)pUc ' @ s d Z d d k l Z d d k l Z l Z l Z d d k l Z l Z d d k
l Z l
Z
d d k l
Z
d d k l Z d d k l Z d d k l Z d d
k l Z l Z d d k l Z l Z l Z d d k l Z l Z d d
k l Z l Z d d k l Z l Z l! Z! d d k l" Z" l# Z# l$ Z$ d d k l% Z% l& Z& d d k l' Z' l( Z( l) Z) l* Z* d d k l+ Z+ l, Z, l- Z- d d k l. Z. l/ Z/ l0 Z0 l1 Z1 d d k l2 Z2 l3 Z3 l4 Z4 l5 Z5 l6 Z6 d d k l7 Z7 l8 Z8 l9 Z9 l: Z: d d k; l< Z< l= Z= l> Z> d d k? l@ Z@ lA ZA d d k? lB ZB lC ZC lD ZD lE ZE lF ZF y d d k lG ZG Wn eH j
o
eI ZG n Xy d d k lJ ZJ Wn eH j
o
eI ZJ n Xy d d k lK ZK Wn eH j
o
eI ZK n Xd d k lL ZL lM ZM lN ZN lO ZO lP ZP lQ ZQ lR ZR lS ZS lT ZT lU ZU lV ZV lW ZW lX ZX lY ZY lZ ZZ l[ Z[ l\ Z\ l] Z] l^ Z^ l_ Z_ d Z` d Za d Zb d Zc d! Zd d" f d# YZe d$ e< f d% YZf d& e< ee f d' YZg d( e< ee f d) YZh d* e< ee f d+ YZi d, e< f d- YZj d. e< ee f d/ YZk d0 e< ee f d1 YZl d2 e< ee f d3 YZm d4 e< f d5 YZn d6 e< f d7 YZo d8 e< ee f d9 YZp d: e< f d; YZq er d< j o e n d= S(> s
Unit tests for L{OpenSSL.SSL}.
i( t collect( t ECONNREFUSEDt EINPROGRESSt EWOULDBLOCK( t platformt version_info( t errort socket( t makedirs( t join( t main( t ref( t TYPE_RSAt FILETYPE_PEM( t PKeyt X509t
X509Extension( t dump_privatekeyt load_privatekey( t dump_certificatet load_certificate( t OPENSSL_VERSION_NUMBERt SSLEAY_VERSIONt
SSLEAY_CFLAGS( t SSLEAY_PLATFORMt
SSLEAY_DIRt SSLEAY_BUILT_ON( t
SENT_SHUTDOWNt RECEIVED_SHUTDOWN( t SSLv2_METHODt SSLv3_METHODt
SSLv23_METHODt TLSv1_METHOD( t OP_NO_SSLv2t OP_NO_SSLv3t OP_SINGLE_DH_USE( t VERIFY_PEERt VERIFY_FAIL_IF_NO_PEER_CERTt VERIFY_CLIENT_ONCEt VERIFY_NONE( t Errort SysCallErrort
WantReadErrort ZeroReturnErrort SSLeay_version( t Contextt ContextTypet
Connectiont ConnectionType( t TestCaset bytest b( t cleartextCertificatePEMt cleartextPrivateKeyPEM( t client_cert_pemt client_key_pemt server_cert_pemt server_key_pemt
root_cert_pem( t OP_NO_QUERY_MTU( t OP_COOKIE_EXCHANGE( t OP_NO_TICKET( t SSL_ST_CONNECTt
SSL_ST_ACCEPTt SSL_ST_MASKt SSL_ST_INITt
SSL_ST_BEFOREt SSL_ST_OKt SSL_ST_RENEGOTIATEt SSL_CB_LOOPt SSL_CB_EXITt SSL_CB_READt SSL_CB_WRITEt SSL_CB_ALERTt SSL_CB_READ_ALERTt SSL_CB_WRITE_ALERTt SSL_CB_ACCEPT_LOOPt SSL_CB_ACCEPT_EXITt SSL_CB_CONNECT_LOOPt SSL_CB_CONNECT_EXITt SSL_CB_HANDSHAKE_STARTt SSL_CB_HANDSHAKE_DONEs[ -----BEGIN DH PARAMETERS-----
MBYCEQCobsg29c9WZP/54oAPcwiDAgEC
-----END DH PARAMETERS-----
c C s | S( N( ( t connt certt errnumt deptht ok( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt verify_cbF s c C s t } | i d | i d t } | i t | i d | i d f | i t | i d } | i t
d | i t
d | i t | i t | | f S( sQ
Establish and return a pair of network sockets connected to each other.
t i i s 127.0.0.1t xt y( RX i ( R t bindt listent setblockingt Falset
connect_ext getsocknamet Truet acceptt sendR3 ( t portt clientt server( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt socket_pairJ s
c C sa | | g } xN | oF x? | D]7 } y | i Wn t j
o q X| i | q Wq Wd S( N( t do_handshakeR* t remove( Re Rf t connsRR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt handshakeh s c C sA t t d t t d } t } | i t d t } d | i _ | i | i | i
| | i t d | i t d | i
| g | i d | i | d t } | i t d t } d | i _ | i | i | i
| | i t d | i t d | i
| g | i d | i | d t } | i t d t } d
| i _ | i | i | i
| | i t d | i t d | i
t t d t t d g | i d | i | d | | f | | f | | f g S( s
Construct and return a chain of certificates.
