| Server IP : 209.38.156.173 / Your IP : 216.73.216.122 [ Web Server : Apache/2.4.52 (Ubuntu) System : Linux lakekumayuhotel 5.15.0-136-generic #147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x86_64 User : root ( 0) PHP Version : 8.1.2-1ubuntu2.22 Disable Function : NONE Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/twisted/test/__pycache__/ |
Upload File : |
o
�b[ � @ s d Z ddlZddlZddlmZmZmZmZ ddlm Z ddl
m Z ddl m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ zdd lmamZ dd lma dd
lmZm Z W n e yh dd� Z e � Y nw ddl m Z G dd� de j!�Z"G dd� de j!�Z#G dd� dej$�Z%G dd� dej$�Z&e ej'�G dd� dej$��Z(dd � Z)d d � Z*G d d � d �Z+tdur�G d!d"� d"tj,�Z-G d#d$� d$ee�Z.G d%d&� d&e�Z/G d'd(� d(e/�Z0G d)d*� d*e�Z1G d+d,� d,ee+�Z2G d-d.� d.�Z3G d/d0� d0e�Z4G d1d2� d2e�Z5dS )3z
Tests for twisted SSL support.
� N)�defer�
interfaces�protocol�reactor)�ConnectionDone)�basic)�FilePath)�platform)�waitUntilAllDisconnected)�ProperlyCloseFilesMixin)�TestCase)�SSL�crypto)�ssl)�ClientTLSContext�certPathc C s d a ad S �N)r
r � r r �7/usr/lib/python3/dist-packages/twisted/test/test_ssl.py�_noSSL s r )� implementerc @ s@ e Zd ZdZg d�ZddgZdd� Zdd� Zd d
� Zd d � Z d
S )�UnintelligentProtocola
@ivar deferred: a deferred that will fire at connection lost.
@type deferred: L{defer.Deferred}
@cvar pretext: text sent before TLS is set up.
@type pretext: C{bytes}
@cvar posttext: text sent after TLS is set up.
@type posttext: C{bytes}
)s
first lines last thing before tls starts� STARTTLSs first thing after tls starteds last thing everc C � t �� | _d S r �r �Deferred�deferred��selfr r r �__init__7 � z UnintelligentProtocol.__init__c C s | j D ]}| �|� qd S r )�pretext�sendLine)r �lr r r �connectionMade: s
�z$UnintelligentProtocol.connectionMadec C sD |dkr | j �t� | jj� | jD ]}| �|� q| j �� d S d S )N� READY)� transport�startTLSr �factory�client�posttextr" �loseConnection)r �liner# r r r � lineReceived> s
�z"UnintelligentProtocol.lineReceivedc C � | j �d � d S r �r �callback�r �reasonr r r �connectionLostE � z$UnintelligentProtocol.connectionLostN)
�__name__�
__module__� __qualname__�__doc__r! r* r r$ r- r3 r r r r r ' s r c @ s: e Zd ZdZddd�Zdd� Zdd� Zd d
� Zd d � Zd
S )�
LineCollectoraJ
@ivar deferred: a deferred that will fire at connection lost.
@type deferred: L{defer.Deferred}
@ivar doTLS: whether the protocol is initiate TLS or not.
@type doTLS: C{bool}
@ivar fillBuffer: if set to True, it will send lots of data once
C{STARTTLS} is received.
@type fillBuffer: C{bool}
Fc C s || _ || _t�� | _d S r )�doTLS�
fillBufferr r r )r r: r; r r r r V s zLineCollector.__init__c C s d| j _g | j _d S )N� )r( �rawdata�linesr r r r r$ [ s z LineCollector.connectionMadec C sv | j j�|� |dkr9| jrtd�D ]}| �d� q| �d� | jr3tttd�}| j �
|| j j � d S | � � d S d S )Nr i� s� XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXr% )�privateKeyFileName�certificateFileName)
r( r> �appendr; �ranger" r: �ServerTLSContextr r& r' �server�
setRawMode)r r, �x�ctxr r r r- _ s
� �zLineCollector.lineReceivedc C s | j j|7 _| j�� d S r )r( r= r& r+ �r �datar r r �rawDataReceivedo s z LineCollector.rawDataReceivedc C r. r r/ r1 r r r r3 s r4 z LineCollector.connectionLostN�F) r5 r6 r7 r8 r r$ r- rJ r3 r r r r r9 I s
r9 c @ s e Zd ZdZdd� ZdS )�SingleLineServerProtocolzK
A protocol that sends a single line of data at C{connectionMade}.
c C s | j �d� | j �� d S )N� +OK <some crap>
)r& �write�getPeerCertificater r r r r$ | s z'SingleLineServerProtocol.connectionMadeN)r5 r6 r7 r8 r$ r r r r rL w s rL c @ �( e Zd ZdZdd� Zdd� Zdd� ZdS ) �RecordingClientProtocolzv
@ivar deferred: a deferred that will fire with first received content.
