Current File : //opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyc
�
5}�ac @ s� d d l Z d d l Z d d l m Z d d l m Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z e j d � Z e e j � Z e j Z e j j d � Z! e! o]e j" d d d f k Z# d � Z$ e$ d
� Z% e% j& e j' � � Z( e$ d � Z) e$ d � Z* e) j& e j' � � Z+ e* j& e j' � � Z, e$ d
� Z- e$ d � Z. d Z/ e$ d � Z0 e0 j& e j' � � Z1 e$ d d � Z2 e$ d d � Z3 e$ d � Z4 e$ d � Z5 e$ d � Z6 e$ d � Z7 e$ d � Z8 d Z9 e$ d � Z: e$ d � Z; e$ d � Z< e$ d � Z= e$ d � Z> e$ d � Z? e$ d � Z@ e$ d � ZA e$ d! � ZB eB j& e j' � � ZC eD e d" d � ZE eD e d# d � ZF eD e d$ d � ZG eD e d% d � ZH eD e d& d � ZI d' � ZJ d( e jK f d) � � YZL d* � ZM d+ � ZN d, � ZO d- � ZP d. � ZQ d/ � ZR d0 � ZS e jT e jU d1 � ZV d2 e jK f d3 � � YZW d4 e jK f d5 � � YZX d6 e jK f d7 � � YZY d8 e jK f d9 � � YZZ y d d l[ Z[ Wn e\ k
rIe] Z^ n� Xe_ Z^ d d: l` ma Za d; e[ jb f d< � � YZc d= e[ jb f d> � � YZd d? e_ e] ee d@ � Zf ee d d dA � Zg dB e jK f dC � � YZh e] dD � Zi ej dE k r�ei � n d S(F i����N( t test_support( t assert_python_ok( t closingt sslt LibreSSLi i c G s t j j t j j t � | � S( N( t ost patht joint dirnamet __file__( t name( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt data_file" s s keycert.pems ssl_cert.pems ssl_key.pems keycert.passwd.pems ssl_key.passwd.pemt somepasst capaths
4e1295a3.0s
5ed36f99.0s revocation.crls keycert3.pems keycert4.pems pycacert.pems allsans.pems self-signed.pythontest.nets selfsigned_pythontestdotnet.pems nullcert.pems badcert.pems XXXnonexisting.pems
badkey.pems nokia.pems nullbytecert.pems talos-2019-0758.pems ffdh3072.pemt OP_NO_COMPRESSIONt OP_SINGLE_DH_USEt OP_SINGLE_ECDH_USEt OP_CIPHER_SERVER_PREFERENCEt OP_ENABLE_MIDDLEBOX_COMPATc C sB d j t j t j � � � } t j r> t j j | | � n d S( Nt ( R t tracebackt format_exceptiont syst exc_infot supportt verboset stdoutt write( t prefixt
exc_format( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt handle_errorY s t
BasicTestsc B s e Z d � Z RS( c C s� y t j t j t j � � Wn( t k
rG } | j d k rA qH � n Xy t j t j t j � j � Wn( t k
r� } | j d k r� q� � n Xd S( Ni ( R t sslwrap_simplet sockett AF_INETt IOErrort errnot _sock( t selft e( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_sslwrap_simplea s ( t __name__t
__module__R( ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR _ s c C s
t j d k S( Ni i i i
i ( i i i i
i ( R t _OPENSSL_API_VERSION( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt can_clear_optionss s c C s
t j d k S( Ni i i i i ( i i i i i ( R t OPENSSL_VERSION_INFO( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt no_sslv2_implies_sslv3_hellow s c C s
t j d k S( Ni i i i ( i i i i i ( R R- ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt have_verify_flags{ s c C s. t j r& t j � j d k r& t j St j S( Ni ( t timet daylightt localtimet tm_isdstt altzonet timezone( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
utc_offset s c C s{ t j d k rw d } t j j | | � } | j d d � } | j | � } | d d k rw | d d | d
} qw n | S( Ni i i i s %b %d %H:%M:%S %Y GMTt secondi t 0R i ( i i i i i ( R R+ t datetimet strptimet replacet strftime( t cert_timet fmtt dt( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt asn1time� s c s9 t t d � r1 t j � � � f d � � } | S� Sd S( Nt PROTOCOL_SSLv2c sk y t j t j � WnG t j k
r] t j d k r^ t j � d
k r^ t j d � � q^ n X� | | � S( Ni i i i t debians squeeze/sidt s' Patched Ubuntu OpenSSL breaks behaviour( i i i i i ( RB s squeeze/sidRC ( R t
SSLContextRA t SSLErrorR- t platformt linux_distributiont unittestt SkipTest( t argst kwargs( t func( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt f� s ( t hasattrR t functoolst wraps( RL RM ( ( RL s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt skip_if_broken_ubuntu_ssl� s c s" t j � � � f d � � } | S( sy Skip a test if the OpenSSL config MinProtocol is > TLSv1.
OS distros with an /etc/ssl/openssl.cnf and MinProtocol set often do so to
require TLSv1.2 or higher (Debian Buster). Some of our tests for older
protocol versions will fail under such a config.
Alternative workaround: Run this test in a process with
OPENSSL_CONF=/dev/null in the environment.
c s� t j j d d � } y t | d � �j } x` | D]X } t j d | � } | r1 | j d � } | d k r� t j d | | f � � q� q1 q1 WWd QXWn? t t
f k
r� } t j r� t
j j d | | f � q� n X� | | � S( Nt OPENSSL_CONFs /etc/ssl/openssl.cnft rs MinProtocol\s*=\s*(TLSv\d+\S*)i t TLSv1s) %s has MinProtocol = %s which is > TLSv1.s(
Could not scan %s for MinProtocol: %s
( R t environt gett opent ret matcht groupRH RI t EnvironmentErrort UnicodeDecodeErrorR R R R R ( RJ RK t openssl_cnft configt lineRY t tls_vert err( RL ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRM � s
$ ( RO RP ( RL RM ( ( RL s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt' skip_if_openssl_cnf_minprotocol_gt_tls1� s s SNI support needed for this testt BasicSocketTestsc B s� e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e
j d � � Z d � Z
d
� Z d � Z d � Z d
� Z d � Z d � Z d � Z d � Z d � Z e j d e j k d � d � � Z d � Z e j e j d k d � d � � Z e j e j d k d � d � � Z d � Z! d � Z" d � Z# d � Z$ d � Z% e j e& � d � d! � � Z' d" � Z( e
j) d# d$ � d% � � Z* RS(& c C s� t j t j t j t j t j t j r6 t j n t j d k rO t j n | j
t j t t
h � | j
t j t t
h � t j t j t j t j t j d k r� t j t j n d S( Ni i ( i i ( i i i ( R t CERT_NONEt
CERT_OPTIONALt
CERT_REQUIREDR R t HAS_ECDHR R- R t assertInt HAS_SNIt Truet Falset OP_NO_SSLv2t OP_NO_SSLv3t OP_NO_TLSv1t
OP_NO_TLSv1_3t
OP_NO_TLSv1_1t
OP_NO_TLSv1_2( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_constants� s$
c C s� t j � } t j r> t j j d | | r0 d p3 d f � n t t d � r | j t t j
d � | j t t j
d d � n t j d d � d S( Ns
RAND_status is %d (%s)
s sufficient randomnesss insufficient randomnesst RAND_egdi t foos this is a random stringg �R@( R t RAND_statusR R R R R RN t assertRaisest TypeErrorRs t RAND_add( R& t v( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_random� s c C st t j j t � } t j r? t j j d t j
| � d � n | j | d d d d! d# f � | j | d t d � � | j | d
t d � � | j | d d � | j | d d% d' d) d+ f � | j | d d- � t j j t
� } t j rt j j d t j
| � d � n | j | d d. d/ f � | j | d d0 � | j | d d1 � | j | d d2 � d S(3 Ns
t issuert countryNamet XYt localityNames Castle Anthraxt organizationNames Python Software Foundationt
commonNamet localhostt notAfters Aug 26 14:23:15 2028 GMTt notBefores Aug 29 14:23:15 2018 GMTt serialNumbert 98A7CF88C74A32EDt subjectt subjectAltNamet DNSs projects.developer.nokia.coms projects.forum.nokia.comt OCSPs http://ocsp.verisign.comt caIssuerss0 http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cert crlDistributionPointss0 http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl( R| R} ( ( R| R} ( R~ s Castle Anthrax( ( R~ s Castle Anthrax( R s Python Software Foundation( ( R s Python Software Foundation( R� R� ( ( R� R� ( R| R} ( ( R| R} ( R~ s Castle Anthrax( ( R~ s Castle Anthrax( R s Python Software Foundation( ( R s Python Software Foundation( R� R� ( ( R� R� ( R� R� ( ( R� R� ( R� s projects.developer.nokia.com( R� s projects.forum.nokia.com( s http://ocsp.verisign.com( s0 http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer( s0 http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl( R t _sslt _test_decode_certt CERTFILER R R R R t pprintt pformatt assertEqualR@ t NOKIACERT( R& t p( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_parse_cert� s8 $
$
c C s� t j j t � } t j r? t j j d t j
| � d � n | j | i d d f d 6d d 6d d
6d d 6d d f d 6d d 6d d 6� d S( Ns
R| t UKR� s cody-caR{ s Jun 14 18:00:58 2028 GMTR� s Jun 18 18:00:58 2018 GMTR� t 02R� s# codenomicon-vm-2.test.lal.cisco.comR� R� R� i t version( R| R� ( ( R| R� ( R� s cody-ca( ( R� s cody-ca( R| R� ( ( R| R� ( R� s# codenomicon-vm-2.test.lal.cisco.com( ( R� s# codenomicon-vm-2.test.lal.cisco.com( R� s# codenomicon-vm-2.test.lal.cisco.com( ( R� s# codenomicon-vm-2.test.lal.cisco.com( R R� R� t TALOS_INVALID_CRLDPR R R R R R� R� R� ( R& R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_parse_cert_CVE_2019_5010
s $
c C s� t j j t � } t j r? t j j d t j
| � d � n d! d# d% d' d) d+ d- f } | j | d | � | j | d | � t j d. k r� d/ d0 d1 d2 d3 f } n d4 d5 d6 d7 d8 f } | j | d | � d S(9 Ns
R| t USt stateOrProvinceNamet OregonR~ t BeavertonR s Python Software Foundationt organizationalUnitNames Python Core DevelopmentR� s null.python.org example.orgt emailAddresss python-dev@python.orgR� R{ i i i R� s altnull.python.org example.comt emails null@python.org user@example.orgt URIs) http://null.python.org http://example.orgs
IP Addresss 192.0.2.1s 2001:DB8:0:0:0:0:0:1
s <invalid>R� ( R| R� ( ( R| R� ( R� R� ( ( R� R� ( R~ R� ( ( R~ R� ( R s Python Software Foundation( ( R s Python Software Foundation( R� s Python Core Development( ( R� s Python Core Development( R� s null.python.org example.org( ( R� s null.python.org example.org( R� s python-dev@python.org( ( R� s python-dev@python.org( i i i ( R� s altnull.python.org example.com( R� s null@python.org user@example.org( R� s) http://null.python.org http://example.org( s
IP Addresss 192.0.2.1( s
IP Addresss 2001:DB8:0:0:0:0:0:1
( R� s altnull.python.org example.com( R� s null@python.org user@example.org( R� s) http://null.python.org http://example.org( s
IP Addresss 192.0.2.1( s
IP Addresss <invalid>(
R R� R� t NULLBYTECERTR R R R R R� R� R� R+ ( R& R� R� t san( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_parse_cert_CVE_2013_4238" s0 $ c