1. A new self-signed certificate authority certificate (cacert)
2. A new intermediate certificate signed by cacert (icert)
3. A new server certificate signed by icert (scert)
t basicConstraintss CA:truei s Authority Certificatet 20000101000000Zt 20200101000000Zi t sha1s Intermediate Certificates Server Certificates CA:false( R R3 R^ R t generate_keyR R t get_subjectt
commonNamet
set_issuert
set_pubkeyt
set_notBeforet set_notAftert add_extensionst set_serial_numbert signRa ( t caextt cakeyt cacertt ikeyt icertt skeyt scert( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _create_certificate_chaint sH
"
t _LoopbackMixinc B s e Z d Z d Z d Z RS( s
Helper mixin which defines methods for creating a connected socket pair and
for forcing two connected SSL sockets to talk to each other via memory BIOs.
c C s t \ } } t t } | i t t t | i t t t t
| | } | i t
t t | } | i t
| | | i t | i t | | f S( N( Rg R- R t use_privatekeyR R
R9 t use_certificateR R8 R/ t set_accept_statet set_connect_stateRk R] Ra ( t selfRf Re t ctx( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _loopback s
c C s t } x | o t } x | | f | | f g D] \ } } y | i d } Wn t j
o n X| | f SxI t oA y | i d } Wn t j
o Pqq Xt } | i | qq Wq/ Wq Wd S( s
Try to read application bytes from each of the two L{Connection}
objects. Copy bytes back and forth between their send/receive buffers
for as long as there is anything to copy. When there is nothing more
to copy, return C{None}. If one of them actually manages to deliver
some application bytes, return a two-tuple of the connection from which
the bytes were read and the bytes themselves.
i i i Ni ( Ra R^ t recvR* t bio_readt bio_write( R t client_connt server_connt wrotet readt writet datat dirty( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _interactInMemory s(
( t __name__t
__module__t __doc__R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s t VersionTestsc B s e Z d Z d Z d Z RS( s
Tests for version information exposed by
L{OpenSSL.SSL.SSLeay_version} and
L{OpenSSL.SSL.OPENSSL_VERSION_NUMBER}.
c C s | i t t t d S( s
L{OPENSSL_VERSION_NUMBER} is an integer with status in the low
byte and the patch, fix, minor, and major versions in the
nibbles above that.
N( t
assertTruet
isinstanceR t int( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_OPENSSL_VERSION_NUMBER s c C sl h } xI t t t t t g D]2 } t | } | | | <| i t | t q W| i t
| d d S( s
L{SSLeay_version} takes a version type indicator and returns
one of a number of version strings based on that indicator.
i N( R R R R R R, R R R2 t assertEqualt len( R t versionst tt version( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_SSLeay_version s
( R R R R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s t ContextTestsc B so e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z e o n
d Z d Z d Z d Z! d Z" d Z# d! Z$ d" Z% d# Z& d$ Z' d% Z( d& Z) RS(' s0
Unit tests for L{OpenSSL.SSL.Context}.
c C sr x! t t t g D] } t | q Wy t t Wn t j
o n X| i t t d | i t t d d S( s
L{Context} can be instantiated with one of L{SSLv2_METHOD},
L{SSLv3_METHOD}, L{SSLv23_METHOD}, or L{TLSv1_METHOD}.
RX i
N( R R R R- R t
ValueErrort assertRaisest TypeError( R t meth( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_method s c C s' | i t t | i t d t d S( s
L{Context} and L{ContextType} refer to the same type object and can be
used to create instances of that type.
R- N( t assertIdenticalR- R. t assertConsistentTypeR ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_type& s c C sL t } | i t d t t } | i | | i t | i d d S( sU
L{Context.use_privatekey} takes an L{OpenSSL.crypto.PKey} instance.
i RX N( R Rp R R- R R R R ( R t keyR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_use_privatekey/ s
c C s< t t } | i t | i | i t | i d d d S( sm
L{Context.set_app_data} raises L{TypeError} if called with other than
one argument.
N( R- R R R t set_app_datat None( R t context( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_app_data_wrong_args: s c C s& t t } | i t | i d d S( sc
L{Context.get_app_data} raises L{TypeError} if called with any
arguments.
N( R- R R R t get_app_dataR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_app_data_wrong_argsD s c C s< t } t t } | i | | i | i | d S( su
L{Context.set_app_data} stores an object for later retrieval using
L{Context.get_app_data}.
N( t objectR- R R R R ( R t app_dataR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
test_app_dataM s
c C sR t t } | i t | i | i t | i d | i t | i d d d S( s
L{Context.set_options} raises L{TypeError} if called with the wrong
number of arguments or a non-C{int} argument.
i N( R- R R R t set_optionsR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_options_wrong_argsX s c C sR t t } | i t | i | i t | i d | i t | i d d d S( s
L{Context.set_timeout} raises L{TypeError} if called with the wrong
number of arguments or a non-C{int} argument.
i N( R- R R R t set_timeoutR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_timeout_wrong_argsc s c C s& t t } | i t | i d d S( sZ
L{Context.get_timeout} raises L{TypeError} if called with any arguments.
N( R- R R R t get_timeoutR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_timeout_wrong_argsn s c C s3 t t } | i d | i | i d d S( s
L{Context.set_timeout} sets the session timeout for all connections
created using the context object. L{Context.get_timeout} retrieves this
value.
i N( R- R R t assertEqualsR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_timeoutv s
c C sR t t } | i t | i | i t | i d | i t | i d d d S( s
L{Context.set_verify_depth} raises L{TypeError} if called with the wrong
number of arguments or a non-C{int} argument.
i N( R- R R R t set_verify_depthR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_verify_depth_wrong_args s c C s& t t } | i t | i d d S( s_
L{Context.get_verify_depth} raises L{TypeError} if called with any arguments.