@type deferred: L{defer.Deferred}
c C r r r r r r r r � r z RecordingClientProtocol.__init__c C � | j �� d S r )r& rO r r r r r$ � r z&RecordingClientProtocol.connectionMadec C s | j �|� d S r r/ rH r r r � dataReceived� r4 z$RecordingClientProtocol.dataReceivedN)r5 r6 r7 r8 r r$ rS r r r r rQ � s
rQ c @ � e Zd ZdZdd� Zdd� ZdS )� ImmediatelyDisconnectingProtocolz�
A protocol that disconnect immediately on connection. It fires the
C{connectionDisconnected} deferred of its factory on connetion lost.
c C rR r �r& r+ r r r r �handshakeCompleted� r z3ImmediatelyDisconnectingProtocol.handshakeCompletedc C s | j j�d � d S r )r( �connectionDisconnectedr0 r1 r r r r3 � � z/ImmediatelyDisconnectingProtocol.connectionLostN)r5 r6 r7 r8 rW r3 r r r r rU � s rU c C s� t �� }|�t jd� t �� }|�� }| |_||_|�|� |� |d� t �
� }|� d� |� d� |�
d� |�|�� � |�|�� � |�|�� � |� |d� |||fS )z�
Create a certificate for given C{organization} and C{organizationalUnit}.
@return: a tuple of (key, request, certificate) objects.
i �md5� r �< )r �PKey� generate_key�TYPE_RSA�X509Req� get_subject�O�OU�
set_pubkey�sign�X509�set_serial_number�gmtime_adj_notBefore�gmtime_adj_notAfter�
set_issuer� set_subject�
get_pubkey)� organization�organizationalUnit�pkey�req�subject�certr r r �generateCertificateObjects� s"
rs c
C sn t ||�\}}}d|tjfd|tjfd|tjffD ]\}}}tj�| |f��d�} t | ��
|tj |�� qdS )z�
Create certificate files key, req and cert prefixed by C{basename} for
given C{organization} and C{organizationalUnit}.
�keyrp rr zutf-8N) rs r �dump_privatekey�dump_certificate_request�dump_certificate�os�extsep�join�encoder �
setContent� FILETYPE_PEM)
�basenamerm rn ro rp rr �ext�obj�dumpFunc�fNamer r r �generateCertificateFiles� s
��r� c @ rT )�ContextGeneratingMixinah
Offer methods to create L{ssl.DefaultOpenSSLContextFactory} for both client
and server.
@ivar clientBase: prefix of client certificate files.
@type clientBase: C{str}
@ivar serverBase: prefix of server certificate files.
@type serverBase: C{str}
@ivar clientCtxFactory: a generated context factory to be used in
L{IReactorSSL.connectSSL}.
@type clientCtxFactory: L{ssl.DefaultOpenSSLContextFactory}
@ivar serverCtxFactory: a generated context factory to be used in
L{IReactorSSL.listenSSL}.
@type serverCtxFactory: L{ssl.DefaultOpenSSLContextFactory}
c O sN | � � }t|||� tjtj�|df�tj�|df�g|�R i |��}||fS )Nrt rr )�mktempr� r � DefaultOpenSSLContextFactoryrx ry rz )r �org�orgUnit�args�kwArgs�base�serverCtxFactoryr r r �makeContextFactory� s ���z)ContextGeneratingMixin.makeContextFactoryc C s4 | j |i |��\| _| _| j |i |��\| _| _d S r )r� �
clientBase�clientCtxFactory�
serverBaser� )r �
clientArgs� clientKwArgs�
serverArgs� serverKwArgsr r r �setupServerAndClient� s ����z+ContextGeneratingMixin.setupServerAndClientN)r5 r6 r7 r8 r� r� r r r r r� � s r� c @ s e Zd ZdZdZdd� ZdS )rC zf
A context factory with a default method set to
L{OpenSSL.SSL.SSLv23_METHOD}.