C sZ t j j t � } | j | d d d d d d d d d! d# d% f f d& d' d( d) f
� d S(* NR� R� t allsanst othernames
<unsupported>R� s user@example.orgs www.example.orgt DirNameR| R} R~ s Castle AnthraxR s Python Software FoundationR� s dirname exampleR� s https://www.python.org/s
IP Addresss 127.0.0.1s 0:0:0:0:0:0:0:1
s
Registered IDs 1.2.3.4.5( R� R� ( R� s
<unsupported>( R� s
<unsupported>( R� s user@example.org( R� s www.example.org( R| R} ( ( R| R} ( R~ s Castle Anthrax( ( R~ s Castle Anthrax( R s Python Software Foundation( ( R s Python Software Foundation( R� s dirname example( ( R� s dirname example( R� s https://www.python.org/( s
IP Addresss 127.0.0.1( s
IP Addresss 0:0:0:0:0:0:0:1
( s
Registered IDs 1.2.3.4.5( R R� R� t
ALLSANFILER� ( R& R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_parse_all_sans? s
c C s� t t d � � } | j � } Wd QXt j | � } t j | � } t j | � } | j | | � | j t j d � s� | j d | � n | j
d t j d � s� | j d | � n d S( NRS s
s- DER-to-PEM didn't include correct header:
%r
s- DER-to-PEM didn't include correct footer:
%r
( RW t
CAFILE_CACERTt readR t PEM_cert_to_DER_certt DER_cert_to_PEM_certR� t
startswitht
PEM_HEADERt failt endswitht
PEM_FOOTER( R& RM t pemt d1t p2t d2( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_DER_to_PEMT s c C s� t j } t j } t j } | j | t t f � | j | t � | j | t � | j | d � | j
| d � | \ } } } } } | j | d � | j
| d � | j | d � | j
| d � | j | d � | j
| d � | j | d � | j | d � | j | d � | j | d � t r`| j
| j d j | � � | | t | � f � n. | j
| j d j | | | � � | | f � d S(
Ni � i 0i i i i? i s
LibreSSL {:d}s OpenSSL {:d}.{:d}.{:d}( R t OPENSSL_VERSION_NUMBERR- t OPENSSL_VERSIONt assertIsInstancet intt longt tuplet strt assertGreaterEqualt
assertLesst assertLessEqualt IS_LIBRESSLt
assertTrueR� t formatt hex( R& t nt tt st majort minort fixt patcht status( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_openssl_version` s0 !c C sJ t j t j � } t j | � } t j | � } ~ | j | � d � d S( N( R! R" R t wrap_sockett weakreft refR� t None( R& R� t sst wr( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
test_refcycle s
c
C s� t j t j � } t t j | � � �� } | j t j | j d � | j t j | j t d � � | j t j | j
d � | j t j | j t d � d � | j t j | j d � | j t j | j
d d � | j t | j � Wd QXd S( Ni t xs 0.0.0.0i ( s 0.0.0.0i ( R! R" R R R� Rv t errort recvt recv_intot bytearrayt recvfromt
recvfrom_intot sendt sendtot NotImplementedErrort dup( R& R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_wrapped_unconnected� s " c C sh xa d D]Y } t j t j � } | j | � t t j | � � � } | j | | j � � Wd QXq Wd S( Ng g @( Ng g @( R� R! R" t
settimeoutR R R� R� t
gettimeout( R& t timeoutR� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_timeout� s
c C s� t j � } | j t d t j | d t �| j t d t j | d t �| j t d t j | d t d d �t t j | d t d t �� �& } | j t d | j t d f � Wd QX| j
t � �5 } t t j � � � } t j | d t �Wd QXWd QX| j
| j j t j � | j
t � �; } t t j � � � } t j | d t d t �Wd QXWd QX| j
| j j t j � | j
t � �; } t t j � � � } t j | d t d t �Wd QXWd QX| j
| j j t j � d S( Ns certfile must be specifiedt keyfiles5 certfile must be specified for server-side operationst server_sidet certfileRC s! can't connect in server-side modei� ( R! t assertRaisesRegexpt
ValueErrorR R� R� Rj R t connectt HOSTRv R# t NONEXISTINGCERTR� t exceptionR$ t ENOENT( R& t sockR� t cm( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_errors� s6 $ c
C s t j j t j j t � p! t j | � } t j � } | j | j � | j t
j � �! t
j | d | d t
j
�Wd QXd S( s; Check that trying to use the given client certificate failsR� t ssl_versionN( R R R R R t curdirR! t
addCleanupt closeRv R RE R� t PROTOCOL_TLSv1( R& R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
bad_cert_test� s ! c C s | j d � d S( s Wrapping with an empty cert files nullcert.pemN( R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_empty_cert� s c C s | j d � d S( s: Wrapping with a badly formatted certificate (syntax error)s badcert.pemN( R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_malformed_cert� s c C s | j d � d S( s2 Wrapping with a badly formatted key (syntax error)s
badkey.pemN( R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_malformed_key� s c s� d � } � f d � } i dE d 6} | | d � | | d � | | d � | | d � | | d � | | d
� i dH d 6} | | d � | | d
� | | d � | | d � | | d � i dK d 6} | | d � | | d � | | d � | | d � | | d � i dN d 6} | | d � | | d � | | d � i dQ d 6} | | d
� | | d � | | d � | | d � i dT d 6} | | d � | | d � | | d � d j d � j d � } i d | f f f d 6} | | | � i dW d 6} | | | � i dZ d 6} | | | � d! j d � j d � } i d | f f f d 6} | | d" j d � j d � � | | d# j d � j d � � | | d$ j d � j d � � | | d% j d � j d � � i d& d' 6d] d 6d^ d_ d` f d. 6} | | d* � | | d+ � | | d- � | | d( � i d/ d' 6db dd df dh dj f d 6} | | d8 � | | d9 � | | d3 � i d/ d' 6dl dn dp dr f d 6} | | d8 � i d: d' 6dt dv dx dz f d 6d| d. 6} | | d8 � i d: d' 6d~ d� d� d� f d 6d� d. 6} | | d< � � j t t j d d � � j t t j i d � i d� d 6} | | d> � i d� d 6} | | d> � i d� d 6} � j t j � � } t j | dA � Wd QX� j dB t | j
� � d S(� Nc S s t j | | � d S( N( R t match_hostname( t certt hostname( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt ok� s c s � j t j t j | | � d S( N( Rv R t CertificateErrorR� ( R� R� ( R& ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� � s R� s example.comR� s ExAmple.cOms www.example.coms .example.coms example.orgt exampleXcoms *.a.coms foo.a.coms
bar.foo.a.coms a.coms Xa.coms .a.coms f*.coms foo.coms f.coms bar.coms bar.foo.coms null.python.org example.orgs null.python.orgs *.*.a.coms a.*.coms a.foo.coms a..comu püthon.python.orgt idnat asciis
x*.python.orgs xn--p*.python.orgu www*.pythön.orgu www.pythön.orgu www1.pythön.orgu ftp.pythön.orgu pythön.orgs Jun 26 21:41:46 2011 GMTR� s linuxfrz.orgR� s linuxfr.orgs linuxfr.comR� s
<unsupported>R� s Dec 18 23:59:59 2011 GMTR| R� R� t
CaliforniaR~ s
Mountain ViewR s
Google Incs mail.google.coms gmail.coms Dec 18 23:59:59 2099 GMTt blablas
google.coms a*b.coms axxb.coms a*b.co*s a*b*.coms axxbxxc.coms too many wildcards( R� s example.com( ( R� s example.com( ( ( R� s example.com( R� s *.a.com( ( R� s *.a.com( ( ( R� s *.a.com( R� s f*.com( ( R� s f*.com( ( ( R� s f*.com( R� s null.python.org example.org( ( R� s null.python.org example.org( ( ( R� s null.python.org example.org( R� s *.*.a.com( ( R� s *.*.a.com( ( ( R� s *.*.a.com( R� s a.*.com( ( R� s a.*.com( ( ( R� s a.*.com( R� s
x*.python.org( ( R� s
x*.python.org( ( ( R� s
x*.python.org( R� s xn--p*.python.org( ( R� s xn--p*.python.org( ( ( R� s xn--p*.python.org( R� s linuxfrz.org( ( R� s linuxfrz.org( ( ( R� s linuxfrz.org( R� s linuxfr.org( R� s linuxfr.com( R� s
<unsupported>( R| R� ( ( R| R� ( R� R ( ( R� R ( R~ s
Mountain View( ( R~ s
Mountain View( R s
Google Inc( ( R s
Google Inc( R� s mail.google.com( ( R� s mail.google.com( R| R� ( ( R| R� ( R� R ( ( R� R ( R~ s
Mountain View( ( R~ s
Mountain View( R s
Google Inc( ( R s
Google Inc( R| R� ( ( R| R� ( R� R ( ( R� R ( R~ s
Mountain View( ( R~ s
Mountain View( R� s mail.google.com( ( R� s mail.google.com( R� R ( ( R� R ( R| R� ( ( R| R� ( R� R ( ( R� R ( R~ s
Mountain View( ( R~ s
Mountain View( R s
Google Inc( ( R s
Google Inc( R� R ( ( R� R ( R� s a*b.com( ( R� s a*b.com( ( ( R� s a*b.com( R� s a*b.co*( ( R� s a*b.co*( ( ( R� s a*b.co*( R� s a*b*.com( ( R� s a*b*.com( ( ( R� s a*b*.com( t encodet decodeRv R� R R� R� R Rh R� R� ( R& R� R� R� R R� ( ( R& s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_match_hostname� s�
c C sP t j t j � } t t j � � �& } | j t | j | t d d �Wd QXd S( Nt server_hostnames
some.hostname( R RD t PROTOCOL_SSLv23R R! Rv R� R� Rj ( R& t ctxR� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_server_sideX s c
C sW t j t j � } t t j | � � �* } | j t � � | j d � Wd QXWd QXd S( Ns unknown-type( R! R" R R R� Rv R� t get_channel_binding( R& R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_unknown_channel_binding_ s s
tls-uniques* 'tls-unique' channel binding not availablec C s� t j t j � } t t j | � � � } | j | j d � � Wd QXt j t j � } t t j | d t d t �� � } | j | j d � � Wd QXd S( Ns
tls-uniqueR� R� ( R! R" R R R� t assertIsNoneR
Rj R� ( R& R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_tls_unique_channel_bindingf s $c C s� t j � } | j t | � d � | j | t j � t j � �M } t | d <t | d <t j � } | j | j
t � | j | j t � Wd QXd S( Ni t SSL_CERT_DIRt
SSL_CERT_FILE( R t get_default_verify_pathsR� t lenR� t DefaultVerifyPathsR t EnvironmentVarGuardt CAPATHR� t cafileR
( R& t pathst env( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_get_default_verify_pathsr s
t win32s Windows specificc C sI | j t j d � � | j t j d � � | j t t j � | j t t j d � t � } x� d D]� } t j | � } | j | t � x� | D]� } | j | t � | j
t | � d � | \ } } } | j | t � | j
| d d h � | j | t t f � t | t � r� | j | � q� q� Wqe Wd } | j
| | � d S( Nt CAt ROOTRC i t x509_asnt
pkcs_7_asns 1.3.6.1.5.5.7.3.1( R R ( R� R t enum_certificatesRv Rw t WindowsErrort setR� t listR� R� R t bytesRh t boolt
isinstancet update( R& t
trust_oidst storenamet storet elementR� t enct trustt
serverAuth( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_enum_certificates~ s&
c C s� | j t j d � � | j t t j � | j t t j d � t j d � } | j | t � xb | D]Z } | j | t � | j t
| � d � | j | d t � | j | d d d h � qe Wd S( NR RC i i i R R (
R� R t enum_crlsRv Rw R" R� R$ R� R� R R% Rh ( R& t crlsR, ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_enum_crls� s