N( R- R R R t get_verify_depthR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_verify_depth_wrong_args s c C s3 t t } | i d | i | i d d S( s
L{Context.set_verify_depth} sets the number of certificates in a chain
to follow before giving up. The value can be retrieved with
L{Context.get_verify_depth}.
i N( R- R R R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_verify_depth s
c C sm t } | i t d | i } t | d } t t | d | } | i | i d | i | S( s
Write a new private key out to a new file, encrypted using the given
passphrase. Return the path to the new file.
i t wt blowfisht ascii(
R Rp R t mktempt openR R
R t decodet close( R t
passphraseR t pemFilet fObjt pem( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _write_encrypted_pem s
c C sX t t } | i t | i | i t | i d | i t | i d d d d S( s
L{Context.set_passwd_cb} raises L{TypeError} if called with the
wrong arguments or with a non-callable first argument.
c S s d S( N( R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt s N( R- R R R t
set_passwd_cbR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_passwd_cb_wrong_args s c s t d | i } g f d } t t } | i | | i | | i t d | i t d d t | i t d d t | i
d d d d S( s
L{Context.set_passwd_cb} accepts a callable which will be invoked when
a private key is loaded from an encrypted PEM.
t foobarc s i | | | f S( N( t append( t maxlent verifyt extra( t
calledWithR ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt passphraseCallback s i i i N( R3 R R- R R t use_privatekey_fileR R R R R R ( R R R R ( ( R R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_passwd_cb s
c C sQ | i t d } d } t t } | i | | i t | i | d S( st
L{Context.use_privatekey_file} propagates any exception raised by the
passphrase callback.
s monkeys are nicec S s t d d S( Ns Sorry, I am a fail.( t RuntimeError( R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s N( R R3 R- R R R R R ( R R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_passwd_callback_exception s
c C sQ | i t d } d } t t } | i | | i t | i | d S( s
L{Context.use_privatekey_file} raises L{OpenSSL.SSL.Error} if the
passphrase callback returns a false value.
s monkeys are nicec S s d S( N( R ( R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s N( R R3 R- R R R R( R ( R R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_passwd_callback_false s
c C sQ | i t d } d } t t } | i | | i t | i | d S( s
L{Context.use_privatekey_file} raises L{OpenSSL.SSL.Error} if the
passphrase callback returns a true non-string value.
s monkeys are nicec S s d S( Ni
( ( R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s N( R R3 R- R R R R( R ( R R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_passwd_callback_non_string s
c sX t d d | i } f d } t t } | i | | i | d S( s
If the passphrase returned by the passphrase callback returns a string
longer than the indicated maximum length, it is truncated.
RY i c s t d S( NRZ ( R3 ( R R R ( R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s N( R3 R R- R R R ( R R R R ( ( R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_passwd_callback_too_long s
c s t \ } } t t t | } | i g f d } t t } | i | | i t t t | i
t t t t | | } | i
xG p? x8 | | f D]* } y | i Wq t j
o q Xq Wq W| i d S( s
L{Context.set_info_callback} accepts a callable which will be invoked
when certain information about an SSL connection is available.
c s i | | | f d S( N( R ( RR t wheret ret( t called( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt info s N( Rg R/ R- R R t set_info_callbackR R R
R4 R R R5 R Rh R* R ( R Rf Re t clientSSLR R t serverSSLt ssl( ( R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_info_callback
s,
c G s t \ } } t t } | i | | i t d t | | } | i t t } | i t t
t | i t
t
t t | | } | i t | | | i } | i | i i d d S( s
Create a client context which will verify the peer certificate and call
its C{load_verify_locations} method with C{*args}. Then connect it to a
server and ensure that the handshake succeeds.
c S s | S( ( ( RR RS t errnoRU t preverify_ok( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR : s s Testing Root CAN( Rg R- R t load_verify_locationst
set_verifyR$ R/ R R R R
R4 R R R5 R Rk t get_peer_certificateR Rq t CN( R t argsRf Re t
clientContextR t
serverContextR RS ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _load_verify_locations_test, s$
c C sL | i } t | d } | i t i d | i | i | d S( s
L{Context.load_verify_locations} accepts a file name and uses the
certificates within for verification purposes.
R R N( R R R R4 R R R ( R t cafileR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_load_verify_fileR s
c C s, t t } | i t | i | i d S( sm
L{Context.load_verify_locations} raises L{Error} when passed a
non-existent cafile.
N( R- R R R( R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_load_verify_invalid_file_ s c C s | i } t | xR d d g D]D } t | | } t | d } | i t i d | i q# W| i d | d S( s
L{Context.load_verify_locations} accepts a directory name and uses
the certificates within for verification purposes.
s
c7adac82.0s
c3705638.0R R N(
R R R R R R4 R R R R ( R t capatht nameR R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_load_verify_directoryi s
c C sw t t } | i t | i | i t | i t | i t | i t t | i t | i d d d d S( s
L{Context.load_verify_locations} raises L{TypeError} if called with
the wrong number of arguments or with non-C{str} arguments.
N( R- R R R R R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt% test_load_verify_locations_wrong_args| s
c C s t t } | i | i t d t } | i d t | | } | i | i | i
d | i | i d d S( s
L{Context.set_default_verify_paths} causes the platform-specific CA
certificate locations to be used for verification purposes.
c S s | S( ( ( RR RS R RU R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s s verisign.comi s GET / HTTP/1.0
i N( s verisign.comi (
R- R t set_default_verify_pathsR R$ R t connectR/ R Rh Rc R R ( R R Re R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_default_verify_paths s
c C sR t t } | i t | i d | i t | i d | i t | i d d S( sv
L{Context.set_default_verify_paths} takes no arguments and raises
L{TypeError} if given any.
i RX N( R- R R R R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt' test_set_default_verify_paths_signature s c C s[ t t } | i t | i | i t | i t | i t | i t t d S( s
L{Context.add_extra_chain_cert} raises L{TypeError} if called with
other than one argument or if called with an object which is not an
instance of L{X509}.
