.relpath(real_path) with pytest.raises(argparse.ArgumentTypeError): cli.read_file(relative_path) test_contents = b'bar\n' with open(relative_path, 'wb') as f: f.write(test_contents) path, contents = cli.read_file(relative_path) assert path == os.path.abspath(path) assert contents == test_contents finally: os.chdir(curr_dir) class FlagDefaultTest(unittest.TestCase): """Tests cli.flag_default""" def test_default_directories(self): if os.name != 'nt': assert cli.flag_default('config_dir') == '/etc/letsencrypt' assert cli.flag_default('work_dir') == '/var/lib/letsencrypt' assert cli.flag_default('logs_dir') == '/var/log/letsencrypt' else: assert cli.flag_default('config_dir') == 'C:\\Certbot' assert cli.flag_default('work_dir') == 'C:\\Certbot\\lib' assert cli.flag_default('logs_dir') == 'C:\\Certbot\\log' def assert_set_by_user_with_value(namespace, attr: str, value: Any): assert getattr(namespace, attr) == value assert namespace.set_by_user(attr) def assert_value_and_source(namespace, attr: str, value: Any, source: ArgumentSource): assert getattr(namespace, attr) == value assert namespace.argument_sources[attr] == source class ParseTest(unittest.TestCase): '''Test the cli args entrypoint''' @staticmethod def _unmocked_parse(args: List[str]) -> NamespaceConfig: """Get result of cli.prepare_and_parse_args.""" return cli.prepare_and_parse_args(PLUGINS, args) @staticmethod def parse(args: List[str]) -> NamespaceConfig: """Mocks certbot._internal.display.obj.get_display and calls _unmocked_parse.""" with test_util.patch_display_util(): return ParseTest._unmocked_parse(args) def _help_output(self, args: List[str]): "Run a command, and return the output string for scrutiny" output = io.StringIO() def write_msg(message, *args, **kwargs): # pylint: disable=missing-docstring,unused-argument output.write(message) with mock.patch('certbot._internal.main.sys.stdout', new=output): with test_util.patch_display_util() as mock_get_utility: mock_get_utility().notification.side_effect = write_msg with mock.patch('certbot._internal.main.sys.stderr'): with pytest.raises(SystemExit): self._unmocked_parse(args) return output.getvalue() @mock.patch("certbot._internal.cli.helpful.flag_default") def test_cli_ini_domains(self, mock_flag_default): with tempfile.NamedTemporaryFile() as tmp_config: tmp_config.close() # close now because of compatibility issues on Windows # use a shim to get ConfigArgParse to pick up tmp_config shim = ( lambda v: copy.deepcopy(constants.CLI_DEFAULTS[v]) if v != "config_files" else [tmp_config.name] ) mock_flag_default.side_effect = shim namespace = self.parse(["certonly"]) assert_value_and_source(namespace, 'domains', [], ArgumentSource.DEFAULT) with open(tmp_config.name, 'w') as file_h: file_h.write("domains = example.com") namespace = self.parse(["certonly"]) assert_value_and_source(namespace, 'domains', ["example.com"], ArgumentSource.CONFIG_FILE) namespace = self.parse(["renew"]) assert_value_and_source(namespace, 'domains', [], ArgumentSource.RUNTIME) def test_no_args(self): namespace = self.parse([]) for d in ('config_dir', 'logs_dir', 'work_dir'): assert getattr(namespace, d) == cli.flag_default(d) assert not namespace.set_by_user(d) def test_install_abspath(self): cert = 'cert' key = 'key' chain = 'chain' fullchain = 'fullchain' with mock.patch('certbot._internal.main.install'): namespace = self.parse(['install', '--cert-path', cert, '--key-path', 'key', '--chain-path', 'chain', '--fullchain-path', 'fullchain']) assert namespace.cert_path == os.path.abspath(cert) assert namespace.key_path == os.path.abspath(key) assert namespace.chain_path == os.path.abspath(chain) assert namespace.fullchain_path == os.path.abspath(fullchain) def test_help(self): self._help_output(['--help']) # assert SystemExit is raised here out = self._help_output(['--help', 'all']) assert "--configurator" in out assert "how a certificate is deployed" in out assert "--webroot-path" in out assert "--text" not in out assert "%s" not in out assert "{0}" not in out assert "--renew-hook" not in out out = self._help_output(['-h', 'nginx']) if "nginx" in PLUGINS: # may be false while building distributions without plugins assert "--nginx-ctl" in out assert "--webroot-path" not in out assert "--checkpoints" not in out out = self._help_output(['-h']) if "nginx" in PLUGINS: assert "Use the Nginx plugin" in out else: assert "(the certbot nginx plugin is not" in out out = self._help_output(['--help', 'plugins']) assert "--webroot-path" not in out assert "--prepare" in out assert '"plugins" subcommand' in out # test multiple topics out = self._help_output(['-h', 'renew']) assert "--keep" in out out = self._help_output(['-h', 'automation']) assert "--keep" in out out = self._help_output(['-h', 'revoke']) assert "--keep" not in out out = self._help_output(['--help', 'install']) assert "--cert-path" in out assert "--key-path" in out out = self._help_output(['--help', 'revoke']) assert "--cert-path" in out assert "--key-path" in out assert "--reason" in out assert "--delete-after-revoke" in out assert "--no-delete-after-revoke" in out out = self._help_output(['-h', 'register']) assert "--cert-path" not in out assert "--key-path" not in out out = self._help_output(['-h']) assert cli.SHORT_USAGE in out assert cli.COMMAND_OVERVIEW[:100] in out assert "%s" not in out assert "{0}" not in out def test_help_no_dashes(self): self._help_output(['help']) # assert SystemExit is raised here out = self._help_output(['help', 'all']) assert "--configurator" in out assert "how a certificate is deployed" in out assert "--webroot-path" in out assert "--text" not in out assert "%s" not in out assert "{0}" not in out out = self._help_output(['help', 'install']) assert "--cert-path" in out assert "--key-path" in out out = self._help_output(['help', 'revoke']) assert "--cert-path" in out assert "--key-path" in out def test_parse_domains(self): short_args = ['-d', 'example.com'] namespace = self.parse(short_args) assert_set_by_user_with_value(namespace, 'domains', ['example.com']) short_args = ['-d', 'trailing.period.com.'] namespace = self.parse(short_args) assert_set_by_user_with_value(namespace, 'domains', ['trailing.period.com']) short_args = ['-d', 'example.com,another.net,third.org,example.com'] namespace = self.parse(short_args) assert_set_by_user_with_value(namespace, 'domains', ['example.com', 'another.net', 'third.org']) long_args = ['--domains', 'example.com'] namespace = self.parse(long_args) assert_set_by_user_with_value(namespace, 'domains', ['example.com']) long_args = ['--domains', 'trailing.period.com.'] namespace = self.parse(long_args) assert_set_by_user_with_value(namespace, 'domains', ['trailing.period.com']) long_args = ['--domains', 'example.com,another.net,example.com'] namespace = self.parse(long_args) assert_set_by_user_with_value(namespace, 'domains', ['example.com', 'another.net']) def test_preferred_challenges(self): short_args = ['--preferred-challenges', 'http, dns'] namespace = self.parse(short_args) expected = [challenges.HTTP01.typ, challenges.DNS01.typ] assert_set_by_user_with_value(namespace, 'pref_challs', expected) short_args = ['--preferred-challenges', 'jumping-over-the-moon'] # argparse.ArgumentError makes argparse print more information # to stderr and call sys.exit() with mock.patch('sys.stderr'): with pytest.raises(SystemExit): self.parse(short_args) def test_server_flag(self): namespace = self.parse('--server example.com'.split()) assert_set_by_user_with_value(namespace, 'server', 'example.com') def test_must_staple_flag(self): namespace = self.parse(['--must-staple']) assert_set_by_user_with_value(namespace, 'must_staple', True) assert_value_and_source(namespace, 'staple', True, ArgumentSource.RUNTIME) def test_must_staple_and_staple_ocsp_flags(self): namespace = self.parse(['--must-staple', '--staple-ocsp']) assert_set_by_user_with_value(namespace, 'must_staple', True) assert_set_by_user_with_value(namespace, 'staple', True) def _check_server_conflict_message(self, parser_args, conflicting_args): try: self.parse(parser_args) self.fail( # pragma: no cover "The following flags didn't conflict with " '--server: {0}'.format(', '.join(conflicting_args))) except errors.Error as error: assert '--server' in str(error) for arg in conflicting_args: assert arg in str(error) def test_staging_flag(self): short_args = ['--staging'] namespace = self.parse(short_args) assert_set_by_user_with_value(namespace, 'staging', True) assert_set_by_user_with_value(namespace, 'server', constants.STAGING_URI) short_args += '--server example.com'.split() self._check_server_conflict_message(short_args, '--staging') def _assert_dry_run_flag_worked(self, namespace, existing_account): assert_set_by_user_with_value(namespace, 'dry_run', True) assert_value_and_source(namespace, 'break_my_certs', True, ArgumentSource.RUNTIME) assert_value_and_source(namespace, 'staging', True, ArgumentSource.RUNTIME) assert_value_and_source(namespace, 'server', constants.STAGING_URI, ArgumentSource.RUNTIME) if existing_account: assert_value_and_source(namespace, 'tos', True, ArgumentSource.RUNTIME) assert_value_and_source(namespace, 'register_unsafely_without_email', True, ArgumentSource.RUNTIME) else: assert_value_and_source(namespace, 'tos', False, ArgumentSource.DEFAULT) assert_value_and_source(namespace, 'register_unsafely_without_email', False, ArgumentSource.DEFAULT) def test_dry_run_flag(self): config_dir = tempfile.mkdtemp() short_args = '--dry-run --config-dir {0}'.format(config_dir).split() with pytest.raises(errors.Error): self.parse(short_args) self._assert_dry_run_flag_worked( self.parse(short_args + ['auth']), False) self._assert_dry_run_flag_worked( self.parse(short_args + ['certonly']), False) self._assert_dry_run_flag_worked( self.parse(short_args + ['renew']), False) account_dir = os.path.join(config_dir, constants.ACCOUNTS_DIR) filesystem.mkdir(account_dir) filesystem.mkdir(os.path.join(account_dir, 'fake_account_dir')) self._assert_dry_run_flag_worked(self.parse(short_args + ['auth']), True) self._assert_dry_run_flag_worked(self.parse(short_args + ['renew']), True) self._assert_dry_run_flag_worked(self.parse(short_args + ['certonly']), True) short_args += ['certonly'] # `--dry-run --server example.com` should emit example.com config = self.parse(short_args + ['--server', 'example.com']) assert_set_by_user_with_value(config, 'server', 'example.com') # `--dry-run --server STAGING_URI` should emit STAGING_URI config = self.parse(short_args + ['--server', constants.STAGING_URI]) assert_set_by_user_with_value(config, 'server', constants.STAGING_URI) # `--dry-run --server LIVE` should emit STAGING_URI config = self.parse(short_args + ['--server', cli.flag_default("server")]) assert_value_and_source(config, 'server', constants.STAGING_URI, ArgumentSource.RUNTIME) # `--dry-run --server example.com --staging` should emit an error conflicts = ['--staging'] self._check_server_conflict_message(short_args + ['--server', 'example.com', '--staging'], conflicts) def test_user_set_rsa_key_size(self): key_size_option = 'rsa_key_size' key_size_value = cli.flag_default(key_size_option) config = self.parse('--rsa-key-size {0}'.format(key_size_value).split()) assert config.set_by_user(key_size_option) config_dir_option = 'config_dir' assert not config.set_by_user( config_dir_option) assert not config.set_by_user('authenticator') def test_user_set_installer_and_authenticator(self): config = self.parse('--apache') assert config.set_by_user('installer') assert config.set_by_user('authenticator') config = self.parse('--installer webroot') assert config.set_by_user('installer') assert not config.set_by_user('authenticator') def test_user_set_ecdsa_key_option(self): elliptic_curve_option = 'elliptic_curve' elliptic_curve_option_value = cli.flag_default(elliptic_curve_option) config = self.parse('--elliptic-curve {0}'.format(elliptic_curve_option_value).split()) assert config.set_by_user(elliptic_curve_option) def test_user_set_invalid_key_type(self): key_type_option = 'key_type' key_type_value = cli.flag_default(key_type_option) config = self.parse('--key-type {0}'.format(key_type_value).split()) assert config.set_by_user(key_type_option) with pytest.raises(SystemExit): self.parse("--key-type foo") @mock.patch('certbot._internal.hooks.validate_hooks') def test_user_set_deploy_hook(self, unused_mock_validate_hooks): args = 'renew --deploy-hook foo'.split() plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, args) assert config.set_by_user('renew_hook') @mock.patch('certbot._internal.plugins.webroot._validate_webroot') def test_user_set_webroot_map(self, mock_validate_webroot): args = 'renew -w /var/www/html -d example.com'.split() mock_validate_webroot.return_value = '/var/www/html' plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, args) assert config.set_by_user('webroot_map') def test_encode_revocation_reason(self): for reason, code in constants.REVOCATION_REASONS.items(): namespace = self.parse(['--reason', reason]) assert namespace.reason == code for reason, code in constants.REVOCATION_REASONS.items(): namespace = self.parse(['--reason', reason.upper()]) assert namespace.reason == code def test_force_interactive(self): with pytest.raises(errors.Error): self.parse("renew --force-interactive".split()) with pytest.raises(errors.Error): self.parse("-n --force-interactive".split()) def test_deploy_hook_conflict(self): with mock.patch("certbot._internal.cli.sys.stderr"): with pytest.raises(SystemExit): self.parse("--renew-hook foo --deploy-hook bar".split()) def test_deploy_hook_matches_renew_hook(self): value = "foo" namespace = self.parse(["--renew-hook", value, "--deploy-hook", value, "--disable-hook-validation"]) assert_set_by_user_with_value(namespace, 'deploy_hook', value) assert_set_by_user_with_value(namespace, 'renew_hook', value) def test_deploy_hook_sets_renew_hook(self): value = "foo" namespace = self.parse( ["--deploy-hook", value, "--disable-hook-validation"]) assert_set_by_user_with_value(namespace, 'deploy_hook', value) assert_set_by_user_with_value(namespace, 'renew_hook', value) def test_renew_hook_conflict(self): with mock.patch("certbot._internal.cli.sys.stderr"): with pytest.raises(SystemExit): self.parse("--deploy-hook foo --renew-hook bar".split()) def test_renew_hook_matches_deploy_hook(self): value = "foo" namespace = self.parse(["--deploy-hook", value, "--renew-hook", value, "--disable-hook-validation"]) assert_set_by_user_with_value(namespace, 'deploy_hook', value) assert_set_by_user_with_value(namespace, 'renew_hook', value) def test_renew_hook_does_not_set_renew_hook(self): value = "foo" namespace = self.parse( ["--renew-hook", value, "--disable-hook-validation"]) assert namespace.deploy_hook is None assert_set_by_user_with_value(namespace, 'renew_hook', value) def test_max_log_backups_error(self): with mock.patch('certbot._internal.cli.sys.stderr'): with pytest.raises(SystemExit): self.parse("--max-log-backups foo".split()) with pytest.raises(SystemExit): self.parse("--max-log-backups -42".split()) def test_max_log_backups_success(self): value = "42" namespace = self.parse(["--max-log-backups", value]) assert_set_by_user_with_value(namespace, 'max_log_backups', int(value)) def test_unchanging_defaults(self): namespace = self.parse([]) assert_value_and_source(namespace, 'domains', [], ArgumentSource.DEFAULT) assert_value_and_source(namespace, 'pref_challs', [], ArgumentSource.DEFAULT) namespace.pref_challs = [challenges.HTTP01.typ] namespace.domains = ['example.com'] namespace = self.parse([]) assert_value_and_source(namespace, 'domains', [], ArgumentSource.DEFAULT) assert_value_and_source(namespace, 'pref_challs', [], ArgumentSource.DEFAULT) def test_no_directory_hooks_set(self): namespace = self.parse(["--no-directory-hooks"]) assert_set_by_user_with_value(namespace, 'directory_hooks', False) def test_no_directory_hooks_unset(self): namespace = self.parse([]) assert_value_and_source(namespace, 'directory_hooks', True, ArgumentSource.DEFAULT) def test_delete_after_revoke(self): namespace = self.parse(["--delete-after-revoke"]) assert_set_by_user_with_value(namespace, 'delete_after_revoke', True) def test_delete_after_revoke_default(self): namespace = self.parse([]) assert namespace.delete_after_revoke is None assert not namespace.set_by_user('delete_after_revoke') def test_no_delete_after_revoke(self): namespace = self.parse(["--no-delete-after-revoke"]) assert_set_by_user_with_value(namespace, 'delete_after_revoke', False) def test_allow_subset_with_wildcard(self): with pytest.raises(errors.Error): self.parse("--allow-subset-of-names -d *.example.org".split()) def test_route53_no_revert(self): for help_flag in ['-h', '--help']: for topic in ['all', 'plugins', 'dns-route53']: assert 'certbot-route53:auth' not in self._help_output([help_flag, topic]) def test_parse_args_hosts_and_auto_hosts(self): with pytest.raises(errors.Error): self.parse(['--hsts', '--auto-hsts']) def test_parse_with_multiple_argument_sources(self): DEFAULT_VALUE = flag_default('server') CONFIG_FILE_VALUE = 'configfile.biz' COMMAND_LINE_VALUE = 'commandline.edu' # check that the default is set namespace = self.parse(['certonly']) assert_value_and_source(namespace, 'server', DEFAULT_VALUE, ArgumentSource.DEFAULT) with tempfile.NamedTemporaryFile() as tmp_config: tmp_config.close() # close now because of compatibility issues on Windows with open(tmp_config.name, 'w') as file_h: file_h.write(f'server = {CONFIG_FILE_VALUE}') # first, just provide a value from a config file namespace = self.parse([ 'certonly', '-c', tmp_config.name, ]) assert_value_and_source(namespace, 'server', CONFIG_FILE_VALUE, ArgumentSource.CONFIG_FILE) # now provide config file + command line values namespace = self.parse([ 'certonly', '-c', tmp_config.name, '--server', COMMAND_LINE_VALUE, ]) assert_value_and_source(namespace, 'server', COMMAND_LINE_VALUE, ArgumentSource.COMMAND_LINE) def test_abbreviated_arguments(self): # Argparse's "allow_abbrev" option (which is True by default) allows # for unambiguous partial arguments (e.g. "--preferred-chal dns" will be # interepreted the same as "--preferred-challenges dns") namespace = self.parse('--preferred-chal dns --no-dir') assert_set_by_user_with_value(namespace, 'pref_challs', ['dns-01']) assert_set_by_user_with_value(namespace, 'directory_hooks', False) with tempfile.NamedTemporaryFile() as tmp_config: tmp_config.close() # close now because of compatibility issues on Windows with open(tmp_config.name, 'w') as file_h: file_h.write('preferred-chal = dns') namespace = self.parse([ 'certonly', '--config', tmp_config.name, ]) assert_set_by_user_with_value(namespace, 'pref_challs', ['dns-01']) @mock.patch('certbot._internal.hooks.validate_hooks') def test_argument_with_equals(self, unsused_mock_validate_hooks): namespace = self.parse('-d=example.com') assert_set_by_user_with_value(namespace, 'domains', ['example.com']) # make sure it doesn't choke on equals signs being present in the argument value plugins = disco.PluginsRegistry.find_all() namespace = cli.prepare_and_parse_args(plugins, ['run', '--pre-hook="foo=bar"']) assert_set_by_user_with_value(namespace, 'pre_hook', '"foo=bar"') def test_adjacent_short_args(self): namespace = self.parse('-tv') assert_set_by_user_with_value(namespace, 'text_mode', True) assert_set_by_user_with_value(namespace, 'verbose_count', 1) namespace = self.parse('-tvvv') assert_set_by_user_with_value(namespace, 'text_mode', True) assert_set_by_user_with_value(namespace, 'verbose_count', 3) namespace = self.parse('-tvm foo@example.com') assert_set_by_user_with_value(namespace, 'text_mode', True) assert_set_by_user_with_value(namespace, 'verbose_count', 1) assert_set_by_user_with_value(namespace, 'email', 'foo@example.com') def test_arg_with_contained_spaces(self): # This can happen if a user specifies an arg like "-d foo.com" enclosed # in double quotes, or as its own line in a docker-compose.yml file (as # in #9811) namespace = self.parse(['certonly', '-d foo.com']) assert_set_by_user_with_value(namespace, 'domains', ['foo.com']) if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover client_test.py 0000644 00000132500 15114562471 0007442 0 ustar 00 """Tests for certbot._internal.client.""" import contextlib import datetime import platform import shutil import sys import tempfile import unittest from unittest import mock from unittest.mock import MagicMock from josepy import interfaces import pytest from certbot import errors from certbot import util from certbot._internal import account from certbot._internal import constants from certbot._internal.display import obj as display_obj from certbot.compat import os import certbot.tests.util as test_util KEY = test_util.load_vector("rsa512_key.pem") CSR_SAN = test_util.load_vector("csr-san_512.pem") # pylint: disable=line-too-long class DetermineUserAgentTest(test_util.ConfigTestCase): """Tests for certbot._internal.client.determine_user_agent.""" def _call(self): from certbot._internal.client import determine_user_agent return determine_user_agent(self.config) @mock.patch.dict(os.environ, {"CERTBOT_DOCS": "1"}) def test_docs_value(self): self._test(expect_doc_values=True) @mock.patch.dict(os.environ, {}) def test_real_values(self): self._test(expect_doc_values=False) def _test(self, expect_doc_values): ua = self._call() if expect_doc_values: doc_value_check = self.assertIn real_value_check = self.assertNotIn else: doc_value_check = self.assertNotIn real_value_check = self.assertIn doc_value_check("OS_NAME OS_VERSION", ua) doc_value_check("major.minor.patchlevel", ua) real_value_check(util.get_os_info_ua(), ua) real_value_check(platform.python_version(), ua) class RegisterTest(test_util.ConfigTestCase): """Tests for certbot._internal.client.register.""" def setUp(self): super().setUp() self.config.rsa_key_size = 1024 self.config.register_unsafely_without_email = False self.config.email = "alias@example.com" self.account_storage = account.AccountMemoryStorage() self.tos_cb = mock.MagicMock() display_obj.set_display(MagicMock()) def _call(self): from certbot._internal.client import register return register(self.config, self.account_storage, self.tos_cb) @staticmethod def _public_key_mock(): m = mock.Mock(__class__=interfaces.JSONDeSerializable) m.to_partial_json.return_value = '{"a": 1}' return m @staticmethod def _new_acct_dir_mock(): return "/acme/new-account" @staticmethod def _true_mock(): return True @staticmethod def _false_mock(): return False @staticmethod @contextlib.contextmanager def _patched_acme_client(): with mock.patch('certbot._internal.client.acme_client') as mock_acme_client: yield mock_acme_client.ClientV2 def test_no_tos(self): with self._patched_acme_client() as mock_client: mock_client.new_account().terms_of_service = "http://tos" mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.prepare_subscription") as mock_prepare: mock_client().new_account.side_effect = errors.Error with pytest.raises(errors.Error): self._call() assert mock_prepare.called is False mock_client().new_account.side_effect = None self._call() assert mock_prepare.called is True @mock.patch('certbot._internal.eff.prepare_subscription') def test_empty_meta(self, unused_mock_prepare): # Test that we can handle an ACME server which does not implement the 'meta' # directory object (for terms-of-service handling). with self._patched_acme_client() as mock_client: from acme.messages import Directory mock_client().directory = Directory.from_json({}) mock_client().external_account_required.side_effect = self._false_mock self._call() assert self.tos_cb.called is False @test_util.patch_display_util() def test_it(self, unused_mock_get_utility): with self._patched_acme_client() as mock_client: mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.handle_subscription"): self._call() assert self.tos_cb.called is True @mock.patch("certbot._internal.client.display_ops.get_email") def test_email_retry(self, mock_get_email): from acme import messages self.config.noninteractive_mode = False msg = "DNS problem: NXDOMAIN looking up MX for example.com" mx_err = messages.Error.with_code('invalidContact', detail=msg) with self._patched_acme_client() as mock_client: mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.prepare_subscription") as mock_prepare: mock_client().new_account.side_effect = [mx_err, mock.MagicMock()] self._call() assert mock_get_email.call_count == 1 assert mock_prepare.called is True def test_email_invalid_noninteractive(self): from acme import messages self.config.noninteractive_mode = True msg = "DNS problem: NXDOMAIN looking up MX for example.com" mx_err = messages.Error.with_code('invalidContact', detail=msg) with self._patched_acme_client() as mock_client: mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.handle_subscription"): mock_client().new_account.side_effect = [mx_err, mock.MagicMock()] with pytest.raises(errors.Error): self._call() def test_needs_email(self): self.config.email = None with pytest.raises(errors.Error): self._call() @mock.patch("certbot._internal.client.logger") def test_without_email(self, mock_logger): with mock.patch("certbot._internal.eff.prepare_subscription") as mock_prepare: with self._patched_acme_client() as mock_client: mock_client().external_account_required.side_effect = self._false_mock self.config.email = None self.config.register_unsafely_without_email = True self.config.dry_run = False self._call() mock_logger.debug.assert_called_once_with(mock.ANY) assert mock_prepare.called is True @mock.patch("certbot._internal.client.display_ops.get_email") def test_dry_run_no_staging_account(self, mock_get_email): """Tests dry-run for no staging account, expect account created with no email""" with self._patched_acme_client() as mock_client: mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.handle_subscription"): self.config.dry_run = True self._call() # check Certbot did not ask the user to provide an email assert mock_get_email.called is False # check Certbot created an account with no email. Contact should return empty assert not mock_client().new_account.call_args[0][0].contact @test_util.patch_display_util() def test_with_eab_arguments(self, unused_mock_get_utility): with self._patched_acme_client() as mock_client: mock_client().client.directory.__getitem__ = mock.Mock( side_effect=self._new_acct_dir_mock ) mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.handle_subscription"): target = "certbot._internal.client.messages.ExternalAccountBinding.from_data" with mock.patch(target) as mock_eab_from_data: self.config.eab_kid = "test-kid" self.config.eab_hmac_key = "J2OAqW4MHXsrHVa_PVg0Y-L_R4SYw0_aL1le6mfblbE" self._call() assert mock_eab_from_data.called is True @test_util.patch_display_util() def test_without_eab_arguments(self, unused_mock_get_utility): with self._patched_acme_client() as mock_client: mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.handle_subscription"): target = "certbot._internal.client.messages.ExternalAccountBinding.from_data" with mock.patch(target) as mock_eab_from_data: self.config.eab_kid = None self.config.eab_hmac_key = None self._call() assert mock_eab_from_data.called is False def test_external_account_required_without_eab_arguments(self): with self._patched_acme_client() as mock_client: mock_client().client.net.key.public_key = mock.Mock(side_effect=self._public_key_mock) mock_client().external_account_required.side_effect = self._true_mock with mock.patch("certbot._internal.eff.handle_subscription"): with mock.patch("certbot._internal.client.messages.ExternalAccountBinding.from_data"): self.config.eab_kid = None self.config.eab_hmac_key = None with pytest.raises(errors.Error): self._call() def test_unsupported_error(self): from acme import messages msg = "Test" mx_err = messages.Error.with_code("malformed", detail=msg, title="title") with self._patched_acme_client() as mock_client: mock_client().client.directory.__getitem__ = mock.Mock( side_effect=self._new_acct_dir_mock ) mock_client().external_account_required.side_effect = self._false_mock with mock.patch("certbot._internal.eff.handle_subscription") as mock_handle: mock_client().new_account.side_effect = [mx_err, mock.MagicMock()] with pytest.raises(messages.Error): self._call() assert mock_handle.called is False class ClientTestCommon(test_util.ConfigTestCase): """Common base class for certbot._internal.client.Client tests.""" def setUp(self): super().setUp() self.config.no_verify_ssl = False self.config.allow_subset_of_names = False self.account = mock.MagicMock(**{"key.pem": KEY}) from certbot._internal.client import Client with mock.patch("certbot._internal.client.acme_client") as acme: self.acme_client = acme.ClientV2 self.acme = self.acme_client.return_value = mock.MagicMock() self.client_network = acme.ClientNetwork self.client = Client( config=self.config, account_=self.account, auth=None, installer=None) class ClientTest(ClientTestCommon): """Tests for certbot._internal.client.Client.""" def setUp(self): super().setUp() self.config.allow_subset_of_names = False self.config.dry_run = False self.config.strict_permissions = True self.eg_domains = ["example.com", "www.example.com"] self.eg_order = mock.MagicMock( authorizations=[None], csr_pem=mock.sentinel.csr_pem) def test_init_acme_verify_ssl(self): assert self.client_network.call_args[1]['verify_ssl'] is True def _mock_obtain_certificate(self): self.client.auth_handler = mock.MagicMock() self.client.auth_handler.handle_authorizations.return_value = [None] self.client.auth_handler.deactivate_valid_authorizations.return_value = ([], []) self.acme.finalize_order.return_value = self.eg_order self.acme.new_order.return_value = self.eg_order self.eg_order.update.return_value = self.eg_order def _check_obtain_certificate(self, auth_count=1): if auth_count == 1: self.client.auth_handler.handle_authorizations.assert_called_once_with( self.eg_order, self.config, self.config.allow_subset_of_names) else: assert self.client.auth_handler.handle_authorizations.call_count == auth_count self.acme.finalize_order.assert_called_once_with( self.eg_order, mock.ANY, fetch_alternative_chains=self.config.preferred_chain is not None) @mock.patch("certbot._internal.client.crypto_util") @mock.patch("certbot._internal.client.logger") def test_obtain_certificate_from_csr(self, mock_logger, mock_crypto_util): self._mock_obtain_certificate() test_csr = util.CSR(form="pem", file=None, data=CSR_SAN) auth_handler = self.client.auth_handler self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) orderr = self.acme.new_order(test_csr.data) auth_handler.handle_authorizations(orderr, self.config, False) assert (mock.sentinel.cert, mock.sentinel.chain) == \ self.client.obtain_certificate_from_csr( test_csr, orderr=orderr) mock_crypto_util.find_chain_with_issuer.assert_not_called() # and that the cert was obtained correctly self._check_obtain_certificate() # Test that --preferred-chain results in chain selection self.config.preferred_chain = "some issuer" assert (mock.sentinel.cert, mock.sentinel.chain) == \ self.client.obtain_certificate_from_csr( test_csr, orderr=orderr) mock_crypto_util.find_chain_with_issuer.assert_called_once_with( [orderr.fullchain_pem] + orderr.alternative_fullchains_pem, "some issuer", True) self.config.preferred_chain = None # Test for default issuance_timeout expected_deadline = \ datetime.datetime.now() + datetime.timedelta( seconds=constants.CLI_DEFAULTS["issuance_timeout"]) self.client.obtain_certificate_from_csr(test_csr, orderr=orderr) ((_, deadline), _) = self.client.acme.finalize_order.call_args assert abs(expected_deadline - deadline) <= datetime.timedelta(seconds=1) # Test for specific issuance_timeout (300 seconds) expected_deadline = \ datetime.datetime.now() + datetime.timedelta(seconds=300) self.config.issuance_timeout = 300 self.client.obtain_certificate_from_csr(test_csr, orderr=orderr) ((_, deadline), _) = self.client.acme.finalize_order.call_args assert abs(expected_deadline - deadline) <= datetime.timedelta(seconds=1) # Test for orderr=None assert (mock.sentinel.cert, mock.sentinel.chain) == \ self.client.obtain_certificate_from_csr( test_csr, orderr=None) auth_handler.handle_authorizations.assert_called_with(self.eg_order, self.config, False) # Test for no auth_handler self.client.auth_handler = None with pytest.raises(errors.Error): self.client.obtain_certificate_from_csr(test_csr) mock_logger.error.assert_called_once_with(mock.ANY) @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate(self, mock_crypto_util): csr = util.CSR(form="pem", file=None, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = mock.sentinel.key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._test_obtain_certificate_common(mock.sentinel.key, csr) mock_crypto_util.generate_key.assert_called_once_with( key_size=self.config.rsa_key_size, key_dir=None, key_type=self.config.key_type, elliptic_curve="secp256r1", strict_permissions=True, ) mock_crypto_util.generate_csr.assert_called_once_with( mock.sentinel.key, self.eg_domains, None, False, True) mock_crypto_util.cert_and_chain_from_fullchain.assert_called_once_with( self.eg_order.fullchain_pem) @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_partial_success(self, mock_crypto_util): csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) authzr = self._authzr_from_domains(["example.com"]) self.config.allow_subset_of_names = True self._test_obtain_certificate_common(key, csr, authzr_ret=authzr, auth_count=2) assert mock_crypto_util.generate_key.call_count == 2 assert mock_crypto_util.generate_csr.call_count == 2 assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 1 @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_finalize_order_partial_success(self, mock_crypto_util): from acme import messages csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._mock_obtain_certificate() authzr = self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr identifier = messages.Identifier(typ=messages.IDENTIFIER_FQDN, value='example.com') subproblem = messages.Error.with_code('caa', detail='bar', title='title', identifier=identifier) error_with_subproblems = messages.Error.with_code('malformed', detail='foo', title='title', subproblems=[subproblem]) self.client.acme.finalize_order.side_effect = [error_with_subproblems, mock.DEFAULT] self.config.allow_subset_of_names = True with test_util.patch_display_util(): result = self.client.obtain_certificate(self.eg_domains) assert result == \ (mock.sentinel.cert, mock.sentinel.chain, key, csr) assert self.client.auth_handler.handle_authorizations.call_count == 2 assert self.acme.finalize_order.call_count == 2 successful_domains = [d for d in self.eg_domains if d != 'example.com'] assert mock_crypto_util.generate_key.call_count == 2 mock_crypto_util.generate_csr.assert_has_calls([ mock.call(key, self.eg_domains, None, self.config.must_staple, self.config.strict_permissions), mock.call(key, successful_domains, None, self.config.must_staple, self.config.strict_permissions)]) assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 1 @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_finalize_order_no_retryable_domains(self, mock_crypto_util): from acme import messages csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._mock_obtain_certificate() authzr = self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr identifier1 = messages.Identifier(typ=messages.IDENTIFIER_FQDN, value='example.com') identifier2 = messages.Identifier(typ=messages.IDENTIFIER_FQDN, value='www.example.com') subproblem1 = messages.Error.with_code('caa', detail='bar', title='title', identifier=identifier1) subproblem2 = messages.Error.with_code('caa', detail='bar', title='title', identifier=identifier2) error_with_subproblems = messages.Error.with_code('malformed', detail='foo', title='title', subproblems=[subproblem1, subproblem2]) self.client.acme.finalize_order.side_effect = error_with_subproblems self.config.allow_subset_of_names = True with pytest.raises(messages.Error): self.client.obtain_certificate(self.eg_domains) assert self.client.auth_handler.handle_authorizations.call_count == 1 assert self.acme.finalize_order.call_count == 1 assert mock_crypto_util.generate_key.call_count == 1 assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 0 @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_finalize_order_rejected_identifier_no_subproblems(self, mock_crypto_util): from acme import messages csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._mock_obtain_certificate() authzr = self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr error = messages.Error.with_code('caa', detail='foo', title='title') self.client.acme.finalize_order.side_effect = error self.config.allow_subset_of_names = True with pytest.raises(messages.Error): self.client.obtain_certificate(self.eg_domains) assert self.client.auth_handler.handle_authorizations.call_count == 1 assert self.acme.finalize_order.call_count == 1 assert mock_crypto_util.generate_key.call_count == 1 assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 0 @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_get_order_partial_success(self, mock_crypto_util): from acme import messages csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._mock_obtain_certificate() authzr = self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr identifier = messages.Identifier(typ=messages.IDENTIFIER_FQDN, value='example.com') subproblem = messages.Error.with_code('caa', detail='bar', title='title', identifier=identifier) error_with_subproblems = messages.Error.with_code('malformed', detail='foo', title='title', subproblems=[subproblem]) self.client.acme.new_order.side_effect = [error_with_subproblems, mock.DEFAULT] self.config.allow_subset_of_names = True with test_util.patch_display_util(): result = self.client.obtain_certificate(self.eg_domains) assert result == \ (mock.sentinel.cert, mock.sentinel.chain, key, csr) assert self.client.auth_handler.handle_authorizations.call_count == 1 assert self.acme.new_order.call_count == 2 successful_domains = [d for d in self.eg_domains if d != 'example.com'] assert mock_crypto_util.generate_key.call_count == 2 mock_crypto_util.generate_csr.assert_has_calls([ mock.call(key, self.eg_domains, None, self.config.must_staple, self.config.strict_permissions), mock.call(key, successful_domains, None, self.config.must_staple, self.config.strict_permissions)]) assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 1 @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_get_order_no_retryable_domains(self, mock_crypto_util): from acme import messages csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._mock_obtain_certificate() authzr = self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr identifier1 = messages.Identifier(typ=messages.IDENTIFIER_FQDN, value='example.com') identifier2 = messages.Identifier(typ=messages.IDENTIFIER_FQDN, value='www.example.com') subproblem1 = messages.Error.with_code('caa', detail='bar', title='title', identifier=identifier1) subproblem2 = messages.Error.with_code('caa', detail='bar', title='title', identifier=identifier2) error_with_subproblems = messages.Error.with_code('malformed', detail='foo', title='title', subproblems=[subproblem1, subproblem2]) self.client.acme.new_order.side_effect = error_with_subproblems self.config.allow_subset_of_names = True with pytest.raises(messages.Error): self.client.obtain_certificate(self.eg_domains) assert self.client.auth_handler.handle_authorizations.call_count == 0 assert self.acme.new_order.call_count == 1 assert mock_crypto_util.generate_key.call_count == 1 assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 0 @mock.patch("certbot._internal.client.crypto_util") def test_obtain_certificate_get_order_rejected_identifier_no_subproblems(self, mock_crypto_util): from acme import messages csr = util.CSR(form="pem", file=mock.sentinel.csr_file, data=CSR_SAN) key = util.CSR(form="pem", file=mock.sentinel.key_file, data=CSR_SAN) mock_crypto_util.generate_csr.return_value = csr mock_crypto_util.generate_key.return_value = key self._set_mock_from_fullchain(mock_crypto_util.cert_and_chain_from_fullchain) self._mock_obtain_certificate() authzr = self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr error = messages.Error.with_code('caa', detail='foo', title='title') self.client.acme.new_order.side_effect = error self.config.allow_subset_of_names = True with pytest.raises(messages.Error): self.client.obtain_certificate(self.eg_domains) assert self.client.auth_handler.handle_authorizations.call_count == 0 assert self.acme.new_order.call_count == 1 assert mock_crypto_util.generate_key.call_count == 1 assert mock_crypto_util.cert_and_chain_from_fullchain.call_count == 0 @mock.patch("certbot._internal.client.crypto_util") @mock.patch("certbot._internal.client.acme_crypto_util") def test_obtain_certificate_dry_run(self, mock_acme_crypto, mock_crypto): csr = util.CSR(form="pem", file=None, data=CSR_SAN) mock_acme_crypto.make_csr.return_value = CSR_SAN mock_crypto.make_key.return_value = mock.sentinel.key_pem key = util.Key(file=None, pem=mock.sentinel.key_pem) self._set_mock_from_fullchain(mock_crypto.cert_and_chain_from_fullchain) self.client.config.dry_run = True self._test_obtain_certificate_common(key, csr) mock_crypto.make_key.assert_called_once_with( bits=self.config.rsa_key_size, elliptic_curve="secp256r1", key_type=self.config.key_type, ) mock_acme_crypto.make_csr.assert_called_once_with( mock.sentinel.key_pem, self.eg_domains, self.config.must_staple) mock_crypto.generate_key.assert_not_called() mock_crypto.generate_csr.assert_not_called() assert mock_crypto.cert_and_chain_from_fullchain.call_count == 1 @mock.patch("certbot._internal.client.logger") @mock.patch("certbot._internal.client.crypto_util") @mock.patch("certbot._internal.client.acme_crypto_util") def test_obtain_certificate_dry_run_authz_deactivations_failed(self, mock_acme_crypto, mock_crypto, mock_log): from acme import messages csr = util.CSR(form="pem", file=None, data=CSR_SAN) mock_acme_crypto.make_csr.return_value = CSR_SAN mock_crypto.make_key.return_value = mock.sentinel.key_pem key = util.Key(file=None, pem=mock.sentinel.key_pem) self._set_mock_from_fullchain(mock_crypto.cert_and_chain_from_fullchain) self._mock_obtain_certificate() self.client.config.dry_run = True # Two authzs that are already valid and should get deactivated (dry run) authzrs = self._authzr_from_domains(["example.com", "www.example.com"]) for authzr in authzrs: authzr.body.status = messages.STATUS_VALID # One deactivation succeeds, one fails auth_handler = self.client.auth_handler auth_handler.deactivate_valid_authorizations.return_value = ([authzrs[0]], [authzrs[1]]) # Certificate should get issued despite one failed deactivation self.eg_order.authorizations = authzrs self.client.auth_handler.handle_authorizations.return_value = authzrs with test_util.patch_display_util(): result = self.client.obtain_certificate(self.eg_domains) assert result == (mock.sentinel.cert, mock.sentinel.chain, key, csr) self._check_obtain_certificate(1) # Deactivation success/failure should have been handled properly assert auth_handler.deactivate_valid_authorizations.call_count == 1, \ "Deactivate authorizations should be called" assert self.acme.new_order.call_count == 2, \ "Order should be recreated due to successfully deactivated authorizations" mock_log.warning.assert_called_with("Certbot was unable to obtain fresh authorizations for" " every domain. The dry run will continue, but results" " may not be accurate.") def _set_mock_from_fullchain(self, mock_from_fullchain): mock_cert = mock.Mock() mock_cert.encode.return_value = mock.sentinel.cert mock_chain = mock.Mock() mock_chain.encode.return_value = mock.sentinel.chain mock_from_fullchain.return_value = (mock_cert, mock_chain) def _authzr_from_domains(self, domains): authzr = [] # domain ordering should not be affected by authorization order for domain in reversed(domains): authzr.append( mock.MagicMock( body=mock.MagicMock( identifier=mock.MagicMock( value=domain)))) return authzr def _test_obtain_certificate_common(self, key, csr, authzr_ret=None, auth_count=1): self._mock_obtain_certificate() # return_value is essentially set to (None, None) in # _mock_obtain_certificate(), which breaks this test. # Thus fixed by the next line. authzr = authzr_ret or self._authzr_from_domains(self.eg_domains) self.eg_order.authorizations = authzr self.client.auth_handler.handle_authorizations.return_value = authzr with test_util.patch_display_util(): result = self.client.obtain_certificate(self.eg_domains) assert result == \ (mock.sentinel.cert, mock.sentinel.chain, key, csr) self._check_obtain_certificate(auth_count) @mock.patch('certbot._internal.client.Client.obtain_certificate') @mock.patch('certbot._internal.storage.RenewableCert.new_lineage') def test_obtain_and_enroll_certificate(self, mock_storage, mock_obtain_certificate): domains = ["*.example.com", "example.com"] mock_obtain_certificate.return_value = (mock.MagicMock(), mock.MagicMock(), mock.MagicMock(), None) self.client.config.dry_run = False assert self.client.obtain_and_enroll_certificate(domains, "example_cert") assert self.client.obtain_and_enroll_certificate(domains, None) assert self.client.obtain_and_enroll_certificate(domains[1:], None) self.client.config.dry_run = True assert not self.client.obtain_and_enroll_certificate(domains, None) names = [call[0][0] for call in mock_storage.call_args_list] assert names == ["example_cert", "example.com", "example.com"] @mock.patch("certbot._internal.cli.helpful_parser") def test_save_certificate(self, mock_parser): certs = ["cert_512.pem", "cert-san_512.pem"] tmp_path = tempfile.mkdtemp() cert_pem = test_util.load_vector(certs[0]) chain_pem = (test_util.load_vector(certs[0]) + test_util.load_vector(certs[1])) candidate_cert_path = os.path.join(tmp_path, "certs", "cert_512.pem") candidate_chain_path = os.path.join(tmp_path, "chains", "chain.pem") candidate_fullchain_path = os.path.join(tmp_path, "chains", "fullchain.pem") mock_parser.verb = "certonly" mock_parser.args = ["--cert-path", candidate_cert_path, "--chain-path", candidate_chain_path, "--fullchain-path", candidate_fullchain_path] cert_path, chain_path, fullchain_path = self.client.save_certificate( cert_pem, chain_pem, candidate_cert_path, candidate_chain_path, candidate_fullchain_path) assert os.path.dirname(cert_path) == \ os.path.dirname(candidate_cert_path) assert os.path.dirname(chain_path) == \ os.path.dirname(candidate_chain_path) assert os.path.dirname(fullchain_path) == \ os.path.dirname(candidate_fullchain_path) with open(cert_path, "rb") as cert_file: cert_contents = cert_file.read() assert cert_contents == test_util.load_vector(certs[0]) with open(chain_path, "rb") as chain_file: chain_contents = chain_file.read() assert chain_contents == test_util.load_vector(certs[0]) + \ test_util.load_vector(certs[1]) shutil.rmtree(tmp_path) @test_util.patch_display_util() def test_deploy_certificate_success(self, mock_util): with pytest.raises(errors.Error): self.client.deploy_certificate(["foo.bar"], "key", "cert", "chain", "fullchain") installer = mock.MagicMock() self.client.installer = installer self.client.deploy_certificate(["foo.bar"], "key", "cert", "chain", "fullchain") installer.deploy_cert.assert_called_once_with( cert_path=os.path.abspath("cert"), chain_path=os.path.abspath("chain"), domain='foo.bar', fullchain_path='fullchain', key_path=os.path.abspath("key")) assert installer.save.call_count == 2 installer.restart.assert_called_once_with() @mock.patch('certbot._internal.client.display_util.notify') @test_util.patch_display_util() def test_deploy_certificate_failure(self, mock_util, mock_notify): installer = mock.MagicMock() self.client.installer = installer self.config.installer = "foobar" installer.deploy_cert.side_effect = errors.PluginError with pytest.raises(errors.PluginError): self.client.deploy_certificate(["foo.bar"], "key", "cert", "chain", "fullchain") installer.recovery_routine.assert_called_once_with() mock_notify.assert_any_call('Deploying certificate') @test_util.patch_display_util() def test_deploy_certificate_save_failure(self, mock_util): installer = mock.MagicMock() self.client.installer = installer installer.save.side_effect = errors.PluginError with pytest.raises(errors.PluginError): self.client.deploy_certificate(["foo.bar"], "key", "cert", "chain", "fullchain") installer.recovery_routine.assert_called_once_with() @mock.patch('certbot._internal.client.display_util.notify') @test_util.patch_display_util() def test_deploy_certificate_restart_failure(self, mock_get_utility, mock_notify): installer = mock.MagicMock() installer.restart.side_effect = [errors.PluginError, None] self.client.installer = installer with pytest.raises(errors.PluginError): self.client.deploy_certificate(["foo.bar"], "key", "cert", "chain", "fullchain") mock_notify.assert_called_with( 'We were unable to install your certificate, however, we successfully restored ' 'your server to its prior configuration.') installer.rollback_checkpoints.assert_called_once_with() assert installer.restart.call_count == 2 @mock.patch('certbot._internal.client.logger') @test_util.patch_display_util() def test_deploy_certificate_restart_failure2(self, mock_get_utility, mock_logger): installer = mock.MagicMock() installer.restart.side_effect = errors.PluginError installer.rollback_checkpoints.side_effect = errors.ReverterError self.client.installer = installer with pytest.raises(errors.PluginError): self.client.deploy_certificate(["foo.bar"], "key", "cert", "chain", "fullchain") assert mock_logger.error.call_count == 1 assert 'An error occurred and we failed to restore your config' in \ mock_logger.error.call_args[0][0] installer.rollback_checkpoints.assert_called_once_with() assert installer.restart.call_count == 1 def test_choose_lineage_name(self): sep = os.path.sep invalid_domains = [f"exam{sep}ple.com"] valid_domains = ["example.com"] invalid_certname = f"foo{sep}.bar" valid_certname = "foo.bar" invalid_wildcard_domain = [f"*.exam{sep}ple.com"] # Verify errors are raised when invalid lineagename is chosen. with pytest.raises(errors.Error): self.client._choose_lineagename(invalid_domains, None) with pytest.raises(errors.Error): self.client._choose_lineagename(invalid_domains, invalid_certname) with pytest.raises(errors.Error): self.client._choose_lineagename(valid_domains, invalid_certname) with pytest.raises(errors.Error): self.client._choose_lineagename(invalid_wildcard_domain, None) # Verify no error is raised when invalid domain is overriden by valid certname. self.client._choose_lineagename(invalid_domains, valid_certname) class EnhanceConfigTest(ClientTestCommon): """Tests for certbot._internal.client.Client.enhance_config.""" def setUp(self): super().setUp() self.config.hsts = False self.config.redirect = False self.config.staple = False self.config.uir = False self.domain = "example.org" def test_no_installer(self): with pytest.raises(errors.Error): self.client.enhance_config([self.domain], None) def test_unsupported(self): self.client.installer = mock.MagicMock() self.client.installer.supported_enhancements.return_value = [] self.config.redirect = None self.config.hsts = True with mock.patch("certbot._internal.client.logger") as mock_logger: self.client.enhance_config([self.domain], None) assert mock_logger.error.call_count == 1 self.client.installer.enhance.assert_not_called() @mock.patch("certbot._internal.client.logger") def test_already_exists_header(self, mock_log): self.config.hsts = True self._test_with_already_existing() assert mock_log.info.called is True assert mock_log.info.call_args[0][1] == \ 'Strict-Transport-Security' @mock.patch("certbot._internal.client.logger") def test_already_exists_redirect(self, mock_log): self.config.redirect = True self._test_with_already_existing() assert mock_log.info.called is True assert mock_log.info.call_args[0][1] == \ 'redirect' @mock.patch("certbot._internal.client.logger") def test_config_set_no_warning_redirect(self, mock_log): self.config.redirect = False self._test_with_already_existing() assert mock_log.warning.called is False @mock.patch("certbot._internal.client.logger") def test_no_warn_redirect(self, mock_log): self.config.redirect = None self._test_with_all_supported() assert mock_log.warning.called is False def test_no_ask_hsts(self): self.config.hsts = True self._test_with_all_supported() self.client.installer.enhance.assert_called_with( self.domain, "ensure-http-header", "Strict-Transport-Security") def test_no_ask_redirect(self): self.config.redirect = True self._test_with_all_supported() self.client.installer.enhance.assert_called_with( self.domain, "redirect", None) def test_no_ask_staple(self): self.config.staple = True self._test_with_all_supported() self.client.installer.enhance.assert_called_with( self.domain, "staple-ocsp", None) def test_no_ask_uir(self): self.config.uir = True self._test_with_all_supported() self.client.installer.enhance.assert_called_with( self.domain, "ensure-http-header", "Upgrade-Insecure-Requests") def test_enhance_failure(self): self.client.installer = mock.MagicMock() self.client.installer.enhance.side_effect = errors.PluginError self._test_error(enhance_error=True) self.client.installer.recovery_routine.assert_called_once_with() def test_save_failure(self): self.client.installer = mock.MagicMock() self.client.installer.save.side_effect = errors.PluginError self._test_error() self.client.installer.recovery_routine.assert_called_once_with() self.client.installer.save.assert_called_once_with(mock.ANY) def test_restart_failure(self): self.client.installer = mock.MagicMock() self.client.installer.restart.side_effect = [errors.PluginError, None] self._test_error_with_rollback() def test_restart_failure2(self): installer = mock.MagicMock() installer.restart.side_effect = errors.PluginError installer.rollback_checkpoints.side_effect = errors.ReverterError self.client.installer = installer self._test_error_with_rollback() def _test_error_with_rollback(self): self._test_error() assert self.client.installer.restart.called is True def _test_error(self, enhance_error=False, restart_error=False): self.config.redirect = True with mock.patch('certbot._internal.client.logger') as mock_logger, \ test_util.patch_display_util() as mock_gu: with pytest.raises(errors.PluginError): self._test_with_all_supported() if enhance_error: assert mock_logger.error.call_count == 1 assert 'Unable to set the %s enhancement for %s.' == mock_logger.error.call_args_list[0][0][0] if restart_error: mock_logger.critical.assert_called_with( 'Rolling back to previous server configuration...') def _test_with_all_supported(self): if self.client.installer is None: self.client.installer = mock.MagicMock() self.client.installer.supported_enhancements.return_value = [ "ensure-http-header", "redirect", "staple-ocsp"] self.client.enhance_config([self.domain], None) assert self.client.installer.save.call_count == 1 assert self.client.installer.restart.call_count == 1 def _test_with_already_existing(self): self.client.installer = mock.MagicMock() self.client.installer.supported_enhancements.return_value = [ "ensure-http-header", "redirect", "staple-ocsp"] self.client.installer.enhance.side_effect = errors.PluginEnhancementAlreadyPresent() self.client.enhance_config([self.domain], None) class RollbackTest(unittest.TestCase): """Tests for certbot._internal.client.rollback.""" def setUp(self): self.m_install = mock.MagicMock() @classmethod def _call(cls, checkpoints, side_effect): from certbot._internal.client import rollback with mock.patch("certbot._internal.client.plugin_selection.pick_installer") as mpi: mpi.side_effect = side_effect rollback(None, checkpoints, {}, mock.MagicMock()) def test_no_problems(self): self._call(1, self.m_install) assert self.m_install().rollback_checkpoints.call_count == 1 assert self.m_install().restart.call_count == 1 def test_no_installer(self): self._call(1, None) # Just make sure no exceptions are raised if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover configuration_test.py 0000644 00000015726 15114562471 0011045 0 ustar 00 """Tests for certbot.configuration.""" import sys from unittest import mock import pytest from certbot import errors from certbot._internal import constants from certbot.compat import misc from certbot.compat import os from certbot.tests import util as test_util class NamespaceConfigTest(test_util.ConfigTestCase): """Tests for certbot.configuration.NamespaceConfig.""" def setUp(self): super().setUp() self.config.foo = 'bar' # pylint: disable=blacklisted-name self.config.server = 'https://acme-server.org:443/new' self.config.https_port = 1234 self.config.http01_port = 4321 def test_init_same_ports(self): self.config.https_port = 4321 from certbot.configuration import NamespaceConfig with pytest.raises(errors.Error): NamespaceConfig(self.config.namespace) def test_proxy_getattr(self): assert self.config.foo == 'bar' assert self.config.work_dir == os.path.join(self.tempdir, 'work') def test_server_path(self): assert ['acme-server.org:443', 'new'] == \ self.config.server_path.split(os.path.sep) self.config.server = ('http://user:pass@acme.server:443' '/p/a/t/h;parameters?query#fragment') assert ['user:pass@acme.server:443', 'p', 'a', 't', 'h'] == \ self.config.server_path.split(os.path.sep) @mock.patch('certbot.configuration.constants') def test_dynamic_dirs(self, mock_constants): mock_constants.ACCOUNTS_DIR = 'acc' mock_constants.BACKUP_DIR = 'backups' mock_constants.IN_PROGRESS_DIR = '../p' mock_constants.KEY_DIR = 'keys' mock_constants.TEMP_CHECKPOINT_DIR = 't' ref_path = misc.underscores_for_unsupported_characters_in_path( 'acc/acme-server.org:443/new') assert os.path.normpath(self.config.accounts_dir) == \ os.path.normpath(os.path.join(self.config.config_dir, ref_path)) assert os.path.normpath(self.config.backup_dir) == \ os.path.normpath(os.path.join(self.config.work_dir, 'backups')) assert os.path.normpath(self.config.in_progress_dir) == \ os.path.normpath(os.path.join(self.config.work_dir, '../p')) assert os.path.normpath(self.config.temp_checkpoint_dir) == \ os.path.normpath(os.path.join(self.config.work_dir, 't')) def test_absolute_paths(self): from certbot.configuration import NamespaceConfig config_base = "foo" work_base = "bar" logs_base = "baz" server = "mock.server" mock_namespace = mock.MagicMock(spec=['config_dir', 'work_dir', 'logs_dir', 'http01_port', 'https_port', 'domains', 'server']) mock_namespace.config_dir = config_base mock_namespace.work_dir = work_base mock_namespace.logs_dir = logs_base mock_namespace.server = server config = NamespaceConfig(mock_namespace) assert os.path.isabs(config.config_dir) assert config.config_dir == \ os.path.join(os.getcwd(), config_base) assert os.path.isabs(config.work_dir) assert config.work_dir == \ os.path.join(os.getcwd(), work_base) assert os.path.isabs(config.logs_dir) assert config.logs_dir == \ os.path.join(os.getcwd(), logs_base) assert os.path.isabs(config.accounts_dir) assert os.path.isabs(config.backup_dir) assert os.path.isabs(config.in_progress_dir) assert os.path.isabs(config.temp_checkpoint_dir) @mock.patch('certbot.configuration.constants') def test_renewal_dynamic_dirs(self, mock_constants): mock_constants.ARCHIVE_DIR = 'a' mock_constants.LIVE_DIR = 'l' mock_constants.RENEWAL_CONFIGS_DIR = 'renewal_configs' assert self.config.default_archive_dir == os.path.join(self.config.config_dir, 'a') assert self.config.live_dir == os.path.join(self.config.config_dir, 'l') assert self.config.renewal_configs_dir == os.path.join( self.config.config_dir, 'renewal_configs') def test_renewal_absolute_paths(self): from certbot.configuration import NamespaceConfig config_base = "foo" work_base = "bar" logs_base = "baz" mock_namespace = mock.MagicMock(spec=['config_dir', 'work_dir', 'logs_dir', 'http01_port', 'https_port', 'domains', 'server']) mock_namespace.config_dir = config_base mock_namespace.work_dir = work_base mock_namespace.logs_dir = logs_base config = NamespaceConfig(mock_namespace) assert os.path.isabs(config.default_archive_dir) assert os.path.isabs(config.live_dir) assert os.path.isabs(config.renewal_configs_dir) def test_get_and_set_attr(self): self.config.foo = 42 assert self.config.namespace.foo == 42 self.config.namespace.bar = 1337 assert self.config.bar == 1337 def test_hook_directories(self): assert self.config.renewal_hooks_dir == \ os.path.join(self.config.config_dir, constants.RENEWAL_HOOKS_DIR) assert self.config.renewal_pre_hooks_dir == \ os.path.join(self.config.renewal_hooks_dir, constants.RENEWAL_PRE_HOOKS_DIR) assert self.config.renewal_deploy_hooks_dir == \ os.path.join(self.config.renewal_hooks_dir, constants.RENEWAL_DEPLOY_HOOKS_DIR) assert self.config.renewal_post_hooks_dir == \ os.path.join(self.config.renewal_hooks_dir, constants.RENEWAL_POST_HOOKS_DIR) def test_set_by_user_runtime_overrides(self): assert not self.config.set_by_user('something') self.config.something = 'a value' assert self.config.set_by_user('something') def test_set_by_user_exception(self): from certbot.configuration import NamespaceConfig # a newly created NamespaceConfig has no argument sources dict, so an # exception is raised config = NamespaceConfig(self.config.namespace) with pytest.raises(RuntimeError): config.set_by_user('whatever') # now set an argument sources dict config.set_argument_sources({}) assert not config.set_by_user('whatever') def test_set_by_user_mutables(self): assert not self.config.set_by_user('domains') self.config.domains.append('example.org') assert self.config.set_by_user('domains') if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover crypto_util_test.py 0000644 00000045377 15114562471 0010560 0 ustar 00 """Tests for certbot.crypto_util.""" import binascii import logging import re import sys import unittest from unittest import mock import OpenSSL import pytest from cryptography import x509 from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives.asymmetric import ec from certbot import errors from certbot import util from certbot.compat import filesystem from certbot.compat import os import certbot.tests.util as test_util RSA256_KEY = test_util.load_vector('rsa256_key.pem') RSA256_KEY_PATH = test_util.vector_path('rsa256_key.pem') RSA512_KEY = test_util.load_vector('rsa512_key.pem') RSA2048_KEY_PATH = test_util.vector_path('rsa2048_key.pem') CERT_PATH = test_util.vector_path('cert_512.pem') CERT = test_util.load_vector('cert_512.pem') SS_CERT_PATH = test_util.vector_path('cert_2048.pem') SS_CERT = test_util.load_vector('cert_2048.pem') P256_KEY = test_util.load_vector('nistp256_key.pem') P256_CERT_PATH = test_util.vector_path('cert-nosans_nistp256.pem') P256_CERT = test_util.load_vector('cert-nosans_nistp256.pem') # CERT_LEAF is signed by CERT_ISSUER. CERT_ALT_ISSUER is a cross-sign of CERT_ISSUER. CERT_LEAF = test_util.load_vector('cert_leaf.pem') CERT_ISSUER = test_util.load_vector('cert_intermediate_1.pem') CERT_ALT_ISSUER = test_util.load_vector('cert_intermediate_2.pem') class GenerateKeyTest(test_util.TempDirTestCase): """Tests for certbot.crypto_util.generate_key.""" def setUp(self): super().setUp() self.workdir = os.path.join(self.tempdir, 'workdir') filesystem.mkdir(self.workdir, mode=0o700) logging.disable(logging.CRITICAL) def tearDown(self): super().tearDown() logging.disable(logging.NOTSET) @classmethod def _call(cls, key_size, key_dir): from certbot.crypto_util import generate_key return generate_key(key_size, key_dir, 'key-certbot.pem', strict_permissions=True) @mock.patch('certbot.crypto_util.make_key') def test_success(self, mock_make): mock_make.return_value = b'key_pem' key = self._call(1024, self.workdir) assert key.pem == b'key_pem' assert 'key-certbot.pem' in key.file assert os.path.exists(os.path.join(self.workdir, key.file)) @mock.patch('certbot.crypto_util.make_key') def test_key_failure(self, mock_make): mock_make.side_effect = ValueError with pytest.raises(ValueError): self._call(431, self.workdir) class GenerateCSRTest(test_util.TempDirTestCase): """Tests for certbot.crypto_util.generate_csr.""" @mock.patch('acme.crypto_util.make_csr') @mock.patch('certbot.crypto_util.util.make_or_verify_dir') def test_it(self, unused_mock_verify, mock_csr): from certbot.crypto_util import generate_csr mock_csr.return_value = b'csr_pem' csr = generate_csr( mock.Mock(pem='dummy_key'), 'example.com', self.tempdir, strict_permissions=True) assert csr.data == b'csr_pem' assert 'csr-certbot.pem' in csr.file class ValidCSRTest(unittest.TestCase): """Tests for certbot.crypto_util.valid_csr.""" @classmethod def _call(cls, csr): from certbot.crypto_util import valid_csr return valid_csr(csr) def test_valid_pem_true(self): assert self._call(test_util.load_vector('csr_512.pem')) def test_valid_pem_san_true(self): assert self._call(test_util.load_vector('csr-san_512.pem')) def test_valid_der_false(self): assert not self._call(test_util.load_vector('csr_512.der')) def test_empty_false(self): assert not self._call('') def test_random_false(self): assert not self._call('foo bar') class CSRMatchesPubkeyTest(unittest.TestCase): """Tests for certbot.crypto_util.csr_matches_pubkey.""" @classmethod def _call(cls, *args, **kwargs): from certbot.crypto_util import csr_matches_pubkey return csr_matches_pubkey(*args, **kwargs) def test_valid_true(self): assert self._call( test_util.load_vector('csr_512.pem'), RSA512_KEY) def test_invalid_false(self): assert not self._call( test_util.load_vector('csr_512.pem'), RSA256_KEY) class ImportCSRFileTest(unittest.TestCase): """Tests for certbot.certbot_util.import_csr_file.""" @classmethod def _call(cls, *args, **kwargs): from certbot.crypto_util import import_csr_file return import_csr_file(*args, **kwargs) def test_der_csr(self): csrfile = test_util.vector_path('csr_512.der') data = test_util.load_vector('csr_512.der') data_pem = test_util.load_vector('csr_512.pem') assert (OpenSSL.crypto.FILETYPE_PEM, util.CSR(file=csrfile, data=data_pem, form="pem"), ["Example.com"]) == \ self._call(csrfile, data) def test_pem_csr(self): csrfile = test_util.vector_path('csr_512.pem') data = test_util.load_vector('csr_512.pem') assert (OpenSSL.crypto.FILETYPE_PEM, util.CSR(file=csrfile, data=data, form="pem"), ["Example.com"],) == \ self._call(csrfile, data) def test_bad_csr(self): with pytest.raises(errors.Error): self._call(test_util.vector_path('cert_512.pem'), test_util.load_vector('cert_512.pem')) class MakeKeyTest(unittest.TestCase): """Tests for certbot.crypto_util.make_key.""" def test_rsa(self): # pylint: disable=no-self-use # RSA Key Type Test from certbot.crypto_util import make_key # Do not test larger keys as it takes too long. serialization.load_pem_private_key(make_key(2048), password=None) def test_ec(self): # pylint: disable=no-self-use # ECDSA Key Type Tests from certbot.crypto_util import make_key for (name, bits) in [('secp256r1', 256), ('secp384r1', 384), ('secp521r1', 521)]: pkey = serialization.load_pem_private_key( make_key(elliptic_curve=name, key_type='ecdsa'), password=None ) assert isinstance(pkey, ec.EllipticCurvePrivateKey) assert pkey.curve.key_size == bits def test_bad_key_sizes(self): from certbot.crypto_util import make_key # Try a bad key size for RSA and ECDSA with pytest.raises(errors.Error, match='Unsupported RSA key length: 1024'): make_key(bits=1024, key_type='rsa') def test_bad_elliptic_curve_name(self): from certbot.crypto_util import make_key with pytest.raises(errors.Error, match='Unsupported elliptic curve: nothere'): make_key(elliptic_curve="nothere", key_type='ecdsa') def test_bad_key_type(self): from certbot.crypto_util import make_key # Try a bad --key-type with pytest.raises(errors.Error, match=re.escape('Invalid key_type specified: unf. Use [rsa|ecdsa]')): make_key(2048, key_type='unf') class VerifyCertSetup(unittest.TestCase): """Refactoring for verification tests.""" def setUp(self): self.renewable_cert = mock.MagicMock() self.renewable_cert.cert_path = SS_CERT_PATH self.renewable_cert.chain_path = SS_CERT_PATH self.renewable_cert.key_path = RSA2048_KEY_PATH self.renewable_cert.fullchain_path = test_util.vector_path('cert_fullchain_2048.pem') self.bad_renewable_cert = mock.MagicMock() self.bad_renewable_cert.chain_path = SS_CERT_PATH self.bad_renewable_cert.cert_path = SS_CERT_PATH self.bad_renewable_cert.fullchain_path = SS_CERT_PATH class VerifyRenewableCertTest(VerifyCertSetup): """Tests for certbot.crypto_util.verify_renewable_cert.""" def _call(self, renewable_cert): from certbot.crypto_util import verify_renewable_cert return verify_renewable_cert(renewable_cert) def test_verify_renewable_cert(self): assert self._call(self.renewable_cert) is None @mock.patch('certbot.crypto_util.verify_renewable_cert_sig', side_effect=errors.Error("")) def test_verify_renewable_cert_failure(self, unused_verify_renewable_cert_sign): with pytest.raises(errors.Error): self._call(self.bad_renewable_cert) class VerifyRenewableCertSigTest(VerifyCertSetup): """Tests for certbot.crypto_util.verify_renewable_cert.""" def _call(self, renewable_cert): from certbot.crypto_util import verify_renewable_cert_sig return verify_renewable_cert_sig(renewable_cert) def test_cert_sig_match(self): assert self._call(self.renewable_cert) is None def test_cert_sig_match_ec(self): renewable_cert = mock.MagicMock() renewable_cert.cert_path = P256_CERT_PATH renewable_cert.chain_path = P256_CERT_PATH renewable_cert.key_path = P256_KEY assert self._call(renewable_cert) is None def test_cert_sig_mismatch(self): self.bad_renewable_cert.cert_path = test_util.vector_path('cert_512_bad.pem') with pytest.raises(errors.Error): self._call(self.bad_renewable_cert) class VerifyFullchainTest(VerifyCertSetup): """Tests for certbot.crypto_util.verify_fullchain.""" def _call(self, renewable_cert): from certbot.crypto_util import verify_fullchain return verify_fullchain(renewable_cert) def test_fullchain_matches(self): assert self._call(self.renewable_cert) is None def test_fullchain_mismatch(self): with pytest.raises(errors.Error): self._call(self.bad_renewable_cert) def test_fullchain_ioerror(self): self.bad_renewable_cert.chain = "dog" with pytest.raises(errors.Error): self._call(self.bad_renewable_cert) class VerifyCertMatchesPrivKeyTest(VerifyCertSetup): """Tests for certbot.crypto_util.verify_cert_matches_priv_key.""" def _call(self, renewable_cert): from certbot.crypto_util import verify_cert_matches_priv_key return verify_cert_matches_priv_key(renewable_cert.cert, renewable_cert.privkey) def test_cert_priv_key_match(self): self.renewable_cert.cert = SS_CERT_PATH self.renewable_cert.privkey = RSA2048_KEY_PATH assert self._call(self.renewable_cert) is None def test_cert_priv_key_mismatch(self): self.bad_renewable_cert.privkey = RSA256_KEY_PATH self.bad_renewable_cert.cert = SS_CERT_PATH with pytest.raises(errors.Error): self._call(self.bad_renewable_cert) class ValidPrivkeyTest(unittest.TestCase): """Tests for certbot.crypto_util.valid_privkey.""" @classmethod def _call(cls, privkey): from certbot.crypto_util import valid_privkey return valid_privkey(privkey) def test_valid_true(self): assert self._call(RSA512_KEY) def test_empty_false(self): assert not self._call('') def test_random_false(self): assert not self._call('foo bar') class GetSANsFromCertTest(unittest.TestCase): """Tests for certbot.crypto_util.get_sans_from_cert.""" @classmethod def _call(cls, *args, **kwargs): from certbot.crypto_util import get_sans_from_cert return get_sans_from_cert(*args, **kwargs) def test_single(self): assert [] == self._call(test_util.load_vector('cert_512.pem')) def test_san(self): assert ['example.com', 'www.example.com'] == \ self._call(test_util.load_vector('cert-san_512.pem')) class GetNamesFromCertTest(unittest.TestCase): """Tests for certbot.crypto_util.get_names_from_cert.""" @classmethod def _call(cls, *args, **kwargs): from certbot.crypto_util import get_names_from_cert return get_names_from_cert(*args, **kwargs) def test_single(self): assert ['example.com'] == \ self._call(test_util.load_vector('cert_512.pem')) def test_san(self): assert ['example.com', 'www.example.com'] == \ self._call(test_util.load_vector('cert-san_512.pem')) def test_common_name_sans_order(self): # Tests that the common name comes first # followed by the SANS in alphabetical order assert ['example.com'] + ['{0}.example.com'.format(c) for c in 'abcd'] == \ self._call(test_util.load_vector('cert-5sans_512.pem')) def test_parse_non_cert(self): with pytest.raises(ValueError): self._call(b"hello there") class GetNamesFromReqTest(unittest.TestCase): """Tests for certbot.crypto_util.get_names_from_req.""" @classmethod def _call(cls, *args, **kwargs): from certbot.crypto_util import get_names_from_req return get_names_from_req(*args, **kwargs) def test_nonames(self): assert [] == \ self._call(test_util.load_vector('csr-nonames_512.pem')) def test_nosans(self): assert ['example.com'] == \ self._call(test_util.load_vector('csr-nosans_512.pem')) def test_sans(self): assert ['example.com', 'example.org', 'example.net', 'example.info', 'subdomain.example.com', 'other.subdomain.example.com'] == \ self._call(test_util.load_vector('csr-6sans_512.pem')) def test_der(self): from OpenSSL.crypto import FILETYPE_ASN1 assert ['Example.com'] == \ self._call(test_util.load_vector('csr_512.der'), typ=FILETYPE_ASN1) class CertLoaderTest(unittest.TestCase): """Tests for certbot.crypto_util.pyopenssl_load_certificate""" def test_load_valid_cert(self): from certbot.crypto_util import pyopenssl_load_certificate cert, file_type = pyopenssl_load_certificate(CERT) assert file_type == OpenSSL.crypto.FILETYPE_PEM assert binascii.unhexlify( cert.digest("sha256").replace(b":", b"") ) == x509.load_pem_x509_certificate(CERT).fingerprint(hashes.SHA256()) def test_load_invalid_cert(self): from certbot.crypto_util import pyopenssl_load_certificate bad_cert_data = CERT.replace(b"BEGIN CERTIFICATE", b"ASDFASDFASDF!!!") with pytest.raises(errors.Error): pyopenssl_load_certificate(bad_cert_data) class NotBeforeTest(unittest.TestCase): """Tests for certbot.crypto_util.notBefore""" def test_notBefore(self): from certbot.crypto_util import notBefore assert notBefore(CERT_PATH).isoformat() == \ '2014-12-11T22:34:45+00:00' class NotAfterTest(unittest.TestCase): """Tests for certbot.crypto_util.notAfter""" def test_notAfter(self): from certbot.crypto_util import notAfter assert notAfter(CERT_PATH).isoformat() == \ '2014-12-18T22:34:45+00:00' class Sha256sumTest(unittest.TestCase): """Tests for certbot.crypto_util.notAfter""" def test_sha256sum(self): from certbot.crypto_util import sha256sum assert sha256sum(CERT_PATH) == \ '914ffed8daf9e2c99d90ac95c77d54f32cbd556672facac380f0c063498df84e' class CertAndChainFromFullchainTest(unittest.TestCase): """Tests for certbot.crypto_util.cert_and_chain_from_fullchain""" def _parse_and_reencode_pem(self, cert_pem): from OpenSSL import crypto return crypto.dump_certificate(crypto.FILETYPE_PEM, crypto.load_certificate(crypto.FILETYPE_PEM, cert_pem)).decode() def test_cert_and_chain_from_fullchain(self): cert_pem = CERT.decode() chain_pem = cert_pem + SS_CERT.decode() fullchain_pem = cert_pem + chain_pem spacey_fullchain_pem = cert_pem + u'\n' + chain_pem crlf_fullchain_pem = fullchain_pem.replace(u'\n', u'\r\n') # In the ACME v1 code path, the fullchain is constructed by loading cert+chain DERs # and using OpenSSL to dump them, so here we confirm that OpenSSL is producing certs # that will be parseable by cert_and_chain_from_fullchain. acmev1_fullchain_pem = self._parse_and_reencode_pem(cert_pem) + \ self._parse_and_reencode_pem(cert_pem) + self._parse_and_reencode_pem(SS_CERT.decode()) from certbot.crypto_util import cert_and_chain_from_fullchain for fullchain in (fullchain_pem, spacey_fullchain_pem, crlf_fullchain_pem, acmev1_fullchain_pem): cert_out, chain_out = cert_and_chain_from_fullchain(fullchain) assert cert_out == cert_pem assert chain_out == chain_pem with pytest.raises(errors.Error): cert_and_chain_from_fullchain(cert_pem) class FindChainWithIssuerTest(unittest.TestCase): """Tests for certbot.crypto_util.find_chain_with_issuer""" @classmethod def _call(cls, fullchains, issuer_cn, **kwargs): from certbot.crypto_util import find_chain_with_issuer return find_chain_with_issuer(fullchains, issuer_cn, kwargs) def _all_fullchains(self): return [CERT_LEAF.decode() + CERT_ISSUER.decode(), CERT_LEAF.decode() + CERT_ALT_ISSUER.decode()] def test_positive_match(self): """Correctly pick the chain based on the root's CN""" fullchains = self._all_fullchains() matched = self._call(fullchains, "Pebble Root CA 0cc6f0") assert matched == fullchains[1] @mock.patch('certbot.crypto_util.logger.info') def test_intermediate_match(self, mock_info): """Don't pick a chain where only an intermediate matches""" fullchains = self._all_fullchains() # Make the second chain actually only contain "Pebble Root CA 0cc6f0" # as an intermediate, not as the root. This wouldn't be a valid chain # (the CERT_ISSUER cert didn't issue the CERT_ALT_ISSUER cert), but the # function under test here doesn't care about that. fullchains[1] = fullchains[1] + CERT_ISSUER.decode() matched = self._call(fullchains, "Pebble Root CA 0cc6f0") assert matched == fullchains[0] mock_info.assert_not_called() @mock.patch('certbot.crypto_util.logger.info') def test_no_match(self, mock_info): fullchains = self._all_fullchains() matched = self._call(fullchains, "non-existent issuer") assert matched == fullchains[0] mock_info.assert_not_called() @mock.patch('certbot.crypto_util.logger.warning') def test_warning_on_no_match(self, mock_warning): fullchains = self._all_fullchains() matched = self._call(fullchains, "non-existent issuer", warn_on_no_match=True) assert matched == fullchains[0] mock_warning.assert_called_once_with("Certbot has been configured to prefer " "certificate chains with issuer '%s', but no chain from the CA matched " "this issuer. Using the default certificate chain instead.", "non-existent issuer") if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover eff_test.py 0000644 00000015024 15114562471 0006725 0 ustar 00 """Tests for certbot._internal.eff.""" import datetime import sys import unittest from unittest import mock import josepy import pytest import pytz import requests from acme import messages from certbot._internal import account from certbot._internal import constants import certbot.tests.util as test_util _KEY = josepy.JWKRSA.load(test_util.load_vector("rsa512_key.pem")) class SubscriptionTest(test_util.ConfigTestCase): """Abstract class for subscription tests.""" def setUp(self): super().setUp() self.account = account.Account( regr=messages.RegistrationResource( uri=None, body=messages.Registration(), new_authzr_uri='hi'), key=_KEY, meta=account.Account.Meta( creation_host='test.certbot.org', creation_dt=datetime.datetime( 2015, 7, 4, 14, 4, 10, tzinfo=pytz.UTC))) self.config.email = 'certbot@example.org' self.config.eff_email = None class PrepareSubscriptionTest(SubscriptionTest): """Tests for certbot._internal.eff.prepare_subscription.""" def _call(self): from certbot._internal.eff import prepare_subscription prepare_subscription(self.config, self.account) @test_util.patch_display_util() @mock.patch("certbot._internal.eff.display_util.notify") def test_failure(self, mock_notify, mock_get_utility): self.config.email = None self.config.eff_email = True self._call() actual = mock_notify.call_args[0][0] expected_part = "because you didn't provide an e-mail address" assert expected_part in actual assert self.account.meta.register_to_eff is None @test_util.patch_display_util() def test_will_not_subscribe_with_no_prompt(self, mock_get_utility): self.config.eff_email = False self._call() self._assert_no_get_utility_calls(mock_get_utility) assert self.account.meta.register_to_eff is None @test_util.patch_display_util() def test_will_subscribe_with_no_prompt(self, mock_get_utility): self.config.eff_email = True self._call() self._assert_no_get_utility_calls(mock_get_utility) assert self.account.meta.register_to_eff == self.config.email @test_util.patch_display_util() def test_will_not_subscribe_with_prompt(self, mock_get_utility): mock_get_utility().yesno.return_value = False self._call() assert not mock_get_utility().add_message.called self._assert_correct_yesno_call(mock_get_utility) assert self.account.meta.register_to_eff is None @test_util.patch_display_util() def test_will_subscribe_with_prompt(self, mock_get_utility): mock_get_utility().yesno.return_value = True self._call() assert not mock_get_utility().add_message.called self._assert_correct_yesno_call(mock_get_utility) assert self.account.meta.register_to_eff == self.config.email def _assert_no_get_utility_calls(self, mock_get_utility): assert not mock_get_utility().yesno.called assert not mock_get_utility().add_message.called def _assert_correct_yesno_call(self, mock_get_utility): assert mock_get_utility().yesno.called call_args, call_kwargs = mock_get_utility().yesno.call_args actual = call_args[0] expected_part = 'Electronic Frontier Foundation' assert expected_part in actual assert not call_kwargs.get('default', True) class HandleSubscriptionTest(SubscriptionTest): """Tests for certbot._internal.eff.handle_subscription.""" def _call(self): from certbot._internal.eff import handle_subscription handle_subscription(self.config, self.account) @mock.patch('certbot._internal.eff.subscribe') def test_no_subscribe(self, mock_subscribe): self._call() assert mock_subscribe.called is False @mock.patch('certbot._internal.eff.subscribe') def test_subscribe(self, mock_subscribe): self.account.meta = self.account.meta.update(register_to_eff=self.config.email) self._call() assert mock_subscribe.called assert mock_subscribe.call_args[0][0] == self.config.email