c C sD d } t j d � } | j | | � | j | j d � | j | j d � | j | j d � | j | j d � | j | t j � | j t t j d � t j j
d � } | j | | � | j | t j � | j t t j j
d � | j t d � � t j j
d � Wd QXx� t d � D]� } y t j j
| � } Wn t k
rMq X| j | j t
� | j | j t � | j | j t � | j | j t t d � f � q Wt j j d � } | j | | � | j | t j � | j t j j d � | � | j t j j d � | � | j t d � � t j j d
� Wd QXd S( Ni� R/ s TLS Web Server Authentications 1.3.6.1.5.5.7.3.1i����s unknown NID 100000i�� i� s unknown object 'serverauth't
serverauth( i� R/ s TLS Web Server Authentications 1.3.6.1.5.5.7.3.1( R t _ASN1ObjectR� t nidt shortnamet longnamet oidR� Rv R� t fromnidR� t rangeR� R� t typeR� t fromname( R& t expectedt valt it obj( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_asn1object� sB
# c C s t j d � } | j t j j t j � | j t j j | � | j t j j j d � | j t j j j d � | j t j j j d � t j d � } | j t j j t j � | j t j j | � | j t j j j d � | j t j j j d � | j t j j j d � d S( Ns 1.3.6.1.5.5.7.3.1i� R/ s 1.3.6.1.5.5.7.3.2i� t
clientAuth(
R R5 R� t Purposet SERVER_AUTHR� R6 R7 R9 t CLIENT_AUTH( R& R? ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_purpose_enum� s c C s� t j t j t j � } | j | j � | j t � � } t j | d t j �Wd QX| j
t | j � d � t j
t j � } | j t � � } | j | � Wd QX| j
t | j � d � d S( Nt cert_reqss! only stream sockets are supported( R! R" t
SOCK_DGRAMR� R� Rv R� R R� Rd R� R� R� RD R
( R& R� t cxR ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_unsupported_dtls� s c C s | j t j | � | � d S( N( R� R t cert_time_to_seconds( R& t
timestringt timestamp( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt cert_time_ok� s c C s' | j t � � t j | � Wd QXd S( N( Rv R� R RL ( R& RM ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt cert_time_fail� s s) local time needs to be different from UTCc C s$ | j d d � | j d d � d S( Ns May 9 00:00:00 2007 GMTg �C��As Jan 5 09:34:43 2018 GMTg ��ѓ�A( RO ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt" test_cert_time_to_seconds_timezone� s c C s* d } d } | j | | � | j t j d | � | � | j d | � | j d | � | j d � | j d � | j d � | j d � | j d
� | j d � | j d � d
} | j d | � | j d | � | j d d � | j d d � | j d d � | j d � | j d d � d S( Ns Jan 5 09:34:43 2018 GMTg ��ѓ�AR= s Jan 05 09:34:43 2018 GMTs JaN 5 09:34:43 2018 GmTs Jan 5 09:34 2018 GMTs Jan 5 09:34:43 2018s Jan 5 09:34:43 2018 UTCs Jan 35 09:34:43 2018 GMTs Jon 5 09:34:43 2018 GMTs Jan 5 24:00:00 2018 GMTs Jan 5 09:60:43 2018 GMTg �W�As Dec 31 23:59:60 2008 GMTs Jan 1 00:00:00 2009 GMTs Jan 5 09:34:59 2018 GMTi�FOZs Jan 5 09:34:60 2018 GMTi�FOZs Jan 5 09:34:61 2018 GMTi�FOZs Jan 5 09:34:62 2018 GMTs Dec 31 23:59:59 9999 GMTg �� �MB( RO R� R RL RP ( R& RM t tst
newyear_ts( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_cert_time_to_seconds� s*
t LC_ALLRC c C sV d � } | � j � d k r. | j d � n | j d d � | j | � d � d S( Nc S s t j d d � S(
Ns %bi i i i i i i ( i i i i i i i i i ( R0 R< ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt local_february_name s t febs> locale-specific month name needs to be different from C locales Feb 9 00:00:00 2007 GMTg `�r�As 9 00:00:00 2007 GMT( t lowert skipTestRO RP ( R& RV ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_cert_time_to_seconds_locale s
(+ R) R* Rr Rz R� R� R� R� R� R� R t cpython_onlyR� R� R� R� R� R� R� R� R R R RH t
skipUnlessR t CHANNEL_BINDING_TYPESR R R RF R0 R3 RB RG RK RO RP R6 RQ RT t run_with_localeRZ ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRc � sB (
� $$ ' #t ContextTestsc B s� e Z e d � � Z e d � � Z d � Z e d � � Z d � Z e j e
� d � d � � Z d � Z d � Z
d � Z d
� Z e d � � Z d � Z e j e j d
� d � � Z e d � � Z e d � � Z d � Z d � Z d � Z e j e j d k d � e j e d � d � � � Z e j e j d k d � d � � Z d � Z! d � Z" d � Z# d � Z$ d � Z% d � Z& RS( c C sa x t D] } t j | � q W| j t t j � | j t t j d � | j t t j d � d S( Ni����i* ( t PROTOCOLSR RD Rv Rw R� ( R& t protocol( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_constructor- s
c C s7 x0 t D]( } t j | � } | j | j | � q Wd S( N( R` R RD R� Ra ( R& t protoR ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
test_protocol5 s
c C sY t j t j � } | j d � | j d � | j t j d � � | j d � Wd QXd S( Nt ALLt DEFAULTs No cipher can be selecteds ^$:,;?*'dorothyx( R RD R� t set_ciphersR� RE ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_ciphers; s
c C s� t j t j � } t j t j Bt j B} | t t Bt Bt Bt
BO} | j | | j � | j t j
O_ | j | t j
B| j � t � r� | j t j
@| _ | j | | j � d | _ | j d | j t j @� n | j t � � d | _ Wd QXd S( Ni ( R RD R� t OP_ALLRl Rm R R R R R R� t optionsRn R, Rv R� ( R& R t default( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_optionsB s c C s� t j t j � } | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � | j t � � d | _ Wd QX| j t � � d | _ Wd QXd S( Ni* ( R RD R� R� t verify_modeRd Re Rf Rv Rw R� R� ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_verify_modeX s s! verify_flags need OpenSSL > 0.9.8c C s� t j t j � } t t d d � } | j | j t j | B� t j | _ | j | j t j � t j | _ | j | j t j � t j | _ | j | j t j � t j t j B| _ | j | j t j t j B� | j
t � � d | _ Wd QXd S( Nt VERIFY_X509_TRUSTED_FIRSTi (
R RD R� t getattrR� t verify_flagst VERIFY_DEFAULTt VERIFY_CRL_CHECK_LEAFt VERIFY_CRL_CHECK_CHAINt VERIFY_X509_STRICTRv Rw R� ( R& R t tf( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_verify_flagsg s c C s� t j t j � } | j t d d �| j t d t �| j t | j d t �| j t � � } | j t � Wd QX| j
| j j t j
� | j t j d � � | j t � Wd QX| j t j d � � | j t � Wd QXt j t j � } | j t t � | j d t d t � | j d t d t � | j t j d � � | j t � Wd QX| j t j d � � | j t � Wd QX| j t j d � � | j d t d t � Wd QXt j t j � } | j t j d � � | j t t � Wd QX| j t d t �| j t d t j � �| j t d t t j � � �| j t t t � | j t t t j � � | j t t t t j � � � | j t d � � | j t d t �Wd QX| j t j � � | j t d d �Wd QX| j t d � � | j t d d d
�Wd QXd � } d � } d
� } d � } d � } d � } d � } d d d � � Y}
| j t d | �| j t d | �| j t d | �| j t d |
� �| j t d |
� j �| j t j � � | j t d | �Wd QX| j t d � � | j t d | �Wd QX| j t d � � | j t d | �Wd QX| j t d � � | j t d | �Wd QX| j t d | �d S( NR� s PEM libR� s key values mismatcht passwords should be a stringt badpasss cannot be longert ai � c S s t S( N( t KEY_PASSWORD( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass_unicode� s c S s
t j � S( N( R{ R ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
getpass_bytes� s c S s t t j � � S( N( R� R{ R ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass_bytearray� s c S s d S( NRy ( ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass_badpass� s c S s d d S( NRz i i ( ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass_huge� s c S s d S( Ni ( ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass_bad_type� s c S s t d � � d S( Ns
getpass error( t Exception( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass_exception� s t GetPassCallablec B s e Z d � Z d � Z RS( c S s t S( N( R{ ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt __call__� s c S s t S( N( R{ ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt getpass� s ( R) R* R� R� ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� � s s must return a strings
getpass error( ( R RD R� t load_cert_chainR� R� Rv Rw R# R� R� R� R$ R� R� RE t BADCERTt EMPTYCERTt ONLYCERTt ONLYKEYt BYTES_ONLYCERTt
BYTES_ONLYKEYR� t CERTFILE_PROTECTEDR{ R R� t ONLYKEY_PROTECTEDRj R� R� R� ( R& R R� R| R} R~ R R� R� R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_load_cert_chain{ sz
c C sj t j t j � } | j t � | j d t d d � | j t � | j d t d d � | j d t j d � � | j t | j � | j t | j d d d � | j t
� � } | j t � Wd QX| j | j
j t j � | j t
� � | j d � Wd QX| j t j d � � | j t � Wd QX| j t t � | j t d t �| j t | j d t � d S( NR R
s utf-8u s PEM lib( R RD R� t load_verify_locationsR� R� t BYTES_CERTFILER Rv Rw R# R� R� R� R$ R� R� RE R� R t BYTES_CAPATHRj ( R& R R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_load_verify_locations� s$
c
C s t t � � } | j � j d � } Wd QXt j | � } t t � � } | j � j d � } Wd QXt j | � } t j t j � } | j | j
� d d � | j d | � | j | j
� d d � | j d | � | j | j
� d d � | j d | � | j | j
� d d � t j t j � } d j | | f � } | j d | � | j | j
� d d � t j t j � } d | d | d
| d g } | j d d j | � � | j | j
� d d � t j t j � } | j d | � | j d | � | j | j
� d d � | j d | � | j | j
� d d � t j t j � } d j | | f � } | j d | � | j | j
� d d � t j t j � } | j
t | j d t �| j t j d
� � | j d d � Wd QX| j t j d � � | j d d � Wd QXd S( NR t x509_cai t cadatai i s
t headt othert againt tailRC s
no start lineu brokens not enough datat broken( RW R� R� R R R� t CAFILE_NEURONIORD R� R� t cert_store_statsR� R Rv Rw t objectR� RE ( R& RM t
cacert_pemt
cacert_dert neuronio_pemt neuronio_derR t combined( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_load_verify_cadata� sN c C sf d } t j � } y | j | � Wn( t k
rM | j d | | f � n Xt j t j � } | j t � t
j d k r� | j t � n | j
t | j � | j
t | j d � | j
t � � } | j t � Wd QX| j | j j t j � | j
t j � � } | j t � Wd QXt j � �9 } t
j j | | � } t j t | � | j | � Wd QXd S( Nu
dhpäräm.pems; filename %r cannot be encoded to the filesystem encoding %rt nt( R t getfilesystemencodingR t UnicodeEncodeErrorRY R RD R� t load_dh_paramst DHFILER R
t BYTES_DHFILERv Rw R� R# R� R� R� R$ R� RE R� R t temp_dirR R t shutilt copy( R& t filenamet fs_encodingR R� t dt fname( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_load_dh_params s*