N( R- R R R t add_extra_chain_certR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt& test_add_extra_chain_cert_invalid_cert s c C s t \ } } t | | } | i t | | } | i xO t d D]A } x8 | | g D]* } y | i Wqa t j
o qa Xqa WqN Wd S( s
Verify that a client and server created with the given contexts can
successfully handshake and communicate.
i N( Rg R/ R R t rangeRh R* ( R R R t serverSockett clientSocketRf Re t it s( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _handshake_test s
c C sr t } | \ \ } } \ } } \ } } xg | d f | d f | d f g D]D \ } } t | d }
|
i t t | i d |
i qL Wxg | d f | d f | d f g D]D \ } } t | d }
|
i t t | i d |
i q Wt t } | i
| | i | | i | t t }
|
i
t t Bt |
i d | i | |
d S(
s
L{Context.add_extra_chain_cert} accepts an L{X509} instance to add to
the certificate chain.
See L{_create_certificate_chain} for the details of the certificate
chain tested.
The chain is tested by starting a server with scert and connecting
to it with a client which trusts cacert and requires verification to
succeed.
s ca.pems i.pems s.pemR R s ca.keys i.keys s.keyN( R R R R R
R R R R- R R R R R R$ R% RW R R ( R t chainR{ R| R} R~ R R RS R R R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_add_extra_chain_cert s* !" "
c C sK t } | \ \ } } \ } } \ } } | i } t | d } | i t t | i d | i t t | i d | i t t | i d | i t t }
|
i
| |
i | t d d } | i t t | i d | i t t } | i t
t Bt | i d | i |
| d S( s
L{Context.use_certificate_chain_file} reads a certificate chain from
the specified file.
The chain is tested by starting a server with scert and connecting
to it with a client which trusts cacert and requires verification to
succeed.
R R s ca.pemN( R R R R R R
R R R- R t use_certificate_chain_fileR R R$ R% RW R R ( R R R{ R| R} R~ R R t chainFileR R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_use_certificate_chain_file s& !
c C s& t t } | i t | i d d S( sf
L{Context.get_verify_mode} raises L{TypeError} if called with any
arguments.
N( R- R R R t get_verify_modeR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_verify_mode_wrong_args* s c C sW t t } | i | i d | i t t Bd | i | i t t B d S( s~
L{Context.get_verify_mode} returns the verify mode flags previously
passed to L{Context.set_verify}.
i c W s d S( N( R ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR ; s N( R- R R R R R$ R& ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_verify_mode3 s c C sU t t } | i t | i | i t | i d d | i t | i t d S( s
L{Context.load_tmp_dh} raises L{TypeError} if called with the wrong
number of arguments or with a non-C{str} argument.
t fooN( R- R R R t load_tmp_dhR R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_load_tmp_dh_wrong_args@ s c C s& t t } | i t | i d d S( sr
L{Context.load_tmp_dh} raises L{OpenSSL.SSL.Error} if the specified file
does not exist.
t helloN( R- R R R( R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_load_tmp_dh_missing_fileK s c C sO t t } | i } t | d } | i t | i | i | d S( si
L{Context.load_tmp_dh} loads Diffie-Hellman parameters from the
specified file.
R N( R- R R R R t dhparamR R ( R R t
dhfilenamet dhfile( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_load_tmp_dhT s
c C sE t t } | i d t | d } | i | i d g d S( s
L{Context.set_cipher_list} accepts a C{str} naming the ciphers which
connections created with the context object will be able to choose from.
s hello world:EXP-RC4-MD5s EXP-RC4-MD5N( R- R t set_cipher_listR/ R R t get_cipher_list( R R RR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_cipher_listb s
(* R R R R R R R R R R R R R R R R R R R R R R R R R R R R R Ra R R R R R R R
R R R R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR sR
" &
, '
t ServerNameCallbackTestsc B s2 e Z d Z d Z d Z d Z d Z RS( si
Tests for L{Context.set_tlsext_servername_callback} and its interaction with
L{Connection}.
c C s< t t } | i t | i | i t | i d d d S( s
L{Context.set_tlsext_servername_callback} raises L{TypeError} if called
with other than one argument.
i i N( R- R R R t set_tlsext_servername_callback( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_wrong_argss s c C se d } d } t t } | i | t | } ~ | i | t | i d | d S( s
If L{Context.set_tlsext_servername_callback} is used to specify a new
callback, the one it replaces is dereferenced.
c S s d S( N( ( t
connection( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt callback s c S s d S( N( ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt replacement s N( R- R R R R R R ( R R R R t tracker( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_old_callback_forgotten} s
c s g f d } t t } | i | ~ t | i t t t | i t t t
t | d } | i
t t t d } | i | i | | | i | d f g d S( s
When a client specifies no server name, the callback passed to
L{Context.set_tlsext_servername_callback} is invoked and the result of
L{Connection.get_servername} is C{None}.
c s i | | i f d S( N( R t get_servername( RR ( R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
servername s N( R- R R R R R R
R9 R R R8 R/ R R R R R ( R R$ R Rf Re ( ( R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_no_servername s
c s g f d } t t } | i | | i t t t | i t t t t
| d } | i t
t t d } | i
| i t d | i | | | i | t d f g d S( s
When a client specifies a server name in its hello message, the callback
passed to L{Contexts.set_tlsext_servername_callback} is invoked and the
result of L{Connection.get_servername} is that server name.
c s i | | i f d S( N( R R# ( RR ( R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR$ s s foo1.example.comN( R- R R R R R
R9 R R R8 R/ R R R t set_tlsext_host_nameR3 R R ( R R$ R Rf Re ( ( R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_servername s
( R R R R R" R% R' ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR n s
!t ConnectionTestsc B s e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z e d
j o n
d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z RS( s3
Unit tests for L{OpenSSL.SSL.Connection}.
c C s6 | i t t t t } | i t d | d d S( s
L{Connection} and L{ConnectionType} refer to the same type object and
can be used to create instances of that type.