class SubscribeTest(unittest.TestCase): """Tests for certbot._internal.eff.subscribe.""" def setUp(self): self.email = 'certbot@example.org' self.json = {'status': True} self.response = mock.Mock(ok=True) self.response.json.return_value = self.json patcher = mock.patch("certbot._internal.eff.display_util.notify") self.mock_notify = patcher.start() self.addCleanup(patcher.stop) @mock.patch('certbot._internal.eff.requests.post') def _call(self, mock_post): mock_post.return_value = self.response from certbot._internal.eff import subscribe subscribe(self.email) self._check_post_call(mock_post) def _check_post_call(self, mock_post): assert mock_post.call_count == 1 call_args, call_kwargs = mock_post.call_args assert call_args[0] == constants.EFF_SUBSCRIBE_URI data = call_kwargs.get('data') assert data is not None assert data.get('email') == self.email def test_bad_status(self): self.json['status'] = False self._call() actual = self._get_reported_message() expected_part = 'because your e-mail address appears to be invalid.' assert expected_part in actual def test_not_ok(self): self.response.ok = False self.response.raise_for_status.side_effect = requests.exceptions.HTTPError self._call() actual = self._get_reported_message() unexpected_part = 'because' assert unexpected_part not in actual def test_response_not_json(self): self.response.json.side_effect = ValueError() self._call() actual = self._get_reported_message() expected_part = 'problem' assert expected_part in actual def test_response_json_missing_status_element(self): self.json.clear() self._call() actual = self._get_reported_message() expected_part = 'problem' assert expected_part in actual def _get_reported_message(self): assert self.mock_notify.called return self.mock_notify.call_args[0][0] @test_util.patch_display_util() def test_subscribe(self, mock_get_utility): self._call() assert mock_get_utility.called is False if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover error_handler_test.py 0000644 00000012122 15114562471 0011007 0 ustar 00 """Tests for certbot._internal.error_handler.""" import contextlib import signal import sys from typing import Callable from typing import Dict from typing import Union import unittest from unittest import mock import pytest from certbot.compat import os def get_signals(signums): """Get the handlers for an iterable of signums.""" return {s: signal.getsignal(s) for s in signums} def set_signals(sig_handler_dict): """Set the signal (keys) with the handler (values) from the input dict.""" for s, h in sig_handler_dict.items(): signal.signal(s, h) @contextlib.contextmanager def signal_receiver(signums): """Context manager to catch signals""" signals = [] prev_handlers: Dict[int, Union[int, None, Callable]] = get_signals(signums) set_signals({s: lambda s, _: signals.append(s) for s in signums}) yield signals set_signals(prev_handlers) def send_signal(signum): """Send the given signal""" os.kill(os.getpid(), signum) class ErrorHandlerTest(unittest.TestCase): """Tests for certbot._internal.error_handler.ErrorHandler.""" def setUp(self): from certbot._internal import error_handler self.init_func = mock.MagicMock() self.init_args = {42,} self.init_kwargs = {'foo': 'bar'} self.handler = error_handler.ErrorHandler(self.init_func, *self.init_args, **self.init_kwargs) # pylint: disable=protected-access self.signals = error_handler._SIGNALS def test_context_manager(self): exception_raised = False try: with self.handler: raise ValueError except ValueError: exception_raised = True assert exception_raised self.init_func.assert_called_once_with(*self.init_args, **self.init_kwargs) def test_context_manager_with_signal(self): if not self.signals: self.skipTest(reason='Signals cannot be handled on Windows.') init_signals = get_signals(self.signals) with signal_receiver(self.signals) as signals_received: with self.handler: should_be_42 = 42 send_signal(self.signals[0]) should_be_42 *= 10 # check execution stopped when the signal was sent assert 42 == should_be_42 # assert signals were caught assert [self.signals[0]] == signals_received # assert the error handling function was just called once self.init_func.assert_called_once_with(*self.init_args, **self.init_kwargs) for signum in self.signals: assert init_signals[signum] == signal.getsignal(signum) def test_bad_recovery(self): bad_func = mock.MagicMock(side_effect=[ValueError]) self.handler.register(bad_func) try: with self.handler: raise ValueError except ValueError: pass self.init_func.assert_called_once_with(*self.init_args, **self.init_kwargs) bad_func.assert_called_once_with() def test_bad_recovery_with_signal(self): if not self.signals: self.skipTest(reason='Signals cannot be handled on Windows.') sig1 = self.signals[0] sig2 = self.signals[-1] bad_func = mock.MagicMock(side_effect=lambda: send_signal(sig1)) self.handler.register(bad_func) with signal_receiver(self.signals) as signals_received: with self.handler: send_signal(sig2) assert [sig2, sig1] == signals_received self.init_func.assert_called_once_with(*self.init_args, **self.init_kwargs) bad_func.assert_called_once_with() def test_sysexit_ignored(self): try: with self.handler: sys.exit(0) except SystemExit: pass assert self.init_func.called is False def test_regular_exit(self): func = mock.MagicMock() self.handler.register(func) with self.handler: pass self.init_func.assert_not_called() func.assert_not_called() class ExitHandlerTest(ErrorHandlerTest): """Tests for certbot._internal.error_handler.ExitHandler.""" def setUp(self): from certbot._internal import error_handler super().setUp() self.handler = error_handler.ExitHandler(self.init_func, *self.init_args, **self.init_kwargs) def test_regular_exit(self): func = mock.MagicMock() self.handler.register(func) with self.handler: pass self.init_func.assert_called_once_with(*self.init_args, **self.init_kwargs) func.assert_called_once_with() if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover errors_test.py 0000644 00000003644 15114562471 0007506 0 ustar 00 """Tests for certbot.errors.""" import sys import unittest from unittest import mock import pytest from acme import messages from certbot import achallenges from certbot.tests import acme_util class FailedChallengesTest(unittest.TestCase): """Tests for certbot.errors.FailedChallenges.""" def setUp(self): from certbot.errors import FailedChallenges self.error = FailedChallenges({achallenges.DNS( domain="example.com", challb=messages.ChallengeBody( chall=acme_util.DNS01, uri=None, error=messages.Error.with_code("tls", detail="detail")))}) def test_str(self): assert str(self.error).startswith( "Failed authorization procedure. example.com (dns-01): " "urn:ietf:params:acme:error:tls") def test_unicode(self): from certbot.errors import FailedChallenges arabic_detail = u'\u0639\u062f\u0627\u0644\u0629' arabic_error = FailedChallenges({achallenges.DNS( domain="example.com", challb=messages.ChallengeBody( chall=acme_util.DNS01, uri=None, error=messages.Error.with_code("tls", detail=arabic_detail)))}) assert str(arabic_error).startswith( "Failed authorization procedure. example.com (dns-01): " "urn:ietf:params:acme:error:tls") class StandaloneBindErrorTest(unittest.TestCase): """Tests for certbot.errors.StandaloneBindError.""" def setUp(self): from certbot.errors import StandaloneBindError self.error = StandaloneBindError(mock.sentinel.error, 1234) def test_instance_args(self): assert mock.sentinel.error == self.error.socket_error assert 1234 == self.error.port def test_str(self): assert str(self.error).startswith( "Problem binding to port 1234: ") if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover helpful_test.py 0000644 00000011567 15114562471 0007634 0 ustar 00 """Tests for certbot.helpful_parser""" import sys import pytest from certbot._internal.cli import HelpfulArgumentParser class TestScanningFlags: '''Test the prescan_for_flag method of HelpfulArgumentParser''' def test_prescan_no_help_flag(self): arg_parser = HelpfulArgumentParser(['run'], {}) detected_flag = arg_parser.prescan_for_flag('--help', ['all', 'certonly']) assert detected_flag is False detected_flag = arg_parser.prescan_for_flag('-h', ['all, certonly']) assert detected_flag is False def test_prescan_unvalid_topic(self): arg_parser = HelpfulArgumentParser(['--help', 'all'], {}) detected_flag = arg_parser.prescan_for_flag('--help', ['potato']) assert detected_flag is True detected_flag = arg_parser.prescan_for_flag('-h', arg_parser.help_topics) assert detected_flag is False def test_prescan_valid_topic(self): arg_parser = HelpfulArgumentParser(['-h', 'all'], {}) detected_flag = arg_parser.prescan_for_flag('-h', arg_parser.help_topics) assert detected_flag == 'all' detected_flag = arg_parser.prescan_for_flag('--help', arg_parser.help_topics) assert detected_flag is False class TestDetermineVerbs: '''Tests for determine_verb methods of HelpfulArgumentParser''' def test_determine_verb_wrong_verb(self): arg_parser = HelpfulArgumentParser(['potato'], {}) assert arg_parser.verb == "run" assert arg_parser.args == ["potato"] def test_determine_verb_help(self): arg_parser = HelpfulArgumentParser(['--help', 'everything'], {}) assert arg_parser.verb == "help" assert arg_parser.args == ["--help", "everything"] arg_parser = HelpfulArgumentParser(['-d', 'some_domain', '--help', 'all'], {}) assert arg_parser.verb == "help" assert arg_parser.args == ['-d', 'some_domain', '--help', 'all'] def test_determine_verb(self): arg_parser = HelpfulArgumentParser(['certonly'], {}) assert arg_parser.verb == 'certonly' assert arg_parser.args == [] arg_parser = HelpfulArgumentParser(['auth'], {}) assert arg_parser.verb == 'certonly' assert arg_parser.args == [] arg_parser = HelpfulArgumentParser(['everything'], {}) assert arg_parser.verb == 'run' assert arg_parser.args == [] class TestAdd: '''Tests for add method in HelpfulArgumentParser''' def test_add_trivial_argument(self): arg_parser = HelpfulArgumentParser(['run'], {}) arg_parser.add(None, "--hello-world") parsed_args = arg_parser.parser.parse_args(['--hello-world', 'Hello World!']) assert parsed_args.hello_world == 'Hello World!' assert not hasattr(parsed_args, 'potato') def test_add_expected_argument(self): arg_parser = HelpfulArgumentParser(['--help', 'run'], {}) arg_parser.add( [None, "run", "certonly", "register"], "--eab-kid", dest="eab_kid", action="store", metavar="EAB_KID", help="Key Identifier for External Account Binding") parsed_args = arg_parser.parser.parse_args(["--eab-kid", None]) assert parsed_args.eab_kid is None assert hasattr(parsed_args, 'eab_kid') class TestAddGroup: '''Test add_group method of HelpfulArgumentParser''' def test_add_group_no_input(self): arg_parser = HelpfulArgumentParser(['run'], {}) with pytest.raises(TypeError): arg_parser.add_group() def test_add_group_topic_not_visible(self): # The user request help on run. A topic that given somewhere in the # args won't be added to the groups in the parser. arg_parser = HelpfulArgumentParser(['--help', 'run'], {}) arg_parser.add_group("auth", description="description of auth") assert arg_parser.groups == {} def test_add_group_topic_requested_help(self): arg_parser = HelpfulArgumentParser(['--help', 'run'], {}) arg_parser.add_group("run", description="description of run") assert arg_parser.groups["run"] arg_parser.add_group("certonly", description="description of certonly") with pytest.raises(KeyError): assert arg_parser.groups["certonly"] is False if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover hook_test.py 0000644 00000042604 15114562471 0007131 0 ustar 00 """Tests for certbot._internal.hooks.""" import sys import unittest from platform import python_version_tuple from unittest import mock import pytest from certbot import errors from certbot import util from certbot.compat import filesystem from certbot.compat import os from certbot.tests import util as test_util from typing import List def pyver_lt(major: int, minor: int): pymajor = int(python_version_tuple()[0]) pyminor = int(python_version_tuple()[1]) if pymajor < major: return True elif pymajor > major: return False else: return pyminor < minor class ValidateHooksTest(unittest.TestCase): """Tests for certbot._internal.hooks.validate_hooks.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import validate_hooks return validate_hooks(*args, **kwargs) @mock.patch("certbot._internal.hooks.validate_hook") def test_it(self, mock_validate_hook): config = mock.MagicMock() self._call(config) types = [call[0][1] for call in mock_validate_hook.call_args_list] assert {"pre", "post", "deploy",} == set(types[:-1]) # This ensures error messages are about deploy hooks when appropriate assert "renew" == types[-1] class ValidateHookTest(test_util.TempDirTestCase): """Tests for certbot._internal.hooks.validate_hook.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import validate_hook return validate_hook(*args, **kwargs) def test_hook_not_executable(self): # prevent unnecessary modifications to PATH with mock.patch("certbot._internal.hooks.plug_util.path_surgery"): # We just mock out filesystem.is_executable since on Windows, it is difficult # to get a fully working test around executable permissions. See # certbot.tests.compat.filesystem::NotExecutableTest for more in-depth tests. with mock.patch("certbot._internal.hooks.filesystem.is_executable", return_value=False): with pytest.raises(errors.HookCommandNotFound): self._call('dummy', "foo") @mock.patch("certbot._internal.hooks.util.exe_exists") def test_not_found(self, mock_exe_exists): mock_exe_exists.return_value = False with mock.patch("certbot._internal.hooks.plug_util.path_surgery") as mock_ps: with pytest.raises(errors.HookCommandNotFound): self._call("foo", "bar") assert mock_ps.called @mock.patch("certbot._internal.hooks._prog") def test_unset(self, mock_prog): self._call(None, "foo") assert mock_prog.called is False class HookTest(test_util.ConfigTestCase): """Common base class for hook tests.""" @classmethod def _call(cls, *args, **kwargs): # pragma: no cover """Calls the method being tested with the given arguments.""" raise NotImplementedError @classmethod def _call_with_mock_execute(cls, *args, **kwargs): """Calls self._call after mocking out certbot.compat.misc.execute_command_status. The mock execute object is returned rather than the return value of self._call. """ with mock.patch("certbot.compat.misc.execute_command_status") as mock_execute: mock_execute.return_value = (0, "", "") cls._call(*args, **kwargs) return mock_execute class PreHookTest(HookTest): """Tests for certbot._internal.hooks.pre_hook.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import pre_hook return pre_hook(*args, **kwargs) def setUp(self): super().setUp() self.config.pre_hook = "foo" filesystem.makedirs(self.config.renewal_pre_hooks_dir) self.dir_hook = os.path.join(self.config.renewal_pre_hooks_dir, "bar") create_hook(self.dir_hook) # Reset this value as it may have been modified by past tests self._reset_pre_hook_already() def tearDown(self): # Reset this value so it's unmodified for future tests self._reset_pre_hook_already() super().tearDown() def _reset_pre_hook_already(self): from certbot._internal.hooks import executed_pre_hooks executed_pre_hooks.clear() def test_certonly(self): self.config.verb = "certonly" self._test_nonrenew_common() def test_run(self): self.config.verb = "run" self._test_nonrenew_common() def _test_nonrenew_common(self): mock_execute = self._call_with_mock_execute(self.config) mock_execute.assert_called_once_with("pre-hook", self.config.pre_hook, env=mock.ANY) self._test_no_executions_common() def test_no_hooks(self): self.config.pre_hook = None self.config.verb = "renew" os.remove(self.dir_hook) with mock.patch("certbot._internal.hooks.logger") as mock_logger: mock_execute = self._call_with_mock_execute(self.config) assert mock_execute.called is False assert mock_logger.info.called is False def test_renew_disabled_dir_hooks(self): self.config.directory_hooks = False mock_execute = self._call_with_mock_execute(self.config) mock_execute.assert_called_once_with("pre-hook", self.config.pre_hook, env=mock.ANY) self._test_no_executions_common() def test_renew_no_overlap(self): self.config.verb = "renew" mock_execute = self._call_with_mock_execute(self.config) mock_execute.assert_any_call("pre-hook", self.dir_hook, env=mock.ANY) mock_execute.assert_called_with("pre-hook", self.config.pre_hook, env=mock.ANY) self._test_no_executions_common() def test_renew_with_overlap(self): self.config.pre_hook = self.dir_hook self.config.verb = "renew" mock_execute = self._call_with_mock_execute(self.config) mock_execute.assert_called_once_with("pre-hook", self.dir_hook, env=mock.ANY) self._test_no_executions_common() def _test_no_executions_common(self): with mock.patch("certbot._internal.hooks.logger") as mock_logger: mock_execute = self._call_with_mock_execute(self.config) assert mock_execute.called is False assert mock_logger.info.called class PostHookTest(HookTest): """Tests for certbot._internal.hooks.post_hook.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import post_hook return post_hook(*args, **kwargs) def setUp(self): super().setUp() self.config.post_hook = "bar" filesystem.makedirs(self.config.renewal_post_hooks_dir) self.dir_hook = os.path.join(self.config.renewal_post_hooks_dir, "foo") create_hook(self.dir_hook) # Reset this value as it may have been modified by past tests self._reset_post_hook_eventually() def tearDown(self): # Reset this value so it's unmodified for future tests self._reset_post_hook_eventually() super().tearDown() def _reset_post_hook_eventually(self): from certbot._internal.hooks import post_hooks del post_hooks[:] def test_certonly_and_run_with_hook(self): for verb in ("certonly", "run",): self.config.verb = verb mock_execute = self._call_with_mock_execute(self.config, []) mock_execute.assert_called_once_with("post-hook", self.config.post_hook, env=mock.ANY) assert not self._get_eventually() def test_cert_only_and_run_without_hook(self): self.config.post_hook = None for verb in ("certonly", "run",): self.config.verb = verb assert not self._call_with_mock_execute(self.config, []).called assert not self._get_eventually() def test_renew_env(self): self.config.verb = "certonly" args = self._call_with_mock_execute(self.config, ["success.org"]).call_args assert args.kwargs['env']["RENEWED_DOMAINS"] == "success.org" def test_renew_disabled_dir_hooks(self): self.config.directory_hooks = False self._test_renew_common([self.config.post_hook]) def test_renew_no_config_hook(self): self.config.post_hook = None self._test_renew_common([self.dir_hook]) def test_renew_no_dir_hook(self): os.remove(self.dir_hook) self._test_renew_common([self.config.post_hook]) def test_renew_no_hooks(self): self.config.post_hook = None os.remove(self.dir_hook) self._test_renew_common([]) def test_renew_no_overlap(self): expected = [self.dir_hook, self.config.post_hook] self._test_renew_common(expected) self.config.post_hook = "baz" expected.append(self.config.post_hook) self._test_renew_common(expected) def test_renew_with_overlap(self): self.config.post_hook = self.dir_hook self._test_renew_common([self.dir_hook]) def _test_renew_common(self, expected): self.config.verb = "renew" for _ in range(2): self._call(self.config, []) assert self._get_eventually() == expected def _get_eventually(self): from certbot._internal.hooks import post_hooks return post_hooks class RunSavedPostHooksTest(HookTest): """Tests for certbot._internal.hooks.run_saved_post_hooks.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import run_saved_post_hooks renewed_domains = kwargs["renewed_domains"] if "renewed_domains" in kwargs else args[0] failed_domains = kwargs["failed_domains"] if "failed_domains" in kwargs else args[1] return run_saved_post_hooks(renewed_domains, failed_domains) def _call_with_mock_execute_and_eventually(self, *args, **kwargs): """Call run_saved_post_hooks but mock out execute and eventually certbot._internal.hooks.post_hooks is replaced with self.eventually. The mock execute object is returned rather than the return value of run_saved_post_hooks. """ eventually_path = "certbot._internal.hooks.post_hooks" with mock.patch(eventually_path, new=self.eventually): return self._call_with_mock_execute(*args, **kwargs) def setUp(self): super().setUp() self.eventually: List[str] = [] def test_empty(self): assert not self._call_with_mock_execute_and_eventually([], []).called def test_multiple(self): self.eventually = ["foo", "bar", "baz", "qux"] mock_execute = self._call_with_mock_execute_and_eventually([], []) calls = mock_execute.call_args_list for actual_call, expected_arg in zip(calls, self.eventually): assert actual_call[0][1] == expected_arg def test_single(self): self.eventually = ["foo"] mock_execute = self._call_with_mock_execute_and_eventually([], []) mock_execute.assert_called_once_with("post-hook", self.eventually[0], env=mock.ANY) def test_env(self): self.eventually = ["foo"] mock_execute = self._call_with_mock_execute_and_eventually(["success.org"], ["failed.org"]) assert mock_execute.call_args.kwargs['env']["RENEWED_DOMAINS"] == "success.org" assert mock_execute.call_args.kwargs['env']["FAILED_DOMAINS"] == "failed.org" class RenewalHookTest(HookTest): """Common base class for testing deploy/renew hooks.""" # Needed for https://github.com/PyCQA/pylint/issues/179 # pylint: disable=abstract-method def _call_with_mock_execute(self, *args, **kwargs): """Calls self._call after mocking out certbot.compat.misc.execute_command_status. The mock execute object is returned rather than the return value of self._call. The mock execute object asserts that environment variables were properly set. """ domains = kwargs["domains"] if "domains" in kwargs else args[1] lineage = kwargs["lineage"] if "lineage" in kwargs else args[2] def execute_side_effect(*unused_args, **unused_kwargs): """Assert environment variables are properly set. :returns: two strings imitating no output from the hook :rtype: `tuple` of `str` """ assert os.environ["RENEWED_DOMAINS"] == " ".join(domains) assert os.environ["RENEWED_LINEAGE"] == lineage return (0, "", "") with mock.patch("certbot.compat.misc.execute_command_status") as mock_execute: mock_execute.side_effect = execute_side_effect self._call(*args, **kwargs) return mock_execute def setUp(self): super().setUp() self.vars_to_clear = { var for var in ("RENEWED_DOMAINS", "RENEWED_LINEAGE",) if var not in os.environ } def tearDown(self): for var in self.vars_to_clear: os.environ.pop(var, None) super().tearDown() class DeployHookTest(RenewalHookTest): """Tests for certbot._internal.hooks.deploy_hook.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import deploy_hook return deploy_hook(*args, **kwargs) @mock.patch("certbot._internal.hooks.logger") def test_dry_run(self, mock_logger): self.config.deploy_hook = "foo" self.config.dry_run = True mock_execute = self._call_with_mock_execute( self.config, ["example.org"], "/foo/bar") assert mock_execute.called is False assert mock_logger.info.called @mock.patch("certbot._internal.hooks.logger") def test_no_hook(self, mock_logger): self.config.deploy_hook = None mock_execute = self._call_with_mock_execute( self.config, ["example.org"], "/foo/bar") assert mock_execute.called is False assert mock_logger.info.called is False def test_success(self): domains = ["example.org", "example.net"] lineage = "/foo/bar" self.config.deploy_hook = "foo" mock_execute = self._call_with_mock_execute( self.config, domains, lineage) mock_execute.assert_called_once_with("deploy-hook", self.config.deploy_hook, env=mock.ANY) class RenewHookTest(RenewalHookTest): """Tests for certbot._internal.hooks.renew_hook""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import renew_hook return renew_hook(*args, **kwargs) def setUp(self): super().setUp() self.config.renew_hook = "foo" filesystem.makedirs(self.config.renewal_deploy_hooks_dir) self.dir_hook = os.path.join(self.config.renewal_deploy_hooks_dir, "bar") create_hook(self.dir_hook) def test_disabled_dir_hooks(self): self.config.directory_hooks = False mock_execute = self._call_with_mock_execute( self.config, ["example.org"], "/foo/bar") mock_execute.assert_called_once_with("deploy-hook", self.config.renew_hook, env=mock.ANY) @mock.patch("certbot._internal.hooks.logger") def test_dry_run(self, mock_logger): self.config.dry_run = True mock_execute = self._call_with_mock_execute( self.config, ["example.org"], "/foo/bar") assert mock_execute.called is False assert mock_logger.info.call_count == 2 def test_no_hooks(self): self.config.renew_hook = None os.remove(self.dir_hook) with mock.patch("certbot._internal.hooks.logger") as mock_logger: mock_execute = self._call_with_mock_execute( self.config, ["example.org"], "/foo/bar") assert mock_execute.called is False assert mock_logger.info.called is False def test_overlap(self): self.config.renew_hook = self.dir_hook mock_execute = self._call_with_mock_execute( self.config, ["example.net", "example.org"], "/foo/bar") mock_execute.assert_called_once_with("deploy-hook", self.dir_hook, env=mock.ANY) def test_no_overlap(self): mock_execute = self._call_with_mock_execute( self.config, ["example.org"], "/foo/bar") mock_execute.assert_any_call("deploy-hook", self.dir_hook, env=mock.ANY) mock_execute.assert_called_with("deploy-hook", self.config.renew_hook, env=mock.ANY) class ListHooksTest(test_util.TempDirTestCase): """Tests for certbot._internal.hooks.list_hooks.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.hooks import list_hooks return list_hooks(*args, **kwargs) def test_empty(self): assert not self._call(self.tempdir) def test_multiple(self): names = sorted( os.path.join(self.tempdir, basename) for basename in ("foo", "bar", "baz", "qux") ) for name in names: create_hook(name) assert self._call(self.tempdir) == names def test_single(self): name = os.path.join(self.tempdir, "foo") create_hook(name) assert self._call(self.tempdir) == [name] def test_ignore_tilde(self): name = os.path.join(self.tempdir, "foo~") create_hook(name) assert self._call(self.tempdir) == [] def create_hook(file_path): """Creates an executable file at the specified path. :param str file_path: path to create the file at """ util.safe_open(file_path, mode="w", chmod=0o744).close() if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover lock_test.py 0000644 00000011704 15114562471 0007116 0 ustar 00 """Tests for certbot._internal.lock.""" import functools import multiprocessing import sys import unittest from unittest import mock import pytest from certbot import errors from certbot.compat import os from certbot.tests import util as test_util try: import fcntl # pylint: disable=import-error,unused-import except ImportError: POSIX_MODE = False else: POSIX_MODE = True class LockDirTest(test_util.TempDirTestCase): """Tests for certbot._internal.lock.lock_dir.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.lock import lock_dir return lock_dir(*args, **kwargs) def test_it(self): assert_raises = functools.partial( self.assertRaises, errors.LockError, self._call, self.tempdir) lock_path = os.path.join(self.tempdir, '.certbot.lock') test_util.lock_and_call(assert_raises, lock_path) class LockFileTest(test_util.TempDirTestCase): """Tests for certbot._internal.lock.LockFile.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.lock import LockFile return LockFile(*args, **kwargs) def setUp(self): super().setUp() self.lock_path = os.path.join(self.tempdir, 'test.lock') def test_acquire_without_deletion(self): # acquire the lock in another process but don't delete the file child = multiprocessing.Process(target=self._call, args=(self.lock_path,)) child.start() child.join() assert child.exitcode == 0 assert os.path.exists(self.lock_path) # Test we're still able to properly acquire and release the lock self.test_removed() def test_contention(self): assert_raises = functools.partial( self.assertRaises, errors.LockError, self._call, self.lock_path) test_util.lock_and_call(assert_raises, self.lock_path) def test_locked_repr(self): lock_file = self._call(self.lock_path) try: locked_repr = repr(lock_file) self._test_repr_common(lock_file, locked_repr) assert 'acquired' in locked_repr finally: lock_file.release() def test_released_repr(self): lock_file = self._call(self.lock_path) lock_file.release() released_repr = repr(lock_file) self._test_repr_common(lock_file, released_repr) assert 'released' in released_repr def _test_repr_common(self, lock_file, lock_repr): assert lock_file.__class__.__name__ in lock_repr assert self.lock_path in lock_repr @test_util.skip_on_windows( 'Race conditions on lock are specific to the non-blocking file access approach on Linux.') def test_race(self): should_delete = [True, False] # Normally os module should not be imported in certbot codebase except in certbot.compat # for the sake of compatibility over Windows and Linux. # We make an exception here, since test_race is a test function called only on Linux. from os import stat # pylint: disable=os-module-forbidden def delete_and_stat(path): """Wrap os.stat and maybe delete the file first.""" if path == self.lock_path and should_delete.pop(0): os.remove(path) return stat(path) with mock.patch('certbot._internal.lock.filesystem.os.stat') as mock_stat: mock_stat.side_effect = delete_and_stat self._call(self.lock_path) assert len(should_delete) == 0 def test_removed(self): lock_file = self._call(self.lock_path) lock_file.release() assert not os.path.exists(self.lock_path) def test_unexpected_lockf_or_locking_err(self): if POSIX_MODE: mocked_function = 'certbot._internal.lock.fcntl.lockf' else: mocked_function = 'certbot._internal.lock.msvcrt.locking' msg = 'hi there' with mock.patch(mocked_function) as mock_lock: mock_lock.side_effect = OSError(msg) try: self._call(self.lock_path) except OSError as err: assert msg in str(err) else: # pragma: no cover self.fail('IOError not raised') def test_unexpected_os_err(self): if POSIX_MODE: mock_function = 'certbot._internal.lock.filesystem.os.stat' else: mock_function = 'certbot._internal.lock.msvcrt.locking' # The only expected errno are ENOENT and EACCES in lock module. msg = 'hi there' with mock.patch(mock_function) as mock_os: mock_os.side_effect = OSError(msg) try: self._call(self.lock_path) except OSError as err: assert msg in str(err) else: # pragma: no cover self.fail('OSError not raised') if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover log_test.py 0000644 00000037115 15114562471 0006753 0 ustar 00 """Tests for certbot._internal.log.""" import io import logging import logging.handlers import sys import time from typing import Optional import unittest from unittest import mock import pytest from acme import messages from certbot import errors from certbot import util from certbot._internal import constants from certbot.compat import filesystem from certbot.compat import os from certbot.tests import util as test_util class PreArgParseSetupTest(unittest.TestCase): """Tests for certbot._internal.log.pre_arg_parse_setup.""" @classmethod def _call(cls, *args, **kwargs): # pylint: disable=unused-argument from certbot._internal.log import pre_arg_parse_setup return pre_arg_parse_setup() def tearDown(self): # We need to call logging.shutdown() at the end of this test to # properly clean up any resources created by pre_arg_parse_setup. logging.shutdown() super().tearDown() @mock.patch('certbot._internal.log.sys') @mock.patch('certbot._internal.log.pre_arg_parse_except_hook') @mock.patch('certbot._internal.log.logging.getLogger') @mock.patch('certbot._internal.log.util.atexit_register') def test_it(self, mock_register, mock_get, mock_except_hook, mock_sys): mock_sys.argv = ['--debug'] mock_sys.version_info = sys.version_info self._call() mock_root_logger = mock_get() mock_root_logger.setLevel.assert_called_once_with(logging.DEBUG) assert mock_root_logger.addHandler.call_count == 2 memory_handler: Optional[logging.handlers.MemoryHandler] = None for call in mock_root_logger.addHandler.call_args_list: handler = call[0][0] if memory_handler is None and isinstance(handler, logging.handlers.MemoryHandler): memory_handler = handler target = memory_handler.target else: assert isinstance(handler, logging.StreamHandler) assert isinstance(target, logging.StreamHandler) mock_register.assert_called_once_with(logging.shutdown) mock_sys.excepthook(1, 2, 3) mock_except_hook.assert_called_once_with( memory_handler, 1, 2, 3, debug=True, quiet=False, log_path=mock.ANY) class PostArgParseSetupTest(test_util.ConfigTestCase): """Tests for certbot._internal.log.post_arg_parse_setup.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.log import post_arg_parse_setup return post_arg_parse_setup(*args, **kwargs) def setUp(self): super().setUp() self.config.debug = False self.config.max_log_backups = 1000 self.config.quiet = False self.config.verbose_count = constants.CLI_DEFAULTS['verbose_count'] self.devnull = open(os.devnull, 'w') from certbot._internal.log import ColoredStreamHandler self.stream_handler = ColoredStreamHandler(io.StringIO()) from certbot._internal.log import MemoryHandler from certbot._internal.log import TempHandler self.temp_handler = TempHandler() self.temp_path = self.temp_handler.path self.memory_handler = MemoryHandler(self.temp_handler) self.root_logger = mock.MagicMock( handlers=[self.memory_handler, self.stream_handler]) def tearDown(self): self.memory_handler.close() self.stream_handler.close() self.temp_handler.close() self.devnull.close() super().tearDown() def test_common(self): with mock.patch('certbot._internal.log.logging.getLogger') as mock_get_logger: mock_get_logger.return_value = self.root_logger except_hook_path = 'certbot._internal.log.post_arg_parse_except_hook' with mock.patch(except_hook_path) as mock_except_hook: with mock.patch('certbot._internal.log.sys') as mock_sys: mock_sys.version_info = sys.version_info self._call(self.config) log_path = os.path.join(self.config.logs_dir, 'letsencrypt.log') self.root_logger.removeHandler.assert_called_once_with( self.memory_handler) assert self.root_logger.addHandler.called assert os.path.exists(log_path) assert not os.path.exists(self.temp_path) mock_sys.excepthook(1, 2, 3) mock_except_hook.assert_called_once_with( 1, 2, 3, debug=self.config.debug, quiet=self.config.quiet, log_path=log_path) level = self.stream_handler.level if self.config.quiet: assert level == constants.QUIET_LOGGING_LEVEL else: assert level == constants.DEFAULT_LOGGING_LEVEL def test_debug(self): self.config.debug = True self.test_common() def test_quiet(self): self.config.quiet = True self.test_common() class SetupLogFileHandlerTest(test_util.ConfigTestCase): """Tests for certbot._internal.log.setup_log_file_handler.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.log import setup_log_file_handler return setup_log_file_handler(*args, **kwargs) def setUp(self): super().setUp() self.config.max_log_backups = 42 @mock.patch('certbot._internal.main.logging.handlers.RotatingFileHandler') def test_failure(self, mock_handler): mock_handler.side_effect = IOError try: self._call(self.config, 'test.log', '%(message)s') except errors.Error as err: assert '--logs-dir' in str(err) else: # pragma: no cover self.fail('Error not raised.') def test_success_with_rollover(self): self._test_success_common(should_rollover=True) def test_success_without_rollover(self): self.config.max_log_backups = 0 self._test_success_common(should_rollover=False) def _test_success_common(self, should_rollover): log_file = 'test.log' handler, log_path = self._call(self.config, log_file, '%(message)s') handler.close() assert handler.level == logging.DEBUG assert handler.formatter.converter == time.localtime expected_path = os.path.join(self.config.logs_dir, log_file) assert log_path == expected_path backup_path = os.path.join(self.config.logs_dir, log_file + '.1') assert os.path.exists(backup_path) == should_rollover @mock.patch('certbot._internal.log.logging.handlers.RotatingFileHandler') def test_max_log_backups_used(self, mock_handler): self._call(self.config, 'test.log', '%(message)s') backup_count = mock_handler.call_args[1]['backupCount'] assert self.config.max_log_backups == backup_count class ColoredStreamHandlerTest(unittest.TestCase): """Tests for certbot._internal.log.ColoredStreamHandler""" def setUp(self): self.stream = io.StringIO() self.stream.isatty = lambda: True self.logger = logging.getLogger() self.logger.setLevel(logging.DEBUG) from certbot._internal.log import ColoredStreamHandler self.handler = ColoredStreamHandler(self.stream) self.logger.addHandler(self.handler) def tearDown(self): self.handler.close() def test_format(self): msg = 'I did a thing' self.logger.debug(msg) assert self.stream.getvalue() == '{0}\n'.format(msg) def test_format_and_red_level(self): msg = 'I did another thing' self.handler.red_level = logging.DEBUG self.logger.debug(msg) assert self.stream.getvalue() == \ '{0}{1}{2}\n'.format(util.ANSI_SGR_RED, msg, util.ANSI_SGR_RESET) class MemoryHandlerTest(unittest.TestCase): """Tests for certbot._internal.log.MemoryHandler""" def setUp(self): self.logger = logging.getLogger(__name__) self.logger.setLevel(logging.DEBUG) self.msg = 'hi there' self.stream = io.StringIO() self.stream_handler = logging.StreamHandler(self.stream) from certbot._internal.log import MemoryHandler self.handler = MemoryHandler(self.stream_handler) self.logger.addHandler(self.handler) def tearDown(self): self.handler.close() self.stream_handler.close() def test_flush(self): self._test_log_debug() self.handler.flush(force=True) assert self.stream.getvalue() == self.msg + '\n' def test_not_flushed(self): # By default, logging.ERROR messages and higher are flushed self.logger.critical(self.msg) self.handler.flush() assert self.stream.getvalue() == '' def test_target_reset(self): self._test_log_debug() new_stream = io.StringIO() new_stream_handler = logging.StreamHandler(new_stream) self.handler.setTarget(new_stream_handler) self.handler.flush(force=True) assert self.stream.getvalue() == '' assert new_stream.getvalue() == self.msg + '\n' new_stream_handler.close() def _test_log_debug(self): self.logger.debug(self.msg) class TempHandlerTest(unittest.TestCase): """Tests for certbot._internal.log.TempHandler.""" def setUp(self): self.closed = False from certbot._internal.log import TempHandler self.handler = TempHandler() def tearDown(self): self.handler.close() def test_permissions(self): assert filesystem.check_permissions(self.handler.path, 0o600) def test_delete(self): self.handler.close() assert not os.path.exists(self.handler.path) def test_no_delete(self): self.handler.emit(mock.MagicMock()) self.handler.close() assert os.path.exists(self.handler.path) os.remove(self.handler.path) class PreArgParseExceptHookTest(unittest.TestCase): """Tests for certbot._internal.log.pre_arg_parse_except_hook.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.log import pre_arg_parse_except_hook return pre_arg_parse_except_hook(*args, **kwargs) @mock.patch('certbot._internal.log.post_arg_parse_except_hook') def test_it(self, mock_post_arg_parse_except_hook): memory_handler = mock.MagicMock() args = ('some', 'args',) kwargs = {'some': 'kwargs'} self._call(memory_handler, *args, **kwargs) mock_post_arg_parse_except_hook.assert_called_once_with( *args, **kwargs) memory_handler.flush.assert_called_once_with(force=True) class PostArgParseExceptHookTest(unittest.TestCase): """Tests for certbot._internal.log.post_arg_parse_except_hook.