c C s� x� t D]x } t j | � } | j | j � i d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d
6d d 6d d 6� q Wd S(
Ni t numberR� t connect_goodt connect_renegotiatet acceptt accept_goodt accept_renegotiatet hitst missest timeoutst
cache_full( R` R RD R� t
session_stats( R& Rc R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_session_stats6 s
c C s t j t j � } | j � d S( N( R RD R� t set_default_verify_paths( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_set_default_verify_pathsH s s# ECDH disabled on this OpenSSL buildc C s� t j t j � } | j d � | j d � | j t | j � | j t | j d � | j t | j d � | j t | j d � d S( Nt
prime256v1Rt ( R RD R� t set_ecdh_curveRv Rw R� R� ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_set_ecdh_curveN s
c C s� t j t j � } | j t | j � | j t | j d � | j t | j d � | j t | j | � d � } | j d � | j | � d S( Ni RC c S s d S( N( ( R� t
servernameR ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
dummycallbackb s ( R RD R� Rv Rw t set_servername_callbackR� ( R& R R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_sni_callbackX s
c C sa t j t j � } | d � } | j | � t j | � } ~ ~ t j � | j | � d � d S( Nc S s d S( N( ( R� R� R t cycle( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� l s (
R RD R� R� R� R� t gct collectt assertIsR� ( R& R R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_sni_callback_refcycleg s
c C s� t j t j � } | j | j � i d d 6d d 6d d 6� | j t � | j | j � i d d 6d d 6d d 6� | j t � | j | j � i d d 6d d 6d d 6� | j t � | j | j � i d d 6d d 6d d 6� d S( Ni R� t crlt x509i i ( R RD R� R� R� R� R� R� R� ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_cert_store_statst s
c C s t j t j � } | j | j � g � | j t � | j | j � g � | j t � | j | j � i d d d d f d 6t d
� d 6t d � d
6d d 6d d 6d d! d# d% f d 6d d 6g � t t � � } | j
� } Wd QXt j | � } | j | j t � | g � d S(& NR s Root CAR� s http://www.cacert.orgR� s CA Cert Signing AuthorityR� s support@cacert.orgR{ s Mar 29 12:29:49 2033 GMTR� s Mar 30 12:29:49 2003 GMTR� t 00R� s! https://www.cacert.org/revoke.crlR� R� i R� ( R s Root CA( ( R s Root CA( R� s http://www.cacert.org( ( R� s http://www.cacert.org( R� s CA Cert Signing Authority( ( R� s CA Cert Signing Authority( R� s support@cacert.org( ( R� s support@cacert.org( s! https://www.cacert.org/revoke.crl( R s Root CA( ( R s Root CA( R� s http://www.cacert.org( ( R� s http://www.cacert.org( R� s CA Cert Signing Authority( ( R� s CA Cert Signing Authority( R� s support@cacert.org( ( R� s support@cacert.org(
R RD R� R� t get_ca_certsR� R� R� R@ RW R� R� Rj ( R& R RM R� t der( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_get_ca_certs� s.
c C s� t j t j � } | j � t j t j � } | j t j j � | j � t j t j � } | j t j j � t j t j � } | j t | j d � | j t | j d � d S( NRE (
R RD R� t load_default_certsRD RE RF Rv Rw R� ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_load_default_certs� s
R s not-Windows specifics! LibreSSL doesn't support env varsc C st t j t j � } t j � �P } t | d <t | d <| j � | j | j � i d d 6d d 6d d 6� Wd QXd S( NR R i R� i R� R� (
R RD R� R R R R� R� R� R� ( R& R R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_load_default_certs_env� s
s Windows specificc C s� t j t j � } | j � | j � } t j t j � } t j � �K } t | d <t | d <| j � | d c d 7<| j | j � | � Wd QXd S( NR R R� i (
R RD R� R� R� R R R R� R� ( R& R t statsR ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt# test_load_default_certs_env_windows� s
c C s� | j | j t j @t j � t d k rC | j | j t @t � n t d k ri | j | j t @t � n t d k r� | j | j t @t � n t d k r� | j | j t @t � n d S( Ni ( R� Rj R Rl R R R R ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt _assert_context_options� s
c C s( t j � } | j | j t j � | j | j t j � | j | j � | j | � t
t � � } | j � j
d � } Wd QXt j d t d t d | � } | j | j t j � | j | j t j � | j | � t j t j j � } | j | j t j � | j | j t j � | j | � d S( NR R R
R� ( R t create_default_contextR� Ra R
Rm Rf R� t check_hostnameR� RW t
SIGNING_CAR� R R RD RF Rd ( R& R RM R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_create_default_context� s
c C s_ t j � } | j | j t j � | j | j t j � | j | j � | j | � t j t j
� } | j | j t j
� | j | j t j � | j | � t j t j
d t j d t �} | j | j t j
� | j | j t j � | j
| j � | j | � t j d t j j � } | j | j t j � | j | j t j � | j | � d S( NRH R� t purpose( R t _create_stdlib_contextR� Ra R
Rm Rd t assertFalseR� R� R� Rf Rj R� RD RF ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test__create_stdlib_context� s(
c C s� t j d � } | j | j | j � | j d t � | j | j | j � | j d t � | j | j | j � | j d t � | j � | j | j | j � d S( NR t enable( R t import_fresh_moduleR� t _create_default_https_contextR� t _https_verify_certificatesRk t _create_unverified_contextRj ( R& t local_ssl( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test__https_verify_certificates s
c C sq d } d } i } t d | | � d | t j <t d | | � x+ d D]# } | | t j <t d | | � qF Wd S(
Ns import ssl, sys; status = "Error: _create_default_https_context does not verify certs" if ssl._create_default_https_context is ssl._create_unverified_context else None; sys.exit(status)s import ssl, sys; status = "Error: _create_default_https_context verifies certs" if ssl._create_default_https_context is ssl.create_default_context else None; sys.exit(status)s -cR8 RC t 1t enabledRt ( RC R� R� Rt ( R R t _https_verify_envvar( R& t https_is_verifiedt https_is_not_verifiedt extra_envt setting( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test__https_verify_envvar s
c C s� t j t j � } | j | j � | j t � � t | _ Wd QXt j | _ | j | j � t | _ | j
| j � t j | _ t | _ | j
| j � | j t � � t j | _ Wd QXt
| _ | j | j � d S( N( R RD R� R� R� Rv R� Rj Rf Rm R� Re Rd Rk ( R& R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_check_hostname6 s (' R) R* RQ Rb Rd Rh Rl Rn RH R\ R/ Rw R� R� R� R� R� R� R Rg R� t needs_sniR� R� R� R� R� t skipIfR RF R� R� R� R� R� R� R� R� R� ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR_ + s8 S :
$ t
SSLErrorTestsc B s# e Z d � Z d � Z d � Z RS( c C sz t j d d � } | j t | � d � | j | j d � t j d d � } | j t | � d � | j | j d � d S( Ni Rt ( R RE R� R� R$ t SSLZeroReturnError( R& R' ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_strO s c C s� t j t j � } | j t j � � } | j t � Wd QX| j | j j d � | j | j j
d � t | j � } | j | j
d � | � d S( Nt PEMt
NO_START_LINEs" [PEM: NO_START_LINE] no start line( R RD R� Rv RE R� R� R� R� t libraryt reasonR� R� R� ( R& R R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_lib_reasonY s c
C s t j t j � } t t j � � �� } | j d � | j d � t j � } | j | j � � | j t
� t | j | t
d t
�� �m } | j t j
� � } | j � Wd QXt | j � } | j | j d � | � | j | j j t j � Wd QXWd QXd S( Ns 127.0.0.1i i t do_handshake_on_connects% The operation did not complete (read)( s 127.0.0.1i ( R RD R� R R! t bindt listenR� t getsocknamet setblockingRk R� Rv t SSLWantReadErrort do_handshakeR� R� R� R� R� R$ t SSL_ERROR_WANT_READ( R& R R� t cR� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
test_subclassc s
!( R) R* R� R� R ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� M s
t NetworkedTestsc B s� e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e
j e j
d k d � d
� � Z d � Z d � Z d
� Z d � Z e d � � Z RS( c
C s+ t j t � �t j t j t j � d t j �} z- | j t d f � | j i | j
� � Wd | j � Xt j t j t j � d t j �} | j
t j d | j t d f � | j � t j t j t j � d t j d t �} z* | j t d f � | j | j
� � Wd | j � XWd QXd S( NRH i� s certificate verify failedt ca_certs( R t transient_internett REMOTE_HOSTR R� R! R" Rd R� R� t getpeercertR� Rf R� RE t REMOTE_ROOT_CERTR� ( R& R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_connectx s&
c
C s� t j t � �s t j t j t j � d t j d t �} z6 | j d | j
t d f � � | j | j � � Wd | j
� XWd QXd S( NRH R i i� ( R R R R R� R! R" Rf R R� t
connect_exR� R
R� ( R& R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_connect_ex� s c C sA t j t � �,t j t j t j � d t j d t d t �} z� | j
t � | j t d f � } | j | d t
j t
j f � t j g | g g d � xu t ry | j � PWq� t j k
r� t j | g g g d � q� t j k
rt j g | g g d � q� Xq� W| j | j � � Wd | j � XWd QXd S( NRH R R� i� i g @( R R R R R� R! R" Rf R Rk R R
Rh R$ t EINPROGRESSt EWOULDBLOCKt selectRj R R t SSLWantWriteErrorR� R
R� ( R& R� t rc( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_non_blocking_connect_ex� s(
!c C s� t j t � �� t j t j t j � d t j d t d t �} z^ | j
d � | j t d f � } | d k r� | j d � n | j
| t j t j f � Wd | j � XWd QXd S( NRH R R� gH�����z>i� i s! REMOTE_HOST responded too quickly( R R R R R� R! R" Rf R Rk R� R
RY Rh R$ t EAGAINR R� ( R& R� R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_timeout_connect_ex� s
c
C s� t j t � �� t j t j t j � d t j d t �} zG | j t d f � } t
j t
j t
j
t
j f } | j | | � Wd | j � XWd QXd S( NRH R i� ( R R R R R� R! R" Rf R R
R$ t ECONNREFUSEDt EHOSTUNREACHt ETIMEDOUTR Rh R� ( R& R� R t errors( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_connect_ex_error� s c
C sy t j t � �dt j t j � } | j t j t j � � } | j t d f � z | j
i | j � � Wd | j � X| j t j t j � d t �} | j t d f � | j � t j
| _ | j t j t j � � } | j t j d | j t d f � | j � | j t � | j t j t j � � } | j t d f � z | j � } | j | � Wd | j � XWd QXd S( Ni� R s certificate verify failed( R R R R RD R
R� R! R" R� R� R
R� Rf Rm R� RE R� R R� ( R& R R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_connect_with_context� s.