R/ N( R R/ R0 R- R R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s c C s5 t t } t | d } | i | i | d S( s
L{Connection.get_context} returns the L{Context} instance used to
construct the L{Connection} instance.
N( R- R R/ R R t get_context( R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_context s c C s/ t t t d } | i t | i d d S( se
L{Connection.get_context} raises L{TypeError} if called with any
arguments.
N( R/ R- R R R R R) ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_context_wrong_args s c C s t t } t | d } | i t | i | i t | i t | i t | i d | i t | i d | i t | i d d | i t | i t t d | i | | i d S( s
L{Connection.set_context} raises L{TypeError} if called with a
non-L{Context} instance argument or with any number of arguments other
than 1.
R i i N(
R- R R/ R R R t set_contextR R R) ( R R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_context_wrong_args s c C s[ t t } t t } t | d } | i | | i | | i ~ ~ t d S( sv
L{Connection.set_context} specifies a new L{Context} instance to be used
for the connection.
N( R- R R R/ R R, R R) R ( R t originalR R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_context s
c C s t t t d } | i t | i | i t | i t | i t | i d d | i t | i t d t d j o) | i t | i t d i
d n d S( s
If L{Connection.set_tlsext_host_name} is called with a non-byte string
argument or a byte string with an embedded NUL or other than one
argument, L{TypeError} is raised.
i{ i t with nulli s example.comR N( i ( R/ R- R R R R R& R R3 R R ( R RR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt$ test_set_tlsext_host_name_wrong_args' s
c C s^ t t t d } | i t | i t | i t | i d | i t | i d d S( sh
L{Connection.get_servername} raises L{TypeError} if called with any
arguments.
i R N( R/ R- R R R R R# R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_servername_wrong_args; s c C s/ t t t d } | i | i d d S( si
L{Connection.pending} returns the number of bytes available for
immediate read.
i N( R/ R- R R R t pending( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_pendingF s c C s/ t t t d } | i t | i d d S( sY
L{Connection.pending} raises L{TypeError} if called with any arguments.
N( R/ R- R R R R R3 ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_pending_wrong_argsO s c C s^ t t t t } | i t | i d | i t | i | i t | i d d d S( s
L{Connection.connect} raises L{TypeError} if called with a non-address
argument or with the wrong number of arguments.
s 127.0.0.1i N( s 127.0.0.1i ( R/ R- R R R R R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_connect_wrong_argsW s c C sW t } t t } t | | } | i t | i d } | i | i d t d S( sy
L{Connection.connect} raises L{socket.error} if the underlying socket
connect method raises it.
s 127.0.0.1i i N( s 127.0.0.1i (
R R- R R/ R R R R R R ( R Re R R t exc( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_connect_refusedb s
c C s\ t } | i d | i d t t t t } | i d | i d f d S( sZ
L{Connection.connect} establishes a connection to the specified address.
RX i i s 127.0.0.1i N( RX i ( R R[ R\ R/ R- R R R` ( R Rd R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_connectn s
t darwinc C s t } | i d | i d t t t t } | i t | i | i } t
t f } | i | | j d | | f d S( s
If there is a connection error, L{Connection.connect_ex} returns the
errno instead of raising an exception.
RX i i s %r not in %rN( RX i (
R R[ R\ R/ R- R R] R^ R_ R` R R R ( R Rd R t resultt expected( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_connect_ex~ s
c C s2 t t t t } | i t | i d d S( sX
L{Connection.accept} raises L{TypeError} if called with any arguments.
N( R/ R- R R R R Rb R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_accept_wrong_args s c C s t t } | i t t t | i t t t t } t
| | } | i d | i d t
t t t } | i
d | i d f | i \ } } | i t | t
| i | i | | i | | i d S( s
L{Connection.accept} accepts a pending connection attempt and returns a
tuple of a new L{Connection} (the accepted client) and the address the
connection originated from.
RX i i s 127.0.0.1i N( RX i ( R- R R R R
R9 R R R8 R R/ R[ R\ R R` Rb R R R R) R ( R R Rd t portSSLR R t address( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_accept s
c C s t t t d } | i t | i d | i t | i d | i t | i | i t | i d | i t | i d d d S( s
L{Connection.shutdown} raises L{TypeError} if called with the wrong
number of arguments or with arguments other than integers.
i i N( R/ R- R R R R t shutdownt get_shutdownt set_shutdown( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_shutdown_wrong_args s c C s | i \ } } | i | i | i | i t | i t | i d | i | i t | i | i | i t t B | i t | i d | i | i t t B d S( sS
L{Connection.shutdown} performs an SSL-level connection shutdown.
i N(
R t assertFalseRB R RC R R R+ R R ( R Rf Re ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
test_shutdown s
c C s? t t t t } | i t | i | i t d S( sk
L{Connection.set_shutdown} sets the state of the SSL connection shutdown
process.
N( R/ R- R R RD R R RC ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_shutdown s
c C s[ t t t d } | i t | i d | i t | i | i t | i d d d S( s
L{Connection.set_app_data} raises L{TypeError} if called with other than
one argument. L{Connection.get_app_data} raises L{TypeError} if called
with any arguments.