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.log import post_arg_parse_except_hook return post_arg_parse_except_hook(*args, **kwargs) def setUp(self): self.error_msg = 'test error message' self.log_path = 'foo.log' def test_base_exception(self): exc_type = BaseException mock_logger, output = self._test_common(exc_type, debug=False) self._assert_exception_logged(mock_logger.error, exc_type) self._assert_logfile_output(output) def test_debug(self): exc_type = ValueError mock_logger, output = self._test_common(exc_type, debug=True) self._assert_exception_logged(mock_logger.error, exc_type) self._assert_logfile_output(output) def test_quiet(self): exc_type = ValueError mock_logger, output = self._test_common(exc_type, debug=True, quiet=True) self._assert_exception_logged(mock_logger.error, exc_type) assert 'See the logfile' not in output def test_custom_error(self): exc_type = errors.PluginError mock_logger, output = self._test_common(exc_type, debug=False) self._assert_exception_logged(mock_logger.debug, exc_type) self._assert_quiet_output(mock_logger, output) def test_acme_error(self): # Get an arbitrary error code acme_code = next(iter(messages.ERROR_CODES)) def get_acme_error(msg): """Wraps ACME errors so the constructor takes only a msg.""" return messages.Error.with_code(acme_code, detail=msg) mock_logger, output = self._test_common(get_acme_error, debug=False) self._assert_exception_logged(mock_logger.debug, messages.Error) self._assert_quiet_output(mock_logger, output) assert messages.ERROR_PREFIX not in output def test_other_error(self): exc_type = ValueError mock_logger, output = self._test_common(exc_type, debug=False) self._assert_exception_logged(mock_logger.debug, exc_type) self._assert_quiet_output(mock_logger, output) def test_keyboardinterrupt(self): exc_type = KeyboardInterrupt mock_logger, output = self._test_common(exc_type, debug=False) mock_logger.error.assert_called_once_with('Exiting due to user request.') def _test_common(self, error_type, debug, quiet=False): """Returns the mocked logger and stderr output.""" mock_err = io.StringIO() def write_err(*args, **unused_kwargs): """Write error to mock_err.""" mock_err.write(args[0]) try: raise error_type(self.error_msg) except BaseException: exc_info = sys.exc_info() with mock.patch('certbot._internal.log.logger') as mock_logger: mock_logger.error.side_effect = write_err with mock.patch('certbot._internal.log.sys.stderr', mock_err): try: self._call( *exc_info, debug=debug, quiet=quiet, log_path=self.log_path) except SystemExit as exit_err: mock_err.write(str(exit_err)) else: # pragma: no cover self.fail('SystemExit not raised.') output = mock_err.getvalue() return mock_logger, output def _assert_exception_logged(self, log_func, exc_type): assert log_func.called call_kwargs = log_func.call_args[1] assert 'exc_info' in call_kwargs actual_exc_info = call_kwargs['exc_info'] expected_exc_info = (exc_type, mock.ANY, mock.ANY) assert actual_exc_info == expected_exc_info def _assert_logfile_output(self, output): assert 'See the logfile' in output assert self.log_path in output def _assert_quiet_output(self, mock_logger, output): assert mock_logger.exception.called is False assert mock_logger.debug.called assert self.error_msg in output class ExitWithAdviceTest(test_util.TempDirTestCase): """Tests for certbot._internal.log.exit_with_advice.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.log import exit_with_advice return exit_with_advice(*args, **kwargs) def test_log_file(self): log_file = os.path.join(self.tempdir, 'test.log') open(log_file, 'w').close() err_str = self._test_common(log_file) assert 'logfiles' not in err_str assert log_file in err_str def test_log_dir(self): err_str = self._test_common(self.tempdir) assert 'logfiles' in err_str assert self.tempdir in err_str # pylint: disable=inconsistent-return-statements def _test_common(self, *args, **kwargs): try: self._call(*args, **kwargs) except SystemExit as err: return str(err) self.fail('SystemExit was not raised.') # pragma: no cover if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover main_test.py 0000644 00000361344 15114562471 0007122 0 ustar 00 # coding=utf-8 """Tests for certbot._internal.main.""" # pylint: disable=too-many-lines import contextlib import datetime from importlib import reload as reload_module import io import itertools import json import shutil import sys import tempfile import traceback from typing import List import unittest from unittest import mock import configobj import josepy as jose import pytest import pytz from acme.messages import Error as acme_error from certbot import crypto_util from certbot import errors from certbot import interfaces from certbot import util from certbot._internal import account from certbot._internal import cli from certbot._internal import constants from certbot._internal import main from certbot._internal import updater from certbot._internal.plugins import disco from certbot._internal.plugins import manual from certbot._internal.plugins import null from certbot._internal.plugins import standalone from certbot.compat import filesystem from certbot.compat import os from certbot.plugins import enhancements import certbot.tests.util as test_util CERT_PATH = test_util.vector_path('cert_512.pem') CERT = test_util.vector_path('cert_512.pem') CSR = test_util.vector_path('csr_512.der') KEY = test_util.vector_path('rsa256_key.pem') JWK = jose.JWKRSA.load(test_util.load_vector('rsa512_key.pem')) RSA2048_KEY_PATH = test_util.vector_path('rsa2048_key.pem') SS_CERT_PATH = test_util.vector_path('cert_2048.pem') class TestHandleCerts(unittest.TestCase): """Test for certbot._internal.main._handle_* methods""" @mock.patch("certbot._internal.main._handle_unexpected_key_type_migration") def test_handle_identical_cert_request_pending(self, mock_handle_migration): mock_lineage = mock.Mock() mock_lineage.ensure_deployed.return_value = False # pylint: disable=protected-access ret = main._handle_identical_cert_request(mock.Mock(), mock_lineage) assert ret == ("reinstall", mock_lineage) assert mock_handle_migration.called @mock.patch('certbot._internal.renewal.should_renew') @mock.patch("certbot.display.util.menu") @mock.patch("certbot._internal.main._handle_unexpected_key_type_migration") def test_handle_identical_cert_key_type_change(self, mock_handle_migration, mock_menu, mock_should_renew): mock_handle_migration.return_value = True mock_lineage = mock.Mock() mock_lineage.ensure_deployed.return_value = True mock_should_renew.return_value = False ret = main._handle_identical_cert_request(mock.MagicMock(verb="run", reinstall=False), mock_lineage) assert mock_handle_migration.called assert not mock_menu.called assert ret == ("renew", mock_lineage) @mock.patch("certbot._internal.main._handle_unexpected_key_type_migration") def test_handle_subset_cert_request(self, mock_handle_migration): mock_config = mock.Mock() mock_config.expand = True mock_lineage = mock.Mock() mock_lineage.names.return_value = ["dummy1", "dummy2"] ret = main._handle_subset_cert_request(mock_config, ["dummy1"], mock_lineage) assert ret == ("renew", mock_lineage) assert mock_handle_migration.called @mock.patch("certbot._internal.main.display_util.yesno") def test_handle_unexpected_key_type_migration(self, mock_yesno): config = mock.Mock() mock_set = mock.Mock() config.set_by_user = mock_set cert = mock.Mock() # If the key types do not differ, it should be a no-op. config.key_type = "rsa" cert.private_key_type = "rsa" main._handle_unexpected_key_type_migration(config, cert) mock_yesno.assert_not_called() assert config.key_type == cert.private_key_type # If the user confirms the change interactively, the key change should proceed silently. cert.private_key_type = "ecdsa" mock_yesno.return_value = True main._handle_unexpected_key_type_migration(config, cert) assert mock_set.call_count == 2 assert config.key_type == "rsa" # User does not interactively confirm the key type change. mock_yesno.return_value = False # If --key-type and --cert-name are both set, the key type change should proceed silently. mock_set.return_value = True main._handle_unexpected_key_type_migration(config, cert) assert config.key_type == "rsa" # If neither --key-type nor --cert-name are set, Certbot should keep the old key type. mock_set.return_value = False main._handle_unexpected_key_type_migration(config, cert) assert config.key_type == "ecdsa" # If --key-type is set and --cert-name isn't, Certbot should error. config.key_type = "rsa" mock_set.side_effect = lambda var: var != "certname" with pytest.raises(errors.Error, match="Please provide both --cert-name and --key-type"): main._handle_unexpected_key_type_migration(config, cert) # If --key-type is not set, Certbot should keep the old key type. mock_set.side_effect = lambda var: var != "key_type" main._handle_unexpected_key_type_migration(config, cert) assert config.key_type == "ecdsa" class RunTest(test_util.ConfigTestCase): """Tests for certbot._internal.main.run.""" def setUp(self): super().setUp() self.domain = 'example.org' patches = [ mock.patch('certbot._internal.main._get_and_save_cert'), mock.patch('certbot._internal.main.display_ops.success_installation'), mock.patch('certbot._internal.main.display_ops.success_renewal'), mock.patch('certbot._internal.main._init_le_client'), mock.patch('certbot._internal.main._suggest_donation_if_appropriate'), mock.patch('certbot._internal.main._report_new_cert'), mock.patch('certbot._internal.main._find_cert'), mock.patch('certbot._internal.eff.handle_subscription'), mock.patch('certbot._internal.main._report_next_steps') ] self.mock_auth = patches[0].start() self.mock_success_installation = patches[1].start() self.mock_success_renewal = patches[2].start() self.mock_init = patches[3].start() self.mock_suggest_donation = patches[4].start() self.mock_report_cert = patches[5].start() self.mock_find_cert = patches[6].start() self.mock_subscription = patches[7].start() self.mock_report_next_steps = patches[8].start() for patch in patches: self.addCleanup(patch.stop) def _call(self): args = '-a webroot -i null -d {0}'.format(self.domain).split() plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, args) from certbot._internal.main import run run(config, plugins) def test_newcert_success(self): self.mock_auth.return_value = mock.Mock() self.mock_find_cert.return_value = True, None self._call() self.mock_success_installation.assert_called_once_with([self.domain]) self.mock_report_next_steps.assert_called_once_with(mock.ANY, None, mock.ANY, new_or_renewed_cert=True) def test_reinstall_success(self): self.mock_auth.return_value = mock.Mock() self.mock_find_cert.return_value = False, mock.Mock() self._call() self.mock_success_installation.assert_called_once_with([self.domain]) def test_renewal_success(self): self.mock_auth.return_value = mock.Mock() self.mock_find_cert.return_value = True, mock.Mock() self._call() self.mock_success_renewal.assert_called_once_with([self.domain]) @mock.patch('certbot._internal.main.plug_sel.choose_configurator_plugins') def test_run_enhancement_not_supported(self, mock_choose): mock_choose.return_value = (null.Installer(self.config, "null"), None) plugins = disco.PluginsRegistry.find_all() self.config.auto_hsts = True with pytest.raises(errors.NotSupportedError): main.run(self.config, plugins) @mock.patch('certbot._internal.main._install_cert') def test_cert_success_install_error(self, mock_install_cert): mock_install_cert.side_effect = errors.PluginError("Fake installation error") self.mock_auth.return_value = mock.Mock() self.mock_find_cert.return_value = True, None with pytest.raises(errors.PluginError): self._call() # Next steps should contain both renewal advice and installation error self.mock_report_next_steps.assert_called_once_with( mock.ANY, mock_install_cert.side_effect, mock.ANY, new_or_renewed_cert=True) # The final success message shouldn't be shown self.mock_success_installation.assert_not_called() @mock.patch('certbot._internal.main.plug_sel.choose_configurator_plugins') def test_run_must_staple_not_supported(self, mock_choose): mock_choose.return_value = (null.Installer(self.config, "null"), None) plugins = disco.PluginsRegistry.find_all() self.config.must_staple = True with pytest.raises(errors.NotSupportedError): main.run(self.config, plugins) class CertonlyTest(unittest.TestCase): """Tests for certbot._internal.main.certonly.""" def setUp(self): self.get_utility_patch = test_util.patch_display_util() self.mock_get_utility = self.get_utility_patch.start() def tearDown(self): self.get_utility_patch.stop() def _call(self, args): plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, args) with mock.patch('certbot._internal.main._init_le_client') as mock_init: with mock.patch('certbot._internal.main._suggest_donation_if_appropriate'): with mock.patch('certbot._internal.eff.handle_subscription'): main.certonly(config, plugins) return mock_init() # returns the client @mock.patch('certbot._internal.main._find_cert') @mock.patch('certbot._internal.main._get_and_save_cert') @mock.patch('certbot._internal.main._report_new_cert') def test_no_reinstall_text_pause(self, unused_report, mock_auth, mock_find_cert): mock_notification = self.mock_get_utility().notification mock_notification.side_effect = self._assert_no_pause mock_auth.return_value = mock.Mock() mock_find_cert.return_value = False, None self._call('certonly --webroot -d example.com'.split()) def _assert_no_pause(self, *args, **kwargs): # pylint: disable=unused-argument assert kwargs.get("pause") is False @mock.patch('certbot._internal.main._report_next_steps') @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.cert_manager.domains_for_certname') @mock.patch('certbot._internal.renewal.renew_cert') @mock.patch('certbot._internal.main._handle_unexpected_key_type_migration') @mock.patch('certbot._internal.main._report_new_cert') def test_find_lineage_for_domains_and_certname(self, mock_report_cert, mock_handle_type, mock_renew_cert, mock_domains, mock_lineage, mock_report_next_steps): domains = ['example.com', 'test.org'] mock_domains.return_value = domains mock_lineage.names.return_value = domains self._call(('certonly --webroot -d example.com -d test.org ' '--cert-name example.com').split()) assert mock_lineage.call_count == 1 assert mock_domains.call_count == 1 assert mock_renew_cert.call_count == 1 assert mock_report_cert.call_count == 1 assert mock_handle_type.call_count == 1 mock_report_next_steps.assert_called_once_with( mock.ANY, None, mock.ANY, new_or_renewed_cert=True) # user confirms updating lineage with new domains self._call(('certonly --webroot -d example.com -d test.com ' '--cert-name example.com').split()) assert mock_lineage.call_count == 2 assert mock_domains.call_count == 2 assert mock_renew_cert.call_count == 2 assert mock_report_cert.call_count == 2 assert mock_handle_type.call_count == 2 # error in _ask_user_to_confirm_new_names self.mock_get_utility().yesno.return_value = False with pytest.raises(errors.ConfigurationError): self._call('certonly --webroot -d example.com -d test.com --cert-name example.com'.split()) @mock.patch('certbot._internal.main._report_next_steps') @mock.patch('certbot._internal.cert_manager.domains_for_certname') @mock.patch('certbot.display.ops.choose_names') @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main._report_new_cert') def test_find_lineage_for_domains_new_certname(self, mock_report_cert, mock_lineage, mock_choose_names, mock_domains_for_certname, unused_mock_report_next_steps): mock_lineage.return_value = None # no lineage with this name but we specified domains so create a new cert self._call(('certonly --webroot -d example.com -d test.com ' '--cert-name example.com').split()) assert mock_lineage.call_count == 1 assert mock_report_cert.call_count == 1 # no lineage with this name and we didn't give domains mock_choose_names.return_value = ["somename"] mock_domains_for_certname.return_value = None self._call(('certonly --webroot --cert-name example.com').split()) assert mock_choose_names.called is True @mock.patch('certbot._internal.main._report_next_steps') @mock.patch('certbot._internal.main._get_and_save_cert') @mock.patch('certbot._internal.main._csr_get_and_save_cert') @mock.patch('certbot._internal.cert_manager.lineage_for_certname') def test_dryrun_next_steps_no_cert_saved(self, mock_lineage, mock_csr_get_cert, unused_mock_get_cert, mock_report_next_steps): """certonly --dry-run shouldn't report creation of a certificate in NEXT STEPS.""" mock_lineage.return_value = None mock_csr_get_cert.return_value = ("/cert", "/chain", "/fullchain") for flag in (f"--csr {CSR}", "-d example.com"): self._call(f"certonly {flag} --webroot --cert-name example.com --dry-run".split()) mock_report_next_steps.assert_called_once_with( mock.ANY, mock.ANY, mock.ANY, new_or_renewed_cert=False) mock_report_next_steps.reset_mock() @mock.patch('certbot._internal.main._report_next_steps') @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot._internal.main._find_cert') @mock.patch('certbot._internal.main._get_and_save_cert') @mock.patch('certbot._internal.plugins.selection.choose_configurator_plugins') def test_installer_runs_restart(self, mock_sel, mock_get_cert, mock_find_cert, unused_report_new, unused_report_next): mock_installer = mock.MagicMock() mock_sel.return_value = (mock_installer, None) mock_get_cert.return_value = mock.MagicMock() mock_find_cert.return_value = (True, None) self._call('certonly --nginx -d example.com'.split()) mock_installer.restart.assert_called_once() @mock.patch('certbot._internal.main._report_next_steps') @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot._internal.main._find_cert') @mock.patch('certbot._internal.main._get_and_save_cert') @mock.patch('certbot._internal.plugins.selection.choose_configurator_plugins') def test_dryrun_installer_doesnt_restart(self, mock_sel, mock_get_cert, mock_find_cert, unused_report_new, unused_report_next): mock_installer = mock.MagicMock() mock_sel.return_value = (mock_installer, None) mock_get_cert.return_value = mock.MagicMock() mock_find_cert.return_value = (True, None) self._call('certonly --nginx -d example.com --dry-run'.split()) mock_installer.restart.assert_not_called() @mock.patch('certbot._internal.main._report_next_steps') @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot._internal.main._find_cert') @mock.patch('certbot._internal.main._get_and_save_cert') def test_invalid_installer(self, mock_get_cert, mock_find_cert, unused_report_new, unused_report_next): mock_get_cert.return_value = mock.MagicMock() mock_find_cert.return_value = (True, None) self._call((f'certonly --webroot -w {tempfile.gettempdir()} ' + '-i standalone -d example.com').split()) class FindDomainsOrCertnameTest(unittest.TestCase): """Tests for certbot._internal.main._find_domains_or_certname.""" @mock.patch('certbot.display.ops.choose_names') def test_display_ops(self, mock_choose_names): mock_config = mock.Mock(domains=None, certname=None) mock_choose_names.return_value = "domainname" # pylint: disable=protected-access assert main._find_domains_or_certname(mock_config, None) == ("domainname", None) @mock.patch('certbot.display.ops.choose_names') def test_no_results(self, mock_choose_names): mock_config = mock.Mock(domains=None, certname=None) mock_choose_names.return_value = [] # pylint: disable=protected-access with pytest.raises(errors.Error): main._find_domains_or_certname(mock_config, None) @mock.patch('certbot._internal.cert_manager.domains_for_certname') def test_grab_domains(self, mock_domains): mock_config = mock.Mock(domains=None, certname="one.com") mock_domains.return_value = ["one.com", "two.com"] # pylint: disable=protected-access assert main._find_domains_or_certname(mock_config, None) == \ (["one.com", "two.com"], "one.com") class RevokeTest(test_util.TempDirTestCase): """Tests for certbot._internal.main.revoke.""" def setUp(self): super().setUp() shutil.copy(CERT_PATH, self.tempdir) self.tmp_cert_path = os.path.abspath(os.path.join(self.tempdir, 'cert_512.pem')) patches = [ mock.patch('certbot._internal.client.acme_client'), mock.patch('certbot._internal.client.Client'), mock.patch('certbot._internal.main._determine_account'), mock.patch('certbot._internal.main.display_ops.success_revocation') ] self.mock_acme_client = patches[0].start().ClientV2 patches[1].start() self.mock_determine_account = patches[2].start() self.mock_success_revoke = patches[3].start() for patch in patches: self.addCleanup(patch.stop) from certbot._internal.account import Account self.regr = mock.MagicMock() self.meta = Account.Meta( creation_host="test.certbot.org", creation_dt=datetime.datetime( 2015, 7, 4, 14, 4, 10, tzinfo=pytz.UTC)) self.acc = Account(self.regr, JWK, self.meta) self.mock_determine_account.return_value = (self.acc, None) def _call(self, args=None): if not args: args = 'revoke --cert-path={0} ' args = args.format(self.tmp_cert_path).split() plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, args) from certbot._internal.main import revoke revoke(config, plugins) @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.main.client.acme_client') def test_revoke_with_reason(self, mock_acme_client, mock_delete_if_appropriate): mock_delete_if_appropriate.return_value = False mock_revoke = mock_acme_client.ClientV2().revoke expected = [] for reason, code in constants.REVOCATION_REASONS.items(): args = 'revoke --cert-path={0} --reason {1}'.format(self.tmp_cert_path, reason).split() self._call(args) expected.append(mock.call(mock.ANY, code)) args = 'revoke --cert-path={0} --reason {1}'.format(self.tmp_cert_path, reason.upper()).split() self._call(args) expected.append(mock.call(mock.ANY, code)) assert expected == mock_revoke.call_args_list @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.storage.RenewableCert') @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.client.acme_from_config_key') def test_revoke_by_certname(self, mock_acme_from_config, unused_mock_renewal_file_for_certname, mock_cert, mock_delete_if_appropriate): mock_acme_from_config.return_value = self.mock_acme_client mock_cert.return_value = mock.MagicMock(cert_path=self.tmp_cert_path, server="https://acme.example") args = 'revoke --cert-name=example.com'.split() mock_delete_if_appropriate.return_value = False self._call(args) assert mock_acme_from_config.call_args_list[0][0][0].server == \ 'https://acme.example' self.mock_success_revoke.assert_called_once_with(self.tmp_cert_path) @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.storage.RenewableCert') @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.client.acme_from_config_key') def test_revoke_by_certname_and_server(self, mock_acme_from_config, unused_mock_renewal_file_for_certname, mock_cert, mock_delete_if_appropriate): """Revoking with --server should use the server from the CLI""" mock_cert.return_value = mock.MagicMock(cert_path=self.tmp_cert_path, server="https://acme.example") args = 'revoke --cert-name=example.com --server https://other.example'.split() mock_delete_if_appropriate.return_value = False self._call(args) assert mock_acme_from_config.call_args_list[0][0][0].server == \ 'https://other.example' self.mock_success_revoke.assert_called_once_with(self.tmp_cert_path) @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.storage.RenewableCert') @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.client.acme_from_config_key') def test_revoke_by_certname_empty_server(self, mock_acme_from_config, unused_mock_renewal_file_for_certname, mock_cert, mock_delete_if_appropriate): """Revoking with --cert-name where the lineage server is empty shouldn't crash """ mock_cert.return_value = mock.MagicMock(cert_path=self.tmp_cert_path, server=None) args = 'revoke --cert-name=example.com'.split() mock_delete_if_appropriate.return_value = False self._call(args) assert mock_acme_from_config.call_args_list[0][0][0].server == \ constants.CLI_DEFAULTS['server'] self.mock_success_revoke.assert_called_once_with(self.tmp_cert_path) @mock.patch('certbot._internal.main._delete_if_appropriate') def test_revocation_success(self, mock_delete_if_appropriate): self._call() mock_delete_if_appropriate.return_value = False self.mock_success_revoke.assert_called_once_with(self.tmp_cert_path) def test_revocation_error(self): from acme import errors as acme_errors self.mock_acme_client.side_effect = acme_errors.ClientError() with pytest.raises(acme_errors.ClientError): self._call() self.mock_success_revoke.assert_not_called() @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.cert_manager.delete') @test_util.patch_display_util() def test_revocation_with_prompt(self, mock_get_utility, mock_delete, mock_delete_if_appropriate): mock_get_utility().yesno.return_value = False mock_delete_if_appropriate.return_value = False self._call() assert mock_delete.called is False class ReconfigureTest(test_util.TempDirTestCase): """Tests for certbot._internal.main.reconfigure""" def setUp(self): super().setUp() self.get_utility_patch = test_util.patch_display_util() self.mock_get_utility = self.get_utility_patch.start() self.patchers = { 'check_symlinks': mock.patch('certbot._internal.storage.RenewableCert._check_symlinks'), 'cert_names': mock.patch('certbot._internal.storage.RenewableCert.names'), 'pick_installer': mock.patch('certbot._internal.plugins.selection.pick_installer'), 'pick_auth': mock.patch('certbot._internal.plugins.selection.pick_authenticator'), 'find_init': mock.patch('certbot._internal.plugins.disco.PluginsRegistry.find_init'), '_get_and_save_cert': mock.patch('certbot._internal.main._get_and_save_cert'), '_init_le_client': mock.patch('certbot._internal.main._init_le_client'), 'list_hooks': mock.patch('certbot._internal.hooks.list_hooks'), } self.mocks = {k: v.start() for k, v in self.patchers.items()} self.mocks['cert_names'].return_value = ['example.com'] self.config_dir = os.path.join(self.tempdir, 'config') renewal_configs_dir = os.path.join(self.config_dir, 'renewal') if not os.path.exists(renewal_configs_dir): filesystem.makedirs(renewal_configs_dir) self.renewal_file = os.path.join(renewal_configs_dir, 'example.com.conf') original_config = """ version = 1.32.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-v02.api.letsencrypt.org/directory authenticator = nginx installer = nginx key_type = rsa """ with open(self.renewal_file, 'w') as f: f.write(original_config) with open(self.renewal_file, 'r') as f: self.original_config = configobj.ConfigObj(f, encoding='utf-8', default_encoding='utf-8') def tearDown(self): super().tearDown() self.get_utility_patch.stop() for patch in self.patchers.values(): patch.stop() def _call(self, passed_args): full_args = passed_args + ['--config-dir', self.config_dir] plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, full_args) from certbot._internal.main import reconfigure reconfigure(config, plugins) with open(self.renewal_file, 'r') as f: updated_conf = configobj.ConfigObj(f, encoding='utf-8', default_encoding='utf-8') return updated_conf def test_domains_set(self): with pytest.raises(errors.ConfigurationError): self._call('--cert-name cert1 -d one.cert.com'.split()) @mock.patch('certbot._internal.cert_manager.get_certnames') def test_asks_for_certname(self, mock_cert_manager): named_mock = mock.Mock() named_mock.name = 'nginx' self.mocks['pick_installer'].return_value = named_mock self.mocks['pick_auth'].return_value = named_mock self.mocks['find_init'].return_value = named_mock mock_cert_manager.return_value = ['example.com'] self._call('--nginx'.split()) assert mock_cert_manager.call_count == 1 def test_update_configurator(self): named_mock = mock.Mock() named_mock.name = 'apache' self.mocks['pick_installer'].return_value = named_mock self.mocks['pick_auth'].return_value = named_mock self.mocks['find_init'].return_value = named_mock new_config = self._call('--cert-name example.com --apache'.split()) assert new_config['renewalparams']['authenticator'] == 'apache' def test_only_intended_changes(self): """ Check that we don't accidentally modify anything that we didn't mean to """ named_mock = mock.Mock() named_mock.name = 'apache' self.mocks['pick_installer'].return_value = named_mock self.mocks['pick_auth'].return_value = named_mock self.mocks['find_init'].return_value = named_mock new_config = self._call('--cert-name example.com --apache'.split()) # Undo the changes we made in calling and in testing new_config['renewalparams']['authenticator'] = 'nginx' new_config['renewalparams']['installer'] = 'nginx' del new_config['renewalparams']['config_dir'] new_config['version'] = self.original_config['version'] assert new_config == self.original_config @mock.patch('certbot._internal.hooks.validate_hooks') def test_staging_used(self, unused_validate_hooks): """ Check that we use the staging server for the dry run """ assert self.original_config['renewalparams']['server'] == \ 'https://acme-v02.api.letsencrypt.org/directory' self._call('--cert-name example.com --pre-hook'.split() + ['echo pre']) assert 'staging' in self.mocks['_init_le_client'].call_args.args[0].server assert 'staging' in self.mocks['_get_and_save_cert'].call_args.args[1].server def test_new_account_or_server_errors(self): """ Check that we error when attempting to change the account id or server, but not when it's the same """ orig_account_id = self.original_config['renewalparams']['account'] orig_server = self.original_config['renewalparams']['server'] # new account try: self._call('--cert-name example.com --account newaccountid'.split()) except errors.ConfigurationError as err: assert "Using reconfigure to change the ACME account" in str(err) # check that config isn't modified with open(self.renewal_file, 'r') as f: new_config = configobj.ConfigObj(f, encoding='utf-8', default_encoding='utf-8') assert new_config['renewalparams']['account'] == orig_account_id # same account new_config = self._call(f'--cert-name example.com --account {orig_account_id}'.split()) assert new_config['renewalparams']['account'] == orig_account_id # new server try: self._call('--cert-name example.com --server x.com'.split()) except errors.ConfigurationError as err: assert "Using reconfigure to change the ACME account" in str(err) # check that config isn't modified with open(self.renewal_file, 'r') as f: new_config = configobj.ConfigObj(f, encoding='utf-8', default_encoding='utf-8') assert new_config['renewalparams']['server'] == orig_server # same server new_config = self._call(f'--cert-name example.com --server {orig_server}'.split()) assert new_config['renewalparams']['server'] == orig_server @mock.patch('certbot._internal.hooks.validate_hooks') def test_update_hooks(self, unused_validate_hooks): assert 'pre_hook' not in self.original_config # test set new_config = self._call('--cert-name example.com --pre-hook'.split() + ['echo pre']) assert new_config['renewalparams']['pre_hook'] == 'echo pre' # test update new_config = self._call('--cert-name example.com --pre-hook'.split() + ['echo pre2']) assert new_config['renewalparams']['pre_hook'] == 'echo pre2' # test deploy hook is set even though we did a dry run assert 'renew_hook' not in self.original_config new_config = self._call('--cert-name example.com --deploy-hook'.split() + ['echo deploy']) assert new_config['renewalparams']['renew_hook'] == 'echo deploy' def test_dry_run_fails(self): # set side effect of raising error self.mocks['_get_and_save_cert'].side_effect = errors.Error try: self._call('--cert-name example.com --apache'.split()) except errors.Error: pass # check that config isn't modified with open(self.renewal_file, 'r') as f: new_config = configobj.ConfigObj(f, encoding='utf-8', default_encoding='utf-8') assert new_config['renewalparams']['authenticator'] == 'nginx' @mock.patch('certbot._internal.main.display_util.notify') def test_report_results(self, mock_notify): # make sure report results works when config has a webroot map original_config = """ version = 2.0.0 archive_dir = /etc/letsencrypt/archive/example.com cert = /etc/letsencrypt/live/example.com/cert.pem privkey = /etc/letsencrypt/live/example.com/privkey.pem chain = /etc/letsencrypt/live/example.com/chain.pem fullchain = /etc/letsencrypt/live/example.com/fullchain.pem # Options used in the renewal process [renewalparams] account = ee43634db0aa4e6804f152be39990e6a server = https://acme-staging-v02.api.letsencrypt.org/directory authenticator = webroot installer = nginx key_type = ecdsa webroot_path = /var/www/html, [[webroot_map]] example.com = /var/www/html """ with open(self.renewal_file, 'w') as f: f.write(original_config) with open(self.renewal_file, 'r') as f: self.original_config = configobj.ConfigObj(f, encoding='utf-8', default_encoding='utf-8') named_mock = mock.Mock() named_mock.name = 'nginx' self.mocks['pick_auth'].return_value = named_mock self.mocks['find_init'].return_value = named_mock new_config = self._call('--cert-name example.com --nginx'.split()) assert new_config['renewalparams']['authenticator'] == 'nginx' mock_notify.assert_called_with( '\nSuccessfully updated configuration.'+ '\nChanges will apply when the certificate renews.') class DeleteIfAppropriateTest(test_util.ConfigTestCase): """Tests for certbot._internal.main._delete_if_appropriate """ def _call(self, mock_config): from certbot._internal.main import _delete_if_appropriate _delete_if_appropriate(mock_config) def _test_delete_opt_out_common(self): with mock.patch('certbot._internal.cert_manager.delete') as mock_delete: self._call(self.config) mock_delete.assert_not_called() @test_util.patch_display_util() def test_delete_flag_opt_out(self, unused_mock_get_utility): self.config.delete_after_revoke = False self._test_delete_opt_out_common() @test_util.patch_display_util() def test_delete_prompt_opt_out(self, mock_get_utility): util_mock = mock_get_utility() util_mock.yesno.return_value = False self._test_delete_opt_out_common() @mock.patch("certbot._internal.main.logger.warning") @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.cert_manager.delete') @mock.patch('certbot._internal.cert_manager.match_and_check_overlaps') @mock.patch('certbot._internal.storage.full_archive_path') @mock.patch('certbot._internal.cert_manager.cert_path_to_lineage') @test_util.patch_display_util() def test_overlapping_archive_dirs(self, mock_get_utility, mock_cert_path_to_lineage, mock_archive, mock_match_and_check_overlaps, mock_delete, mock_renewal_file_for_certname, mock_warning): # pylint: disable = unused-argument config = self.config config.cert_path = "/some/reasonable/path" config.certname = "" mock_cert_path_to_lineage.return_value = "example.com" mock_match_and_check_overlaps.side_effect = errors.OverlappingMatchFound() self._call(config) mock_delete.assert_not_called() assert mock_warning.call_count == 1 @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.cert_manager.match_and_check_overlaps') @mock.patch('certbot._internal.storage.full_archive_path') @mock.patch('certbot._internal.cert_manager.delete') @mock.patch('certbot._internal.cert_manager.cert_path_to_lineage') @test_util.patch_display_util() def test_cert_path_only(self, mock_get_utility, mock_cert_path_to_lineage, mock_delete, mock_archive, mock_overlapping_archive_dirs, mock_renewal_file_for_certname): # pylint: disable = unused-argument config = self.config config.cert_path = "/some/reasonable/path" config.certname = "" mock_cert_path_to_lineage.return_value = "example.com" mock_overlapping_archive_dirs.return_value = False self._call(config) assert mock_delete.call_count == 1 @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.cert_manager.match_and_check_overlaps') @mock.patch('certbot._internal.storage.full_archive_path') @mock.patch('certbot._internal.cert_manager.cert_path_to_lineage') @mock.patch('certbot._internal.cert_manager.delete') @test_util.patch_display_util() def test_noninteractive_deletion(self, mock_get_utility, mock_delete, mock_cert_path_to_lineage, mock_full_archive_dir, mock_match_and_check_overlaps, mock_renewal_file_for_certname): # pylint: disable = unused-argument config = self.config config.noninteractive_mode = True config.cert_path = "/some/reasonable/path" config.certname = "" mock_cert_path_to_lineage.return_value = "example.com" mock_full_archive_dir.return_value = "" mock_match_and_check_overlaps.return_value = "" self._call(config) assert mock_delete.call_count == 1 @mock.patch('certbot._internal.storage.renewal_file_for_certname') @mock.patch('certbot._internal.cert_manager.match_and_check_overlaps') @mock.patch('certbot._internal.storage.full_archive_path') @mock.patch('certbot._internal.cert_manager.cert_path_to_lineage') @mock.patch('certbot._internal.cert_manager.delete') @test_util.patch_display_util() def test_opt_in_deletion(self, mock_get_utility, mock_delete, mock_cert_path_to_lineage, mock_full_archive_dir, mock_match_and_check_overlaps, mock_renewal_file_for_certname): config = self.config config.delete_after_revoke = True config.cert_path = "/some/reasonable/path" config.certname = "" mock_cert_path_to_lineage.return_value = "example.com" mock_full_archive_dir.return_value = "" mock_match_and_check_overlaps.return_value = "" self._call(config) assert mock_delete.call_count == 1 assert not mock_get_utility().yesno.called class DetermineAccountTest(test_util.ConfigTestCase): """Tests for certbot._internal.main._determine_account.""" def setUp(self): super().setUp() self.config.account = None self.config.email = None self.config.register_unsafely_without_email = False self.accs = [mock.MagicMock(id='x'), mock.MagicMock(id='y')] self.account_storage = account.AccountMemoryStorage() # For use in saving accounts: fake out the new_authz URL. self.mock_client = mock.MagicMock() self.mock_client.directory.new_authz = "hi" def _call(self): # pylint: disable=protected-access from certbot._internal.main import _determine_account with mock.patch('certbot._internal.main.account.AccountFileStorage') as mock_storage, \ test_util.patch_display_util(): mock_storage.return_value = self.account_storage return _determine_account(self.config) @mock.patch('certbot._internal.client.register') @mock.patch('certbot._internal.client.display_ops.get_email') def _register_error_common(self, err_msg, exception, mock_get_email, mock_register): mock_get_email.return_value = 'foo@bar.baz' mock_register.side_effect = exception try: self._call() except errors.Error as err: assert f"Unable to register an account with ACME server. {err_msg}" == \ str(err) def test_args_account_set(self): self.account_storage.save(self.accs[1], self.mock_client) self.config.account = self.accs[1].id assert (self.accs[1], None) == self._call() assert self.accs[1].id == self.config.account assert self.config.email is None def test_single_account(self): self.account_storage.save(self.accs[0], self.mock_client) assert (self.accs[0], None) == self._call() assert self.accs[0].id == self.config.account assert self.config.email is None @mock.patch('certbot._internal.client.display_ops.choose_account') def test_multiple_accounts(self, mock_choose_accounts): for acc in self.accs: self.account_storage.save(acc, self.mock_client) mock_choose_accounts.return_value = self.accs[1] assert (self.accs[1], None) == self._call() assert set(mock_choose_accounts.call_args[0][0]) == set(self.accs) assert self.accs[1].id == self.config.account assert self.config.email is None @mock.patch('certbot._internal.client.display_ops.choose_account') def test_multiple_accounts_canceled(self, mock_choose_accounts): for acc in self.accs: self.account_storage.save(acc, self.mock_client) mock_choose_accounts.return_value = None try: self._call() except errors.Error as err: assert "No account has been chosen" in str(err) @mock.patch('certbot._internal.client.display_ops.get_email') @mock.patch('certbot._internal.main.display_util.notify') def test_no_accounts_no_email(self, mock_notify, mock_get_email): mock_get_email.return_value = 'foo@bar.baz' with mock.patch('certbot._internal.main.client') as client: client.register.return_value = ( self.accs[0], mock.sentinel.acme) assert (self.accs[0], mock.sentinel.acme) == self._call() client.register.assert_called_once_with( self.config, self.account_storage, tos_cb=mock.ANY) assert self.accs[0].id == self.config.account assert 'foo@bar.baz' == self.config.email mock_notify.assert_called_once_with('Account registered.') def test_no_accounts_email(self): self.config.email = 'other email' with mock.patch('certbot._internal.main.client') as client: client.register.return_value = (self.accs[1], mock.sentinel.acme) self._call() assert self.accs[1].id == self.config.account assert 'other email' == self.config.email def test_register_error_certbot(self): err_msg = "Some error message raised by Certbot" self._register_error_common(err_msg, errors.Error(err_msg)) def test_register_error_acme_type_and_detail(self): err_msg = ("Error returned by the ACME server: must agree to terms of service") exception = acme_error(typ = "urn:ietf:params:acme:error:malformed", detail = "must agree to terms of service") self._register_error_common(err_msg, exception) def test_register_error_acme_type_only(self): err_msg = ("Error returned by the ACME server: The server experienced an internal error") exception = acme_error(typ = "urn:ietf:params:acme:error:serverInternal") self._register_error_common(err_msg, exception) class MainTest(test_util.ConfigTestCase): """Tests for different commands.""" def setUp(self): super().setUp() filesystem.mkdir(self.config.logs_dir) self.standard_args = ['--config-dir', self.config.config_dir, '--work-dir', self.config.work_dir, '--logs-dir', self.config.logs_dir, '--text'] self.mock_sleep = mock.patch('time.sleep').start() def tearDown(self): # Reset globals in cli reload_module(cli) super().tearDown() def _call(self, args, stdout=None, mockisfile=False): """Run the cli with output streams, actual client and optionally os.path.isfile() mocked out""" if mockisfile: orig_open = os.path.isfile def mock_isfile(fn, *args, **kwargs): # pylint: disable=unused-argument """Mock os.path.isfile()""" if (fn.endswith("cert") or fn.endswith("chain") or fn.endswith("privkey")): return True return orig_open(fn) with mock.patch("certbot.compat.os.path.isfile") as mock_if: mock_if.side_effect = mock_isfile with mock.patch('certbot._internal.main.client') as client: ret, stdout, stderr = self._call_no_clientmock(args, stdout) return