c C s( t j t � �t j t j � } t j | _ | j d t � | j
t j t j � � } | j
t d f � z | j � } | j | � Wd | j � Xt j t j � } t j | _ | j d t � | j
t j t j � � } | j
t d f � z | j � } | j | � Wd | j � XWd QXd S( NR
i� ( R R R R RD R
Rf Rm R� R R� R! R" R� R
R� R� R� ( R& R R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_connect_capath� s& c
C s[ t t � � } | j � j d � } Wd QXt j | � } t j t � �
t j t j
� } t j | _ | j
d | � t | j t j t j � � � �3 } | j t d f � | j � } | j | � Wd QXt j t j
� } t j | _ | j
d | � t | j t j t j � � � �3 } | j t d f � | j � } | j | � Wd QXWd QXd S( NR R� i� ( RW R R� R R R� R R R RD R
Rf Rm R� R R� R! R" R� R
R� ( R& RM R� R� R R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_connect_cadata s$ $ $ R� s* Can't use a socket as a file under Windowsc C s� t j t � �� t j t j t j � � } | j t d f � | j � } | j � } | j
� t j | d � | j
� t
j � | j t � � } t j | d � Wd QX| j | j j t j � Wd QXd S( Ni� i ( R R R R R� R! R" R� t filenot makefileR� R R� R� R� Rv t OSErrorR� R� R$ t EBADF( R& R� t fdRM R' ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_makefile_close0 s
c
C s t j t � �t j t j � } | j t d f � | j t � t j | d t j
d t �} d } xy t r� y | d 7} | j � PWqi t j
k
r� t j | g g g � qi t j k
r� t j g | g g � qi Xqi W| j � t j r t j j d | � n Wd QXd S( Ni� RH R� i i s9
Needed %d calls to do_handshake() to establish session.
( R R R R! R" R� R Rk R R� Rd Rj R R R R R� R R R R ( R& R� t count( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_non_blocking_handshakeD s(
c s? d � f d � } | t d t � t j r; | d d � n d S( Nc s% t j | � �t j | | f � } | sE � j d | | f � n y t j | | f d t �} Wn6 t j k
r� } t j r� t j j
d | � q� n X� j d | | | f � t j | | f d | �} | s� � j d | | f � n t j rt j j
d | | | f � n Wd QXd S( Ns No server certificate on %s:%s!R s %s
s$ Got server certificate %s for %s:%s!s&
Verified certificate for %s:%s is
%s
( R R R t get_server_certificateR� R� RE R R R R ( t hostt portR� R� R� ( R& ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt _test_get_server_certificate[ s"
i� s ipv6.google.com( R� R R R t IPV6_ENABLED( R& R* ( ( R& s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_get_server_certificateZ s c C s t d f } t j | d � �� t t j t j t j � d t j d d �� � } | j | � Wd QXt t j t j t j � d t j d d �� � } | j | � Wd QX| j
t j d � �Q t t j t j � � �2 } t j | d t j d d �} | j | � Wd QXWd QXWd QXd S( Ni� i RH t ciphersRe Rf s No cipher can be selecteds ^$:,;?*'dorothyx( R R R R R R� R! R" Rd R� R� RE ( R& t remoteR� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRh u s c C s� t j t � �� t j t j � } t j | _ | j d t � | j
| j � g � | j t
j
t
j � � } | j t d f � z | j � } | j | � Wd | j � X| j
t | j � � d � Wd QXd S( NR
i� i ( R R R R RD R
Rf Rm R� R R� R� R� R! R" R� R
R� R� R ( R& R R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_get_ca_certs_capath� s c C s� t j t � �� t j t j � } t j t j � } t j t j � } t | j
| � � �u } | j t d f � | j | j
| � | j | j j
| � | | _
| j | j
| � | j | j j
| � Wd QXWd QXd S( Ni� ( R R R R RD R� R
R! R" R R� R� R� t contextt _sslobj( R& t ctx1t ctx2R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_context_setget� s ( R) R* R R R R R R R R RH R� R R
R$ R& R, Rh R/ R� R4 ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR v s $ ( t make_https_servert ThreadedEchoServerc B s{ e Z d e j f d � � YZ d d d d e e e d d d d d � Z d � Z d � Z
d d � Z d � Z d � Z
RS( t ConnectionHandlerc B sD e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s� A mildly complicated class, because we want it to work both
with and without the SSL wrapper around the socket connection, so
that we can test the STARTTLS functionality.c C sZ | | _ t | _ | | _ | | _ | j j d � d | _ t j j
| � t | _ d S( Ni (
t serverRk t runningR� t addrR R� t sslconnt threadingt Threadt __init__Rj t daemon( R& R8 t connsockR: ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR> � s c C s� y] | j j j | j d t �| _ | j j j | j j � � | j j j | j j
� � Wn)t j t
j t f k
r�} | j t j t j t j f k r� | j j j t | � � | j j r� t d t | j � d � n t | _ | j � t St | t j � r$| j t j k r$� n | j j j | � | j j rat d t | j � d � n t | _ | j j � | j � t Sn"X| j j j t j k r:| j j! � } t" j# r�| j j r�t$ j% j& d t' j( | � d � n | j j! t � } t" j# r:| j j r:t$ j% j& d t t) | � � d � q:n | j j* � } t" j# r�| j j r�t$ j% j& d t | � d � t$ j% j& d t | j j � � d � n t Sd S(
NR� s'
server: bad connection attempt from s :
s client cert is s
s cert binary is s bytes
s" server: connection cipher is now s" server: selected protocol is now (+ R8 R0 R� R� Rj R; t selected_npn_protocolst appendt selected_npn_protocolt selected_alpn_protocolst selected_alpn_protocolR RE R! R� R! R$ t
ECONNRESETt EPIPEt ESHUTDOWNt conn_errorsR� t chattyR t reprR: Rk R9 R� R' t stopRm Rf R
R R R R R R� R� R t cipher( R& R' R� t cert_binaryRM ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt wrap_conn� sH !
%
$* !c C s* | j r | j j � S| j j d � Sd S( Ni ( R; R� R� R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� � s
c C s- | j r | j j | � S| j j | � Sd S( N( R; R R� R� ( R& R% ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR � s c C s* | j r | j j � n
| j j � d S( N( R; R� R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� s c C s� t | _ | j j s( | j � s( d Sn x�| j r�yE| j � } | j � } | sk t | _ | j � n
| d k r� t j
r� | j j r� t j
j d � n | j � d S| j j r
| d k r
t j
r� | j j r� t j
j d � n | j d � | j � sxd Snk| j j r�| j r�| d k r�t j
rV| j j rVt j
j d � n | j d � | j j � | _ d | _ t j
rx| j j rxt j
j d � qxn� | d k rt j
r�| j j r�t j
j d
� n | j j d � } | j t | � j d � d
� nf t j
re| j j re| j r6d p9d } t j
j d | | | j � | f � n | j | j � � Wq+ t j k
r�| j j r�t d � n | j � t | _ | j j � q+ Xq+ Wd S( Nt overs" server: client closed connection
t STARTTLSs2 server: read STARTTLS from client, sending OK...
s OK
t ENDTLSs0 server: read ENDTLS from client, sending OK...
s* server: connection is now unencrypted...
s
CB tls-uniques@ server: read CB tls-unique from client, sending our CB data...
s
tls-uniques us-asciis
t encryptedt unencrypteds/ server: read %r (%s), sending back %r (%s)...