Fc O s( t j|d< tjj| g|�R i |�� d S )N� sslmethod)r
�
SSLv23_METHODr r� r )r r� �kwr r r r � s
zServerTLSContext.__init__N)r5 r6 r7 r8 �isClientr r r r r rC � s rC c @ �D e Zd ZdZe�ed�du rdZdd� Zdd� Z dd � Z
d
d � Z dS ) �StolenTCPTestszc
For SSL transports, test many of the same things which are tested for
TCP transports.
N�2Reactor does not support SSL, cannot run SSL testsc C s. t j�tt��� �}|�� }tj||||d�S )zY
Create an SSL server with a certificate using L{IReactorSSL.listenSSL}.
�� interface) r �PrivateCertificate�loadPEMr r �
getContent�optionsr � listenSSL)r �address�
portNumberr( rr �contextFactoryr r r � createServer s zStolenTCPTests.createServerc C s t �� }|�|||�S )zG
Create an SSL client using L{IReactorSSL.connectSSL}.
)r �CertificateOptions�
connectSSL)r r� r� �
clientCreatorr� r r r �
connectClient s z StolenTCPTests.connectClientc C s t jS )z�
Return L{OpenSSL.SSL.Error} as the expected error type which will be
raised by a write to the L{OpenSSL.SSL.Connection} object after it has
been closed.
)r
�Errorr r r r �getHandleExceptionType s z%StolenTCPTests.getHandleExceptionTypec C s4 t �t �t �d�t �t �d�t �d��t �d���S )a4
Return a L{hamcrest.core.matcher.Matcher} for the argument
L{OpenSSL.SSL.Error} will be constructed with for this case.
This is basically just a random OpenSSL implementation detail.
It would be better if this test worked in a way which did not
require this.
z SSL routines� SSL_write�ssl_write_internalzprotocol is shutdown)�hamcrest�contains�equal_to�any_ofr r r r �getHandleErrorCodeMatcher# s
���z(StolenTCPTests.getHandleErrorCodeMatcher) r5 r6 r7 r8 r � IReactorSSLr �skipr� r� r� r� r r r r r� s r� c @ sZ e Zd ZdZe�ed�du rdZdZdZ dZ
dd� Z ddd�Z d d
� Z
d d � Zd
d� ZdS )�TLSTestsz�
Tests for startTLS support.
@ivar fillBuffer: forwarded to L{LineCollector.fillBuffer}
@type fillBuffer: C{bool}
Nr� Fc C s8 | j jd ur | j j�� | jjd ur| jj�� d S d S r )� clientProtor& r+ � serverProtor r r r �tearDownI s
�zTLSTests.tearDownc s� � | _ t�� }| _� fdd�|_|rd|_nd|_�| _t�� }| _�fdd�|_|r1d|_nd|_t j
d|dd�}| � |j � t �
d|�� j|� t�� j�jg�S ) a�
Helper method to run TLS tests.
@param clientProto: protocol instance attached to the client
connection.
@param serverProto: protocol instance attached to the server
connection.
@param clientIsServer: flag indicated if client should initiate
startTLS instead of server.
@return: a L{defer.Deferred} that will fire when both connections are
lost.
c � � S r r r �r� r r �<lambda>_ � z#TLSTests._runTest.<locals>.<lambda>FTc r� r r r �r� r r r� g r� r � 127.0.0.1r� )r� r �
ClientFactory�
clientFactoryrD r) r� �
ServerFactory�
serverFactoryr � listenTCP�
addCleanup�
stopListening�
connectTCP�getHost�portr �
gatherResultsr )r r� r� �clientIsServer�cf�sfr� r �r� r� r �_runTestO s zTLSTests._runTestc �, � fdd�}� � t� td� j��}|�|�S )z~
Test for server and client startTLS: client should received data both
before and after the startTLS.
c � � � � jjtjtj � d S r )� assertEqualr� r> r r! r* )�ignorer r r �checkz �
�z TLSTests.test_TLS.<locals>.checkT�r� r r9 r; � addCallback�r r� �dr r r �test_TLSt s
zTLSTests.test_TLSc r� )z�
Test for server startTLS not followed by a startTLS in client: the data
received after server startTLS should be received as raw.
c s& � � � jjtj� � �� jjd� d S )NzNo encrypted bytes received)r� r� r> r r! �
assertTruer= ��ignoredr r r r� � s z"TLSTests.test_unTLS.<locals>.checkFr� r� r r r �
test_unTLS� s
�
zTLSTests.test_unTLSc s. � fdd�}� � td� j�t� d�}|�|�S )z:
Test startTLS first initiated by client.
c r� r )r� r� r> r r! r* r� r r r r� � r� z)TLSTests.test_backwardsTLS.<locals>.checkT)r� r9 r; r r� r� r r r �test_backwardsTLS� s
�
zTLSTests.test_backwardsTLSrK )r5 r6 r7 r8 r r� r r� r; r� r� r� r� r� r� r� r r r r r� 9 s
% r� c @ s( e Zd ZdZe�ed�du rdZdZdS )�SpammyTLSTestszA
Test TLS features with bytes sitting in the out buffer.