ret, stdout, stderr, client else: with mock.patch('certbot._internal.main.client') as client: ret, stdout, stderr = self._call_no_clientmock(args, stdout) return ret, stdout, stderr, client def _call_no_clientmock(self, args, stdout=None): """Run the client with output streams mocked out""" args = self.standard_args + args toy_stdout = stdout if stdout else io.StringIO() with mock.patch('certbot._internal.main.sys.stdout', new=toy_stdout): with mock.patch('certbot._internal.main.sys.stderr') as stderr: with mock.patch("certbot.util.atexit"): ret = main.main(args[:]) # NOTE: parser can alter its args! return ret, toy_stdout, stderr def test_no_flags(self): with mock.patch('certbot._internal.main.run') as mock_run: self._call([]) assert 1 == mock_run.call_count def test_version_string_program_name(self): toy_out = io.StringIO() toy_err = io.StringIO() with mock.patch('certbot._internal.main.sys.stdout', new=toy_out): with mock.patch('certbot._internal.main.sys.stderr', new=toy_err): try: main.main(["--version"]) except SystemExit: pass finally: output = toy_out.getvalue() or toy_err.getvalue() assert "certbot" in output, "Output is {0}".format(output) def _cli_missing_flag(self, args, message): "Ensure that a particular error raises a missing cli flag error containing message" exc = None try: with mock.patch('certbot._internal.main.sys.stderr'): main.main(self.standard_args + args[:]) # NOTE: parser can alter its args! except errors.MissingCommandlineFlag as exc_: exc = exc_ assert message in str(exc) assert exc is not None @mock.patch('certbot._internal.log.post_arg_parse_setup') def test_noninteractive(self, _): args = ['-n', 'certonly'] self._cli_missing_flag(args, "specify a plugin") args.extend(['--standalone', '-d', 'eg.is']) self._cli_missing_flag(args, "register before running") @mock.patch('certbot._internal.eff.handle_subscription') @mock.patch('certbot._internal.log.post_arg_parse_setup') @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot._internal.main._determine_account') @mock.patch('certbot._internal.main.client.Client.obtain_and_enroll_certificate') @mock.patch('certbot._internal.main._get_and_save_cert') def test_user_agent(self, gsc, _obt, det, _, __, ___): # Normally the client is totally mocked out, but here we need more # arguments to automate it... args = ["--standalone", "certonly", "-m", "none@none.com", "-d", "example.com", '--agree-tos'] + self.standard_args det.return_value = mock.MagicMock(), None gsc.return_value = mock.MagicMock() with mock.patch('certbot._internal.main.client.acme_client') as acme_client: acme_net = acme_client.ClientNetwork self._call_no_clientmock(args) os_ver = util.get_os_info_ua() ua = acme_net.call_args[1]["user_agent"] assert os_ver in ua import platform plat = platform.platform() if "linux" in plat.lower(): assert util.get_os_info_ua() in ua with mock.patch('certbot._internal.main.client.acme_client') as acme_client: acme_net = acme_client.ClientNetwork ua = "bandersnatch" args += ["--user-agent", ua] self._call_no_clientmock(args) acme_net.assert_called_once_with(mock.ANY, account=mock.ANY, verify_ssl=True, user_agent=ua, alg=jose.RS256) @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') def test_installer_selection(self, mock_pick_installer, _rec): self._call(['install', '--domains', 'foo.bar', '--cert-path', 'cert', '--key-path', 'privkey', '--chain-path', 'chain'], mockisfile=True) assert mock_pick_installer.call_count == 1 @mock.patch('certbot._internal.main._install_cert') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') def test_installer_certname(self, _inst, _rec, mock_install): mock_lineage = mock.MagicMock(cert_path=test_util.temp_join('cert'), chain_path=test_util.temp_join('chain'), fullchain_path=test_util.temp_join('chain'), key_path=test_util.temp_join('privkey')) with mock.patch("certbot._internal.cert_manager.lineage_for_certname") as mock_getlin: mock_getlin.return_value = mock_lineage self._call(['install', '--cert-name', 'whatever'], mockisfile=True) call_config = mock_install.call_args[0][0] assert call_config.cert_path == test_util.temp_join('cert') assert call_config.fullchain_path == test_util.temp_join('chain') assert call_config.key_path == test_util.temp_join('privkey') @mock.patch('certbot._internal.log.post_arg_parse_setup') @mock.patch('certbot._internal.main._install_cert') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') def test_installer_param_override(self, _inst, _rec, mock_install, _): mock_lineage = mock.MagicMock(cert_path=test_util.temp_join('cert'), chain_path=test_util.temp_join('chain'), fullchain_path=test_util.temp_join('chain'), key_path=test_util.temp_join('privkey')) with mock.patch("certbot._internal.cert_manager.lineage_for_certname") as mock_getlin: mock_getlin.return_value = mock_lineage self._call(['install', '--cert-name', 'whatever', '--key-path', test_util.temp_join('overriding_privkey')], mockisfile=True) call_config = mock_install.call_args[0][0] assert call_config.cert_path == test_util.temp_join('cert') assert call_config.fullchain_path == test_util.temp_join('chain') assert call_config.chain_path == test_util.temp_join('chain') assert call_config.key_path == test_util.temp_join('overriding_privkey') mock_install.reset() self._call(['install', '--cert-name', 'whatever', '--cert-path', test_util.temp_join('overriding_cert')], mockisfile=True) call_config = mock_install.call_args[0][0] assert call_config.cert_path == test_util.temp_join('overriding_cert') assert call_config.fullchain_path == test_util.temp_join('chain') assert call_config.key_path == test_util.temp_join('privkey') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') def test_installer_param_error(self, _inst, _rec): with pytest.raises(errors.ConfigurationError): self._call(['install', '--cert-name', 'notfound', '--key-path', 'invalid']) @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') @mock.patch('certbot._internal.cert_manager.get_certnames') @mock.patch('certbot._internal.main._install_cert') def test_installer_select_cert(self, mock_inst, mock_getcert, _inst, _rec): mock_lineage = mock.MagicMock(cert_path=test_util.temp_join('cert'), chain_path=test_util.temp_join('chain'), fullchain_path=test_util.temp_join('chain'), key_path=test_util.temp_join('privkey')) with mock.patch("certbot._internal.cert_manager.lineage_for_certname") as mock_getlin: mock_getlin.return_value = mock_lineage self._call(['install'], mockisfile=True) assert mock_getcert.called assert mock_inst.called @mock.patch('certbot._internal.eff.handle_subscription') @mock.patch('certbot._internal.log.post_arg_parse_setup') @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot.util.exe_exists') def test_configurator_selection(self, mock_exe_exists, _, __, ___): mock_exe_exists.return_value = True real_plugins = disco.PluginsRegistry.find_all() args = ['--apache', '--authenticator', 'standalone'] # This needed two calls to find_all(), which we're avoiding for now # because of possible side effects: # https://github.com/certbot/certbot/commit/51ed2b681f87b1eb29088dd48718a54f401e4855 # with mock.patch('certbot._internal.cli.plugins_testable') as plugins: # plugins.return_value = {"apache": True, "nginx": True} # ret, _, _, _ = self._call(args) # self.assertTrue("Too many flags setting" in ret) args = ["install", "--nginx", "--cert-path", test_util.temp_join('blah'), "--key-path", test_util.temp_join('blah'), "--nginx-server-root", "/nonexistent/thing", "-d", "example.com", "--debug"] if "nginx" in real_plugins: # Sending nginx a non-existent conf dir will simulate misconfiguration # (we can only do that if certbot-nginx is actually present) ret, _, _, _ = self._call(args) assert "The nginx plugin is not working" in ret assert "MisconfigurationError" in ret self._cli_missing_flag(["--standalone"], "With the standalone plugin, you probably") with mock.patch("certbot._internal.main._init_le_client") as mock_init: with mock.patch("certbot._internal.main._get_and_save_cert") as mock_gsc: mock_gsc.return_value = mock.MagicMock() self._call(["certonly", "--manual", "-d", "foo.bar"]) unused_config, auth, unused_installer = mock_init.call_args[0] assert isinstance(auth, manual.Authenticator) with mock.patch('certbot._internal.main.certonly') as mock_certonly: self._call(["auth", "--standalone"]) assert 1 == mock_certonly.call_count @mock.patch('certbot._internal.log.post_arg_parse_setup') def test_rollback(self, _): _, _, _, client = self._call(['rollback']) assert 1 == client.rollback.call_count _, _, _, client = self._call(['rollback', '--checkpoints', '123']) client.rollback.assert_called_once_with( mock.ANY, 123, mock.ANY, mock.ANY) @mock.patch('certbot._internal.cert_manager.certificates') def test_certificates(self, mock_cert_manager): self._call_no_clientmock(['certificates']) assert 1 == mock_cert_manager.call_count @mock.patch('certbot._internal.cert_manager.delete') def test_delete(self, mock_cert_manager): self._call_no_clientmock(['delete']) assert 1 == mock_cert_manager.call_count @mock.patch('certbot._internal.main.plugins_disco') @mock.patch('certbot._internal.main.cli.HelpfulArgumentParser.determine_help_topics') @mock.patch('certbot._internal.log.post_arg_parse_setup') def test_plugins(self, _, _det, mock_disco): flags = ['--init', '--prepare', '--authenticators', '--installers'] for args in itertools.chain( *(itertools.combinations(flags, r) for r in range(len(flags)))): self._call(['plugins'] + list(args)) @mock.patch('certbot._internal.main.plugins_disco') @mock.patch('certbot._internal.main.cli.HelpfulArgumentParser.determine_help_topics') def test_plugins_no_args(self, _det, mock_disco): ifaces: List[interfaces.Plugin] = [] plugins = mock_disco.PluginsRegistry.find_all() stdout = io.StringIO() with test_util.patch_display_util_with_stdout(stdout=stdout): _, stdout, _, _ = self._call(['plugins'], stdout) plugins.visible.assert_called_once_with() plugins.visible().ifaces.assert_called_once_with(ifaces) filtered = plugins.visible().ifaces() assert stdout.getvalue().strip() == str(filtered) @mock.patch('certbot._internal.main.plugins_disco') @mock.patch('certbot._internal.main.cli.HelpfulArgumentParser.determine_help_topics') def test_plugins_no_args_unprivileged(self, _det, mock_disco): ifaces: List[interfaces.Plugin] = [] plugins = mock_disco.PluginsRegistry.find_all() def throw_error(directory, mode, strict): """Raises error.Error.""" _, _, _ = directory, mode, strict raise errors.Error() stdout = io.StringIO() with mock.patch('certbot.util.set_up_core_dir') as mock_set_up_core_dir: with test_util.patch_display_util_with_stdout(stdout=stdout): mock_set_up_core_dir.side_effect = throw_error _, stdout, _, _ = self._call(['plugins'], stdout) plugins.visible.assert_called_once_with() plugins.visible().ifaces.assert_called_once_with(ifaces) filtered = plugins.visible().ifaces() assert stdout.getvalue().strip() == str(filtered) @mock.patch('certbot._internal.main.plugins_disco') @mock.patch('certbot._internal.main.cli.HelpfulArgumentParser.determine_help_topics') def test_plugins_init(self, _det, mock_disco): ifaces: List[interfaces.Plugin] = [] plugins = mock_disco.PluginsRegistry.find_all() stdout = io.StringIO() with test_util.patch_display_util_with_stdout(stdout=stdout): _, stdout, _, _ = self._call(['plugins', '--init'], stdout) plugins.visible.assert_called_once_with() plugins.visible().ifaces.assert_called_once_with(ifaces) filtered = plugins.visible().ifaces() assert filtered.init.call_count == 1 assert stdout.getvalue().strip() == str(filtered) @mock.patch('certbot._internal.main.plugins_disco') @mock.patch('certbot._internal.main.cli.HelpfulArgumentParser.determine_help_topics') def test_plugins_prepare(self, _det, mock_disco): ifaces: List[interfaces.Plugin] = [] plugins = mock_disco.PluginsRegistry.find_all() stdout = io.StringIO() with test_util.patch_display_util_with_stdout(stdout=stdout): _, stdout, _, _ = self._call(['plugins', '--init', '--prepare'], stdout) plugins.visible.assert_called_once_with() plugins.visible().ifaces.assert_called_once_with(ifaces) filtered = plugins.visible().ifaces() assert filtered.init.call_count == 1 filtered.prepare.assert_called_once_with() filtered.available.assert_called_once_with() available = filtered.available() assert stdout.getvalue().strip() == str(available) def test_certonly_abspath(self): cert = 'cert' key = 'key' chain = 'chain' fullchain = 'fullchain' with mock.patch('certbot._internal.main.certonly') as mock_certonly: self._call(['certonly', '--cert-path', cert, '--key-path', 'key', '--chain-path', 'chain', '--fullchain-path', 'fullchain']) config, unused_plugins = mock_certonly.call_args[0] assert config.cert_path == os.path.abspath(cert) assert config.key_path == os.path.abspath(key) assert config.chain_path == os.path.abspath(chain) assert config.fullchain_path == os.path.abspath(fullchain) def test_certonly_bad_args(self): try: self._call(['-a', 'bad_auth', 'certonly']) pytest.fail("Exception should have been raised") except errors.PluginSelectionError as e: assert 'The requested bad_auth plugin does not appear' in str(e) def test_check_config_sanity_domain(self): # FQDN with pytest.raises(errors.ConfigurationError): self._call(['-d', 'a' * 64]) # FQDN 2 with pytest.raises(errors.ConfigurationError): self._call(['-d', (('a' * 50) + '.') * 10]) # Bare IP address (this is actually a different error message now) with pytest.raises(errors.ConfigurationError): self._call(['-d', '204.11.231.35']) # Bare IPv6 address with pytest.raises(errors.ConfigurationError): self._call(['-d', '2001:db8:ac69:3ff:b1cb:c8c6:5a84:a31b']) def test_csr_with_besteffort(self): with pytest.raises(errors.Error): self._call('certonly --csr {0} --allow-subset-of-names'.format(CSR).split()) def test_run_with_csr(self): # This is an error because you can only use --csr with certonly try: self._call(['--csr', CSR]) except errors.Error as e: assert "Please try the certonly" in repr(e) return pytest.fail("Expected supplying --csr to fail with default verb") def test_csr_with_no_domains(self): with pytest.raises(errors.Error): self._call('certonly --csr {0}'.format( test_util.vector_path('csr-nonames_512.pem')).split()) def test_csr_with_inconsistent_domains(self): with pytest.raises(errors.Error): self._call('certonly -d example.org --csr {0}'.format(CSR).split()) def _certonly_new_request_common(self, mock_client, args=None): with mock.patch('certbot._internal.main._find_lineage_for_domains_and_certname') \ as mock_renewal: mock_renewal.return_value = ("newcert", None) with mock.patch('certbot._internal.main._init_le_client') as mock_init: mock_init.return_value = mock_client if args is None: args = [] args += '-d foo.bar -a standalone certonly'.split() self._call(args) @mock.patch('certbot._internal.main._report_new_cert') def test_certonly_dry_run_new_request_success(self, mock_report): mock_client = mock.MagicMock() mock_client.obtain_and_enroll_certificate.return_value = None self._certonly_new_request_common(mock_client, ['--dry-run']) assert mock_client.obtain_and_enroll_certificate.call_count == 1 assert mock_report.call_count == 1 assert mock_report.call_args[0][0].dry_run is True @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot._internal.main.util.atexit_register') @mock.patch('certbot._internal.eff.handle_subscription') @mock.patch('certbot.crypto_util.notAfter') def test_certonly_new_request_success(self, mock_notAfter, mock_subscription, mock_register, mock_report): cert_path = os.path.normpath(os.path.join(self.config.config_dir, 'live/foo.bar')) key_path = os.path.normpath(os.path.join(self.config.config_dir, 'live/baz.qux')) date = '1970-01-01' mock_notAfter().date.return_value = date mock_lineage = mock.MagicMock(cert=cert_path, fullchain=cert_path, fullchain_path=cert_path, key_path=key_path) mock_client = mock.MagicMock() mock_client.obtain_and_enroll_certificate.return_value = mock_lineage self._certonly_new_request_common(mock_client) assert mock_client.obtain_and_enroll_certificate.call_count == 1 assert mock_report.call_count == 1 assert cert_path in mock_report.call_args[0][2] assert key_path in mock_report.call_args[0][3] assert 'donate' in mock_register.call_args[0][1] assert mock_subscription.called is True @mock.patch('certbot._internal.eff.handle_subscription') def test_certonly_new_request_failure(self, mock_subscription): mock_client = mock.MagicMock() mock_client.obtain_and_enroll_certificate.return_value = False with pytest.raises(errors.Error): self._certonly_new_request_common(mock_client) assert mock_subscription.called is False def _test_renewal_common(self, due_for_renewal, extra_args, log_out=None, args=None, should_renew=True, error_expected=False, quiet_mode=False, expiry_date=datetime.datetime.now(), reuse_key=False, new_key=False): cert_path = test_util.vector_path('cert_512.pem') chain_path = os.path.normpath(os.path.join(self.config.config_dir, 'live/foo.bar/fullchain.pem')) mock_lineage = mock.MagicMock(cert=cert_path, fullchain=chain_path, cert_path=cert_path, fullchain_path=chain_path) mock_lineage.should_autorenew.return_value = due_for_renewal mock_lineage.has_pending_deployment.return_value = False mock_lineage.names.return_value = ['isnot.org'] mock_lineage.private_key_type = 'ecdsa' mock_lineage.elliptic_curve = 'secp256r1' mock_lineage.reuse_key = reuse_key mock_certr = mock.MagicMock() mock_key = mock.MagicMock(pem='pem_key') mock_client = mock.MagicMock() stdout = io.StringIO() mock_client.obtain_certificate.return_value = (mock_certr, 'chain', mock_key, 'csr') def write_msg(message, *args, **kwargs): # pylint: disable=unused-argument """Write message to stdout.""" stdout.write(message) try: with mock.patch('certbot._internal.cert_manager.find_duplicative_certs') as mock_fdc: mock_fdc.return_value = (mock_lineage, None) with mock.patch('certbot._internal.main._init_le_client') as mock_init: mock_init.return_value = mock_client with mock.patch('certbot._internal.display.obj.get_display') as mock_display: if not quiet_mode: mock_display().notification.side_effect = write_msg with mock.patch('certbot._internal.main.renewal.crypto_util') \ as mock_crypto_util: mock_crypto_util.notAfter.return_value = expiry_date with mock.patch('certbot._internal.eff.handle_subscription'): if not args: args = ['-d', 'isnot.org', '-a', 'standalone', 'certonly'] if extra_args: args += extra_args try: ret, stdout, _, _ = self._call(args, stdout) if ret: print("Returned", ret) raise AssertionError(ret) assert not error_expected, "renewal should have errored" except: # pylint: disable=bare-except if not error_expected: raise AssertionError( "Unexpected renewal error:\n" + traceback.format_exc()) if should_renew: if reuse_key and not new_key: # The location of the previous live privkey.pem is passed # to obtain_certificate mock_client.obtain_certificate.assert_called_once_with([mock.ANY], os.path.normpath(os.path.join( self.config.config_dir, "live/sample-renewal/privkey.pem"))) else: mock_client.obtain_certificate.assert_called_once_with([mock.ANY], None) else: assert mock_client.obtain_certificate.call_count == 0 except: self._dump_log() raise finally: if log_out: with open(os.path.join(self.config.logs_dir, "letsencrypt.log")) as lf: assert log_out in lf.read() return mock_lineage, mock_display, stdout @mock.patch('certbot._internal.main._report_new_cert') @mock.patch('certbot._internal.main.util.atexit_register') @mock.patch('certbot.crypto_util.notAfter') def test_certonly_renewal(self, _, mock_register, mock_report): lineage, _, _ = self._test_renewal_common(True, []) assert lineage.save_successor.call_count == 1 lineage.update_all_links_to.assert_called_once_with( lineage.latest_common_version()) assert mock_report.call_count == 1 assert 'fullchain.pem' in mock_report.call_args[0][2] assert 'donate' in mock_register.call_args[0][1] @mock.patch('certbot._internal.main.display_util.notify') @mock.patch('certbot._internal.log.logging.handlers.RotatingFileHandler.doRollover') @mock.patch('certbot.crypto_util.notAfter') def test_certonly_renewal_triggers(self, _, __, mock_notify): # --dry-run should force renewal _, _, _ = self._test_renewal_common(False, ['--dry-run', '--keep'], log_out="simulating renewal") mock_notify.assert_any_call('The dry run was successful.') self._test_renewal_common(False, ['--renew-by-default', '-tvv', '--debug'], log_out="Auto-renewal forced") _, mock_displayer, _ = self._test_renewal_common(False, ['-tvv', '--debug', '--keep'], should_renew=False) assert 'not yet due' in mock_displayer().notification.call_args[0][0] def _dump_log(self): print("Logs:") log_path = os.path.join(self.config.logs_dir, "letsencrypt.log") if os.path.exists(log_path): with open(log_path) as lf: print(lf.read()) def test_renew_verb(self): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--dry-run", "-tvv"] self._test_renewal_common(True, [], args=args, should_renew=True) def test_reuse_key(self): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf', ec=False) args = ["renew", "--dry-run", "--reuse-key"] self._test_renewal_common(True, [], args=args, should_renew=True, reuse_key=True) @mock.patch('certbot._internal.storage.RenewableCert.save_successor') def test_reuse_key_no_dry_run(self, unused_save_successor): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf', ec=False) args = ["renew", "--reuse-key"] self._test_renewal_common(True, [], args=args, should_renew=True, reuse_key=True) @mock.patch('certbot._internal.storage.RenewableCert.save_successor') def test_new_key(self, unused_save_successor): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--reuse-key", "--new-key"] self._test_renewal_common(True, [], args=args, should_renew=True, reuse_key=True, new_key=True) @mock.patch('sys.stdin') def test_noninteractive_renewal_delay(self, stdin): stdin.isatty.return_value = False test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--dry-run", "-tvv"] self._test_renewal_common(True, [], args=args, should_renew=True) assert self.mock_sleep.call_count == 1 # in main.py: # sleep_time = random.randint(1, 60*8) sleep_call_arg = self.mock_sleep.call_args[0][0] assert 1 <= sleep_call_arg <= 60*8 @mock.patch('sys.stdin') def test_interactive_no_renewal_delay(self, stdin): stdin.isatty.return_value = True test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--dry-run", "-tvv"] self._test_renewal_common(True, [], args=args, should_renew=True) assert self.mock_sleep.call_count == 0 @mock.patch('certbot._internal.renewal.should_renew') def test_renew_skips_recent_certs(self, should_renew): should_renew.return_value = False test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') expiry = datetime.datetime.now() + datetime.timedelta(days=90) _, _, stdout = self._test_renewal_common(False, extra_args=None, should_renew=False, args=['renew'], expiry_date=expiry) assert 'No renewals were attempted.' in stdout.getvalue() assert 'The following certificates are not due for renewal yet:' in stdout.getvalue() @mock.patch('certbot._internal.log.post_arg_parse_setup') def test_quiet_renew(self, _): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--dry-run"] _, _, stdout = self._test_renewal_common(True, [], args=args, should_renew=True) out = stdout.getvalue() assert "renew" in out args = ["renew", "--dry-run", "-q"] _, _, stdout = self._test_renewal_common(True, [], args=args, should_renew=True, quiet_mode=True) out = stdout.getvalue() assert "" == out def test_renew_hook_validation(self): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--dry-run", "--post-hook=no-such-command"] self._test_renewal_common(True, [], args=args, should_renew=False, error_expected=True) def test_renew_no_hook_validation(self): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') args = ["renew", "--dry-run", "--post-hook=no-such-command", "--disable-hook-validation"] with mock.patch("certbot._internal.hooks.post_hook"): self._test_renewal_common(True, [], args=args, should_renew=True, error_expected=False) def test_renew_verb_empty_config(self): rd = os.path.join(self.config.config_dir, 'renewal') if not os.path.exists(rd): filesystem.makedirs(rd) with open(os.path.join(rd, 'empty.conf'), 'w'): pass # leave the file empty args = ["renew", "--dry-run", "-tvv"] self._test_renewal_common(False, [], args=args, should_renew=False, error_expected=True) def test_renew_with_certname(self): test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf') self._test_renewal_common(True, [], should_renew=True, args=['renew', '--dry-run', '--cert-name', 'sample-renewal']) def test_renew_with_bad_certname(self): self._test_renewal_common(True, [], should_renew=False, args=['renew', '--dry-run', '--cert-name', 'sample-renewal'], error_expected=True) def _make_dummy_renewal_config(self): renewer_configs_dir = os.path.join(self.config.config_dir, 'renewal') filesystem.makedirs(renewer_configs_dir) with open(os.path.join(renewer_configs_dir, 'test.conf'), 'w') as f: f.write("My contents don't matter") def _test_renew_common(self, renewalparams=None, names=None, assert_oc_called=None, **kwargs): self._make_dummy_renewal_config() with mock.patch('certbot._internal.storage.RenewableCert') as mock_rc: mock_lineage = mock.MagicMock() mock_lineage.fullchain = "somepath/fullchain.pem" if renewalparams is not None: mock_lineage.configuration = {'renewalparams': renewalparams} if names is not None: mock_lineage.names.return_value = names mock_rc.return_value = mock_lineage with mock.patch('certbot._internal.main.renew_cert') as mock_renew_cert: kwargs.setdefault('args', ['renew']) self._test_renewal_common(True, None, should_renew=False, **kwargs) if assert_oc_called is not None: if assert_oc_called: assert mock_renew_cert.called else: assert mock_renew_cert.called is False def test_renew_no_renewalparams(self): self._test_renew_common(assert_oc_called=False, error_expected=True) def test_renew_no_authenticator(self): self._test_renew_common(renewalparams={}, assert_oc_called=False, error_expected=True) def test_renew_with_bad_int(self): renewalparams = {'authenticator': 'webroot', 'rsa_key_size': 'over 9000'} self._test_renew_common(renewalparams=renewalparams, error_expected=True, assert_oc_called=False) def test_renew_with_nonetype_http01(self): renewalparams = {'authenticator': 'webroot', 'http01_port': 'None'} self._test_renew_common(renewalparams=renewalparams, assert_oc_called=True) def test_renew_with_bad_domain(self): renewalparams = {'authenticator': 'webroot'} names = ['uniçodé.com'] self._test_renew_common(renewalparams=renewalparams, error_expected=True, names=names, assert_oc_called=False) @mock.patch('certbot._internal.plugins.selection.choose_configurator_plugins') def test_renew_with_configurator(self, mock_sel): mock_sel.return_value = (mock.MagicMock(), mock.MagicMock()) renewalparams = {'authenticator': 'webroot'} self._test_renew_common( renewalparams=renewalparams, assert_oc_called=True, args='renew --configurator apache'.split()) def test_renew_plugin_config_restoration(self): renewalparams = {'authenticator': 'webroot', 'webroot_path': 'None', 'webroot_imaginary_flag': '42'} self._test_renew_common(renewalparams=renewalparams, assert_oc_called=True) def test_renew_with_webroot_map(self): renewalparams = {'authenticator': 'webroot'} self._test_renew_common( renewalparams=renewalparams, assert_oc_called=True, args=['renew', '--webroot-map', json.dumps({'example.com': tempfile.gettempdir()})]) def test_renew_reconstitute_error(self): # pylint: disable=protected-access with mock.patch('certbot._internal.main.renewal.reconstitute') as mock_reconstitute: mock_reconstitute.side_effect = Exception self._test_renew_common(assert_oc_called=False, error_expected=True) def test_renew_obtain_cert_error(self): self._make_dummy_renewal_config() with mock.patch('certbot._internal.storage.RenewableCert') as mock_rc: mock_lineage = mock.MagicMock() mock_lineage.fullchain = "somewhere/fullchain.pem" mock_rc.return_value = mock_lineage mock_lineage.configuration = { 'renewalparams': {'authenticator': 'webroot'}} with mock.patch('certbot._internal.main.renew_cert') as mock_renew_cert: mock_renew_cert.side_effect = Exception self._test_renewal_common(True, None, error_expected=True, args=['renew'], should_renew=False) def test_renew_with_bad_cli_args(self): self._test_renewal_common(True, None, args='renew -d example.com'.split(), should_renew=False, error_expected=True) self._test_renewal_common(True, None, args='renew --csr {0}'.format(CSR).split(), should_renew=False, error_expected=True) def test_no_renewal_with_hooks(self): _, _, stdout = self._test_renewal_common( due_for_renewal=False, extra_args=None, should_renew=False, args=['renew', '--post-hook', '{0} -c "print(\'hello world\');"' .format(sys.executable)]) assert 'No hooks were run.' in stdout.getvalue() @test_util.patch_display_util() @mock.patch('certbot._internal.main._find_lineage_for_domains_and_certname') @mock.patch('certbot._internal.main._init_le_client') @mock.patch('certbot._internal.main._report_new_cert') def test_certonly_reinstall(self, mock_report_new_cert, mock_init, mock_renewal, mock_get_utility): mock_renewal.return_value = ('reinstall', mock.MagicMock()) mock_init.return_value = mock_client = mock.MagicMock() self._call(['-d', 'foo.bar', '-a', 'standalone', 'certonly']) assert mock_client.obtain_certificate.called is False assert mock_client.obtain_and_enroll_certificate.called is False assert mock_get_utility().add_message.call_count == 0 mock_report_new_cert.assert_not_called() #self.assertTrue('donate' not in mock_get_utility().add_message.call_args[0][0]) def _test_certonly_csr_common(self, extra_args=None): certr = 'certr' chain = 'chain' mock_client = mock.MagicMock() mock_client.obtain_certificate_from_csr.return_value = (certr, chain) cert_path = os.path.normpath(os.path.join( self.config.config_dir, 'live/example.com/cert_512.pem')) full_path = os.path.normpath(os.path.join( self.config.config_dir, 'live/example.com/fullchain.pem')) mock_client.save_certificate.return_value = cert_path, None, full_path with mock.patch('certbot._internal.main._init_le_client') as mock_init: mock_init.return_value = mock_client chain_path = os.path.normpath(os.path.join( self.config.config_dir, 'live/example.com/chain.pem')) args = ('-a standalone certonly --csr {0} --cert-path {1} ' '--chain-path {2} --fullchain-path {3}').format( CSR, cert_path, chain_path, full_path).split() if extra_args: args += extra_args with mock.patch('certbot._internal.main.crypto_util'): self._call(args) if '--dry-run' in args: assert mock_client.save_certificate.called is False else: mock_client.save_certificate.assert_called_once_with( certr, chain, cert_path, chain_path, full_path) @mock.patch('certbot._internal.main._csr_report_new_cert') @mock.patch('certbot._internal.main.util.atexit_register') @mock.patch('certbot._internal.eff.handle_subscription') def test_certonly_csr(self, mock_subscription, mock_register, mock_csr_report): self._test_certonly_csr_common() assert mock_csr_report.call_count == 1 assert 'cert_512.pem' in mock_csr_report.call_args[0][1] assert mock_csr_report.call_args[0][2] is None assert 'fullchain.pem' in mock_csr_report.call_args[0][3] assert 'donate' in mock_register.call_args[0][1] assert mock_subscription.called is True @mock.patch('certbot._internal.main._csr_report_new_cert') def test_certonly_csr_dry_run(self, mock_csr_report): self._test_certonly_csr_common(['--dry-run']) assert mock_csr_report.call_count == 1 assert mock_csr_report.call_args[0][0].dry_run is True @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.main.client.acme_client') def test_revoke_with_key(self, mock_acme_client, mock_delete_if_appropriate): mock_delete_if_appropriate.return_value = False server = 'foo.bar' self._call_no_clientmock(['--cert-path', SS_CERT_PATH, '--key-path', RSA2048_KEY_PATH, '--server', server, 'revoke']) with open(RSA2048_KEY_PATH, 'rb') as f: assert mock_acme_client.ClientV2.call_count == 1 assert mock_acme_client.ClientNetwork.call_args[0][0] == \ jose.JWK.load(f.read()) with open(SS_CERT_PATH, 'rb') as f: cert = crypto_util.pyopenssl_load_certificate(f.read())[0] mock_revoke = mock_acme_client.ClientV2().revoke mock_revoke.assert_called_once_with( jose.ComparableX509(cert), mock.ANY) def test_revoke_with_key_mismatch(self): server = 'foo.bar' with pytest.raises(errors.Error): self._call_no_clientmock(['--cert-path', CERT, '--key-path', KEY, '--server', server, 'revoke']) @mock.patch('certbot._internal.main._delete_if_appropriate') @mock.patch('certbot._internal.main._determine_account') def test_revoke_without_key(self, mock_determine_account, mock_delete_if_appropriate): mock_delete_if_appropriate.return_value = False mock_determine_account.return_value = (mock.MagicMock(), None) _, _, _, client = self._call(['--cert-path', CERT, 'revoke']) with open(CERT) as f: cert = crypto_util.pyopenssl_load_certificate(f.read())[0] mock_revoke = client.acme_from_config_key().revoke mock_revoke.assert_called_once_with( jose.ComparableX509(cert), mock.ANY) @mock.patch('certbot._internal.log.post_arg_parse_setup') def test_register(self, _): with mock.patch('certbot._internal.main.client') as mocked_client: acc = mock.MagicMock() acc.id = "imaginary_account" mocked_client.register.return_value = (acc, "worked") self._call_no_clientmock(["register", "--email", "user@example.org"]) # TODO: It would be more correct to explicitly check that # _determine_account() gets called in the above case, # but coverage statistics should also show that it did. with mock.patch('certbot._internal.main.account') as mocked_account: mocked_storage = mock.MagicMock() mocked_account.AccountFileStorage.return_value = mocked_storage mocked_storage.find_all.return_value = ["an account"] x = self._call_no_clientmock(["register", "--email", "user@example.org"]) assert "There is an existing account" in x[0] @mock.patch('certbot._internal.plugins.selection.choose_configurator_plugins') @mock.patch('certbot._internal.updater._run_updaters') def test_plugin_selection_error(self, mock_run, mock_choose): mock_choose.side_effect = errors.PluginSelectionError with pytest.raises(errors.PluginSelectionError): main.renew_cert(None, None, None) self.config.dry_run = False updater.run_generic_updaters(self.config, None, None) # Make sure we're returning None, and hence not trying to run the # without installer assert mock_run.called is False @mock.patch('certbot._internal.main.updater.run_renewal_deployer') @mock.patch('certbot._internal.plugins.selection.choose_configurator_plugins') @mock.patch('certbot._internal.main._init_le_client') @mock.patch('certbot._internal.main._get_and_save_cert') def test_renew_doesnt_restart_on_dryrun(self, mock_get_cert, mock_init, mock_choose, mock_run_renewal_deployer): """A dry-run renewal shouldn't try to restart the installer""" self.config.dry_run = True installer = mock.MagicMock() mock_choose.return_value = (installer, mock.MagicMock()) main.renew_cert(self.config, None, None) assert mock_init.call_count == 1 assert mock_get_cert.call_count == 1 installer.restart.assert_not_called() mock_run_renewal_deployer.assert_not_called() class UnregisterTest(unittest.TestCase): def setUp(self): self.patchers = { '_determine_account': mock.patch('certbot._internal.main._determine_account'), 'account': mock.patch('certbot._internal.main.account'), 'client': mock.patch('certbot._internal.main.client'), 'get_utility': test_util.patch_display_util()} self.mocks = {k: v.start() for k, v in self.patchers.items()} def tearDown(self): for patch in self.patchers.values(): patch.stop() def test_abort_unregister(self): self.mocks['account'].AccountFileStorage.return_value = mock.Mock() util_mock = self.mocks['get_utility']() util_mock.yesno.return_value = False config = mock.Mock() unused_plugins = mock.Mock() res = main.unregister(config, unused_plugins) assert res == "Deactivation aborted." @mock.patch("certbot._internal.main.display_util.notify") def test_unregister(self, mock_notify): mocked_storage = mock.MagicMock() mocked_storage.find_all.return_value = ["an account"] self.mocks['account'].AccountFileStorage.return_value = mocked_storage self.mocks['_determine_account'].return_value = (mock.MagicMock(), "foo") cb_client = mock.MagicMock() self.mocks['client'].Client.return_value = cb_client config = mock.MagicMock() unused_plugins = mock.MagicMock() res = main.unregister(config, unused_plugins) assert res is None mock_notify.assert_called_once_with("Account deactivated.") def test_unregister_no_account(self): mocked_storage = mock.MagicMock() mocked_storage.find_all.return_value = [] self.mocks['account'].AccountFileStorage.return_value = mocked_storage cb_client = mock.MagicMock() self.mocks['client'].Client.return_value = cb_client config = mock.MagicMock() config.server = "https://acme.example.com/directory" unused_plugins = mock.MagicMock() res = main.unregister(config, unused_plugins) m = "Could not find existing account for server https://acme.example.com/directory." assert res == m assert cb_client.acme.deactivate_registration.called is False class MakeOrVerifyNeededDirs(test_util.ConfigTestCase): """Tests for certbot._internal.main.make_or_verify_needed_dirs.""" @mock.patch("certbot._internal.main.util") def test_it(self, mock_util): main.make_or_verify_needed_dirs(self.config) for core_dir in (self.config.config_dir, self.config.work_dir,): mock_util.set_up_core_dir.assert_any_call( core_dir, constants.CONFIG_DIRS_MODE, self.config.strict_permissions ) hook_dirs = (self.config.renewal_pre_hooks_dir, self.config.renewal_deploy_hooks_dir, self.config.renewal_post_hooks_dir,) for hook_dir in hook_dirs: # default mode of 755 is used mock_util.make_or_verify_dir.assert_any_call( hook_dir, strict=self.config.strict_permissions) class EnhanceTest(test_util.ConfigTestCase): """Tests for certbot._internal.main.enhance.""" def setUp(self): super().setUp() self.get_utility_patch = test_util.patch_display_util() self.mock_get_utility = self.get_utility_patch.start() self.mockinstaller = mock.MagicMock(spec=enhancements.AutoHSTSEnhancement) def tearDown(self): self.get_utility_patch.stop() def _call(self, args): plugins = disco.PluginsRegistry.find_all() config = cli.prepare_and_parse_args(plugins, args) with mock.patch('certbot._internal.cert_manager.get_certnames') as mock_certs: mock_certs.return_value = ['example.com'] with mock.patch('certbot._internal.cert_manager.domains_for_certname') as mock_dom: mock_dom.return_value = ['example.com'] with mock.patch('certbot._internal.main._init_le_client') as mock_init: mock_client = mock.MagicMock() mock_client.config = config mock_init.return_value = mock_client main.enhance(config, plugins) return mock_client # returns the client @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main._find_domains_or_certname') def test_selection_question(self, mock_find, mock_choose, mock_lineage, _rec): mock_lineage.return_value = mock.MagicMock(chain_path="/tmp/nonexistent") mock_choose.return_value = ['example.com'] mock_find.return_value = (None, None) with mock.patch('certbot._internal.main.plug_sel.pick_installer') as mock_pick: self._call(['enhance', '--redirect']) assert mock_pick.called # Check that the message includes "enhancements" assert "enhancements" in mock_pick.call_args[0][3] @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main._find_domains_or_certname') def test_selection_auth_warning(self, mock_find, mock_choose, mock_lineage, _rec): mock_lineage.return_value = mock.MagicMock(chain_path="/tmp/nonexistent") mock_choose.return_value = ["example.com"] mock_find.return_value = (None, None) with mock.patch('certbot._internal.main.plug_sel.pick_installer'): with mock.patch('certbot._internal.main.plug_sel.logger.warning') as mock_log: mock_client = self._call(['enhance', '-a', 'webroot', '--redirect']) assert mock_log.called assert "make sense" in mock_log.call_args[0][0] assert mock_client.enhance_config.called @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') def test_enhance_config_call(self, _rec, mock_choose, mock_lineage): mock_lineage.return_value = mock.MagicMock(chain_path="/tmp/nonexistent") mock_choose.return_value = ["example.com"] with mock.patch('certbot._internal.main.plug_sel.pick_installer'): mock_client = self._call(['enhance', '--redirect', '--hsts']) req_enh = ["redirect", "hsts"] not_req_enh = ["uir"] assert mock_client.enhance_config.called assert all(getattr(mock_client.config, e) for e in req_enh) assert not any(getattr(mock_client.config, e) for e in not_req_enh) assert "example.com" in mock_client.enhance_config.call_args[0][0] @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') def test_enhance_noninteractive(self, _rec, mock_choose, mock_lineage): mock_lineage.return_value = mock.MagicMock( chain_path="/tmp/nonexistent") mock_choose.return_value = ["example.com"] with mock.patch('certbot._internal.main.plug_sel.pick_installer'): mock_client = self._call(['enhance', '--redirect', '--hsts', '--non-interactive']) assert mock_client.enhance_config.called assert mock_choose.called is False @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') def test_user_abort_domains(self, _rec, mock_choose): mock_choose.return_value = [] with mock.patch('certbot._internal.main.plug_sel.pick_installer'): with pytest.raises(errors.Error): self._call(['enhance', '--redirect', '--hsts']) def test_no_enhancements_defined(self): with pytest.raises(errors.MisconfigurationError): self._call(['enhance', '-a', 'null']) @mock.patch('certbot._internal.main.plug_sel.choose_configurator_plugins') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') def test_plugin_selection_error(self, _rec, mock_choose, mock_pick): mock_choose.return_value = ["example.com"] mock_pick.return_value = (None, None) mock_pick.side_effect = errors.PluginSelectionError() mock_client = self._call(['enhance', '--hsts']) assert mock_client.enhance_config.called is False @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main.plug_sel.pick_installer') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @test_util.patch_display_util() def test_enhancement_enable(self, _, _rec, mock_inst, mock_choose, mock_lineage): mock_inst.return_value = self.mockinstaller mock_choose.return_value = ["example.com", "another.tld"] mock_lineage.return_value = mock.MagicMock(chain_path="/tmp/nonexistent") self._call(['enhance', '--auto-hsts']) assert self.mockinstaller.enable_autohsts.called assert self.mockinstaller.enable_autohsts.call_args[0][1] == \ ["example.com", "another.tld"] @mock.patch('certbot._internal.cert_manager.lineage_for_certname') @mock.patch('certbot._internal.main.display_ops.choose_values') @mock.patch('certbot._internal.main.plug_sel.pick_installer') @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @test_util.patch_display_util() def test_enhancement_enable_not_supported(self, _, _rec, mock_inst, mock_choose, mock_lineage): mock_inst.return_value = null.Installer(self.config, "null") mock_choose.return_value = ["example.com", "another.tld"] mock_lineage.return_value = mock.MagicMock(chain_path="/tmp/nonexistent") with pytest.raises(errors.NotSupportedError): self._call(['enhance', '--auto-hsts']) def test_enhancement_enable_conflict(self): with pytest.raises(errors.Error): self._call(['enhance', '--auto-hsts', '--hsts']) class InstallTest(test_util.ConfigTestCase): """Tests for certbot._internal.main.install.""" def setUp(self): super().setUp() self.mockinstaller = mock.MagicMock(spec=enhancements.AutoHSTSEnhancement) @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') def test_install_enhancement_not_supported(self, mock_inst, _rec): mock_inst.return_value = null.Installer(self.config, "null") plugins = disco.PluginsRegistry.find_all() self.config.auto_hsts = True self.config.certname = "nonexistent" with pytest.raises(errors.NotSupportedError): main.install(self.config, plugins) @mock.patch('certbot._internal.main.plug_sel.record_chosen_plugins') @mock.patch('certbot._internal.main.plug_sel.pick_installer') def test_install_enhancement_no_certname(self, mock_inst, _rec): mock_inst.return_value = self.mockinstaller plugins = disco.PluginsRegistry.find_all() self.config.auto_hsts = True self.config.certname = None self.config.key_path = "/tmp/nonexistent" self.config.cert_path = "/tmp/nonexistent" with pytest.raises(errors.ConfigurationError): main.install(self.config, plugins) class ReportNewCertTest(unittest.TestCase): """Tests for certbot._internal.main._report_new_cert and certbot._internal.main._csr_report_new_cert. """ def setUp(self): self.notify_patch = mock.patch('certbot._internal.main.display_util.notify') self.mock_notify = self.notify_patch.start() self.notafter_patch = mock.patch('certbot._internal.main.crypto_util.notAfter') self.mock_notafter = self.notafter_patch.start() self.mock_notafter.return_value = datetime.datetime(1970, 1, 1, 0, 0) def tearDown(self): self.notify_patch.stop() self.notafter_patch.stop() @classmethod def _call(cls, *args, **kwargs): from certbot._internal.main import _report_new_cert return _report_new_cert(*args, **kwargs) @classmethod def _call_csr(cls, *args, **kwargs): from certbot._internal.main import _csr_report_new_cert return _csr_report_new_cert(*args, **kwargs) def test_report_dry_run(self): self._call(mock.Mock(dry_run=True), None, None, None) self.mock_notify.assert_called_with("The dry run was successful.") def test_csr_report_dry_run(self): self._call_csr(mock.Mock(dry_run=True), None, None, None) self.mock_notify.assert_called_with("The dry run was successful.") def test_report_no_paths(self): with pytest.raises(AssertionError): self._call(mock.Mock(dry_run=False), None, None, None) with pytest.raises(AssertionError): self._call_csr(mock.Mock(dry_run=False), None, None, None) def test_report(self): self._call(mock.Mock(dry_run=False), '/path/to/cert.pem', '/path/to/fullchain.pem', '/path/to/privkey.pem') self.mock_notify.assert_called_with( '\nSuccessfully received certificate.