N( R/ R- R R R R R R ( R RR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_app_data_wrong_args s c C sE t t t d } t } | i | | i | i | d S( s
Any object can be set as app data by passing it to
L{Connection.set_app_data} and later retrieved with
L{Connection.get_app_data}.
N( R/ R- R R R R R R ( R RR R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s
c C s, t t t d } | i t | i d S( sz
L{Connection.makefile} is not implemented and calling that method raises
L{NotImplementedError}.
N( R/ R- R R R t NotImplementedErrort makefile( R RR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
test_makefile s c C st t t t d } | i t | i d | i t | i d | i t | i t | i t | i g d S( sm
L{Connection.get_peer_cert_chain} raises L{TypeError} if called with any
arguments.
i R N( R/ R- R R R R t get_peer_cert_chainR ( R RR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt# test_get_peer_cert_chain_wrong_args s
c C sE t } | \ \ } } \ } } \ } } t t } | i | | i | | i | | i | t | d } | i t t }
|
i t
t t |
d } | i | i
| | | i } | i t | d | i d | d i i | i d | d i i | i d | d i i d S( s
L{Connection.get_peer_cert_chain} returns a list of certificates which
the connected server returned for the certification verification.
i s Server Certificatei s Intermediate Certificatei s Authority Certificatei N( R R- R R R R R/ R R R R' RW R R RM R R Rq R ( R R R{ R| R} R~ R R R Rf R Re ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_peer_cert_chain s, !
c C s t t } | i t t t | i t t t t | d } | i t t t d } | i | i
| | | i d | i d S( ss
L{Connection.get_peer_cert_chain} returns C{None} if the peer sends no
certificate chain.
N( R- R R R R
R9 R R R8 R/ R R R R R RM ( R R Rf Re ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_get_peer_cert_chain_none' s
( R R R R R* R+ R- R/ R1 R2 R4 R5 R6 R8 R9 R R= R> RA RE RG RH RI R RL RN RO RP ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR( s6
"t ConnectionGetCipherListTestsc B s e Z d Z d Z d Z RS( s2
Tests for L{Connection.get_cipher_list}.
c C s/ t t t d } | i t | i d d S( si
L{Connection.get_cipher_list} raises L{TypeError} if called with any
arguments.
N( R/ R- R R R R R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR < s c C sb t t t d } | i } | i t | t x$ | D] } | i t | t q> Wd S( s
L{Connection.get_cipher_list} returns a C{list} of C{str} giving the
names of the ciphers which might be used.
N( R/ R- R R R R R t listt str( R R t cipherst cipher( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_resultE s ( R R R R RV ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRQ 8 s t ConnectionSendTestsc B sG e Z d Z d Z d Z y e Wn e j
o n Xd Z RS( s&
Tests for L{Connection.send}
c C s^ t t t d } | i t | i | i t | i t | i t | i d d d S( sx
When called with arguments other than a single string,
L{Connection.send} raises L{TypeError}.
R t barN( R/ R- R R R R Rc R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR V s c C sZ | i \ } } | i t d } | i | d | i | i d t d d S( s
When passed a short byte string, L{Connection.send} transmits all of it
and returns the number of bytes sent.
t xyi N( R Rc R3 R R ( R Rf Re t count( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_short_bytesa s c C s` | i \ } } | i t t d } | i | d | i | i d t d d S( s
When passed a memoryview onto a small number of bytes,
L{Connection.send} transmits all of them and returns the number of
bytes sent.
RY i N( R Rc t
memoryviewR3 R R ( R Rf Re RZ ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_short_memoryviewp s ( R R R R R[ R\ t NameErrorR] ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRW R s
t ConnectionSendallTestsc B sY e Z d Z d Z d Z y e Wn e j
o n Xd Z d Z d Z RS( s*
Tests for L{Connection.sendall}.
c C s^ t t t d } | i t | i | i t | i t | i t | i d d d S( s{
When called with arguments other than a single string,
L{Connection.sendall} raises L{TypeError}.
R RX N( R/ R- R R R R t sendallR ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s c C sH | i \ } } | i t d | i | i d t d d S( sf
L{Connection.sendall} transmits all of the bytes in the string passed to
it.
RY i N( R R` R3 R R ( R Rf Re ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
test_short s c C sN | i \ } } | i t t d | i | i d t d d S( s
When passed a memoryview onto a small number of bytes,
L{Connection.sendall} transmits all of them.
RY i N( R R` R\ R3 R R ( R Rf Re ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR] s c C s | i \ } } t d d
t d } | i | g } d } xD | t | j o0 | i d } | i | | t | 7} qH W| i | t d i | d S( s
L{Connection.sendall} transmits all of the bytes in the string passed to
it even if this requires multiple calls of an underlying write function.
RY i i i RZ i RX Ni i ( R R3 R` R R R R R ( R Rf Re t messaget accumt receivedR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_long s
c C s9 | i \ } } | i d | i t | i d d S( s
If the underlying socket is closed, L{Connection.sendall} propagates the
write error from the low level write call.
i s hello, worldN( R t
sock_shutdownR R) R` ( R Rf Re ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_closed s
(
R R R R Ra R\ R^ R] Re Rg ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR_ } s
t ConnectionRenegotiateTestsc B s) e Z d Z d Z d Z d Z RS( s+
Tests for SSL renegotiation APIs.
c C s/ t t t d } | i t | i d d S( se
L{Connection.renegotiate} raises L{TypeError} if called with any
arguments.
N( R/ R- R R R R t renegotiate( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_renegotiate_wrong_args s c C s/ t t t d } | i t | i d d S( sn
L{Connection.total_renegotiations} raises L{TypeError} if called with
any arguments.