Nr� T) r5 r6 r7 r8 r r� r r� r; r r r r r� � s
r� c @ s8 e Zd Ze�ed�du rdZdZdZdd� Z dd� Z
dS )�BufferingTestsNr� c C sB | j jd ur | j j�� | jjd ur| jj�� tt| j | jg�S r )r� r& r+ r� r
r r r r r r� � s
zBufferingTests.tearDownc s� t � �| _t� � | _t�� }t�� }| _�fdd�|_� fdd�|_t� t
t
�}t� � }t j
d||dd�}| �|j� t �d|�� j||�}| �|j� � j�| jd�S )Nc r� r r r r� r r r� � r� z6BufferingTests.test_openSSLBuffering.<locals>.<lambda>c r� r r r r� r r r� � r� r r� r� rM )rL r� rQ r� r r� r� r) r r� r �ClientContextFactoryr r� r� r� r� r� r� �
disconnectr r� r� )r rD r) �sCTX�cCTXr� �clientConnectorr r� r �test_openSSLBuffering� s" � �z$BufferingTests.test_openSSLBuffering) r5 r6 r7 r r� r r� r� r� r� r� r r r r r� � s r� c @ r� ) �ConnectionLostTestsz'
SSL connection closing tests.
Nr� c s� d}� � ||d fi ||d fi � t�� }tj|_t�d|� j� � _}t�� }t |_t
� � |_ t�
d|�� j|� j� |j �� fdd��S )N�twisted.test.test_ssl�, client�, serverr r� c s
� j �� S r )�
serverPortr� )�
ignoredResultr r r r� � s
z=ConnectionLostTests.testImmediateDisconnect.<locals>.<lambda>)r� r r� �Protocolr r� r� r� r� rU r r rX r� r� r� r� r� )r r� �serverProtocolFactoryr� �clientProtocolFactoryr r r �testImmediateDisconnect� s* �
�
�
�z+ConnectionLostTests.testImmediateDisconnectc s� t tj�G dd� dtj��}d}| �||d fi ||d fi � |� �t�� }�fdd�|_t�d|| j �}| �
|j � |� � t� � }� fd d�|_t�
d
|�� j|| j� d d � }t�� j�|��j�|�g�S )
z�
Both sides of SSL connection close connection; the connections should
close cleanly, and only after the underlying TCP connection has
disconnected.
c @ rP ) zMConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshakeFc S r r )r r �doner r r r r r zVConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshake.__init__c S rR r rV r r r r rW
r z`ConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshake.handshakeCompletedc S s | j �|� | ` d S r )r� �errbackr1 r r r r3
s z\ConnectionLostTests.test_bothSidesLoseConnection.<locals>.CloseAfterHandshake.connectionLostN)r5 r6 r7 �gotDatar rW r3 r r r r �CloseAfterHandshake s
r� r� r� r� c r� r r r ��serverProtocolr r r� r� zBConnectionLostTests.test_bothSidesLoseConnection.<locals>.<lambda>r c r� r r r ��clientProtocolr r r� r� r� c S s | � t� d S r )�trapr )�failurer r r � checkResult& r zEConnectionLostTests.test_bothSidesLoseConnection.<locals>.checkResult)r r �IHandshakeListenerr r� r� r� r r� r� r� r� r� r� r� r� r� r r� r� �
addErrback)r r� r� r� r� r� r� r �r� r� r � test_bothSidesLoseConnection� s4
� �
��z0ConnectionLostTests.test_bothSidesLoseConnectionc s� d}| � ||d fi ||d fi � dd� }| j�� �tj|� t�� }t� � �|j
�_ t� � }�fdd�|_t
�d|| j� | _}t�� }t� � � |j
� _ t�� }� fd d�|_t
�d
|�� j|| j� tj||gd d �}|�| j�S )
Nr� r� r� c W s dS )NFr )�ar r r �verify6 � z4ConnectionLostTests.testFailedVerify.<locals>.verifyc r� r r r r� r r r� ? r� z6ConnectionLostTests.testFailedVerify.<locals>.<lambda>r c r� r r r r� r r r� H r� r� T)�
consumeErrors)r� r� �
getContext�
set_verifyr
� VERIFY_PEERr r r r� r0 r3 r� r r� r� r� r� r� r� r� � DeferredListr� � _cbLostConns) r r� r �serverConnLostr� r� �clientConnLostr� �dlr r r �testFailedVerify0 s6 �
�� z$ConnectionLostTests.testFailedVerifyc C sh |\\}}\}}| � |� | � |� tjg}t�� r%ddlm} |�|� |j|� |j|� | j �
� S )Nr )�ConnectionLost) � assertFalser
r� r � isWindows�twisted.internet.errorr rA r� r� r� )r �results�sSuccess�sResult�cSuccess�cResult�acceptableErrorsr r r r r
S s
z ConnectionLostTests._cbLostConns) r5 r6 r7 r8 r r� r r� r� r r r
r r r r r� � s 4 #r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
S ) � FakeContextzK
L{OpenSSL.SSL.Context} double which can more easily be inspected.