s Test server failure:
( Rj R9 R8 t starttls_serverRO R� t stripRk R� R R t connectionchattyR R R R; t unwrapR� R� R
RK R RX R RE RJ R RL ( R& t msgt strippedt datat ctype( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt run sb
#
( R) R* t __doc__R> RO R� R R� R] ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR7 � s
: c C s` | r | | _ n� t j | d k r* | n t j � | _ | d k rK | n t j | j _ | rs | j j | � n | r� | j j | � n | r� | j j | � n | r� | j j
| � n |
r� | j j |
� n | | _ | | _
| | _ t j � | _ t j | j � | _ d | _ t | _ g | _ g | _ g | _ t j j | � t | _ d S( N( R0 R RD R� t PROTOCOL_TLSRd Rm R� R� t set_npn_protocolst set_alpn_protocolsRg RJ RW RU R! R� R t bind_portR) t flagRk t activeRA RD RI R< R= R> Rj R? ( R& t certificateR� t certreqst cacertsRJ RW RU t
npn_protocolst alpn_protocolsR- R0 ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR> B s: c C s$ | j t j � � | j j � | S( N( t startR< t EventRc t wait( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt __enter__f s
c G s | j � | j � d S( N( RL R ( R& RJ ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt __exit__k s
c C s | | _ t j j | � d S( N( Rc R< R= Rj ( R& Rc ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRj o s c C s | j j d � | j j d � t | _ | j rB | j j � n x� | j r� yu | j j � \ } } t j r� | j
r� t j j
d t | � d � n | j | | | � } | j � | j � WqE t j k
r� qE t k
r� | j � qE XqE W| j j � d S( Ng�������?i s server: new connection from s
( R� R� R� Rj Rd Rc R# R� R R RJ R R R RK R7 Rj R R! R� t KeyboardInterruptRL R� ( R& t newconnt connaddrt handler( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR] s s&
c C s
t | _ d S( N( Rk Rd ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRL � s N( R) R* R< R= R7 R� Rj Rk R> Rm Rn Rj R] RL ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR6 � s � t AsyncoreEchoServerc B sc e Z d e j f d � � YZ d � Z d � Z d � Z d � Z d d � Z
d � Z d � Z RS(
t
EchoServerc B s< e Z d e j f d � � YZ d � Z d � Z d � Z RS( R7 c B s> e Z d � Z d � Z d � Z d � Z d � Z d � Z RS( c C sQ t j | d t d | d t �| _ t j j | | j � t | _ | j � d S( NR� R� R� (
R R� Rj Rk R! t asyncoret dispatcher_with_sendR> t _ssl_acceptingt _do_ssl_handshake( R& t connR� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR> � s c C sB t | j t j � r> x& | j j � d k r: | j � q Wn t S( Ni ( R' R! R t SSLSockett pendingt handle_read_eventRj ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt readable� s c C s� y | j j � Wn� t j t j f k
r1 d St j k
rK | j � St j k
ra � n? t j k
r� } | j d t
j k r� | j � Sn
Xt | _
d S( Ni ( R! R R R R t SSLEOFErrort handle_closeRE R� RJ R$ t ECONNABORTEDRk Rw ( R& Ra ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRx � s
c C su | j r | j � n[ | j d � } t j rK t j j d t | � � n | s^ | j � n | j
| j � � d S( Ni s server: read %s from client
( Rw Rx R� R R R R R RK R� R� RX ( R& R[ ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt handle_read� s
c C s1 | j � t j r- t j j d | j � n d S( Ns server: closed connection %s
( R� R R R R R R! ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR � s
c C s � d S( N( ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR � s ( R) R* R> R} Rx R� R R ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR7 � s c C sZ | | _ t j t j t j � } t j | d � | _ t j j | | � | j
d � d S( NRC i ( R� R! R" t SOCK_STREAMR Rb R) Ru t
dispatcherR> R� ( R& R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR> � s
c C sI | j � \ } } t j r2 t j j d | � n | j | | j � d S( Ns$ server: new connection from %s:%s
( R� R R R R R R7 R� ( R& t sock_objR: ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
handle_accept� s c C s � d S( N( ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR � s ( R) R* Ru Rv R7 R> R� R ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRt � s 3 c C sP d | _ t | _ | j | � | _ | j j | _ t j j | � t
| _ d S( N( R� Rc Rk Rd Rt R8 R) R< R= R> Rj R? ( R& R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR> � s c C s d | j j | j f S( Ns <%s %s>( t __class__R) R8 ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt __str__� s c C s$ | j t j � � | j j � | S( N( Rj R< Rk Rc Rl ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRm � s
c G s| t j r t j j d � n | j � t j rB t j j d � n | j � t j rh t j j d � n t j d t � d S( Ns cleanup: stopping server.
s! cleanup: joining server thread.
s cleanup: successfully joined.
t
ignore_all(
R R R R R RL R Ru t close_allRj ( R& RJ ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRn � s
c C s | | _ t j j | � d S( N( Rc R< R= Rj ( R& Rc ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRj � s c C sQ t | _ | j r" | j j � n x( | j rL y t j d � Wq% q% Xq% Wd S( Ni ( Rj Rd Rc R# Ru t loop( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR] � s c C s t | _ | j j � d S( N( Rk Rd R8 R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRL � s N(
R) R* Ru R� Rt R> R� Rm Rn R� Rj R] RL ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyRs � s E
s FOO
c C s� i } t d | d | d t � } | ��t | j t j � d | �� ��} | j t | j f � x� | t | � t | � g D]� } | r� t
j r� t j
j d | � q� n | j | � | j � }
| r� t
j r� t j
j d |
� q� n |
| j � k r~ t d |
d t |
� | d j � t | � f � � q~ q~ W| j d � | rpt
j rpt j
j d
� qpn | j i | j � d 6| j � d 6| j � d
6| j � d 6| j � d 6| j � d 6� | j � Wd QX| j | d <| j | d <Wd QX| S( sc
Launch a server, connect a client to it and try various reads
and writes.
R0 RJ RW R s client: sending %r...
s client: read %r
s4 bad data <<%r>> (%d) received; expected <<%r>> (%d)
i s over
s client: closing connection.
t compressionRM t peercertt client_alpn_protocolt client_npn_protocolR� Nt server_alpn_protocolst server_npn_protocols( R6 Rk R R� R! R� R� R) R� t
memoryviewR R R R R R� RX t AssertionErrorR R( R� RM R
RE RC R� R� RD RA ( t client_contextt server_contextt indataRJ RW t sni_nameR� R8 R� t argt outdata( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt server_params_test sL "
'
c
C s | d k r t j } n i d t j 6d t j 6d t j 6| } t j r� | rU d pX d } t j j | t j
| � t j
| � | f � n t j | � } | j | O_ t j | � } | j | O_ | j
t j k r� | j d � n x7 | | f D]) }
| |
_ |
j t � |
j t � q� Wy t | | d t d t �} WnS t j k
rf| r� qn� t j k
r�} | s�| j t j k r� qnk X| s�t d t j
| � t j
| � f � � n9 | t k r| | d
k rt d | | d
f � � n d S(
sT
Try to SSL-connect using *client_protocol* to *server_protocol*.
If *expect_success* is true, assert that the connection succeeds,
if it's false, assert that the connection fails.
Also, if *expect_success* is a string, assert that it is the protocol
version actually used by the connection.
Rd Re Rf s %s->%s %s
s
{%s->%s} %s
Re RJ RW s5 Client protocol %s succeeded with server protocol %s!R� s% version mismatch: expected %r, got %rN( R� R Rd Re Rf R R R R R t get_protocol_nameRD Rj Ra R
Rg Rm R� R� R� R� Rk RE R! R� R$ RF R� Rj (
t server_protocolt client_protocolt expect_successt certsreqst server_optionst client_optionst certtypet formatstrR� R� R R� R' ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt try_protocol_combo/ sR
t
ThreadedTestsc B s� e Z e d � � Z d � Z e j e � d � d � � Z d � Z d � Z
d � Z e e j e e
d � d � d � � � Z e e d
� � � Z e e j e e
d � d � d
� � � Z e d � � Z e e j e e
d � d � e d � � � � Z e e j e e
d � d � d � � � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e j e
j d � d! � � Z! e j e
j" d" � d# � � Z# e j d$ e
j$ k d% � d& � � Z% d' � Z& e j e e
d( � d) � d* � � Z' d+ � Z( d, � Z) e j e
j* d- � d. � � Z+ e j e
j* d/ � d0 � � Z, d1 � Z- e j e
j. d2 � d3 � � Z/ d4 � Z0 d5 � Z1 e2 d6 � � Z3 e2 d7 � � Z4 e2 d8 � � Z5 e2 d9 � � Z6 d: � Z7 RS(; c C sf t j r t j j d � n xC t D]; } t j | � } | j t � t
| | d t d t �q# Wd S( s2 Basic test of an SSL client connecting to a servers
RJ RW N( R R R R R R` R RD R� R� R� Rj ( R& Ra R0 ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_echom s
c C s� t j r t j j d � n t j t j � } t j | _ | j
t � | j t � t
d | d t � } | �x| j t j � d t �} | j t | j f � | j t � � | j � Wd QX| j � | j � } | j | d � | j � } t j r:t j j t j | � d � t j j d t | � d � n d | k rc| j d t j | � � n d | d k r�| j d � n | j d
| � | j d | � t j | d
� } t j | d � } | j | | � | j! � Wd QXd S( Ns
R0 RJ R� s Can't get peer certificate.s Connection cipher is s .
R� s$ No subject field in certificate: %s.R s Python Software Foundationsk Missing or invalid 'organizationName' field in certificate subject; should be 'Python Software Foundation'.R� R� ( R s Python Software Foundation( ( R s Python Software Foundation(" R R R R R R RD R
Rf Rm R� R� R� R6 Rk R� R! R� R� R) Rv R� R
R R� RM R� R� R� R� Rh RL R� R� ( R& R0 R8 R� R� RM t beforet after( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_getpeercertx sB
!
s! verify_flags need OpenSSL > 0.9.8c C s t j r t j j d � n t j t j � } | j t � t j t j � } t j
| _ | j t
� t t d d � } | j | j t j | B� t d | d t � } | �[ t | j t j � � � �9 } | j t | j f � | j � } | j | d � Wd QXWd QX| j t j O_ t d | d t � } | �[ t | j t j � � � �9 } | j t j d � � | j t | j f � Wd QXWd QXWd QX| j t � t d | d t � } | �[ t | j t j � � � �9 } | j t | j f � | j � } | j | d � Wd QXWd QXd S( Ns
Ro i R0 RJ s Can't get peer certificate.s certificate verify failed( R R R R R R RD R� R� t SIGNED_CERTFILERf Rm R� R� Rp R� Rq Rr R6 Rj R R� R! R� R� R) R
R� Rs R� RE t CRLFILE( R& R� R0 Rv R8 R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_crl_check� s:
(
c C s� t j r t j j d � n t j t j � } | j t � t j t j � } t j
| _ t | _
| j t � t d | d t � } | �a t | j t j � d d �� �9 } | j t | j f � | j � } | j | d � Wd QXWd QXt d | d t � } | �a t | j t j � d d �� �9 } | j t j d � � | j t | j f � Wd QXWd QXWd QXt d | d t � } | �F t t j � � �- } | j t d � � | j | � Wd QXWd QXWd QXd S(
Ns
R0 RJ R R� s Can't get peer certificate.t invalids. hostname 'invalid' doesn't match u?'localhost's' check_hostname requires server_hostname( R R R R R R RD R� R� R� Rf Rm Rj R� R� R� R6 R R� R! R� R� R) R
R� R� R R� ( R& R� R0 R8 R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� � s8
(
c C sW t j j t j j t � p! t j d � } t t d t j d t
d t d t �} | �� t t
j
� � �� } t t j | d | d t j �� �� } y | j t | j f � Wn� t j k
r� } t j rAt j j d | � qAn[ t
j k
r3} | j t j k r� n t j rAt j j d | � qAn X| j d
� Wd QXWd QXWd QXd S( s� Connecting when the server rejects the client's certificate
Launch a server with CERT_REQUIRED, and check that trying to
connect to it with a wrong client certificate fails.
s keycert.pemRf Rg RJ RW R� R� s
SSLError is %r
s
socket.error is %r
s' Use of invalid cert should have failed!N( R R R R R R� R6 R� R Rf R� Rk R R! R� R� R� R� R) RE R R R R R R� R$ RF R� ( R& R� R8 R� R� R' ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_wrong_cert� s, ! c s� t j � � t j � � t j � � t j � t � � � � � f d � } � � � � f d � } t j d | � } | j � z | � Wd | j � Xd S( s| A brutal shutdown of an SSL server should raise an OSError
in the client when attempting handshake.