\n' 'Certificate is saved at: /path/to/fullchain.pem\n' 'Key is saved at: /path/to/privkey.pem\n' 'This certificate expires on 1970-01-01.\n' 'These files will be updated when the certificate renews.\n' 'Certbot has set up a scheduled task to automatically renew this ' 'certificate in the background.' ) def test_report_no_key(self): self._call(mock.Mock(dry_run=False), '/path/to/cert.pem', '/path/to/fullchain.pem', None) self.mock_notify.assert_called_with( '\nSuccessfully received certificate.\n' 'Certificate is saved at: /path/to/fullchain.pem\n' 'This certificate expires on 1970-01-01.\n' 'These files will be updated when the certificate renews.\n' 'Certbot has set up a scheduled task to automatically renew this ' 'certificate in the background.' ) def test_report_no_preconfigured_renewal(self): self._call(mock.Mock(dry_run=False, preconfigured_renewal=False), '/path/to/cert.pem', '/path/to/fullchain.pem', '/path/to/privkey.pem') self.mock_notify.assert_called_with( '\nSuccessfully received certificate.\n' 'Certificate is saved at: /path/to/fullchain.pem\n' 'Key is saved at: /path/to/privkey.pem\n' 'This certificate expires on 1970-01-01.\n' 'These files will be updated when the certificate renews.' ) def test_csr_report(self): self._call_csr(mock.Mock(dry_run=False), '/path/to/cert.pem', '/path/to/chain.pem', '/path/to/fullchain.pem') self.mock_notify.assert_called_with( '\nSuccessfully received certificate.\n' 'Certificate is saved at: /path/to/cert.pem\n' 'Intermediate CA chain is saved at: /path/to/chain.pem\n' 'Full certificate chain is saved at: /path/to/fullchain.pem\n' 'This certificate expires on 1970-01-01.' ) def test_manual_no_hooks_report(self): """Shouldn't get a message about autorenewal if no --manual-auth-hook""" self._call(mock.Mock(dry_run=False, authenticator='manual', manual_auth_hook=None), '/path/to/cert.pem', '/path/to/fullchain.pem', '/path/to/privkey.pem') self.mock_notify.assert_called_with( '\nSuccessfully received certificate.\n' 'Certificate is saved at: /path/to/fullchain.pem\n' 'Key is saved at: /path/to/privkey.pem\n' 'This certificate expires on 1970-01-01.\n' 'These files will be updated when the certificate renews.' ) class ReportNextStepsTest(unittest.TestCase): """Tests for certbot._internal.main._report_next_steps""" def setUp(self): self.config = mock.MagicMock( cert_name="example.com", preconfigured_renewal=True, csr=None, authenticator="nginx", manual_auth_hook=None) notify_patch = mock.patch('certbot._internal.main.display_util.notify') self.mock_notify = notify_patch.start() self.addCleanup(notify_patch.stop) self.old_stdout = sys.stdout sys.stdout = io.StringIO() def tearDown(self): sys.stdout = self.old_stdout @classmethod def _call(cls, *args, **kwargs): from certbot._internal.main import _report_next_steps _report_next_steps(*args, **kwargs) def _output(self) -> str: assert self.mock_notify.call_count == 2 assert self.mock_notify.call_args_list[0][0][0] == 'NEXT STEPS:' return self.mock_notify.call_args_list[1][0][0] def test_report(self): """No steps for a normal renewal""" self.config.authenticator = "manual" self.config.manual_auth_hook = "/bin/true" self._call(self.config, None, None) self.mock_notify.assert_not_called() def test_csr_report(self): """--csr requires manual renewal""" self.config.csr = "foo.csr" self._call(self.config, None, None) assert "--csr will not be renewed" in self._output() def test_manual_no_hook_renewal(self): """--manual without a hook requires manual renewal""" self.config.authenticator = "manual" self._call(self.config, None, None) assert "--manual certificates requires" in self._output() def test_no_preconfigured_renewal(self): """No --preconfigured-renewal needs manual cron setup""" self.config.preconfigured_renewal = False self._call(self.config, None, None) assert "https://certbot.org/renewal-setup" in self._output() class UpdateAccountTest(test_util.ConfigTestCase): """Tests for certbot._internal.main.update_account""" def setUp(self): patches = { 'account': mock.patch('certbot._internal.main.account'), 'atexit': mock.patch('certbot.util.atexit'), 'client': mock.patch('certbot._internal.main.client'), 'determine_account': mock.patch('certbot._internal.main._determine_account'), 'notify': mock.patch('certbot._internal.main.display_util.notify'), 'prepare_sub': mock.patch('certbot._internal.eff.prepare_subscription'), 'util': test_util.patch_display_util() } self.mocks = { k: patches[k].start() for k in patches } for patch in patches.values(): self.addCleanup(patch.stop) return super().setUp() def _call(self, args): with mock.patch('certbot._internal.main.sys.stdout'), \ mock.patch('certbot._internal.main.sys.stderr'): args = ['--config-dir', self.config.config_dir, '--work-dir', self.config.work_dir, '--logs-dir', self.config.logs_dir, '--text'] + args return main.main(args[:]) # NOTE: parser can alter its args! def _prepare_mock_account(self): mock_storage = mock.MagicMock() mock_account = mock.MagicMock() mock_regr = mock.MagicMock() mock_storage.find_all.return_value = [mock_account] self.mocks['account'].AccountFileStorage.return_value = mock_storage mock_account.regr.body = mock_regr.body self.mocks['determine_account'].return_value = (mock_account, mock.MagicMock()) return (mock_account, mock_storage, mock_regr) def _test_update_no_contact(self, args): """Utility to assert that email removal is handled correctly""" (_, mock_storage, mock_regr) = self._prepare_mock_account() result = self._call(args) # When update succeeds, the return value of update_account() is None assert result is None # We submitted a registration to the server assert self.mocks['client'].Client().acme.update_registration.call_count == 1 mock_regr.body.update.assert_called_with(contact=()) # We got an update from the server and persisted it assert mock_storage.update_regr.call_count == 1 # We should have notified the user self.mocks['notify'].assert_called_with( 'Any contact information associated with this account has been removed.' ) # We should not have called subscription because there's no email self.mocks['prepare_sub'].assert_not_called() def test_no_existing_accounts(self): """Test that no existing account is handled correctly""" mock_storage = mock.MagicMock() mock_storage.find_all.return_value = [] self.mocks['account'].AccountFileStorage.return_value = mock_storage assert self._call(['update_account', '--email', 'user@example.org']) == \ 'Could not find an existing account for server' \ ' https://acme-v02.api.letsencrypt.org/directory.' def test_update_account_remove_email(self): """Test that --register-unsafely-without-email is handled as no email""" self._test_update_no_contact(['update_account', '--register-unsafely-without-email']) def test_update_account_empty_email(self): """Test that providing an empty email is handled as no email""" self._test_update_no_contact(['update_account', '-m', '']) @mock.patch('certbot._internal.main.display_ops.get_email') def test_update_account_with_email(self, mock_email): """Test that updating with a singular email is handled correctly""" mock_email.return_value = 'user@example.com' (_, mock_storage, _) = self._prepare_mock_account() mock_client = mock.MagicMock() self.mocks['client'].Client.return_value = mock_client result = self._call(['update_account']) # None if registration succeeds assert result is None # We should have updated the server assert mock_client.acme.update_registration.call_count == 1 # We should have updated the account on disk assert mock_storage.update_regr.call_count == 1 # Subscription should have been prompted assert self.mocks['prepare_sub'].call_count == 1 # Should have printed the email self.mocks['notify'].assert_called_with( 'Your e-mail address was updated to user@example.com.') def test_update_account_with_multiple_emails(self): """Test that multiple email addresses are handled correctly""" (_, mock_storage, mock_regr) = self._prepare_mock_account() assert self._call(['update_account', '-m', 'user@example.com,user@example.org']) is None mock_regr.body.update.assert_called_with( contact=['mailto:user@example.com', 'mailto:user@example.org'] ) assert mock_storage.update_regr.call_count == 1 self.mocks['notify'].assert_called_with( 'Your e-mail address was updated to user@example.com,user@example.org.') class ShowAccountTest(test_util.ConfigTestCase): """Tests for certbot._internal.main.show_account""" def setUp(self): patches = { 'account': mock.patch('certbot._internal.main.account'), 'atexit': mock.patch('certbot.util.atexit'), 'client': mock.patch('certbot._internal.main.client'), 'determine_account': mock.patch('certbot._internal.main._determine_account'), 'notify': mock.patch('certbot._internal.main.display_util.notify'), 'util': test_util.patch_display_util() } self.mocks = { k: patches[k].start() for k in patches } for patch in patches.values(): self.addCleanup(patch.stop) return super().setUp() def _call(self, args): with mock.patch('certbot._internal.main.sys.stdout'), \ mock.patch('certbot._internal.main.sys.stderr'): args = ['--config-dir', self.config.config_dir, '--work-dir', self.config.work_dir, '--logs-dir', self.config.logs_dir, '--text'] + args return main.main(args[:]) # NOTE: parser can alter its args! def _prepare_mock_account(self): mock_storage = mock.MagicMock() mock_account = mock.MagicMock() mock_regr = mock.MagicMock() mock_storage.find_all.return_value = [mock_account] self.mocks['account'].AccountFileStorage.return_value = mock_storage mock_account.regr.body = mock_regr.body mock_account.key.thumbprint.return_value = b'foobarbaz' self.mocks['determine_account'].return_value = (mock_account, mock.MagicMock()) def _test_show_account(self, contact): self._prepare_mock_account() mock_client = mock.MagicMock() mock_regr = mock.MagicMock() mock_regr.body.contact = contact mock_regr.uri = 'https://www.letsencrypt-demo.org/acme/reg/1' mock_client.acme.query_registration.return_value = mock_regr self.mocks['client'].Client.return_value = mock_client args = ['show_account'] self._call(args) assert mock_client.acme.query_registration.call_count == 1 def test_no_existing_accounts(self): """Test that no existing account is handled correctly""" mock_storage = mock.MagicMock() mock_storage.find_all.return_value = [] self.mocks['account'].AccountFileStorage.return_value = mock_storage assert self._call(['show_account']) == \ 'Could not find an existing account for server' \ ' https://acme-v02.api.letsencrypt.org/directory.' def test_no_existing_client(self): """Test that issues with the ACME client are handled correctly""" self._prepare_mock_account() mock_client = mock.MagicMock() mock_client.acme = None self.mocks['client'].Client.return_value = mock_client try: self._call(['show_account']) except errors.Error as e: assert 'ACME client is not set.' == str(e) def test_no_contacts(self): self._test_show_account(()) assert self.mocks['notify'].call_count == 1 self.mocks['notify'].assert_has_calls([ mock.call('Account details for server https://acme-v02.api.letsencr' 'ypt.org/directory:\n Account URL: https://www.letsencry' 'pt-demo.org/acme/reg/1\n Account Thumbprint: Zm9vYmFyYmF6\n' ' Email contact: none')]) def test_single_email(self): contact = ('mailto:foo@example.com',) self._test_show_account(contact) assert self.mocks['notify'].call_count == 1 self.mocks['notify'].assert_has_calls([ mock.call('Account details for server https://acme-v02.api.letsencr' 'ypt.org/directory:\n Account URL: https://www.letsencry' 'pt-demo.org/acme/reg/1\n Account Thumbprint: Zm9vYmFyYmF6' '\n Email contact: foo@example.com')]) def test_double_email(self): contact = ('mailto:foo@example.com', 'mailto:bar@example.com') self._test_show_account(contact) assert self.mocks['notify'].call_count == 1 self.mocks['notify'].assert_has_calls([ mock.call('Account details for server https://acme-v02.api.letsencr' 'ypt.org/directory:\n Account URL: https://www.letsencry' 'pt-demo.org/acme/reg/1\n Account Thumbprint: Zm9vYmFyYmF6\n' ' Email contacts: foo@example.com, bar@example.com')]) class TestLockOrder: """Tests that Certbot's directory locks were acquired in the right order.""" EXPECTED_ERROR_TYPE = errors.Error EXPECTED_ERROR_STR = 'Expected TestLockOrder error' # This regex is needed because certbot renew captures raised errors and # raises its own. EXPECTED_ERROR_STR_REGEX = f'{EXPECTED_ERROR_STR}|1 renew failure' @pytest.fixture def mock_lock_dir(self): with mock.patch('certbot._internal.lock.lock_dir') as mock_lock_dir: yield mock_lock_dir @contextlib.contextmanager def mock_plugin_prepare(self, authenticator_dir, installer_dir, mock_lock_dir, subcommand): """Patches plugin prepare to call mock_lock_dir and raise the expected error.""" def authenticator_lock(unused_self): mock_lock_dir(authenticator_dir) raise self.EXPECTED_ERROR_TYPE(self.EXPECTED_ERROR_STR) def installer_lock(unused_self): mock_lock_dir(installer_dir) # Unless an installer isn't needed (e.g. certbot install), we # expect the authenticator to raise the expected error because it # is prepared last. See # https://github.com/certbot/certbot/blob/7a6752a68ed77e73c2b29ab20d3ca8927f4fa7b0/certbot/certbot/_internal/plugins/selection.py#L246-L249 if subcommand == 'install': raise self.EXPECTED_ERROR_TYPE(self.EXPECTED_ERROR_STR) with mock.patch.object(standalone.Authenticator, 'prepare', authenticator_lock): with mock.patch.object(null.Installer, 'prepare', installer_lock): yield @pytest.fixture(params='certonly install renew run'.split()) def args_and_lock_order(self, mock_lock_dir, request, tmp_path): """Sets up Certbot with args and mocks to error after acquiring the last lock. This fixture yields the CLI arguments that should be given to Certbot and the expected order of directories to be locked. An error is raised after acquiring the last lock just as a means of stopping Certbot's execution. """ # select directories authenticator_dir = str(tmp_path / 'authenticator') config_dir = str(tmp_path / 'config') installer_dir = str(tmp_path / 'installer') logs_dir = str(tmp_path / 'logs') work_dir = str(tmp_path / 'work') # prepare args and lineage subcommand = request.param args = [subcommand, '-a', 'standalone', '-i', 'null', '--no-random-sleep-on-renew', '--config-dir', config_dir, '--logs-dir', logs_dir, '--work-dir', work_dir] test_util.make_lineage(config_dir, 'sample-renewal.conf') with self.mock_plugin_prepare(authenticator_dir, installer_dir, mock_lock_dir, subcommand): lock_order = [logs_dir, config_dir, work_dir, installer_dir] if subcommand == 'install': yield args, lock_order else: # We expect the installer to be prepared even for certonly # because an installer was requested on the command line. yield args, lock_order + [authenticator_dir] def test_lock_order(self, args_and_lock_order, mock_lock_dir): args, lock_order = args_and_lock_order with pytest.raises(self.EXPECTED_ERROR_TYPE, match=self.EXPECTED_ERROR_STR_REGEX): main.main(args) assert mock_lock_dir.call_count == len(lock_order) for call, locked_dir in zip(mock_lock_dir.call_args_list, lock_order): assert call[0][0] == locked_dir if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover ocsp_test.py 0000644 00000044175 15114562471 0007142 0 ustar 00 """Tests for ocsp.py""" # pylint: disable=protected-access import contextlib from datetime import datetime from datetime import timedelta import sys import unittest from unittest import mock import warnings from cryptography import x509 from cryptography.exceptions import InvalidSignature from cryptography.exceptions import UnsupportedAlgorithm from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives import hashes from cryptography.utils import CryptographyDeprecationWarning from cryptography.x509 import ocsp as ocsp_lib import pytest import pytz from certbot import errors from certbot.tests import util as test_util out = """Missing = in header key=value ocsp: Use -help for summary. """ class OCSPTestOpenSSL(unittest.TestCase): """ OCSP revocation tests using OpenSSL binary. """ def setUp(self): from certbot import ocsp with mock.patch('certbot.ocsp.subprocess.run') as mock_run: with mock.patch('certbot.util.exe_exists') as mock_exists: mock_run.stderr = out mock_exists.return_value = True self.checker = ocsp.RevocationChecker(enforce_openssl_binary_usage=True) @mock.patch('certbot.ocsp.logger.info') @mock.patch('certbot.ocsp.subprocess.run') @mock.patch('certbot.util.exe_exists') def test_init(self, mock_exists, mock_run, mock_log): mock_run.return_value.stderr = out mock_exists.return_value = True from certbot import ocsp checker = ocsp.RevocationChecker(enforce_openssl_binary_usage=True) assert mock_run.call_count == 1 assert checker.host_args("x") == ["Host=x"] mock_run.return_value.stderr = out.partition("\n")[2] checker = ocsp.RevocationChecker(enforce_openssl_binary_usage=True) assert checker.host_args("x") == ["Host", "x"] assert checker.broken is False mock_exists.return_value = False mock_run.call_count = 0 checker = ocsp.RevocationChecker(enforce_openssl_binary_usage=True) assert mock_run.call_count == 0 assert mock_log.call_count == 1 assert checker.broken is True @mock.patch('certbot.ocsp._determine_ocsp_server') @mock.patch('certbot.ocsp.crypto_util.notAfter') @mock.patch('certbot.util.run_script') def test_ocsp_revoked(self, mock_run, mock_na, mock_determine): now = datetime.now(pytz.UTC) cert_obj = mock.MagicMock() cert_obj.cert_path = "x" cert_obj.chain_path = "y" mock_na.return_value = now + timedelta(hours=2) self.checker.broken = True mock_determine.return_value = ("", "") assert self.checker.ocsp_revoked(cert_obj) is False self.checker.broken = False mock_run.return_value = tuple(openssl_happy[1:]) assert self.checker.ocsp_revoked(cert_obj) is False assert mock_run.call_count == 0 mock_determine.return_value = ("http://x.co", "x.co") assert self.checker.ocsp_revoked(cert_obj) is False mock_run.side_effect = errors.SubprocessError("Unable to load certificate launcher") assert self.checker.ocsp_revoked(cert_obj) is False assert mock_run.call_count == 2 # cert expired mock_na.return_value = now mock_determine.return_value = ("", "") count_before = mock_determine.call_count assert self.checker.ocsp_revoked(cert_obj) is False assert mock_determine.call_count == count_before def test_determine_ocsp_server(self): cert_path = test_util.vector_path('ocsp_certificate.pem') from certbot import ocsp result = ocsp._determine_ocsp_server(cert_path) assert ('http://ocsp.test4.buypass.com', 'ocsp.test4.buypass.com') == result @mock.patch('certbot.ocsp.logger') @mock.patch('certbot.util.run_script') def test_translate_ocsp(self, mock_run, mock_log): # pylint: disable=protected-access mock_run.return_value = openssl_confused from certbot import ocsp assert ocsp._translate_ocsp_query(*openssl_happy) is False assert ocsp._translate_ocsp_query(*openssl_confused) is False assert mock_log.debug.call_count == 1 assert mock_log.warning.call_count == 0 mock_log.debug.call_count = 0 assert ocsp._translate_ocsp_query(*openssl_unknown) is False assert mock_log.debug.call_count == 1 assert mock_log.warning.call_count == 0 assert ocsp._translate_ocsp_query(*openssl_expired_ocsp) is False assert mock_log.debug.call_count == 2 assert ocsp._translate_ocsp_query(*openssl_broken) is False assert mock_log.warning.call_count == 1 mock_log.info.call_count = 0 assert ocsp._translate_ocsp_query(*openssl_revoked) is True assert mock_log.info.call_count == 0 assert ocsp._translate_ocsp_query(*openssl_expired_ocsp_revoked) is True assert mock_log.info.call_count == 1 class OSCPTestCryptography(unittest.TestCase): """ OCSP revokation tests using Cryptography >= 2.4.0 """ def setUp(self): from certbot import ocsp self.checker = ocsp.RevocationChecker() self.cert_path = test_util.vector_path('ocsp_certificate.pem') self.chain_path = test_util.vector_path('ocsp_issuer_certificate.pem') self.cert_obj = mock.MagicMock() self.cert_obj.cert_path = self.cert_path self.cert_obj.chain_path = self.chain_path now = datetime.now(pytz.UTC) self.mock_notAfter = mock.patch('certbot.ocsp.crypto_util.notAfter', return_value=now + timedelta(hours=2)) self.mock_notAfter.start() # Ensure the mock.patch is stopped even if test raises an exception self.addCleanup(self.mock_notAfter.stop) @mock.patch('certbot.ocsp._determine_ocsp_server') @mock.patch('certbot.ocsp._check_ocsp_cryptography') def test_ensure_cryptography_toggled(self, mock_check, mock_determine): mock_determine.return_value = ('http://example.com', 'example.com') self.checker.ocsp_revoked(self.cert_obj) mock_check.assert_called_once_with(self.cert_path, self.chain_path, 'http://example.com', 10) def test_revoke(self): with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked def test_responder_is_issuer(self): issuer = x509.load_pem_x509_certificate( test_util.load_vector('ocsp_issuer_certificate.pem'), default_backend()) with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL) as mocks: # OCSP response with ResponseID as Name mocks['mock_response'].return_value.responder_name = issuer.subject mocks['mock_response'].return_value.responder_key_hash = None self.checker.ocsp_revoked(self.cert_obj) # OCSP response with ResponseID as KeyHash key_hash = x509.SubjectKeyIdentifier.from_public_key(issuer.public_key()).digest mocks['mock_response'].return_value.responder_name = None mocks['mock_response'].return_value.responder_key_hash = key_hash self.checker.ocsp_revoked(self.cert_obj) # Here responder and issuer are the same. So only the signature of the OCSP # response is checked (using the issuer/responder public key). assert mocks['mock_check'].call_count == 2 assert mocks['mock_check'].call_args_list[0][0][0].public_numbers() == \ issuer.public_key().public_numbers() assert mocks['mock_check'].call_args_list[1][0][0].public_numbers() == \ issuer.public_key().public_numbers() def test_responder_is_authorized_delegate(self): issuer = x509.load_pem_x509_certificate( test_util.load_vector('ocsp_issuer_certificate.pem'), default_backend()) responder = x509.load_pem_x509_certificate( test_util.load_vector('ocsp_responder_certificate.pem'), default_backend()) with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL) as mocks: # OCSP response with ResponseID as Name mocks['mock_response'].return_value.responder_name = responder.subject mocks['mock_response'].return_value.responder_key_hash = None self.checker.ocsp_revoked(self.cert_obj) # OCSP response with ResponseID as KeyHash key_hash = x509.SubjectKeyIdentifier.from_public_key(responder.public_key()).digest mocks['mock_response'].return_value.responder_name = None mocks['mock_response'].return_value.responder_key_hash = key_hash self.checker.ocsp_revoked(self.cert_obj) # Here responder and issuer are not the same. Two signatures will be checked then, # first to verify the responder cert (using the issuer public key), second to # to verify the OCSP response itself (using the responder public key). assert mocks['mock_check'].call_count == 4 assert mocks['mock_check'].call_args_list[0][0][0].public_numbers() == \ issuer.public_key().public_numbers() assert mocks['mock_check'].call_args_list[1][0][0].public_numbers() == \ responder.public_key().public_numbers() assert mocks['mock_check'].call_args_list[2][0][0].public_numbers() == \ issuer.public_key().public_numbers() assert mocks['mock_check'].call_args_list[3][0][0].public_numbers() == \ responder.public_key().public_numbers() def test_revoke_resiliency(self): # Server return an invalid HTTP response with _ocsp_mock(ocsp_lib.OCSPCertStatus.UNKNOWN, ocsp_lib.OCSPResponseStatus.SUCCESSFUL, http_status_code=400): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # OCSP response in invalid with _ocsp_mock(ocsp_lib.OCSPCertStatus.UNKNOWN, ocsp_lib.OCSPResponseStatus.UNAUTHORIZED): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # OCSP response is valid, but certificate status is unknown with _ocsp_mock(ocsp_lib.OCSPCertStatus.UNKNOWN, ocsp_lib.OCSPResponseStatus.SUCCESSFUL): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # The OCSP response says that the certificate is revoked, but certificate # does not contain the OCSP extension. with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL): with mock.patch('cryptography.x509.Extensions.get_extension_for_class', side_effect=x509.ExtensionNotFound( 'Not found', x509.AuthorityInformationAccessOID.OCSP)): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # OCSP response uses an unsupported signature. with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL, check_signature_side_effect=UnsupportedAlgorithm('foo')): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # OSCP signature response is invalid. with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL, check_signature_side_effect=InvalidSignature('foo')): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # Assertion error on OCSP response validity with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL, check_signature_side_effect=AssertionError('foo')): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # No responder cert in OCSP response with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL) as mocks: mocks['mock_response'].return_value.certificates = [] revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False # Responder cert is not signed by certificate issuer with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL) as mocks: cert = mocks['mock_response'].return_value.certificates[0] mocks['mock_response'].return_value.certificates[0] = mock.Mock( issuer='fake', subject=cert.subject) revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False with _ocsp_mock(ocsp_lib.OCSPCertStatus.REVOKED, ocsp_lib.OCSPResponseStatus.SUCCESSFUL): # This mock is necessary to avoid the first call contained in _determine_ocsp_server # of the method cryptography.x509.Extensions.get_extension_for_class. with mock.patch('certbot.ocsp._determine_ocsp_server') as mock_server: mock_server.return_value = ('https://example.com', 'example.com') with mock.patch('cryptography.x509.Extensions.get_extension_for_class', side_effect=x509.ExtensionNotFound( 'Not found', x509.AuthorityInformationAccessOID.OCSP)): revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False def test_this_update_warning(self): with _ocsp_mock(ocsp_lib.OCSPCertStatus.GOOD, ocsp_lib.OCSPResponseStatus.SUCCESSFUL) as mocks: value = mocks['mock_response'].return_value.this_update def warn_first(): msg = ('Properties that return a naïve datetime object have been deprecated. Please ' 'switch to this_update_utc.') warnings.warn(msg, CryptographyDeprecationWarning) return value property_mock = mock.PropertyMock(side_effect=warn_first) # Using type() in this way is recommended in mock's documentation at # https://docs.python.org/3/library/unittest.mock.html#unittest.mock.PropertyMock type(mocks['mock_response'].return_value).this_update = property_mock revoked = self.checker.ocsp_revoked(self.cert_obj) assert revoked is False @contextlib.contextmanager def _ocsp_mock(certificate_status, response_status, http_status_code=200, check_signature_side_effect=None): with mock.patch('certbot.ocsp.ocsp.load_der_ocsp_response') as mock_response: mock_response.return_value = _construct_mock_ocsp_response( certificate_status, response_status) with mock.patch('certbot.ocsp.requests.post') as mock_post: mock_post.return_value = mock.Mock(status_code=http_status_code) with mock.patch('certbot.ocsp.crypto_util.verify_signed_payload') \ as mock_check: if check_signature_side_effect: mock_check.side_effect = check_signature_side_effect yield { 'mock_response': mock_response, 'mock_post': mock_post, 'mock_check': mock_check, } def _construct_mock_ocsp_response(certificate_status, response_status): cert = x509.load_pem_x509_certificate( test_util.load_vector('ocsp_certificate.pem'), default_backend()) issuer = x509.load_pem_x509_certificate( test_util.load_vector('ocsp_issuer_certificate.pem'), default_backend()) responder = x509.load_pem_x509_certificate( test_util.load_vector('ocsp_responder_certificate.pem'), default_backend()) builder = ocsp_lib.OCSPRequestBuilder() builder = builder.add_certificate(cert, issuer, hashes.SHA1()) request = builder.build() return mock.Mock( response_status=response_status, certificate_status=certificate_status, serial_number=request.serial_number, issuer_key_hash=request.issuer_key_hash, issuer_name_hash=request.issuer_name_hash, responder_name=responder.subject, certificates=[responder], hash_algorithm=hashes.SHA1(), next_update=datetime.now(pytz.UTC).replace(tzinfo=None) + timedelta(days=1), this_update=datetime.now(pytz.UTC).replace(tzinfo=None) - timedelta(days=1), signature_algorithm_oid=x509.oid.SignatureAlgorithmOID.RSA_WITH_SHA1, ) # pylint: disable=line-too-long openssl_confused = ("", """ /etc/letsencrypt/live/example.org/cert.pem: good This Update: Dec 17 00:00:00 2016 GMT Next Update: Dec 24 00:00:00 2016 GMT """, """ Response Verify Failure 139903674214048:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:138:Verify error:unable to get local issuer certificate """) openssl_happy = ("blah.pem", """ blah.pem: good This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT """, "Response verify OK") openssl_revoked = ("blah.pem", """ blah.pem: revoked This Update: Dec 20 01:00:00 2016 GMT Next Update: Dec 27 01:00:00 2016 GMT Revocation Time: Dec 20 01:46:34 2016 GMT """, """Response verify OK""") openssl_unknown = ("blah.pem", """ blah.pem: unknown This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT """, "Response verify OK") openssl_broken = ("", "tentacles", "Response verify OK") openssl_expired_ocsp = ("blah.pem", """ blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: good This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT """, """Response verify OK""") openssl_expired_ocsp_revoked = ("blah.pem", """ blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: revoked This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT """, """Response verify OK""") if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover renewal_test.py 0000644 00000035130 15114562471 0007622 0 ustar 00 """Tests for certbot._internal.renewal""" import copy import sys import unittest from unittest import mock import pytest from acme import challenges from certbot import configuration from certbot import errors from certbot._internal import storage import certbot.tests.util as test_util class RenewalTest(test_util.ConfigTestCase): @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_ancient_webroot_renewal_conf(self, mock_set_by_user): mock_set_by_user.return_value = False rc_path = test_util.make_lineage( self.config.config_dir, 'sample-renewal-ancient.conf') self.config.account = None self.config.email = None self.config.webroot_path = None config = configuration.NamespaceConfig(self.config) lineage = storage.RenewableCert(rc_path, config) renewalparams = lineage.configuration['renewalparams'] # pylint: disable=protected-access from certbot._internal import renewal renewal._restore_webroot_config(config, renewalparams) assert config.webroot_path == ['/var/www/'] @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_webroot_params_conservation(self, mock_set_by_user): # For more details about why this test is important, see: # certbot._internal.plugins.webroot_test:: # WebrootActionTest::test_webroot_map_partial_without_perform from certbot._internal import renewal mock_set_by_user.return_value = False renewalparams = { 'webroot_map': {'test.example.com': '/var/www/test'}, 'webroot_path': ['/var/www/test', '/var/www/other'], } renewal._restore_webroot_config(self.config, renewalparams) # pylint: disable=protected-access assert self.config.webroot_map == {'test.example.com': '/var/www/test'} assert self.config.webroot_path == ['/var/www/test', '/var/www/other'] renewalparams = { 'webroot_map': {}, 'webroot_path': '/var/www/test', } renewal._restore_webroot_config(self.config, renewalparams) # pylint: disable=protected-access assert self.config.webroot_map == {} assert self.config.webroot_path == ['/var/www/test'] @mock.patch('certbot._internal.renewal._avoid_reuse_key_conflicts') def test_reuse_key_renewal_params(self, unused_mock_avoid_reuse_conflicts): self.config.elliptic_curve = 'INVALID_VALUE' self.config.reuse_key = True self.config.dry_run = True config = configuration.NamespaceConfig(self.config) rc_path = test_util.make_lineage( self.config.config_dir, 'sample-renewal.conf') lineage = storage.RenewableCert(rc_path, config) le_client = mock.MagicMock() le_client.obtain_certificate.return_value = (None, None, None, None) from certbot._internal import renewal with mock.patch('certbot._internal.renewal.hooks.renew_hook'): renewal.renew_cert(self.config, None, le_client, lineage) assert self.config.elliptic_curve == 'secp256r1' @mock.patch('certbot._internal.renewal._avoid_reuse_key_conflicts') def test_reuse_ec_key_renewal_params(self, unused_mock_avoid_reuse_conflicts): self.config.elliptic_curve = 'INVALID_CURVE' self.config.reuse_key = True self.config.dry_run = True self.config.key_type = 'ecdsa' config = configuration.NamespaceConfig(self.config) rc_path = test_util.make_lineage( self.config.config_dir, 'sample-renewal-ec.conf', ec=True, ) lineage = storage.RenewableCert(rc_path, config) le_client = mock.MagicMock() le_client.obtain_certificate.return_value = (None, None, None, None) from certbot._internal import renewal with mock.patch('certbot._internal.renewal.hooks.renew_hook'): renewal.renew_cert(self.config, None, le_client, lineage) assert self.config.elliptic_curve == 'secp256r1' @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_new_key(self, mock_set_by_user): mock_set_by_user.return_value = False # When renewing with both reuse_key and new_key, the key should be regenerated, # the key type, key parameters and reuse_key should be kept. self.config.reuse_key = True self.config.new_key = True self.config.dry_run = True config = configuration.NamespaceConfig(self.config) rc_path = test_util.make_lineage( self.config.config_dir, 'sample-renewal.conf') lineage = storage.RenewableCert(rc_path, config) le_client = mock.MagicMock() le_client.obtain_certificate.return_value = (None, None, None, None) from certbot._internal import renewal with mock.patch('certbot._internal.renewal.hooks.renew_hook'): renewal.renew_cert(self.config, None, le_client, lineage) assert self.config.elliptic_curve == 'secp256r1' assert self.config.key_type == 'ecdsa' assert self.config.reuse_key # None is passed as the existing key, i.e. the key is not actually being reused. le_client.obtain_certificate.assert_called_with(mock.ANY, None) @mock.patch('certbot._internal.renewal.hooks.renew_hook') @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_reuse_key_conflicts(self, mock_set_by_user, unused_mock_renew_hook): mock_set_by_user.return_value = False # When renewing with reuse_key and a conflicting key parameter (size, curve) # an error should be raised ... self.config.reuse_key = True self.config.key_type = "rsa" self.config.rsa_key_size = 4096 self.config.dry_run = True config = configuration.NamespaceConfig(self.config) rc_path = test_util.make_lineage( self.config.config_dir, 'sample-renewal.conf') lineage = storage.RenewableCert(rc_path, config) lineage.configuration["renewalparams"]["reuse_key"] = True le_client = mock.MagicMock() le_client.obtain_certificate.return_value = (None, None, None, None) from certbot._internal import renewal with pytest.raises(errors.Error, match="Unable to change the --key-type"): renewal.renew_cert(self.config, None, le_client, lineage) # ... unless --no-reuse-key is set mock_set_by_user.side_effect = lambda var: var == "reuse_key" self.config.reuse_key = False renewal.renew_cert(self.config, None, le_client, lineage) @test_util.patch_display_util() @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_remove_deprecated_config_elements(self, mock_set_by_user, unused_mock_get_utility): mock_set_by_user.return_value = False config = configuration.NamespaceConfig(self.config) config.certname = "sample-renewal-deprecated-option" rc_path = test_util.make_lineage( self.config.config_dir, 'sample-renewal-deprecated-option.conf') from certbot._internal import renewal lineage_config = copy.deepcopy(self.config) renewal_candidate = renewal.reconstitute(lineage_config, rc_path) # This means that manual_public_ip_logging_ok was not modified in the config based on its # value in the renewal conf file assert isinstance(lineage_config.manual_public_ip_logging_ok, mock.MagicMock) @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_absent_key_type_restored(self, mock_set_by_user): mock_set_by_user.return_value = False rc_path = test_util.make_lineage(self.config.config_dir, 'sample-renewal.conf', ec=False) from certbot._internal import renewal lineage_config = copy.deepcopy(self.config) renewal.reconstitute(lineage_config, rc_path) assert lineage_config.key_type == 'rsa' class RestoreRequiredConfigElementsTest(test_util.ConfigTestCase): """Tests for certbot._internal.renewal.restore_required_config_elements.""" @classmethod def _call(cls, *args, **kwargs): from certbot._internal.renewal import restore_required_config_elements return restore_required_config_elements(*args, **kwargs) @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_allow_subset_of_names_success(self, mock_set_by_user): mock_set_by_user.return_value = False self._call(self.config, {'allow_subset_of_names': 'True'}) assert self.config.allow_subset_of_names is True @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_allow_subset_of_names_failure(self, mock_set_by_user): mock_set_by_user.return_value = False renewalparams = {'allow_subset_of_names': 'maybe'} with pytest.raises(errors.Error): self._call(self.config, renewalparams) @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_pref_challs_list(self, mock_set_by_user): mock_set_by_user.return_value = False renewalparams = {'pref_challs': 'http-01, dns'.split(',')} self._call(self.config, renewalparams) expected = [challenges.HTTP01.typ, challenges.DNS01.typ] assert self.config.pref_challs == expected @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_pref_challs_str(self, mock_set_by_user): mock_set_by_user.return_value = False renewalparams = {'pref_challs': 'dns'} self._call(self.config, renewalparams) expected = [challenges.DNS01.typ] assert self.config.pref_challs == expected @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_pref_challs_failure(self, mock_set_by_user): mock_set_by_user.return_value = False renewalparams = {'pref_challs': 'finding-a-shrubbery'} with pytest.raises(errors.Error): self._call(self.config, renewalparams) @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_must_staple_success(self, mock_set_by_user): mock_set_by_user.return_value = False self._call(self.config, {'must_staple': 'True'}) assert self.config.must_staple is True @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_must_staple_failure(self, mock_set_by_user): mock_set_by_user.return_value = False renewalparams = {'must_staple': 'maybe'} with pytest.raises(errors.Error): self._call(self.config, renewalparams) @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') def test_ancient_server_renewal_conf(self, mock_set_by_user): from certbot._internal import constants self.config.server = None mock_set_by_user.return_value = False self._call(self.config, {'server': constants.V1_URI}) assert self.config.server == constants.CLI_DEFAULTS['server'] def test_related_values(self): # certbot.configuration.NamespaceConfig.set_by_user considers some values as related to each # other and considers both set by the user if either is. This test ensures all renewal # parameters are restored regardless of their restoration order or relation between values. # See https://github.com/certbot/certbot/issues/9805 for more info. renewalparams = { 'server': 'https://example.org', 'account': 'somehash', } self._call(self.config, renewalparams) self.assertEqual(self.config.account, renewalparams['account']) class DescribeResultsTest(unittest.TestCase): """Tests for certbot._internal.renewal._renew_describe_results.""" def setUp(self): self.patchers = { 'log_error': mock.patch('certbot._internal.renewal.logger.error'), 'notify': mock.patch('certbot._internal.renewal.display_util.notify')} self.mock_notify = self.patchers['notify'].start() self.mock_error = self.patchers['log_error'].start() def tearDown(self): for patch in self.patchers.values(): patch.stop() @classmethod def _call(cls, *args, **kwargs): from certbot._internal.renewal import _renew_describe_results _renew_describe_results(*args, **kwargs) def _assert_success_output(self, lines): self.mock_notify.assert_has_calls([mock.call(l) for l in lines]) def test_no_renewal_attempts(self): self._call(mock.MagicMock(dry_run=True), [], [], [], []) self._assert_success_output(['No simulated renewals were attempted.']) def test_successful_renewal(self): self._call(mock.MagicMock(dry_run=False), ['good.pem'], None, None, None) self._assert_success_output([ '\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -', 'Congratulations, all renewals succeeded: ', ' good.pem (success)', '- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -', ]) def test_failed_renewal(self): self._call(mock.MagicMock(dry_run=False), [], ['bad.pem'], [], []) self._assert_success_output([ '\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -', '- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -', ]) self.mock_error.assert_has_calls([ mock.call('All %ss failed. The following certificates could not be renewed:', 'renewal'), mock.call(' bad.pem (failure)'), ]) def test_all_renewal(self): self._call(mock.MagicMock(dry_run=True), ['good.pem', 'good2.pem'], ['bad.pem', 'bad2.pem'], ['foo.pem expires on 123'], ['errored.conf']) self._assert_success_output([ '\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -', 'The following certificates are not due for renewal yet:', ' foo.pem expires on 123 (skipped)', 'The following simulated renewals succeeded:', ' good.pem (success)\n good2.pem (success)\n', '\nAdditionally, the following renewal configurations were invalid: ', ' errored.conf (parsefail)', '- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -', ]) self.mock_error.assert_has_calls([ mock.call('The following %ss failed:', 'simulated renewal'), mock.call(' bad.pem (failure)\n bad2.pem (failure)'), ]) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover renewupdater_test.py 0000644 00000012605 15114562471 0010674 0 ustar 00 """Tests for renewal updater interfaces""" import sys import unittest from unittest import mock import pytest from certbot import interfaces from certbot._internal import main from certbot._internal import updater from certbot.plugins import enhancements import certbot.tests.util as test_util class RenewUpdaterTest(test_util.ConfigTestCase): """Tests for interfaces.RenewDeployer and interfaces.GenericUpdater""" def setUp(self): super().setUp() self.generic_updater = mock.MagicMock(spec=interfaces.GenericUpdater) self.generic_updater.restart = mock.MagicMock() self.renew_deployer = mock.MagicMock(spec=interfaces.RenewDeployer) self.mockinstaller = mock.MagicMock(spec=enhancements.AutoHSTSEnhancement) @mock.patch('certbot._internal.main._get_and_save_cert') @mock.patch('certbot._internal.plugins.selection.choose_configurator_plugins') @mock.patch('certbot._internal.plugins.selection.get_unprepared_installer') @test_util.patch_display_util() def test_server_updates(self, _, mock_geti, mock_select, mock_getsave): mock_getsave.return_value = mock.MagicMock() mock_generic_updater = self.generic_updater # Generic Updater mock_select.return_value = (mock_generic_updater, None) mock_geti.return_value = mock_generic_updater with mock.patch('certbot._internal.main._init_le_client'): main.renew_cert(self.config, None, mock.MagicMock()) assert mock_generic_updater.restart.called mock_generic_updater.restart.reset_mock() mock_generic_updater.generic_updates.reset_mock() updater.run_generic_updaters(self.config, mock.MagicMock(), None) assert mock_generic_updater.generic_updates.call_count == 1 assert mock_generic_updater.restart.called is False def test_renew_deployer(self): lineage = mock.MagicMock() mock_deployer = self.renew_deployer updater.run_renewal_deployer(self.config, lineage, mock_deployer) mock_deployer.renew_deploy.assert_called_with(lineage) @mock.patch("certbot._internal.updater.logger.debug") def test_updater_skip_dry_run(self, mock_log): self.config.dry_run = True updater.run_generic_updaters(self.config, None, None) assert mock_log.called assert mock_log.call_args[0][0] == \ "Skipping updaters in dry-run mode." @mock.patch("certbot._internal.updater.logger.debug") def test_deployer_skip_dry_run(self, mock_log): self.config.dry_run = True updater.run_renewal_deployer(self.config, None, None) assert mock_log.called assert mock_log.call_args[0][0] == \ "Skipping renewal deployer in dry-run mode." @mock.patch('certbot._internal.plugins.selection.get_unprepared_installer') def test_enhancement_updates(self, mock_geti): mock_geti.return_value = self.mockinstaller updater.run_generic_updaters(self.config, mock.MagicMock(), None) assert self.mockinstaller.update_autohsts.called assert self.mockinstaller.update_autohsts.call_count == 1 def test_enhancement_deployer(self): updater.run_renewal_deployer(self.config, mock.MagicMock(), self.mockinstaller) assert self.mockinstaller.deploy_autohsts.called @mock.patch('certbot._internal.plugins.selection.get_unprepared_installer') def test_enhancement_updates_not_called(self, mock_geti): self.config.disable_renew_updates = True mock_geti.return_value = self.mockinstaller updater.run_generic_updaters(self.config, mock.MagicMock(), None) assert self.mockinstaller.update_autohsts.called is False def test_enhancement_deployer_not_called(self): self.config.disable_renew_updates = True updater.run_renewal_deployer(self.config, mock.MagicMock(), self.mockinstaller) assert self.mockinstaller.deploy_autohsts.called is False @mock.patch('certbot._internal.plugins.selection.get_unprepared_installer') def test_enhancement_no_updater(self, mock_geti): FAKEINDEX = [ { "name": "Test", "class": enhancements.AutoHSTSEnhancement, "updater_function": None, "deployer_function": "deploy_autohsts", "enable_function": "enable_autohsts" } ] mock_geti.return_value = self.mockinstaller with mock.patch("certbot.plugins.enhancements._INDEX", FAKEINDEX): updater.run_generic_updaters(self.config, mock.MagicMock(), None) assert self.mockinstaller.update_autohsts.called is False def test_enhancement_no_deployer(self): FAKEINDEX = [ { "name": "Test", "class": enhancements.AutoHSTSEnhancement, "updater_function": "deploy_autohsts", "deployer_function": None, "enable_function": "enable_autohsts" } ] with mock.patch("certbot.plugins.enhancements._INDEX", FAKEINDEX): updater.run_renewal_deployer(self.config, mock.MagicMock(), self.mockinstaller) assert self.mockinstaller.deploy_autohsts.called is False if __name__ == '__main__': sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover reverter_test.py 0000644 00000041151 15114562471 0010023 0 ustar 00 """Test certbot.reverter.""" import csv import logging import shutil import sys import tempfile import unittest from unittest import mock import pytest from certbot import errors from certbot.compat import os from certbot.tests import util as test_util class ReverterCheckpointLocalTest(test_util.ConfigTestCase): """Test the Reverter Class.""" def setUp(self): super().setUp() from certbot.reverter import Reverter # Disable spurious errors... we are trying to test for them logging.disable(logging.CRITICAL) self.reverter = Reverter(self.config) tup = setup_test_files() self.config1, self.config2, self.dir1, self.dir2, self.sets = tup def tearDown(self): shutil.rmtree(self.config.work_dir) shutil.rmtree(self.dir1) shutil.rmtree(self.dir2) logging.disable(logging.NOTSET) @mock.patch("certbot.reverter.Reverter._read_and_append") def test_no_change(self, mock_read): mock_read.side_effect = OSError("cannot even") try: self.reverter.add_to_checkpoint(self.sets[0], "save1") except OSError: pass self.reverter.finalize_checkpoint("blah") path = os.listdir(self.reverter.config.backup_dir)[0] no_change = os.path.join(self.reverter.config.backup_dir, path, "CHANGES_SINCE") with open(no_change, "r") as f: x = f.read() assert "No changes" in x def test_basic_add_to_temp_checkpoint(self): # These shouldn't conflict even though they are both named config.txt self.reverter.add_to_temp_checkpoint(self.sets[0], "save1") self.reverter.add_to_temp_checkpoint(self.sets[1], "save2") assert os.path.isdir(self.config.temp_checkpoint_dir) assert get_save_notes( self.config.temp_checkpoint_dir) == "save1save2" assert not os.path.isfile( os.path.join(self.config.temp_checkpoint_dir, "NEW_FILES")) assert get_filepaths(self.config.temp_checkpoint_dir) == \ "{0}\n{1}\n".format(self.config1, self.config2) def test_add_to_checkpoint_copy_failure(self): with mock.patch("certbot.reverter.shutil.copy2") as mock_copy2: mock_copy2.side_effect = OSError("bad copy") with pytest.raises(errors.ReverterError): self.reverter.add_to_checkpoint(self.sets[0], "save1") def test_checkpoint_conflict(self): """Make sure that checkpoint errors are thrown appropriately.""" config3 = os.path.join(self.dir1, "config3.txt") self.reverter.register_file_creation(True, config3) update_file(config3, "This is a new file!") self.reverter.add_to_checkpoint(self.sets[2], "save1") # This shouldn't throw an error self.reverter.add_to_temp_checkpoint(self.sets[0], "save2") # Raise error with pytest.raises(errors.ReverterError): self.reverter.add_to_checkpoint(self.sets[2], "save3") # Should not cause an error self.reverter.add_to_checkpoint(self.sets[1], "save4") # Check to make sure new files are also checked... with pytest.raises(errors.ReverterError): self.reverter.add_to_checkpoint({config3}, "invalid save") def test_multiple_saves_and_temp_revert(self): self.reverter.add_to_temp_checkpoint(self.sets[0], "save1") update_file(self.config1, "updated-directive") self.reverter.add_to_temp_checkpoint(self.sets[0], "save2-updated dir") update_file(self.config1, "new directive change that we won't keep") self.reverter.revert_temporary_config() assert read_in(self.config1) == "directive-dir1" def test_multiple_registration_fail_and_revert(self): config3 = os.path.join(self.dir1, "config3.txt") update_file(config3, "Config3") config4 = os.path.join(self.dir2, "config4.txt") update_file(config4, "Config4") # Test multiple registrations and two registrations at once self.reverter.register_file_creation(True, self.config1) self.reverter.register_file_creation(True, self.config2) self.reverter.register_file_creation(True, config3, config4) # Simulate Certbot crash... recovery routine is run self.reverter.recovery_routine() assert not os.path.isfile(self.config1) assert not os.path.isfile(self.config2) assert not os.path.isfile(config3) assert not os.path.isfile(config4) def test_multiple_registration_same_file(self): self.reverter.register_file_creation(True, self.config1) self.reverter.register_file_creation(True, self.config1) self.reverter.register_file_creation(True, self.config1) self.reverter.register_file_creation(True, self.config1) files = get_new_files(self.config.temp_checkpoint_dir) assert len(files) == 1 def test_register_file_creation_write_error(self): m_open = mock.mock_open() with mock.patch("certbot.reverter.open", m_open, create=True): m_open.side_effect = OSError("bad open") with pytest.raises(errors.ReverterError): self.reverter.register_file_creation(True, self.config1) def test_bad_registration(self): # Made this mistake and want to make sure it doesn't happen again... with pytest.raises(errors.ReverterError): self.reverter.register_file_creation("filepath") def test_register_undo_command(self): coms = [ ["a2dismod", "ssl"], ["a2dismod", "rewrite"], ["cleanslate"] ] for com in coms: self.reverter.register_undo_command(True, com) act_coms = get_undo_commands(self.config.temp_checkpoint_dir) for a_com, com in zip(act_coms, coms): assert a_com == com def test_bad_register_undo_command(self): m_open = mock.mock_open() with mock.patch("certbot.reverter.open", m_open, create=True): m_open.side_effect = OSError("bad open") with pytest.raises(errors.ReverterError): self.reverter.register_undo_command(True, ["command"]) @mock.patch("certbot.util.run_script") def test_run_undo_commands(self, mock_run): mock_run.side_effect = ["", errors.SubprocessError] coms = [ ["invalid_command"], ["a2dismod", "ssl"], ] for com in coms: self.reverter.register_undo_command(True, com) self.reverter.revert_temporary_config() assert mock_run.call_count == 2 def test_recovery_routine_in_progress_failure(self): self.reverter.add_to_checkpoint(self.sets[0], "perm save") # pylint: disable=protected-access self.reverter._recover_checkpoint = mock.MagicMock( side_effect=errors.ReverterError) with pytest.raises(errors.ReverterError): self.reverter.recovery_routine() def test_recover_checkpoint_revert_temp_failures(self): mock_recover = mock.MagicMock( side_effect=errors.ReverterError("e")) # pylint: disable=protected-access self.reverter._recover_checkpoint = mock_recover self.reverter.add_to_temp_checkpoint(self.sets[0], "config1 save") with pytest.raises(errors.ReverterError): self.reverter.revert_temporary_config() def test_recover_checkpoint_rollback_failure(self): mock_recover = mock.MagicMock( side_effect=errors.ReverterError("e")) # pylint: disable=protected-access self.reverter._recover_checkpoint = mock_recover self.reverter.add_to_checkpoint(self.sets[0], "config1 save") self.reverter.finalize_checkpoint("Title") with pytest.raises(errors.ReverterError): self.reverter.rollback_checkpoints(1) def test_recover_checkpoint_copy_failure(self): self.reverter.add_to_temp_checkpoint(self.sets[0], "save1") with mock.patch("certbot.reverter.shutil.copy2") as mock_copy2: mock_copy2.side_effect = OSError("bad copy") with pytest.raises(errors.ReverterError): self.reverter.revert_temporary_config() def test_recover_checkpoint_rm_failure(self): self.reverter.add_to_temp_checkpoint(self.sets[0], "temp save") with mock.patch("certbot.reverter.shutil.rmtree") as mock_rmtree: mock_rmtree.side_effect = OSError("Cannot remove tree") with pytest.raises(errors.ReverterError): self.reverter.revert_temporary_config() @mock.patch("certbot.reverter.logger.warning") def test_recover_checkpoint_missing_new_files(self, mock_warn): self.reverter.register_file_creation( True, os.path.join(self.dir1, "missing_file.txt")) self.reverter.revert_temporary_config() assert mock_warn.call_count == 1 @mock.patch("certbot.reverter.os.remove") def test_recover_checkpoint_remove_failure(self, mock_remove): self.reverter.register_file_creation(True, self.config1) mock_remove.side_effect = OSError("Can't remove") with pytest.raises(errors.ReverterError): self.reverter.revert_temporary_config() def test_recovery_routine_temp_and_perm(self): # Register a new perm checkpoint file config3 = os.path.join(self.dir1, "config3.txt") self.reverter.register_file_creation(False, config3) update_file(config3, "This is a new perm file!") # Add changes to perm checkpoint self.reverter.add_to_checkpoint(self.sets[0], "perm save1") update_file(self.config1, "updated perm config1") self.reverter.add_to_checkpoint(self.sets[1], "perm save2") update_file(self.config2, "updated perm config2") # Add changes to a temporary checkpoint self.reverter.add_to_temp_checkpoint(self.sets[0], "temp save1") update_file(self.config1, "second update now temp config1") # Register a new temp checkpoint file config4 = os.path.join(self.dir2, "config4.txt") self.reverter.register_file_creation(True, config4) update_file(config4, "New temporary file!") # Now erase everything self.reverter.recovery_routine() # Now Run tests # These were new files.. they should be removed assert not os.path.isfile(config3) assert not os.path.isfile(config4) # Check to make sure everything got rolled back appropriately assert read_in(self.config1) == "directive-dir1" assert read_in(self.config2) == "directive-dir2" class TestFullCheckpointsReverter(test_util.ConfigTestCase): """Tests functions having to deal with full checkpoints.""" def setUp(self): super().setUp() from certbot.reverter import Reverter # Disable spurious errors... logging.disable(logging.CRITICAL) self.reverter = Reverter(self.config) tup = setup_test_files() self.config1, self.config2, self.dir1, self.dir2, self.sets = tup def tearDown(self): shutil.rmtree(self.config.work_dir) shutil.rmtree(self.dir1) shutil.rmtree(self.dir2) logging.disable(logging.NOTSET) def test_rollback_improper_inputs(self): with pytest.raises(errors.ReverterError): self.reverter.rollback_checkpoints("-1") with pytest.raises(errors.ReverterError): self.reverter.rollback_checkpoints(-1000) with pytest.raises(errors.ReverterError): self.reverter.rollback_checkpoints("one") def test_rollback_finalize_checkpoint_valid_inputs(self): config3 = self._setup_three_checkpoints() # Check resulting backup directory assert len(os.listdir(self.config.backup_dir)) == 3 # Check rollbacks # First rollback self.reverter.rollback_checkpoints(1) assert read_in(self.config1) == "update config1" assert read_in(self.config2) == "update config2" # config3 was not included in checkpoint assert read_in(config3) == "Final form config3" # Second rollback self.reverter.rollback_checkpoints(1) assert read_in(self.config1) == "update config1" assert read_in(self.config2) == "directive-dir2" assert not os.path.isfile(config3) # One dir left... check title all_dirs = os.listdir(self.config.backup_dir) assert len(all_dirs) == 1 assert "First Checkpoint" in get_save_notes( os.path.join(self.config.backup_dir, all_dirs[0])) # Final rollback self.reverter.rollback_checkpoints(1) assert read_in(self.config1) == "directive-dir1" def test_finalize_checkpoint_no_in_progress(self): # No need to warn for this... just make sure there are no errors. self.reverter.finalize_checkpoint("No checkpoint...") @mock.patch("certbot.reverter.shutil.move") def test_finalize_checkpoint_cannot_title(self, mock_move): self.reverter.add_to_checkpoint(self.sets[0], "perm save") mock_move.side_effect = OSError("cannot move") with pytest.raises(errors.ReverterError): self.reverter.finalize_checkpoint("Title") @mock.patch("certbot.reverter.filesystem.replace") def test_finalize_checkpoint_no_rename_directory(self, mock_replace): self.reverter.add_to_checkpoint(self.sets[0], "perm save") mock_replace.side_effect = OSError with pytest.raises(errors.ReverterError): self.reverter.finalize_checkpoint("Title") @mock.patch("certbot.reverter.logger") def test_rollback_too_many(self, mock_logger): # Test no exist warning... self.reverter.rollback_checkpoints(1) assert mock_logger.warning.call_count == 1 # Test Generic warning self._setup_three_checkpoints() mock_logger.warning.call_count = 0 self.reverter.rollback_checkpoints(4) assert mock_logger.warning.call_count == 1 def test_multi_rollback(self): config3 = self._setup_three_checkpoints() self.reverter.rollback_checkpoints(3) assert read_in(self.config1) == "directive-dir1" assert read_in(self.config2) == "directive-dir2" assert not os.path.isfile(config3) def _setup_three_checkpoints(self): """Generate some finalized checkpoints.""" # Checkpoint1 - config1 self.reverter.add_to_checkpoint(self.sets[0], "first save") self.reverter.finalize_checkpoint("First Checkpoint") update_file(self.config1, "update config1") # Checkpoint2 - new file config3, update config2 config3 = os.path.join(self.dir1, "config3.txt") self.reverter.register_file_creation(False, config3) update_file(config3, "directive-config3") self.reverter.add_to_checkpoint(self.sets[1], "second save") self.reverter.finalize_checkpoint("Second Checkpoint") update_file(self.config2, "update config2") update_file(config3, "update config3") # Checkpoint3 - update config1, config2 self.reverter.add_to_checkpoint(self.sets[2], "third save") self.reverter.finalize_checkpoint("Third Checkpoint - Save both") update_file(self.config1, "Final form config1") update_file(self.config2, "Final form config2") update_file(config3, "Final form config3") return config3 def setup_test_files(): """Setup sample configuration files.""" dir1 = tempfile.mkdtemp("dir1") dir2 = tempfile.mkdtemp("dir2") config1 = os.path.join(dir1, "config.txt") config2 = os.path.join(dir2, "config.txt") with open(config1, "w") as file_fd: file_fd.write("directive-dir1") with open(config2, "w") as file_fd: file_fd.write("directive-dir2") sets = [{config1}, {config2}, {config1, config2}] return config1, config2, dir1, dir2, sets def get_save_notes(dire): """Read save notes""" return read_in(os.path.join(dire, "CHANGES_SINCE")) def get_filepaths(dire): """Get Filepaths""" return read_in(os.path.join(dire, "FILEPATHS")) def get_new_files(dire): """Get new files.""" return read_in(os.path.join(dire, "NEW_FILES")).splitlines() def get_undo_commands(dire): """Get new files.""" with open(os.path.join(dire, "COMMANDS")) as csvfile: return list(csv.reader(csvfile)) def read_in(path): """Read in a file, return the str""" with open(path, "r") as file_fd: return file_fd.read() def update_file(filename, string): """Update a file with a new value.""" with open(filename, "w") as file_fd: file_fd.write(string) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover storage_test.py 0000644 00000126555 15114562471 0007645 0 ustar 00 """Tests for certbot._internal.storage.""" # pylint disable=protected-access import datetime import shutil import stat import sys import unittest from unittest import mock import configobj import pytest import pytz import certbot from certbot import configuration from certbot import errors from certbot._internal.storage import ALL_FOUR from certbot.compat import filesystem from certbot.compat import os import certbot.tests.util as test_util CERT = test_util.load_cert('cert_512.pem') def unlink_all(rc_object): """Unlink all four items associated with this RenewableCert.""" for kind in ALL_FOUR: os.unlink(getattr(rc_object, kind)) def fill_with_sample_data(rc_object): """Put dummy data into all four files of this RenewableCert.""" for kind in ALL_FOUR: with open(getattr(rc_object, kind), "w") as f: f.write(kind) class RelevantValuesTest(unittest.TestCase): """Tests for certbot._internal.storage.relevant_values.""" def setUp(self): self.values = {"server": "example.org", "key_type": "rsa"} self.mock_config = mock.MagicMock() self.mock_config.set_by_user = mock.MagicMock() def _call(self, values): from certbot._internal.storage import relevant_values self.mock_config.to_dict.return_value = values return relevant_values(self.mock_config) @mock.patch("certbot._internal.plugins.disco.PluginsRegistry.find_all") def test_namespace(self, mock_find_all): mock_find_all.return_value = ["certbot-foo:bar"] self.mock_config.set_by_user.return_value = True self.values["certbot_foo:bar_baz"] = 42 assert self._call(self.values.copy()) == self.values def test_option_set(self): self.mock_config.set_by_user.return_value = True self.values["allow_subset_of_names"] = True self.values["authenticator"] = "apache" self.values["rsa_key_size"] = 1337 expected_relevant_values = self.values.copy() self.values["hello"] = "there" assert self._call(self.values) == expected_relevant_values def test_option_unset(self): self.mock_config.set_by_user.return_value = False expected_relevant_values = self.values.copy() self.values["rsa_key_size"] = 2048 assert self._call(self.values) == expected_relevant_values def test_deprecated_item(self): deprected_option = 'manual_public_ip_logging_ok' self.mock_config.set_by_user = lambda v: False if v == deprected_option else True # deprecated items should never be relevant to store expected_relevant_values = self.values.copy() self.values[deprected_option] = None assert self._call(self.values) == expected_relevant_values self.values[deprected_option] = True assert self._call(self.values) == expected_relevant_values self.values[deprected_option] = False assert self._call(self.values) == expected_relevant_values def test_with_real_parser(self): from certbot._internal.storage import relevant_values from certbot._internal.plugins import disco from certbot._internal import cli from certbot._internal import constants PLUGINS = disco.PluginsRegistry.find_all() namespace = cli.prepare_and_parse_args(PLUGINS, [ '--allow-subset-of-names', '--authenticator', 'apache', ]) expected_relevant_values = { 'server': constants.CLI_DEFAULTS['server'], 'key_type': 'ecdsa', 'allow_subset_of_names': True, 'authenticator': 'apache', } assert relevant_values(namespace) == expected_relevant_values class BaseRenewableCertTest(test_util.ConfigTestCase): """Base class for setting up Renewable Cert tests. .. note:: It may be required to write out self.config for your test. Check :class:`.cli_test.DuplicateCertTest` for an example. """ def setUp(self): from certbot._internal import storage super().setUp() # TODO: maybe provide NamespaceConfig.make_dirs? # TODO: main() should create those dirs, c.f. #902 filesystem.makedirs(os.path.join(self.config.config_dir, "live", "example.org")) archive_path = os.path.join(self.config.config_dir, "archive", "example.org") filesystem.makedirs(archive_path) filesystem.makedirs(os.path.join(self.config.config_dir, "renewal")) config_file = configobj.ConfigObj() for kind in ALL_FOUR: kind_path = os.path.join(self.config.config_dir, "live", "example.org", kind + ".pem") config_file[kind] = kind_path with open(os.path.join(self.config.config_dir, "live", "example.org", "README"), 'a'): pass config_file["archive"] = archive_path config_file.filename = os.path.join(self.config.config_dir, "renewal", "example.org.conf") config_file.write() self.config_file = config_file # We also create a file that isn't a renewal config in the same # location to test that logic that reads in all-and-only renewal # configs will ignore it and NOT attempt to parse it. with open(os.path.join(self.config.config_dir, "renewal", "IGNORE.THIS"), "w") as junk: junk.write("This file should be ignored!") self.defaults = configobj.ConfigObj() with mock.patch("certbot._internal.storage.RenewableCert._check_symlinks") as check: check.return_value = True self.test_rc = storage.RenewableCert(config_file.filename, self.config) def _write_out_kind(self, kind, ver, value=None): link = getattr(self.test_rc, kind) if os.path.lexists(link): os.unlink(link) os.symlink(os.path.join(os.path.pardir, os.path.pardir, "archive", "example.org", "{0}{1}.pem".format(kind, ver)), link) with open(link, "wb") as f: f.write(kind.encode('ascii') if value is None else value) if kind == "privkey": filesystem.chmod(link, 0o600) def _write_out_ex_kinds(self): for kind in ALL_FOUR: self._write_out_kind(kind, 12) self._write_out_kind(kind, 11) class RenewableCertTests(BaseRenewableCertTest): """Tests for certbot._internal.storage.""" def test_initialization(self): assert self.test_rc.lineagename == "example.org" for kind in ALL_FOUR: assert getattr(self.test_rc, kind) == os.path.join( self.config.config_dir, "live", "example.org", kind + ".pem") def test_renewal_bad_config(self): """Test that the RenewableCert constructor will complain if the renewal configuration file doesn't end in ".conf" """ from certbot._internal import storage broken = os.path.join(self.config.config_dir, "broken.conf") with open(broken, "w") as f: f.write("[No closing bracket for you!") with pytest.raises(errors.CertStorageError): storage.RenewableCert(broken, self.config) os.unlink(broken) with pytest.raises(errors.CertStorageError): storage.RenewableCert("fun", self.config) def test_renewal_incomplete_config(self): """Test that the RenewableCert constructor will complain if the renewal configuration file is missing a required file element.""" from certbot._internal import storage config = configobj.ConfigObj() config["cert"] = "imaginary_cert.pem" # Here the required privkey is missing. config["chain"] = "imaginary_chain.pem" config["fullchain"] = "imaginary_fullchain.pem" config.filename = os.path.join(self.config.config_dir, "imaginary_config.conf") config.write() with pytest.raises(errors.CertStorageError): storage.RenewableCert(config.filename, self.config) def test_no_renewal_version(self): from certbot._internal import storage self._write_out_ex_kinds() assert "version" not in self.config_file with mock.patch("certbot._internal.storage.logger") as mock_logger: storage.RenewableCert(self.config_file.filename, self.config) assert mock_logger.warning.called is False def test_renewal_newer_version(self): from certbot._internal import storage self._write_out_ex_kinds() self.config_file["version"] = "99.99.99" self.config_file.write() with mock.patch("certbot._internal.storage.logger") as mock_logger: storage.RenewableCert(self.config_file.filename, self.config) assert mock_logger.info.called assert "version" in mock_logger.info.call_args[0][0] def test_consistent(self): # pylint: disable=protected-access oldcert = self.test_rc.cert self.test_rc.cert = "relative/path" # Absolute path for item requirement assert not self.test_rc._consistent() self.test_rc.cert = oldcert # Items must exist requirement assert not self.test_rc._consistent() # Items must be symlinks requirements fill_with_sample_data(self.test_rc) assert not self.test_rc._consistent() unlink_all(self.test_rc) # Items must point to desired place if they are relative for kind in ALL_FOUR: os.symlink(os.path.join("..", kind + "17.pem"), getattr(self.test_rc, kind)) assert not self.test_rc._consistent() unlink_all(self.test_rc) # Items must point to desired place if they are absolute for kind in ALL_FOUR: os.symlink(os.path.join(self.config.config_dir, kind + "17.pem"), getattr(self.test_rc, kind)) assert not self.test_rc._consistent() unlink_all(self.test_rc) # Items must point to things that exist for kind in ALL_FOUR: os.symlink(os.path.join("..", "..", "archive", "example.org", kind + "17.pem"), getattr(self.test_rc, kind)) assert not self.test_rc._consistent() # This version should work fill_with_sample_data(self.test_rc) assert self.test_rc._consistent() # Items must point to things that follow the naming convention os.unlink(self.test_rc.fullchain) os.symlink(os.path.join("..", "..", "archive", "example.org", "fullchain_17.pem"), self.test_rc.fullchain) with open(self.test_rc.fullchain, "w") as f: f.write("wrongly-named fullchain") assert not self.test_rc._consistent() def test_current_target(self): # Relative path logic self._write_out_kind("cert", 17) assert os.path.samefile(self.test_rc.current_target("cert"), os.path.join(self.config.config_dir, "archive", "example.org", "cert17.pem")) # Absolute path logic os.unlink(self.test_rc.cert) os.symlink(os.path.join(self.config.config_dir, "archive", "example.org", "cert17.pem"), self.test_rc.cert) with open(self.test_rc.cert, "w") as f: f.write("cert") assert os.path.samefile(self.test_rc.current_target("cert"), os.path.join(self.config.config_dir, "archive", "example.org", "cert17.pem")) def test_current_version(self): for ver in (1, 5, 10, 20): self._write_out_kind("cert", ver) os.unlink(self.test_rc.cert) os.symlink(os.path.join("..", "..", "archive", "example.org", "cert10.pem"), self.test_rc.cert) assert self.test_rc.current_version("cert") == 10 def test_no_current_version(self): assert self.test_rc.current_version("cert") is None def test_latest_and_next_versions(self): for ver in range(1, 6): for kind in ALL_FOUR: self._write_out_kind(kind, ver) assert self.test_rc.latest_common_version() == 5 assert self.test_rc.next_free_version() == 6 # Having one kind of file of a later version doesn't change the # result self._write_out_kind("privkey", 7) assert self.test_rc.latest_common_version() == 5 # ... although it does change the next free version assert self.test_rc.next_free_version() == 8 # Nor does having three out of four change the result self._write_out_kind("cert", 7) self._write_out_kind("fullchain", 7) assert self.test_rc.latest_common_version() == 5 # If we have everything from a much later version, it does change # the result for kind in ALL_FOUR: self._write_out_kind(kind, 17) assert self.test_rc.latest_common_version() == 17 assert self.test_rc.next_free_version() == 18 @mock.patch("certbot._internal.storage.logger") def test_ensure_deployed(self, mock_logger): mock_update = self.test_rc.update_all_links_to = mock.Mock() mock_has_pending = self.test_rc.has_pending_deployment = mock.Mock() self.test_rc.latest_common_version = mock.Mock() mock_has_pending.return_value = False assert self.test_rc.ensure_deployed() is True assert mock_update.call_count == 0 assert mock_logger.warning.call_count == 0 mock_has_pending.return_value = True assert self.test_rc.ensure_deployed() is False assert mock_update.call_count == 1 assert mock_logger.warning.call_count == 1 def test_update_link_to(self): for ver in range(1, 6): for kind in ALL_FOUR: self._write_out_kind(kind, ver) assert ver == self.test_rc.current_version(kind) # pylint: disable=protected-access self.test_rc._update_link_to("cert", 3) self.test_rc._update_link_to("privkey", 2) assert 3 == self.test_rc.current_version("cert") assert 2 == self.test_rc.current_version("privkey") assert 5 == self.test_rc.current_version("chain") assert 5 == self.test_rc.current_version("fullchain") # Currently we are allowed to update to a version that doesn't exist self.test_rc._update_link_to("chain", 3000) # However, current_version doesn't allow querying the resulting # version (because it's a broken link). assert os.path.basename(filesystem.readlink(self.test_rc.chain)) == \ "chain3000.pem" def test_version(self): self._write_out_kind("cert", 12) # TODO: We should probably test that the directory is still the # same, but it's tricky because we can get an absolute # path out when we put a relative path in. assert "cert8.pem" == \ os.path.basename(self.test_rc.version("cert", 8)) def test_update_all_links_to_success(self): for ver in range(1, 6): for kind in ALL_FOUR: self._write_out_kind(kind, ver) assert ver == self.test_rc.current_version(kind) assert self.test_rc.latest_common_version() == 5 for ver in range(1, 6): self.test_rc.update_all_links_to(ver) for kind in ALL_FOUR: assert ver == self.test_rc.current_version(kind) assert self.test_rc.latest_common_version() == 5 def test_update_all_links_to_partial_failure(self): def unlink_or_raise(path, real_unlink=os.unlink): # pylint: disable=missing-docstring basename = os.path.basename(path) if "fullchain" in basename and basename.startswith("prev"): raise ValueError real_unlink(path) self._write_out_ex_kinds() with mock.patch("certbot._internal.storage.os.unlink") as mock_unlink: mock_unlink.side_effect = unlink_or_raise with pytest.raises(ValueError): self.test_rc.update_all_links_to(12) for kind in ALL_FOUR: assert self.test_rc.current_version(kind) == 12 def test_update_all_links_to_full_failure(self): def unlink_or_raise(path, real_unlink=os.unlink): # pylint: disable=missing-docstring if "fullchain" in os.path.basename(path): raise ValueError real_unlink(path) self._write_out_ex_kinds() with mock.patch("certbot._internal.storage.os.unlink") as mock_unlink: mock_unlink.side_effect = unlink_or_raise with pytest.raises(ValueError): self.test_rc.update_all_links_to(12) for kind in ALL_FOUR: assert self.test_rc.current_version(kind) == 11 def test_has_pending_deployment(self): for ver in range(1, 6): for kind in ALL_FOUR: self._write_out_kind(kind, ver) assert ver == self.test_rc.current_version(kind) for ver in range(1, 6): self.test_rc.update_all_links_to(ver) for kind in ALL_FOUR: assert ver == self.test_rc.current_version(kind) if ver < 5: assert self.test_rc.has_pending_deployment() else: assert not self.test_rc.has_pending_deployment() def test_names(self): # Trying the current version self._write_out_kind("cert", 12, test_util.load_vector("cert-san_512.pem")) assert self.test_rc.names() == \ ["example.com", "www.example.com"] # Trying missing cert os.unlink(self.test_rc.cert) with pytest.raises(errors.CertStorageError): self.test_rc.names() @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') @mock.patch("certbot._internal.storage.datetime") def test_time_interval_judgments(self, mock_datetime, mock_set_by_user): """Test should_autorenew() on the basis of expiry time windows.""" test_cert = test_util.load_vector("cert_512.pem") self._write_out_ex_kinds() self.test_rc.update_all_links_to(12) with open(self.test_rc.cert, "wb") as f: f.write(test_cert) self.test_rc.update_all_links_to(11) with open(self.test_rc.cert, "wb") as f: f.write(test_cert) mock_datetime.timedelta = datetime.timedelta mock_set_by_user.return_value = False