N( R/ R- R R R R t total_renegotiations( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt$ test_total_renegotiations_wrong_args s c C s/ t t t d } | i | i d d S( sr
L{Connection.total_renegotiations} returns C{0} before any
renegotiations have happened.
i N( R/ R- R R R Rk ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_total_renegotiations s ( R R R Rj Rl Rm ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRh s t
ErrorTestsc B s e Z d Z d Z RS( s.
Unit tests for L{OpenSSL.SSL.Error}.
c C s- | i t t t | i t i d d S( s0
L{Error} is an exception type.
R( N( R t
issubclassR( t ExceptionR R ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s ( R R R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRn s t ConstantsTestsc B s\ e Z d Z e d j o
d Z n e d j o
d Z n e d j o
d Z n RS( s
Tests for the values of constants exposed in L{OpenSSL.SSL}.
These are values defined by OpenSSL intended only to be used as flags to
OpenSSL APIs. The only assertions it seems can be made about them is
their values.
c C s | i t d d S( s
The value of L{OpenSSL.SSL.OP_NO_QUERY_MTU} is 0x1000, the value of
I{SSL_OP_NO_QUERY_MTU} defined by I{openssl/ssl.h}.
i N( R R; ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_op_no_query_mtu s c C s | i t d d S( s
The value of L{OpenSSL.SSL.OP_COOKIE_EXCHANGE} is 0x2000, the value
of I{SSL_OP_COOKIE_EXCHANGE} defined by I{openssl/ssl.h}.
i N( R R< ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_op_cookie_exchange s c C s | i t d d S( s
The value of L{OpenSSL.SSL.OP_NO_TICKET} is 0x4000, the value of
I{SSL_OP_NO_TICKET} defined by I{openssl/ssl.h}.
i @ N( R R= ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_op_no_ticket& s N(
R R R R; R Rr R< Rs R= Rt ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRq s
t MemoryBIOTestsc B s e Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z d Z d Z d Z RS( sA
Tests for L{OpenSSL.SSL.Connection} using a memory BIO.
c C s t t } | i t t Bt B | i t t Bt Bt
| i } | i t
t t | i t t t | i | i t t t t | | } | i | S( sc
Create a new server-side SSL L{Connection} object wrapped around
C{sock}.
( R- R R R! R" R# R R$ R% R& RW t get_cert_storeR R R
R9 R R R8 t check_privatekeyt add_certR: R/ R ( R t sockt
server_ctxt server_storeR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _server5 s
c C s t t } | i t t Bt B | i t t Bt Bt
| i } | i t
t t | i t t t | i | i t t t t | | } | i | S( sc
Create a new client-side SSL L{Connection} object wrapped around
C{sock}.
( R- R R R! R" R# R R$ R% R& RW Rv R R R
R7 R R R6 Rw Rx R: R/ R ( R Ry t
client_ctxt client_storeR ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _clientK s
c C s | i d } | i d } | i | i d | i | i d | i | i d | i | i | | d | i | i d | i | i d | i | i d | i | i | i | i | i | i | i
| i | i | i
| i | i t d } | i | | i | i | | | | f | i | d d d | i | i | | | | d d d f d S( s
Two L{Connection}s which use memory BIOs can be manually connected by
reading from the output of each and writing those bytes to the input of
the other and in this way establish a connection and exchange
application-level bytes with each other.
s One if by land, two if by sea.Ni(
R| R R R t
master_keyt
client_randomt
server_randomR t assertNotIdenticalR t assertNotEqualsR3 R ( R R R t important_message( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_memoryConnect_ s.
c C s | i \ } } t d } | i | | i d } | i | | | d d d } | i | | i d } | i | | d S( s
Just like L{test_memoryConnect} but with an actual socket.
This is primarily to rule out the memory BIO code as the source of
any problems encountered while passing data over a L{Connection} (if
this test fails, there must be a problem outside the memory BIO
code, as no memory BIO is involved here). Even though this isn't a
memory BIO test, it's convenient to have it here.
s, Help me Obi Wan Kenobi, you're my only hope.i Ni( R R3 Rc R R ( R R R R t msg( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_socketConnect s
c C sg t t } t } t | | } | i t | i d | i t | i d | i t | i d S( s
Test that L{OpenSSL.SSL.bio_read} and L{OpenSSL.SSL.bio_write} don't
work on L{OpenSSL.SSL.Connection}() that use sockets.
id R N( R- R R R/ R R R R t bio_shutdown( R R Re R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_socketOverridesMemory s c C s | i d } | i d } | i | | d } | i d | } | i | | j | i | | \ } } | i | | | i t | | d S( s
If more bytes than can be written to the memory BIO are passed to
L{Connection.send} at once, the number of bytes which were written is
returned and that many bytes from the beginning of the input can be
read from the other end of the connection.
i i RY Ni ( R| R R R Rc R R R R ( R Rf Re t sizet sentt receiverRd ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_outgoingOverflow s c C sH | i d } | i | i t | i d } | i | i t d S( s{
L{Connection.bio_shutdown} signals the end of the data stream from
which the L{Connection} reads.
i N( R| R R R R( R R t __class__( R Rf t e( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRG s
c C s | i d } | i d } | i | i g | i | i g | i } | | } | i | i g | i | i | | i | | | i | i | | i | i | d S( s
Verify the return value of the C{get_client_ca_list} method for server and client connections.
@param func: A function which will be called with the server context
before the client and server are connected to each other. This
function should specify a list of CAs for the server to send to the
client and return that same list. The list will be used to verify
that C{get_client_ca_list} returns the proper value at various
times.