c sK � j d � � j � � j � \ } } | j � � j � � j � d S( Ni ( R� R# R� R� ( t newsockR: ( t
listener_gonet listener_readyR� ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt listener s
c s} � j � t t j � � �[ } | j t � f � � j � y t j | � } Wn t j k
re n X� j d � Wd QXd S( Ns2 connecting to closed SSL socket should have failed( Rl R R! R� R� R R� R� R� ( R t ssl_sock( R� R� R) R& ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt connector& s
t targetN( R< Rk R! R Rb R� R= Rj R ( R& R� R� R� ( ( R� R� R) R� R& s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_rude_shutdown s
RA s) OpenSSL is compiled without SSLv2 supportc C s t j r t j j d � n t t j t j t � t t j t j t t j � t t j t j t t j
� t t j t j t � t t j t j
t � t t j t j t � t � r� t t j t j t d t j �n t t j t j t d t j �t t j t j t d t j �d S( s9 Connecting to an SSLv2 server with various client optionss
R� N( R R R R R R� R RA Rj Re Rf R
Rk t PROTOCOL_SSLv3R� R. Rl Rm Rn ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_protocol_sslv29 s
c C s! t j r t j j d � n t t d � r� y t t j t j t
� Wq� t j k
r� } t j r� t j j d t
| � � q� q� Xn t t d � r� t t j t j t � n t t j t j t
� t t j t j d � t t d � r t t j t j t t j � n t t j t j t
t j � t t j t j d t j � t t d � rot t j t j t t j � n t t j t j t
t j � t t j t j d t j � t t d � r�t t j t j t d t j �n t t j t j t
d t j t j B�t t j t j t d t j �d S( s: Connecting to an SSLv23 server with various client optionss
RA s; SSL2 client to SSL23 server test unexpectedly failed:
%s
R� RT R� N( R R R R R RN R R� R
RA Rj R! R� R� R� Rk R� Re Rf Rm Rl Rn ( R& R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_protocol_sslv23P s:
R� s) OpenSSL is compiled without SSLv3 supportc C s� t j r t j j d � n t t j t j d � t t j t j d t j � t t j t j d t j � t
t d � r� t t j t j t � n t t j t j
t d t j �t t j t j t � t � r� t t j t j
t d t j �n d S( s9 Connecting to an SSLv3 server with various client optionss
t SSLv3RA R� N( R R R R R R� R R� Re Rf RN RA Rk R
Rm R� R. Rl ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_protocol_sslv3y s
c C s� t j r t j j d � n t t j t j d � t t j t j d t j � t t j t j d t j � t
t d � r� t t j t j t � n t
t d � r� t t j t j
t � n t t j t j t d t j �d S( s8 Connecting to a TLSv1 server with various client optionss
RT RA R� R� N( R R R R R R� R R� Re Rf RN RA Rk R� R
Rn ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_protocol_tlsv1� s t PROTOCOL_TLSv1_1s TLS version 1.1 not supported.c C s� t j r t j j d � n t t j t j d � t t d � rZ t t j t j t
� n t t d � r� t t j t j t
� n t t j t j t
d t j
�t t j t j d � t t j t j t
� t t j t j t
� d S( sn Connecting to a TLSv1.1 server with various client options.
Testing against older TLS versions.s
s TLSv1.1RA R� R� N( R R R R R R� R R� RN RA Rk R� R
Rp R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_protocol_tlsv1_1� s
t PROTOCOL_TLSv1_2s TLS version 1.2 not supported.c C s3 t j r t j j d � n t t j t j d d t j t j Bd t j t j B�t
t d � rz t t j t j t � n t
t d � r� t t j t j
t � n t t j t j t d t j �t t j t j d � t t j t j t � t t j t j t � t t j t j t � t t j t j t � d S( sn Connecting to a TLSv1.2 server with various client options.
Testing against older TLS versions.s
s TLSv1.2R� R� RA R� N( R R R R R R� R R� Rm Rl RN RA Rk R� R
Rq R� R� ( R& ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_protocol_tlsv1_2� s
c
C s8 d } t t d t j d
t d t d t �} t } | ��t j � } | j d
� | j t | j
f � t j r� t
j j d � n xJ| D]B} t j r� t
j j d | � n | r� | j | � | j � } n | j | � | j d � } | j � j � } | d k r^| j d � r^t j r=t
j j d | � n t j | d t j �} t } q� | d k r�| j d � r�t j r�t
j j d | � n | j � } t } q� t j r� t
j j d | � q� q� Wt j r�t
j j d � n | r| j d � n
| j d � | r$| j � n
| j � Wd QXd S( s6 Switching from clear text to encrypted and back again.s msg 1s MSG 2RQ s MSG 3s msg 4RR s msg 5s msg 6R� RU RJ RW i s
s client: sending %r...
i R� s/ client: read %r from server, starting TLS...
s- client: read %r from server, ending TLS...
s client: read %r from server
s client: closing connection.
s over
N( s msg 1s MSG 2RQ s MSG 3s msg 4RR s msg 5s msg 6( R6 R� R R� Rj Rk R! R R� R� R) R R R R R R� R� R� RV RX R� R� RX R� ( R& t msgsR8 t wrappedR� R� Ry R� RY ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
test_starttls� s`
c C s9 t | d t �} t j r. t j j d � n t t d � � } | j � } Wd QXd } d | j t
j j t � d f } t
j d t � } t j | d | �} zu | j � j d
� } | rt | � d k r| j t | � � } t j rt j j d t | � | f � qn Wd | j � X| j | | � d S(
s: Using a SocketServer to create and manage SSL connections.R� s
t rbNRC s https://localhost:%d/%si R R0 s content-lengthi s/ client: read %d bytes from remote server '%s'
( R5 R� R R R R R RW R� R) R R t splitR R� t urllib2t urlopent infot getheaderR� R R� R� ( R& R8 RM R� R� t urlR0 t dlen( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_socketserver
s( c C s^ t j r t j j d � n d } t t � } | �$t j t j � � } | j
d | j f � t j r� t j j d | � n | j | � | j � } t j r� t j j d | � n | | j
� k r| j d | d t | � | d j
� t | � f � n | j d � t j r.t j j d � n | j � t j rTt j j d
� n Wd QXd S( s' Check the example asyncore integration.s
s FOO
s 127.0.0.1s client: sending %r...
s client: read %r
s4 bad data <<%r>> (%d) received; expected <<%r>> (%d)
i s over
s client: closing connection.
s client: connection closed.
N( R R R R R Rs R� R R� R! R� R) R� RX R� R R� ( R& R� R8 R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_asyncore_server
s2
!
c s= t j r t j j d � n t t d t j d t j d t d t
d t �} | ��t j t
j
� d t d t d t d
t j d t j �� � j t | j f � � f d � } � f d � } d
� j t
g f d � j t d g f d � j t
g f g } d � j t
g f d � j t d g f d | t
g f d | t g f g } d } x| D] \ } } } }
| | j d � } yw | | |
� � j � } | | j � k r�| j d j d | d | d d t | � d | d d t | � � � n WqWt k
ra}
| r'| j d j d | � � n t |
� j | � sb| j d j d | d |
� � qbqWXqWWx | D]\ } } } }
| | j d � } yw � j | � | |
� } | | j � k r| j d! j d | d | d d t | � d | d d t | � � � n Wqmt k
r�}
| r=| j d" j d | � � n t |
� j | � st| j d j d | d |
� � n � j � qmXqmWd# } � j | � t t | � � } | j � j d$ | � t | � � | j | | � | j! t" � j# � � j d% � | j! t � j d$ � | j! t � j d$ � � j$ � Wd& QXd& S(' s Test recv(), send() and friends.s
Rf R� Rg RJ RW R� R� R RH c s' t d d � } � j | � } | | S( Ns id ( R� R� ( t bR% ( R� ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
_recv_intoO
s c s- t d d � } � j | � \ } } | | S( Ns id ( R� R� ( R� R% R: ( R� ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt _recvfrom_intoT
s R� R� s some.addresst sendallR� R� R� R� u PREFIX_R sp While sending with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
R
R� i t noutR� t nins> Failed to send with method <<{name:s}>>; expected to succeed.
sF Method <<{name:s}>> failed with unexpected exception message: {exp:s}
t expsr While receiving with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
sA Failed to receive with method <<{name:s}>>; expected to succeed.
R[ i����s over
N(% R R R R R R6 R� R Rd R� Rj Rk R� R! R� R� R) R� R� R� R� R� R R� RX R� R� R R� R� R� R� R� Rv R� R� R� ( R& R8 R� R� t send_methodst recv_methodst data_prefixt meth_namet send_methR� RJ R� R� R' t recv_methR[ t buffer( ( R� s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_recv_send;
s�
!
!
"
c C s t t � } | j � | j | j d d � t j t | j f � } | j | j
� t j | d t
�} | j | j
� | j d � | j | j d � d � | j | j d � d � | j | j � d � | j t
� | j | j d � d � | j | j t � � d � d S( Nt suppress_ragged_eofsR[ i RC ( R6 R� Rm R� Rn R� R! t create_connectionR� R) R� R R� Rk R� R� R� R� R R� R� ( R& R8 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_recv_zero�
s
c s\ t j t j � � d } t j � � } t j � � t � � � � f d � } t j d | � } | j � � j � z� zR t j t j � } | j
d � | j | | f � | j t
j d t
j | � Wd | j � XzT t j t j � } t
j | � } | j
d � | j t
j d | j | | f � Wd | j � XWd t � | j � � j � Xd S( Ns 127.0.0.1c s� � j d � � j � g } xT � ss t j � g g g d � \ } } } � | k r | j � j � d � q q Wx | D] } | j � q{ Wd S( Ni g�������?i ( R� R# R RB R� R� ( t connsRS t wR' R� ( t finishR8 t started( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt serve�
s
$
R� g�������?s timed out( R! R" R Rb R< Rk Rk R= Rj Rl R� R� R� R RE R� R� Rj R ( R& R( R) R� R� R ( ( R� R8 R� s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_handshake_timeout�
s6
c sv t j t j � } t j | _ | j t � | j t � t j t j � � d } t
j � � } | j � d t
�� t j � � d g � d g � � � � � f d � } t j d | � } | j � � j � | j t j � � } | j | | f � | j d � | j � | j � } | j � | j � � d j � � j � | j � d t j � | j � d | � d S( Ns 127.0.0.1R� c sS � j d � � j � � j � \ � d <� d <� d j � d j d � � d S( Ni i i ( R� R# R� R� R� ( ( t evtt peerR. R8 ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� s
R� R[ i ( R RD R
Rf Rm R� R� R� R! R" R Rb R� Rj R< Rk R� R= Rj Rl R� R� R� R� R� R R� Rz R� ( R& R0 R( R) R� R� t clientt client_addr( ( R� R� R. R8 s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_server_accept�
s4
c C sx t j t j � } t | j t j � � � �E } | j t j � � } | j � Wd QX| j | j
j t j � Wd QXd S( N(
R RD R
R R� R! Rv R� R
R� R� R$ t ENOTCONN( R& R0 R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_getpeercert_enotconn s
c C sx t j t j � } t | j t j � � � �E } | j t j � � } | j � Wd QX| j | j
j t j � Wd QXd S( N(
R RD R
R R� R! Rv R� R R� R� R$ R� ( R& R0 R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_do_handshake_enotconn% s
c C s� t j t j � } | j t � t j t j � } t j | _ t | _ | j t j
O_ | j d � | j d � t d | � �Q } | j
t j � d d �} | j t j � � | j t | j f � Wd QXWd QX| j d t | j d � � d S( Nt AES128t AES256R0 R R� s no shared cipheri ( R RD R
R� R� Rf Rm Rj R� Rj Ro Rg R6 R� R! Rv RE R� R� R) Rh R� RI ( R& R� R� R8 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_no_shared_ciphers, s
"c C s� t j t j � } t t d t j d t ��� } t | j t j � � � �I } | j | j
� d � | j t
| j f � | j | j
� d � Wd QX| j | j
� d � Wd QXd S( s�
Basic tests for SSLSocket.version().