self.test_rc.configuration["renewalparams"] = {} for (current_time, interval, result) in [ # 2014-12-13 12:00:00+00:00 (about 5 days prior to expiry) # Times that should result in autorenewal/autodeployment (1418472000, "2 months", True), (1418472000, "1 week", True), # Times that should not (1418472000, "4 days", False), (1418472000, "2 days", False), # 2009-05-01 12:00:00+00:00 (about 5 years prior to expiry) # Times that should result in autorenewal/autodeployment (1241179200, "7 years", True), (1241179200, "11 years 2 months", True), # Times that should not (1241179200, "8 hours", False), (1241179200, "2 days", False), (1241179200, "40 days", False), (1241179200, "9 months", False), # 2015-01-01 (after expiry has already happened, so all # intervals should cause autorenewal/autodeployment) (1420070400, "0 seconds", True), (1420070400, "10 seconds", True), (1420070400, "10 minutes", True), (1420070400, "10 weeks", True), (1420070400, "10 months", True), (1420070400, "10 years", True), (1420070400, "99 months", True), ]: sometime = datetime.datetime.fromtimestamp(current_time, pytz.UTC) mock_datetime.datetime.now.return_value = sometime self.test_rc.configuration["renew_before_expiry"] = interval assert self.test_rc.should_autorenew() == result def test_autorenewal_is_enabled(self): self.test_rc.configuration["renewalparams"] = {} assert self.test_rc.autorenewal_is_enabled() self.test_rc.configuration["renewalparams"]["autorenew"] = "True" assert self.test_rc.autorenewal_is_enabled() self.test_rc.configuration["renewalparams"]["autorenew"] = "False" assert not self.test_rc.autorenewal_is_enabled() @mock.patch.object(configuration.NamespaceConfig, 'set_by_user') @mock.patch("certbot._internal.storage.RenewableCert.ocsp_revoked") def test_should_autorenew(self, mock_ocsp, mock_set_by_user): """Test should_autorenew on the basis of reasons other than expiry time window.""" mock_set_by_user.return_value = False # Autorenewal turned off self.test_rc.configuration["renewalparams"] = {"autorenew": "False"} assert not self.test_rc.should_autorenew() self.test_rc.configuration["renewalparams"]["autorenew"] = "True" for kind in ALL_FOUR: self._write_out_kind(kind, 12) # Mandatory renewal on the basis of OCSP revocation mock_ocsp.return_value = True assert self.test_rc.should_autorenew() mock_ocsp.return_value = False @mock.patch("certbot._internal.storage.relevant_values") def test_save_successor(self, mock_rv): # Mock relevant_values() to claim that all values are relevant here # (to avoid instantiating parser) mock_rv.side_effect = lambda x: x.to_dict() for ver in range(1, 6): for kind in ALL_FOUR: self._write_out_kind(kind, ver) self.test_rc.update_all_links_to(3) assert 6 == self.test_rc.save_successor(3, b'new cert', None, b'new chain', self.config) with open(self.test_rc.version("cert", 6)) as f: assert f.read() == "new cert" with open(self.test_rc.version("chain", 6)) as f: assert f.read() == "new chain" with open(self.test_rc.version("fullchain", 6)) as f: assert f.read() == "new cert" + "new chain" # version 6 of the key should be a link back to version 3 assert not os.path.islink(self.test_rc.version("privkey", 3)) assert os.path.islink(self.test_rc.version("privkey", 6)) # Let's try two more updates assert 7 == self.test_rc.save_successor(6, b'again', None, b'newer chain', self.config) assert 8 == self.test_rc.save_successor(7, b'hello', None, b'other chain', self.config) # All of the subsequent versions should link directly to the original # privkey. for i in (6, 7, 8): assert os.path.islink(self.test_rc.version("privkey", i)) assert "privkey3.pem" == os.path.basename(filesystem.readlink( self.test_rc.version("privkey", i))) for kind in ALL_FOUR: assert self.test_rc.available_versions(kind) == list(range(1, 9)) assert self.test_rc.current_version(kind) == 3 # Test updating from latest version rather than old version self.test_rc.update_all_links_to(8) assert 9 == self.test_rc.save_successor(8, b'last', None, b'attempt', self.config) for kind in ALL_FOUR: assert self.test_rc.available_versions(kind) == \ list(range(1, 10)) assert self.test_rc.current_version(kind) == 8 with open(self.test_rc.version("fullchain", 9)) as f: assert f.read() == "last" + "attempt" temp_config_file = os.path.join(self.config.renewal_configs_dir, self.test_rc.lineagename) + ".conf.new" with open(temp_config_file, "w") as f: f.write("We previously crashed while writing me :(") # Test updating when providing a new privkey. The key should # be saved in a new file rather than creating a new symlink. assert 10 == self.test_rc.save_successor(9, b'with', b'a', b'key', self.config) assert os.path.exists(self.test_rc.version("privkey", 10)) assert not os.path.islink(self.test_rc.version("privkey", 10)) assert not os.path.exists(temp_config_file) @test_util.skip_on_windows('Group/everybody permissions are not maintained on Windows.') @mock.patch("certbot._internal.storage.relevant_values") def test_save_successor_maintains_group_mode(self, mock_rv): # Mock relevant_values() to claim that all values are relevant here # (to avoid instantiating parser) mock_rv.side_effect = lambda x: x.to_dict() for kind in ALL_FOUR: self._write_out_kind(kind, 1) self.test_rc.update_all_links_to(1) assert filesystem.check_mode(self.test_rc.version("privkey", 1), 0o600) filesystem.chmod(self.test_rc.version("privkey", 1), 0o444) # If no new key, permissions should be the same (we didn't write any keys) self.test_rc.save_successor(1, b"newcert", None, b"new chain", self.config) assert filesystem.check_mode(self.test_rc.version("privkey", 2), 0o444) # If new key, permissions should be kept as 644 self.test_rc.save_successor(2, b"newcert", b"new_privkey", b"new chain", self.config) assert filesystem.check_mode(self.test_rc.version("privkey", 3), 0o644) # If permissions reverted, next renewal will also revert permissions of new key filesystem.chmod(self.test_rc.version("privkey", 3), 0o400) self.test_rc.save_successor(3, b"newcert", b"new_privkey", b"new chain", self.config) assert filesystem.check_mode(self.test_rc.version("privkey", 4), 0o600) @mock.patch("certbot._internal.storage.relevant_values") @mock.patch("certbot._internal.storage.filesystem.copy_ownership_and_apply_mode") def test_save_successor_maintains_gid(self, mock_ownership, mock_rv): # Mock relevant_values() to claim that all values are relevant here # (to avoid instantiating parser) mock_rv.side_effect = lambda x: x.to_dict() for kind in ALL_FOUR: self._write_out_kind(kind, 1) self.test_rc.update_all_links_to(1) self.test_rc.save_successor(1, b"newcert", None, b"new chain", self.config) assert mock_ownership.called is False self.test_rc.save_successor(2, b"newcert", b"new_privkey", b"new chain", self.config) assert mock_ownership.called @mock.patch("certbot._internal.storage.relevant_values") def test_new_lineage(self, mock_rv): """Test for new_lineage() class method.""" # Mock relevant_values to say everything is relevant here (so we # don't have to mock the parser to help it decide!) mock_rv.side_effect = lambda x: x.to_dict() from certbot._internal import storage result = storage.RenewableCert.new_lineage( "the-lineage.com", b"cert", b"privkey", b"chain", self.config) # This consistency check tests most relevant properties about the # newly created cert lineage. # pylint: disable=protected-access assert result._consistent() assert os.path.exists(os.path.join( self.config.renewal_configs_dir, "the-lineage.com.conf")) assert os.path.exists(os.path.join( self.config.live_dir, "README")) assert os.path.exists(os.path.join( self.config.live_dir, "the-lineage.com", "README")) assert filesystem.check_mode(result.key_path, 0o600) with open(result.fullchain, "rb") as f: assert f.read() == b"cert" + b"chain" # Let's do it again and make sure it makes a different lineage result = storage.RenewableCert.new_lineage( "the-lineage.com", b"cert2", b"privkey2", b"chain2", self.config) assert os.path.exists(os.path.join( self.config.renewal_configs_dir, "the-lineage.com-0001.conf")) assert os.path.exists(os.path.join( self.config.live_dir, "the-lineage.com-0001", "README")) # Allow write to existing but empty dir filesystem.mkdir(os.path.join(self.config.default_archive_dir, "the-lineage.com-0002")) result = storage.RenewableCert.new_lineage( "the-lineage.com", b"cert3", b"privkey3", b"chain3", self.config) assert os.path.exists(os.path.join( self.config.live_dir, "the-lineage.com-0002", "README")) assert filesystem.check_mode(result.key_path, 0o600) # Now trigger the detection of already existing files shutil.copytree(os.path.join(self.config.live_dir, "the-lineage.com"), os.path.join(self.config.live_dir, "the-lineage.com-0003")) with pytest.raises(errors.CertStorageError): storage.RenewableCert.new_lineage("the-lineage.com", b"cert4", b"privkey4", b"chain4", self.config) shutil.copytree(os.path.join(self.config.live_dir, "the-lineage.com"), os.path.join(self.config.live_dir, "other-example.com")) with pytest.raises(errors.CertStorageError): storage.RenewableCert.new_lineage("other-example.com", b"cert5", b"privkey5", b"chain5", self.config) # Make sure it can accept renewal parameters result = storage.RenewableCert.new_lineage( "the-lineage.com", b"cert2", b"privkey2", b"chain2", self.config) # TODO: Conceivably we could test that the renewal parameters actually # got saved @mock.patch("certbot._internal.storage.relevant_values") def test_new_lineage_nonexistent_dirs(self, mock_rv): """Test that directories can be created if they don't exist.""" # Mock relevant_values to say everything is relevant here (so we # don't have to mock the parser to help it decide!) mock_rv.side_effect = lambda x: x.to_dict() from certbot._internal import storage shutil.rmtree(self.config.renewal_configs_dir) shutil.rmtree(self.config.default_archive_dir) shutil.rmtree(self.config.live_dir) storage.RenewableCert.new_lineage( "the-lineage.com", b"cert2", b"privkey2", b"chain2", self.config) assert os.path.exists( os.path.join( self.config.renewal_configs_dir, "the-lineage.com.conf")) assert os.path.exists(os.path.join( self.config.live_dir, "the-lineage.com", "privkey.pem")) assert os.path.exists(os.path.join( self.config.default_archive_dir, "the-lineage.com", "privkey1.pem")) @mock.patch("certbot._internal.storage.util.unique_lineage_name") def test_invalid_config_filename(self, mock_uln): from certbot._internal import storage mock_uln.return_value = "this_does_not_end_with_dot_conf", "yikes" with pytest.raises(errors.CertStorageError): storage.RenewableCert.new_lineage("example.com", "cert", "privkey", "chain", self.config) def test_bad_kind(self): with pytest.raises(errors.CertStorageError): self.test_rc.current_target("elephant") with pytest.raises(errors.CertStorageError): self.test_rc.current_version("elephant") with pytest.raises(errors.CertStorageError): self.test_rc.version("elephant", 17) with pytest.raises(errors.CertStorageError): self.test_rc.available_versions("elephant") with pytest.raises(errors.CertStorageError): self.test_rc.newest_available_version("elephant") # pylint: disable=protected-access with pytest.raises(errors.CertStorageError): self.test_rc._update_link_to("elephant", 17) @mock.patch("certbot.ocsp.RevocationChecker.ocsp_revoked_by_paths") def test_ocsp_revoked(self, mock_checker): # Write out test files for kind in ALL_FOUR: self._write_out_kind(kind, 1) version = self.test_rc.latest_common_version() expected_cert_path = self.test_rc.version("cert", version) expected_chain_path = self.test_rc.version("chain", version) # Test with cert revoked mock_checker.return_value = True assert self.test_rc.ocsp_revoked(version) assert mock_checker.call_args[0][0] == expected_cert_path assert mock_checker.call_args[0][1] == expected_chain_path # Test with cert not revoked mock_checker.return_value = False assert not self.test_rc.ocsp_revoked(version) assert mock_checker.call_args[0][0] == expected_cert_path assert mock_checker.call_args[0][1] == expected_chain_path # Test with error mock_checker.side_effect = ValueError with mock.patch("certbot._internal.storage.logger.warning") as logger: assert not self.test_rc.ocsp_revoked(version) assert mock_checker.call_args[0][0] == expected_cert_path assert mock_checker.call_args[0][1] == expected_chain_path log_msg = logger.call_args[0][0] assert "An error occurred determining the OCSP status" in log_msg def test_add_time_interval(self): from certbot._internal import storage # this month has 30 days, and the next year is a leap year time_1 = datetime.datetime(2003, 11, 20, 11, 59, 21, tzinfo=pytz.UTC) # this month has 31 days, and the next year is not a leap year time_2 = datetime.datetime(2012, 10, 18, 21, 31, 16, tzinfo=pytz.UTC) # in different time zone (GMT+8) time_3 = pytz.timezone('Asia/Shanghai').fromutc( datetime.datetime(2015, 10, 26, 22, 25, 41)) intended = { (time_1, ""): time_1, (time_2, ""): time_2, (time_3, ""): time_3, (time_1, "17 days"): time_1 + datetime.timedelta(17), (time_2, "17 days"): time_2 + datetime.timedelta(17), (time_1, "30"): time_1 + datetime.timedelta(30), (time_2, "30"): time_2 + datetime.timedelta(30), (time_1, "7 weeks"): time_1 + datetime.timedelta(49), (time_2, "7 weeks"): time_2 + datetime.timedelta(49), # 1 month is always 30 days, no matter which month it is (time_1, "1 month"): time_1 + datetime.timedelta(30), (time_2, "1 month"): time_2 + datetime.timedelta(31), # 1 year could be 365 or 366 days, depends on the year (time_1, "1 year"): time_1 + datetime.timedelta(366), (time_2, "1 year"): time_2 + datetime.timedelta(365), (time_1, "1 year 1 day"): time_1 + datetime.timedelta(367), (time_2, "1 year 1 day"): time_2 + datetime.timedelta(366), (time_1, "1 year-1 day"): time_1 + datetime.timedelta(365), (time_2, "1 year-1 day"): time_2 + datetime.timedelta(364), (time_1, "4 years"): time_1 + datetime.timedelta(1461), (time_2, "4 years"): time_2 + datetime.timedelta(1461), } for parameters, excepted in intended.items(): base_time, interval = parameters assert storage.add_time_interval(base_time, interval) == \ excepted def test_server(self): self.test_rc.configuration["renewalparams"] = {} assert self.test_rc.server is None rp = self.test_rc.configuration["renewalparams"] rp["server"] = "https://acme.example/dir" assert self.test_rc.server == "https://acme.example/dir" def test_is_test_cert(self): self.test_rc.configuration["renewalparams"] = {} rp = self.test_rc.configuration["renewalparams"] assert self.test_rc.is_test_cert is False rp["server"] = "https://acme-staging-v02.api.letsencrypt.org/directory" assert self.test_rc.is_test_cert is True rp["server"] = "https://staging.someotherca.com/directory" assert self.test_rc.is_test_cert is True rp["server"] = "https://acme-v01.api.letsencrypt.org/directory" assert self.test_rc.is_test_cert is False rp["server"] = "https://acme-v02.api.letsencrypt.org/directory" assert self.test_rc.is_test_cert is False def test_missing_cert(self): from certbot._internal import storage with pytest.raises(errors.CertStorageError): storage.RenewableCert(self.config_file.filename, self.config) os.symlink("missing", self.config_file[ALL_FOUR[0]]) with pytest.raises(errors.CertStorageError): storage.RenewableCert(self.config_file.filename, self.config) def test_write_renewal_config(self): # Mostly tested by the process of creating and updating lineages, # but we can test that this successfully creates files, removes # unneeded items, and preserves comments. temp = os.path.join(self.config.config_dir, "sample-file") temp2 = os.path.join(self.config.config_dir, "sample-file.new") with open(temp, "w") as f: f.write("[renewalparams]\nuseful = value # A useful value\n" "useless = value # Not needed\n") filesystem.chmod(temp, 0o640) target = {} for x in ALL_FOUR: target[x] = "somewhere" archive_dir = "the_archive" relevant_data = {"useful": "new_value"} from certbot._internal import storage storage.write_renewal_config(temp, temp2, archive_dir, target, relevant_data) with open(temp2, "r") as f: content = f.read() # useful value was updated assert "useful = new_value" in content # associated comment was preserved assert "A useful value" in content # useless value was deleted assert "useless" not in content # check version was stored assert "version = {0}".format(certbot.__version__) in content # ensure permissions are copied assert stat.S_IMODE(os.lstat(temp).st_mode) == \ stat.S_IMODE(os.lstat(temp2).st_mode) def test_truncate(self): # It should not do anything when there's less than 5 cert history for kind in ALL_FOUR: self._write_out_kind(kind, 1) with mock.patch('certbot.compat.os.unlink') as mock_unlink: self.test_rc.truncate() mock_unlink.assert_not_called() # It should truncate the excess when there's more than 5 cert history for kind in ALL_FOUR: for i in range(2, 8): self._write_out_kind(kind, i) with mock.patch('certbot.compat.os.unlink') as mock_unlink: self.test_rc.truncate() assert mock_unlink.call_count == 1 * len(ALL_FOUR) assert "1.pem" in mock_unlink.call_args_list[0][0][0] class DeleteFilesTest(BaseRenewableCertTest): """Tests for certbot._internal.storage.delete_files""" def setUp(self): super().setUp() for kind in ALL_FOUR: kind_path = os.path.join(self.config.config_dir, "live", "example.org", kind + ".pem") with open(kind_path, 'a'): pass self.config_file.write() assert os.path.exists(os.path.join( self.config.renewal_configs_dir, "example.org.conf")) assert os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert os.path.exists(os.path.join( self.config.config_dir, "archive", "example.org")) def _call(self): from certbot._internal import storage with mock.patch("certbot._internal.storage.logger"): storage.delete_files(self.config, "example.org") def test_delete_all_files(self): self._call() assert not os.path.exists(os.path.join( self.config.renewal_configs_dir, "example.org.conf")) assert not os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(os.path.join( self.config.config_dir, "archive", "example.org")) def test_bad_renewal_config(self): with open(self.config_file.filename, 'a') as config_file: config_file.write("asdfasfasdfasdf") with pytest.raises(errors.CertStorageError): self._call() assert os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(os.path.join( self.config.renewal_configs_dir, "example.org.conf")) def test_no_renewal_config(self): os.remove(self.config_file.filename) with pytest.raises(errors.CertStorageError): self._call() assert os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(self.config_file.filename) def test_no_cert_file(self): os.remove(os.path.join( self.config.live_dir, "example.org", "cert.pem")) self._call() assert not os.path.exists(self.config_file.filename) assert not os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(os.path.join( self.config.config_dir, "archive", "example.org")) def test_no_readme_file(self): os.remove(os.path.join( self.config.live_dir, "example.org", "README")) self._call() assert not os.path.exists(self.config_file.filename) assert not os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(os.path.join( self.config.config_dir, "archive", "example.org")) def test_livedir_not_empty(self): with open(os.path.join( self.config.live_dir, "example.org", "other_file"), 'a'): pass self._call() assert not os.path.exists(self.config_file.filename) assert os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(os.path.join( self.config.config_dir, "archive", "example.org")) def test_no_archive(self): archive_dir = os.path.join(self.config.config_dir, "archive", "example.org") os.rmdir(archive_dir) self._call() assert not os.path.exists(self.config_file.filename) assert not os.path.exists(os.path.join( self.config.live_dir, "example.org")) assert not os.path.exists(archive_dir) class CertPathForCertNameTest(BaseRenewableCertTest): """Test for certbot._internal.storage.cert_path_for_cert_name""" def setUp(self): super().setUp() self.config_file.write() self._write_out_ex_kinds() self.fullchain = os.path.join(self.config.config_dir, 'live', 'example.org', 'fullchain.pem') self.config.cert_path = self.fullchain def _call(self, cli_config, certname): from certbot._internal.storage import cert_path_for_cert_name return cert_path_for_cert_name(cli_config, certname) def test_simple_cert_name(self): assert self._call(self.config, 'example.org') == self.fullchain def test_no_such_cert_name(self): with pytest.raises(errors.CertStorageError): self._call(self.config, 'fake-example.org') if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover util_test.py 0000644 00000060272 15114562471 0007147 0 ustar 00 """Tests for certbot.util.""" import argparse import errno from importlib import reload as reload_module import io import sys import unittest from unittest import mock import pytest from certbot import errors from certbot.compat import filesystem from certbot.compat import os import certbot.tests.util as test_util class EnvNoSnapForExternalCallsTest(unittest.TestCase): """Tests for certbot.util.env_no_snap_for_external_calls.""" @classmethod def _call(cls): from certbot.util import env_no_snap_for_external_calls return env_no_snap_for_external_calls() def test_removed(self): original_path = os.environ['PATH'] env_copy_dict = os.environ.copy() env_copy_dict['PATH'] = 'RANDOM_NONSENSE_GARBAGE/blah/blah:' + original_path env_copy_dict['SNAP'] = 'RANDOM_NONSENSE_GARBAGE' env_copy_dict['CERTBOT_SNAPPED'] = 'True' with mock.patch('certbot.compat.os.environ.copy', return_value=env_copy_dict): assert self._call()['PATH'] == original_path def test_noop(self): env_copy_dict_unmodified = os.environ.copy() env_copy_dict_unmodified['PATH'] = 'RANDOM_NONSENSE_GARBAGE/blah/blah:' \ + env_copy_dict_unmodified['PATH'] env_copy_dict = env_copy_dict_unmodified.copy() with mock.patch('certbot.compat.os.environ.copy', return_value=env_copy_dict): # contains neither necessary key env_copy_dict.pop('SNAP', None) env_copy_dict.pop('CERTBOT_SNAPPED', None) assert self._call()['PATH'] == env_copy_dict_unmodified['PATH'] # contains only one necessary key env_copy_dict['SNAP'] = 'RANDOM_NONSENSE_GARBAGE' assert self._call()['PATH'] == env_copy_dict_unmodified['PATH'] del env_copy_dict['SNAP'] env_copy_dict['CERTBOT_SNAPPED'] = 'True' assert self._call()['PATH'] == env_copy_dict_unmodified['PATH'] class RunScriptTest(unittest.TestCase): """Tests for certbot.util.run_script.""" @classmethod def _call(cls, params): from certbot.util import run_script return run_script(params) @mock.patch("certbot.util.subprocess.run") def test_default(self, mock_run): """These will be changed soon enough with reload.""" mock_run().returncode = 0 mock_run().stdout = "stdout" mock_run().stderr = "stderr" out, err = self._call(["test"]) assert out == "stdout" assert err == "stderr" @mock.patch("certbot.util.subprocess.run") def test_bad_process(self, mock_run): mock_run.side_effect = OSError with pytest.raises(errors.SubprocessError): self._call(["test"]) @mock.patch("certbot.util.subprocess.run") def test_failure(self, mock_run): mock_run().returncode = 1 with pytest.raises(errors.SubprocessError): self._call(["test"]) class ExeExistsTest(unittest.TestCase): """Tests for certbot.util.exe_exists.""" @classmethod def _call(cls, exe): from certbot.util import exe_exists return exe_exists(exe) def test_exe_exists(self): with mock.patch("certbot.util.filesystem.is_executable", return_value=True): assert self._call("/path/to/exe") def test_exe_not_exists(self): with mock.patch("certbot.util.filesystem.is_executable", return_value=False): assert not self._call("/path/to/exe") class LockDirUntilExit(test_util.TempDirTestCase): """Tests for certbot.util.lock_dir_until_exit.""" @classmethod def _call(cls, *args, **kwargs): from certbot.util import lock_dir_until_exit return lock_dir_until_exit(*args, **kwargs) def setUp(self): super().setUp() # reset global state from other tests import certbot.util reload_module(certbot.util) @mock.patch('certbot.util.logger') @mock.patch('certbot.util.atexit_register') def test_it(self, mock_register, mock_logger): subdir = os.path.join(self.tempdir, 'subdir') filesystem.mkdir(subdir) self._call(self.tempdir) self._call(subdir) self._call(subdir) assert mock_register.call_count == 1 registered_func = mock_register.call_args[0][0] from certbot import util # Despite lock_dir_until_exit has been called twice to subdir, its lock should have been # added only once. So we expect to have two lock references: for self.tempdir and subdir assert len(util._LOCKS) == 2 # pylint: disable=protected-access registered_func() # Exception should not be raised # Logically, logger.debug, that would be invoked in case of unlock failure, # should never been called. assert mock_logger.debug.call_count == 0 class SetUpCoreDirTest(test_util.TempDirTestCase): """Tests for certbot.util.make_or_verify_core_dir.""" def _call(self, *args, **kwargs): from certbot.util import set_up_core_dir return set_up_core_dir(*args, **kwargs) @mock.patch('certbot.util.lock_dir_until_exit') def test_success(self, mock_lock): new_dir = os.path.join(self.tempdir, 'new') self._call(new_dir, 0o700, False) assert os.path.exists(new_dir) assert mock_lock.call_count == 1 @mock.patch('certbot.util.make_or_verify_dir') def test_failure(self, mock_make_or_verify): mock_make_or_verify.side_effect = OSError with pytest.raises(errors.Error): self._call(self.tempdir, 0o700, False) class MakeOrVerifyDirTest(test_util.TempDirTestCase): """Tests for certbot.util.make_or_verify_dir. Note that it is not possible to test for a wrong directory owner, as this testing script would have to be run as root. """ def setUp(self): super().setUp() self.path = os.path.join(self.tempdir, "foo") filesystem.mkdir(self.path, 0o600) def _call(self, directory, mode): from certbot.util import make_or_verify_dir return make_or_verify_dir(directory, mode, strict=True) def test_creates_dir_when_missing(self): path = os.path.join(self.tempdir, "bar") self._call(path, 0o650) assert os.path.isdir(path) assert filesystem.check_mode(path, 0o650) def test_existing_correct_mode_does_not_fail(self): self._call(self.path, 0o600) assert filesystem.check_mode(self.path, 0o600) def test_existing_wrong_mode_fails(self): with pytest.raises(errors.Error): self._call(self.path, 0o400) def test_reraises_os_error(self): with mock.patch.object(filesystem, "makedirs") as makedirs: makedirs.side_effect = OSError() with pytest.raises(OSError): self._call("bar", 12312312) class UniqueFileTest(test_util.TempDirTestCase): """Tests for certbot.util.unique_file.""" def setUp(self): super().setUp() self.default_name = os.path.join(self.tempdir, "foo.txt") def _call(self, mode=0o600): from certbot.util import unique_file return unique_file(self.default_name, mode) def test_returns_fd_for_writing(self): fd, name = self._call() fd.write("bar") fd.close() with open(name) as f: assert f.read() == "bar" def test_right_mode(self): fd1, name1 = self._call(0o700) fd2, name2 = self._call(0o600) assert filesystem.check_mode(name1, 0o700) assert filesystem.check_mode(name2, 0o600) fd1.close() fd2.close() def test_default_exists(self): fd1, name1 = self._call() # create 0000_foo.txt fd2, name2 = self._call() fd3, name3 = self._call() assert name1 != name2 assert name1 != name3 assert name2 != name3 assert os.path.dirname(name1) == self.tempdir assert os.path.dirname(name2) == self.tempdir assert os.path.dirname(name3) == self.tempdir basename1 = os.path.basename(name2) assert basename1.endswith("foo.txt") basename2 = os.path.basename(name2) assert basename2.endswith("foo.txt") basename3 = os.path.basename(name3) assert basename3.endswith("foo.txt") fd1.close() fd2.close() fd3.close() class UniqueLineageNameTest(test_util.TempDirTestCase): """Tests for certbot.util.unique_lineage_name.""" def _call(self, filename, mode=0o777): from certbot.util import unique_lineage_name return unique_lineage_name(self.tempdir, filename, mode) def test_basic(self): f, path = self._call("wow") assert isinstance(f, io.TextIOWrapper) assert os.path.join(self.tempdir, "wow.conf") == path f.close() def test_multiple(self): items = [] for _ in range(10): items.append(self._call("wow")) f, name = items[-1] assert isinstance(f, io.TextIOWrapper) assert isinstance(name, str) assert "wow-0009.conf" in name for f, _ in items: f.close() def test_failure(self): with mock.patch("certbot.compat.filesystem.open", side_effect=OSError(errno.EIO)): with pytest.raises(OSError): self._call("wow") class SafelyRemoveTest(test_util.TempDirTestCase): """Tests for certbot.util.safely_remove.""" def setUp(self): super().setUp() self.path = os.path.join(self.tempdir, "foo") def _call(self): from certbot.util import safely_remove return safely_remove(self.path) def test_exists(self): with open(self.path, "w"): pass # just create the file self._call() assert not os.path.exists(self.path) def test_missing(self): self._call() # no error, yay! assert not os.path.exists(self.path) def test_other_error_passthrough(self): with mock.patch("certbot.util.os.remove") as mock_remove: mock_remove.side_effect = OSError with pytest.raises(OSError): self._call() class SafeEmailTest(unittest.TestCase): """Test safe_email.""" @classmethod def _call(cls, addr): from certbot.util import safe_email return safe_email(addr) def test_valid_emails(self): addrs = [ "certbot@certbot.org", "tbd.ade@gmail.com", "abc_def.jdk@hotmail.museum", ] for addr in addrs: assert self._call(addr), "%s failed." % addr def test_invalid_emails(self): addrs = [ "certbot@certbot..org", ".tbd.ade@gmail.com", "~/abc_def.jdk@hotmail.museum", ] for addr in addrs: assert not self._call(addr), "%s failed." % addr class AddDeprecatedArgumentTest(unittest.TestCase): """Test add_deprecated_argument.""" def setUp(self): self.parser = argparse.ArgumentParser() def _call(self, argument_name, nargs): from certbot.util import add_deprecated_argument add_deprecated_argument(self.parser.add_argument, argument_name, nargs) def test_warning_no_arg(self): self._call("--old-option", 0) with mock.patch("certbot.util.logger.warning") as mock_warn: self.parser.parse_args(["--old-option"]) assert mock_warn.call_count == 1 assert "is deprecated" in mock_warn.call_args[0][0] assert "--old-option" in mock_warn.call_args[0][1] def test_warning_with_arg(self): self._call("--old-option", 1) with mock.patch("certbot.util.logger.warning") as mock_warn: self.parser.parse_args(["--old-option", "42"]) assert mock_warn.call_count == 1 assert "is deprecated" in mock_warn.call_args[0][0] assert "--old-option" in mock_warn.call_args[0][1] def test_help(self): self._call("--old-option", 2) stdout = io.StringIO() with mock.patch("sys.stdout", new=stdout): try: self.parser.parse_args(["-h"]) except SystemExit: pass assert "--old-option" not in stdout.getvalue() def test_set_constant(self): """Test when ACTION_TYPES_THAT_DONT_NEED_A_VALUE is a set. This variable is a set in configargparse versions < 0.12.0. """ self._test_constant_common(set) def test_tuple_constant(self): """Test when ACTION_TYPES_THAT_DONT_NEED_A_VALUE is a tuple. This variable is a tuple in configargparse versions >= 0.12.0. """ self._test_constant_common(tuple) def _test_constant_common(self, typ): with mock.patch("certbot.util.configargparse") as mock_configargparse: mock_configargparse.ACTION_TYPES_THAT_DONT_NEED_A_VALUE = typ() self._call("--old-option", 1) self._call("--old-option2", 2) assert len(mock_configargparse.ACTION_TYPES_THAT_DONT_NEED_A_VALUE) == 1 class EnforceLeValidity(unittest.TestCase): """Test enforce_le_validity.""" def _call(self, domain): from certbot.util import enforce_le_validity return enforce_le_validity(domain) def test_sanity(self): with pytest.raises(errors.ConfigurationError): self._call(u"..") def test_invalid_chars(self): with pytest.raises(errors.ConfigurationError): self._call(u"hello_world.example.com") def test_leading_hyphen(self): with pytest.raises(errors.ConfigurationError): self._call(u"-a.example.com") def test_trailing_hyphen(self): with pytest.raises(errors.ConfigurationError): self._call(u"a-.example.com") def test_one_label(self): with pytest.raises(errors.ConfigurationError): self._call(u"com") def test_valid_domain(self): assert self._call(u"example.com") == u"example.com" def test_input_with_scheme(self): with pytest.raises(errors.ConfigurationError): self._call(u"http://example.com") with pytest.raises(errors.ConfigurationError): self._call(u"https://example.com") def test_valid_input_with_scheme_name(self): assert self._call(u"http.example.com") == u"http.example.com" class EnforceDomainSanityTest(unittest.TestCase): """Test enforce_domain_sanity.""" def _call(self, domain): from certbot.util import enforce_domain_sanity return enforce_domain_sanity(domain) def test_nonascii_str(self): with pytest.raises(errors.ConfigurationError): self._call(u"eichh\u00f6rnchen.example.com".encode("utf-8")) def test_nonascii_unicode(self): with pytest.raises(errors.ConfigurationError): self._call(u"eichh\u00f6rnchen.example.com") def test_too_long(self): long_domain = u"a"*256 with pytest.raises(errors.ConfigurationError): self._call(long_domain) def test_not_too_long(self): not_too_long_domain = u"{0}.{1}.{2}.{3}".format("a"*63, "b"*63, "c"*63, "d"*63) self._call(not_too_long_domain) def test_empty_label(self): empty_label_domain = u"fizz..example.com" with pytest.raises(errors.ConfigurationError): self._call(empty_label_domain) def test_empty_trailing_label(self): empty_trailing_label_domain = u"example.com.." with pytest.raises(errors.ConfigurationError): self._call(empty_trailing_label_domain) def test_long_label_1(self): long_label_domain = u"a"*64 with pytest.raises(errors.ConfigurationError): self._call(long_label_domain) def test_long_label_2(self): long_label_domain = u"{0}.{1}.com".format(u"a"*64, u"b"*63) with pytest.raises(errors.ConfigurationError): self._call(long_label_domain) def test_not_long_label(self): not_too_long_label_domain = u"{0}.{1}.com".format(u"a"*63, u"b"*63) self._call(not_too_long_label_domain) def test_empty_domain(self): empty_domain = u"" with pytest.raises(errors.ConfigurationError): self._call(empty_domain) def test_punycode_ok(self): # Punycode is now legal, so no longer an error; instead check # that it's _not_ an error (at the initial sanity check stage) self._call('this.is.xn--ls8h.tld') class IsWildcardDomainTest(unittest.TestCase): """Tests for is_wildcard_domain.""" def setUp(self): self.wildcard = u"*.example.org" self.no_wildcard = u"example.org" def _call(self, domain): from certbot.util import is_wildcard_domain return is_wildcard_domain(domain) def test_no_wildcard(self): assert not self._call(self.no_wildcard) assert not self._call(self.no_wildcard.encode()) def test_wildcard(self): assert self._call(self.wildcard) assert self._call(self.wildcard.encode()) class OsInfoTest(unittest.TestCase): """Test OS / distribution detection""" @mock.patch("certbot.util.distro") @unittest.skipUnless(sys.platform.startswith("linux"), "requires Linux") def test_systemd_os_release_like(self, m_distro): import certbot.util as cbutil m_distro.like.return_value = "first debian third" id_likes = cbutil.get_systemd_os_like() assert len(id_likes) == 3 assert "debian" in id_likes @mock.patch("certbot.util.distro") @unittest.skipUnless(sys.platform.startswith("linux"), "requires Linux") def test_get_os_info_ua(self, m_distro): import certbot.util as cbutil with mock.patch('platform.system_alias', return_value=('linux', '42', '42')): m_distro.version.return_value = "1.0" # empty value on first call for fallback to "get_python_os_info" in get_os_info_ua m_distro.name.side_effect = ["", "something", "something"] assert cbutil.get_os_info_ua() == \ " ".join(cbutil.get_python_os_info(pretty=True)) m_distro.name.side_effect = ["whatever"] assert cbutil.get_os_info_ua() == "whatever" @mock.patch("certbot.util.distro") @unittest.skipUnless(sys.platform.startswith("linux"), "requires Linux") def test_get_os_info(self, m_distro): import certbot.util as cbutil with mock.patch("platform.system") as mock_platform: m_distro.id.return_value = "name" m_distro.version.return_value = "version" mock_platform.return_value = "linux" assert cbutil.get_os_info() == ("name", "version") m_distro.id.return_value = "something" m_distro.version.return_value = "else" assert cbutil.get_os_info() == ("something", "else") def test_non_systemd_os_info(self): import certbot.util as cbutil with mock.patch('certbot.util._USE_DISTRO', False): with mock.patch('platform.system_alias', return_value=('NonSystemD', '42', '42')): assert cbutil.get_python_os_info()[0] == 'nonsystemd' with mock.patch('platform.system_alias', return_value=('darwin', '', '')): with mock.patch("subprocess.run") as run_mock: run_mock().stdout = '42.42.42' assert cbutil.get_python_os_info()[0] == 'darwin' assert cbutil.get_python_os_info()[1] == '42.42.42' with mock.patch('platform.system_alias', return_value=('freebsd', '9.3-RC3-p1', '')): assert cbutil.get_python_os_info() == ("freebsd", "9") with mock.patch('platform.system_alias', return_value=('windows', '', '')): with mock.patch('platform.win32_ver', return_value=('4242', '95', '2', '')): assert cbutil.get_python_os_info() == \ ("windows", "95") @mock.patch("certbot.util.distro") @unittest.skipUnless(sys.platform.startswith("linux"), "requires Linux") def test_python_os_info_notfound(self, m_distro): import certbot.util as cbutil m_distro.id.return_value = "" m_distro.version.return_value = "" assert cbutil.get_python_os_info()[0] == "linux" @mock.patch("certbot.util.distro") @unittest.skipUnless(sys.platform.startswith("linux"), "requires Linux") def test_python_os_info_custom(self, m_distro): import certbot.util as cbutil m_distro.id.return_value = "testdist" m_distro.version.return_value = "42" assert cbutil.get_python_os_info() == ("testdist", "42") class AtexitRegisterTest(unittest.TestCase): """Tests for certbot.util.atexit_register.""" def setUp(self): self.func = mock.MagicMock() self.args = ('hi',) self.kwargs = {'answer': 42} @classmethod def _call(cls, *args, **kwargs): from certbot.util import atexit_register return atexit_register(*args, **kwargs) def test_called(self): self._test_common(os.getpid()) self.func.assert_called_with(*self.args, **self.kwargs) def test_not_called(self): self._test_common(initial_pid=-1) assert self.func.called is False def _test_common(self, initial_pid): with mock.patch('certbot.util._INITIAL_PID', initial_pid): with mock.patch('certbot.util.atexit') as mock_atexit: self._call(self.func, *self.args, **self.kwargs) # _INITIAL_PID must be mocked when calling atexit_func assert mock_atexit.register.called args, kwargs = mock_atexit.register.call_args atexit_func = args[0] atexit_func(*args[1:], **kwargs) class LooseVersionTest(unittest.TestCase): """Test for certbot.util.LooseVersion. These tests are based on the original tests for distutils.version.LooseVersion at https://github.com/python/cpython/blob/v3.10.0/Lib/distutils/tests/test_version.py#L58-L81. """ @classmethod def _call(cls, *args, **kwargs): from certbot.util import LooseVersion return LooseVersion(*args, **kwargs) def test_less_than(self): comparisons = (('1.5.1', '1.5.2b2'), ('3.4j', '1996.07.12'), ('2g6', '11g'), ('0.960923', '2.2beta29'), ('1.13++', '5.5.kw'), ('2.0', '2.0.1'), ('a', 'b')) for v1, v2 in comparisons: assert self._call(v1).try_risky_comparison(self._call(v2)) == -1 def test_equal(self): comparisons = (('8.02', '8.02'), ('1a', '1a'), ('2', '2.0.0'), ('2.0', '2.0.0')) for v1, v2 in comparisons: assert self._call(v1).try_risky_comparison(self._call(v2)) == 0 def test_greater_than(self): comparisons = (('161', '3.10a'), ('3.2.pl0', '3.1.1.6')) for v1, v2 in comparisons: assert self._call(v1).try_risky_comparison(self._call(v2)) == 1 def test_incomparible(self): comparisons = (('bookworm/sid', '9'), ('1a', '1.0')) for v1, v2 in comparisons: with pytest.raises(ValueError): assert self._call(v1).try_risky_comparison(self._call(v2)) class ParseLooseVersionTest(unittest.TestCase): """Test for certbot.util.parse_loose_version. These tests are based on the original tests for distutils.version.LooseVersion at https://github.com/python/cpython/blob/v3.10.0/Lib/distutils/tests/test_version.py#L58-L81. """ @classmethod def _call(cls, *args, **kwargs): from certbot.util import parse_loose_version return parse_loose_version(*args, **kwargs) def test_less_than(self): comparisons = (('1.5.1', '1.5.2b2'), ('3.4j', '1996.07.12'), ('2g6', '11g'), ('0.960923', '2.2beta29'), ('1.13++', '5.5.kw')) for v1, v2 in comparisons: assert self._call(v1) < self._call(v2) def test_equal(self): assert self._call('8.02') == self._call('8.02') def test_greater_than(self): comparisons = (('161', '3.10a'), ('3.2.pl0', '3.1.1.6')) for v1, v2 in comparisons: assert self._call(v1) > self._call(v2) if __name__ == "__main__": sys.exit(pytest.main(sys.argv[1:] + [__file__])) # pragma: no cover
| ver. 1.4 |
Github
|
.
| PHP 8.1.33 | Генерация страницы: 0.19 |
proxy
|
phpinfo
|
Настройка