N( R| R R R t get_client_ca_listR) R ( R t funcRf Re R R< ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt _check_client_ca_list s c C sX t t } | i t | i d | i t | i d g | i | i g d d S( s
L{Context.set_client_ca_list} raises a L{TypeError} if called with a
non-list or a list that contains objects other than X509Names.
t spamN( R- R R R t set_client_ca_listR R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_client_ca_list_errors s c C s d } | i | d S( s
If passed an empty list, L{Context.set_client_ca_list} configures the
context to send no CA names to the client and, on both the server and
client sides, L{Connection.get_client_ca_list} returns an empty list
after the connection is set up.
c S s | i g g S( N( R ( R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt no_ca s
N( R ( R R ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_empty_ca_list s c s; t t t } | i f d } | i | d S( sK
If passed a list containing a single X509Name,
L{Context.set_client_ca_list} configures the context to send that CA
name to the client and, on both the server and client sides,
L{Connection.get_client_ca_list} returns a list containing that
X509Name after the connection is set up.
c s | i g g S( N( R ( R ( t cadesc( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt single_ca s N( R R
R: Rq R ( R R| R ( ( R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_one_ca_list s c sY t t t } t t t } | i | i f d } | i | d S( sW
If passed a list containing multiple X509Name objects,
L{Context.set_client_ca_list} configures the context to send those CA
names to the client and, on both the server and client sides,
L{Connection.get_client_ca_list} returns a list containing those
X509Names after the connection is set up.
c s g } | i | | S( N( R ( R t L( t cldesct sedesc( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt multiple_ca& s
N( R R
R8 Rq R ( R t secertt clcertR ( ( R R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_multiple_ca_list s c sw t t t } t t t } t t t } | i | i | i f d } | i | d S( s
If called multiple times, only the X509Names passed to the final call
of L{Context.set_client_ca_list} are used to configure the CA names
sent to the client.
c s* | i g | i g g S( N( R ( R ( R R R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
changed_ca; s N( R R
R: R8 Rq R ( R R| R R R ( ( R R R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_reset_ca_list- s c sY t t t } t t t } | i | i f d } | i | d S( s
If the list passed to L{Context.set_client_ca_list} is mutated
afterwards, this does not affect the list of CA names sent to the
client.
c s- g } | i g | i g S( N( R R ( R R ( R R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
mutated_caN s
N( R R
R: R8 Rq R ( R R| R R ( ( R R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_mutated_ca_listB s c C sa t t } t t t } | i t | i | i t | i d | i t | i | | d S( s
L{Context.add_client_ca} raises L{TypeError} if called with a non-X509
object or with a number of arguments other than one.
R N( R- R R R
R: R R t
add_client_ca( R R R| ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_add_client_ca_errorsV s
c s> t t t i f d } | i | d S( s~
A certificate's subject can be added as a CA to be sent to the client
with L{Context.add_client_ca}.
c s | i g S( N( R ( R ( R| R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR i s
N( R R
R: Rq R ( R R ( ( R R| s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_one_add_client_cab s c s_ t t t t t t i i f d } | i | d S( s
Multiple CA names can be sent to the client by calling
L{Context.add_client_ca} with multiple X509 objects.
c s$ | i | i g S( N( R ( R ( R| R R R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR z s
N( R R
R: R8 Rq R ( R R ( ( R R R R| s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_multiple_add_client_cao s c sz t t t } t t t } t t t | i | i i f d } | i | d S( s
A call to L{Context.set_client_ca_list} followed by a call to
L{Context.add_client_ca} results in using the CA names from the first
call and the CA name from the second call.
c s- | i g | i g S( N( R R ( R ( R R R R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt mixed_set_add_ca s
N( R R
R: R8 Rq R ( R R| R R ( ( R R R R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_and_add_client_ca s c sn t t t } t t t t t t | i i f d } | i | d S( s
A call to L{Context.set_client_ca_list} after a call to
L{Context.add_client_ca} replaces the CA name specified by the former
call with the names specified by the latter cal.
c s4 | i | i g | i g S( N( R R ( R ( R R R R ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt set_replaces_add_ca s
N( R R
R: R8 Rq R ( R R| R ( ( R R R R s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt test_set_after_add_client_ca s ( R R R R| R R R R R RG R R R R R R R R R R R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyRu 1 s( ,
t InfoConstantTestsc B s e Z d Z d Z RS( sI
Tests for assorted constants exposed for use in info callbacks.
c C sg x` t t t t t t t t t t t
t t t
t t t t t t g D] } | i t | t qC Wd S( s
All of the info constants are integers.
This is a very weak test. It would be nice to have one that actually
verifies that as certain info events happen, the value passed to the
info callback matches up with the constant exposed by OpenSSL.SSL.
N( R> R? R@ RA RB RC RD RE RF RG RH RI RJ RK RL RM RN RO RP RQ R R R ( R t const( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt
test_integers s
( R R R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyR s t __main__N(s R t gcR R R R R t sysR R R R t osR t os.pathR t unittestR
t weakrefR t OpenSSL.cryptoR R
R R R R R R R t OpenSSL.SSLR R R R R R R R R R R R R! R" R# R$ R% R& R' R( R) R* R+ R, R- R. R/ R0 t OpenSSL.test.utilR1 R2 R3 t OpenSSL.test.test_cryptoR4 R5 R6 R7 R8 R9 R: R; t ImportErrorR R< R= R> R? R@ RA RB RC RD RE RF RG RH RI RJ RK RL RM RN RO RP RQ R RW Rg Rk R R R R R R( RQ RW R_ Rh Rn Rq Ru R R ( ( ( s; /usr/lib64/python2.6/site-packages/OpenSSL/test/test_ssl.pyt sx " "(" ( 6G ad g+G5
+ {