More tests are done in the test_protocol_*() methods.
R� RJ RT N( R RD R� R6 R� Rk R R� R! R� R� R� R� R� R) R� ( R& R0 R8 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_version_basic@ s s% test requires TLSv1.3 enabled OpenSSLc
C s� t j t j � } | j t � | j t j t j Bt j BO_ t d | � �h } | j
t j � � } t | � �> | j
t | j f � | j | j � d d d d g � Wd QXWd QXd S( NR0 i t TLS_AES_256_GCM_SHA384t TLS_CHACHA20_POLY1305_SHA256t TLS_AES_128_GCM_SHA256( R RD R_ R� R� Rj Rn Rp Rq R6 R� R! R R� R� R) Rh RM ( R& R0 R8 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_tls1_3O s
s" test requires ECDH-enabled OpenSSLc C s� t j t j � } | j t � | j t j O_ t j d k rP | j d � n t d | � �[ } t
| j t j � � � �7 } | j
t | j f � | j d | j � d � Wd QXWd QXd S( Ni i s
ECCdraft:ECDHR0 t ECDH( i i i ( R RD R
R� R� Rj Ro R- Rg R6 R R� R! R� R� R) Rh RM ( R& R0 R8 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_default_ecdh_curveb s
s
tls-uniques* 'tls-unique' channel binding not availablec C sI t j r t j j d � n t t d t j d t j d t d t
d t �} | ��t j t
j
� d t d t d t d
t j d t j �} | j t | j f � | j d � } t j r� t j j d j | � � n | j | � | j t | � d
� | j d � | j � j � } | j | t | � j d � � | j � t j t
j
� d t d t d t d
t j d t j �} | j t | j f � | j d � } t j r�t j j d j | � � n | j | | � | j | � | j t | � d
� | j d � | j � j � } | j | t | � j d � � | j � Wd QXd S( s Test tls-unique channel binding.s
Rf R� Rg RJ RW R� R� R RH s
tls-uniques! got channel binding data: {0!r}
i s CB tls-unique
s us-asciis) got another channel binding data: {0!r}
N( R R R R R R6 R� R Rd R� Rj Rk R� R! R� R� R) R
R� t assertIsNotNoneR� R R� RV RK R R� t assertNotEqual( R& R8 R� t cb_datat peer_data_reprt new_cb_data( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR v s\
c C s� t j t j � } | j t � t | | d t d t �} t j rc t j
j d j | d � � n | j
| d d d d h � d S( NRJ RW s got compression: {!r}
R� t ZLIBt RLE( R RD R� R� R� R� Rj R R R R R R� Rh R� ( R& R0 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_compression� s
R s* ssl.OP_NO_COMPRESSION needed for this testc C sd t j t j � } | j t � | j t j O_ t | | d t d t �} | j | d d � d S( NRJ RW R� ( R RD R� R� R� Rj R R� Rj R� R� ( R& R0 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_compression_disabled� s
c C s� t j t j � } | j t � | j t � | j d � t | | d t d t �} | d d } | j
d � } d | k r� d | k r� d | k r� | j d
| d � n d S( Nt kEDHRJ RW RM i t -t ADHt EDHt DHEs Non-DH cipher: ( R RD R� R� R� R� R� Rg R� Rj R� R� ( R& R0 R� RM t parts( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_dh_params� s
$c C sR t j t j � } | j t � t | | d t d t �} | j | d d � d S( NRJ RW R� ( R RD R� R� R� R� Rj R� R� ( R& R0 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_selected_alpn_protocol� s
s ALPN support requiredc C s� t j t j � } | j t � t j t j � } | j t � | j d d g � t | | d t d t �} | j | d d � d S( NRt t barRJ RW R� ( R RD R� R� R� R� Ra R� Rj R� R� ( R& R� R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt/ test_selected_alpn_protocol_if_server_uses_alpn� s
s! ALPN support needed for this testc C s� d d d g } d d g d f d d g d f d g d f d d g d f g } xn| D]f\ } } t j t j � } | j t � | j | � t j t j � } | j t � | j | � y t | | d t d t �} Wn t j k
r� } | } n X| d k r.t
r.t j d k r.| j | t j � qU d t
| � t
| � t
| � f } | d }
| j |
| | |
d
f � t | d � r�| d d n d } | j | | | | d f � qU Wd S( NRt R t milkshakes http/3.0s http/4.0RJ RW i i i sK failed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sR� R� R� i����t nothingR8 ( i i i i ( R� R RD R� R� R� Ra R� Rj RE t IS_OPENSSL_1_1R- R� R� R� R ( R& t server_protocolst protocol_testst client_protocolsR> R� R� R� R' RY t
client_resultt
server_result( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_alpn_protocols� s>
$ c C sR t j t j � } | j t � t | | d t d t �} | j | d d � d S( NRJ RW R� ( R RD R� R� R� R� Rj R� R� ( R& R0 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_selected_npn_protocol s
s NPN support needed for this testc C si d d g } d d g d f d d g d f d d g d f d d g d f g } x| D] \ } } t j t j � } | j t � | j | � t j t j � } | j t � | j | � t | | d t d t �} d t | � t | � t | � f } | d } | j | | | | d
f � t
| d � r>| d d n d
}
| j |
| | |
d f � qU Wd S( Ns http/1.1s spdy/2t testt abct defRJ RW sK failed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sR� R� R� i����R R8 ( R RD R� R� R� R` R� Rj R� R� R ( R& R
R R R> R� R� R� RY R R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_npn_protocols s*
$c C sv t j t j � } | j t � t j t j � } | j t � t j t j � } t j | _ | j t � | | | f S( N(
R RD R� R� R� t SIGNED_CERTFILE2Rf Rm R� R� ( R& R� t
other_contextR� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt sni_contexts5 s
c C s+ | d } | j d | f f | d � d S( NR� R� R� ( Rh ( R& R� R
R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt check_common_name? s
c s g � | j � \ } � } � � f d � } | j | � t | | d t d d �} | j � d | f g � | j | d � g � t | | d t d d �} | j � d | f g � | j | d � g � | j d � t | | d t d d �} | j | d � | j � g � d S( Nc s/ � j | | f � | d k r+ � | _ n d S( N( RB R� R0 ( R� t server_namet initial_context( t callsR ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
servername_cbH s RJ R� t supermessaget fakehostnameR� t notfunny( R R� R� Rj R� R R� ( R& R� R� R R� ( ( R R s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� C s,
c C s{ | j � \ } } } d � } | j | � | j t j � �" } t | | d t d d �} Wd QX| j | j j d � d S( Nc S s t j S( N( R t ALERT_DESCRIPTION_ACCESS_DENIED( R� R R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt cb_returning_alerto s RJ R� R t TLSV1_ALERT_ACCESS_DENIED(
R R� Rv R RE R� Rk R� R� R� ( R& R� R R� R$ R� R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_sni_callback_alertj s
c C s� | j � \ } } } d � } | j | � | j t j � �7 } t j � �" } t | | d t d d �} Wd QXWd QX| j | j
j d � | j d | j
� � d S( Nc S s d d d S( Ng �?g ( ( R� R R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt
cb_raising~ s RJ R� R t SSLV3_ALERT_HANDSHAKE_FAILUREt ZeroDivisionError( R R� Rv R RE R t captured_stderrR� Rk R� R� R� Rh t getvalue( R& R� R R� R' R� t stderrR� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_sni_callback_raisingy s
c C s� | j � \ } } } d � } | j | � | j t j � �7 } t j � �" } t | | d t d d �} Wd QXWd QX| j | j
j d � | j d | j
� � d S( Nc S s d S( NRt ( ( R� R R ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt cb_wrong_return_type� s RJ R� R t TLSV1_ALERT_INTERNAL_ERRORRw ( R R� Rv R RE R R* R� Rk R� R� R� Rh R+ ( R& R� R R� R. R� R, R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt# test_sni_callback_wrong_return_type� s
c C s� t j t j � } t j | _ | j t � | j t � t d | d t � } | �f | j
t j � � } | j t
| j f � | j � | j t | j d � | j t | j d � Wd QXd S( NR0 RJ i t hello( R RD R
Rf Rm R� R� R� R6 Rk R� R! R� R� R) R� Rv R� R� R ( R& R0 R8 R� ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt, test_read_write_after_close_raises_valuerror� s
(8 R) R* RQ R� R� RH R\ R/ R� R� R� R� RN R R� Rb R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� t HAS_TLSv1_3R� Rg R� R] R R� R� R R t HAS_ALPNR R R t HAS_NPNR R R R� R� R& R- R0 R2 ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyR� k sn & * & ! )( : w 1 ' ;
*
'c
C s� t j r� i t j d 6t j d 6t j d 6} xY | j � D]9 \ } } | � } | r: | d r: d | | f } Pq: q: Wt t j � � } d t j t j
f GHd | GHd t j GHd t j GHy d
t j
GHWq� t k
r� q� Xn x] t t t t t t t t t t t t t g
D]. } t j j | � st j d | � � qqWt t! t" t# g } t j$ d � rw| j% t& � n t' r�t j( � } | r�| j% t) � q�n z t j* | � Wd t' r�t j+ | � n Xd S(
Nt Linuxt Mact Windowsi s %s %rs test_ssl: testing with %r %rs under %ss HAS_SNI = %rs OP_ALL = 0x%8xs OP_NO_TLSv1_1 = 0x%8xs Can't read certificate file %rt network(, R R RF RG t mac_vert win32_vert itemsRK R R� R- Ri Ri Rp t AttributeErrorR� R R� R� R� R� R� R� R R� R� t BADKEYR� R R t existst
TestFailedR_ R Rc R� t is_resource_enabledRB R t
_have_threadst threading_setupR� t run_unittestt threading_cleanup( R t platsR
RL t platR� t testst thread_info( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt test_main� sL
t __main__(k R RH R R R t test.script_helperR Ru R! R R0 R9 R� R R$ R� R� R� R R� RF RX RO t
contextlibR t
import_moduleR t sortedt _PROTOCOL_NAMESR` R� R� R� R� R- R R R� R R� R� R� R� R� R� R� R� R{ R R� R� R� R� R� R R� R� R R R� R� R� R> R� R� R� R� R� Rp R R R R R R t TestCaseR R, R. R/ R6 R@ RQ Rb R\ Ri R� Rc R_ R� R R< t ImportErrorRk RB Rj t test.ssl_serversR5 R= R6 Rs R� R� R� R� RJ R) ( ( ( s6 /opt/plesk/python/2.7/lib64/python2.7/test/test_ssl.pyt <module> s� � � i� � $)� /
�u.;� � � � E 0
Mini Shell