c C s || _ d| _d S )Nr )�_method�_options)r �methodr r r r s s
zFakeContext.__init__c C s | j |O _ d S r )r )r r� r r r � set_optionsw rY zFakeContext.set_optionsc C � d S r r �r �fileNamer r r �use_certificate_filez r z FakeContext.use_certificate_filec C r r r r r r r �use_privatekey_file} r z FakeContext.use_privatekey_fileN)r5 r6 r7 r8 r r r! r" r r r r r n s r c @ r� ) �!DefaultOpenSSLContextFactoryTestsz8
Tests for L{ssl.DefaultOpenSSLContextFactory}.
Nr� c C s" t jtttd�| _| j�� | _d S )N)�_contextFactory)r r� r r r� r �contextr r r r �setUp� s �z'DefaultOpenSSLContextFactoryTests.setUpc C �V | � | jjtj� | � | jjtj@ tj� | �| jjtj@ � | �| jjtj @ � dS )z�
L{ssl.DefaultOpenSSLContextFactory.getContext} returns an SSL context
which can use SSLv3 or TLSv1 but not SSLv2.
N�
r� r% r r
r� r � OP_NO_SSLv2r � OP_NO_SSLv3� OP_NO_TLSv1r r r r � test_method� s z-DefaultOpenSSLContextFactoryTests.test_methodc C s | � tjtjt| �� � dS )z�
Instantiating L{ssl.DefaultOpenSSLContextFactory} with a certificate
filename which does not identify an existing file results in the
initializer raising L{OpenSSL.SSL.Error}.
N)� assertRaisesr
r� r r� r r� r r r r �test_missingCertificateFile� � �z=DefaultOpenSSLContextFactoryTests.test_missingCertificateFilec C s | � tjtj| �� t� dS )z�
Instantiating L{ssl.DefaultOpenSSLContextFactory} with a private key
filename which does not identify an existing file results in the
initializer raising L{OpenSSL.SSL.Error}.
N)r- r
r� r r� r� r r r r r �test_missingPrivateKeyFile� r/ z<DefaultOpenSSLContextFactoryTests.test_missingPrivateKeyFile) r5 r6 r7 r8 r r� r r� r& r, r. r0 r r r r r# � s
r# c @ s4 e Zd ZdZe�ed�du rdZdd� Zdd� Z dS )�ClientContextFactoryTestsz0
Tests for L{ssl.ClientContextFactory}.
Nr� c C s" t �� | _t| j_| j�� | _d S r )r r� r� r r$ r r% r r r r r& � s
z ClientContextFactoryTests.setUpc C r' )z~
L{ssl.ClientContextFactory.getContext} returns a context which can use
SSLv3 or TLSv1 but not SSLv2.
Nr( r r r r r, � s z%ClientContextFactoryTests.test_method)
r5 r6 r7 r8 r r� r r� r& r, r r r r r1 � s r1 )6r8 rx r� �twisted.internetr r r r r r �twisted.protocolsr �twisted.python.filepathr �twisted.python.runtimer �twisted.test.proto_helpersr
�twisted.test.test_tcpr �twisted.trial.unittestr �OpenSSLr
r r �twisted.test.ssl_helpersr r � ImportErrorr �zope.interfacer � LineReceiverr r9 r� rL rQ r� rU rs r� r� r� rC r� r� r� r� r� r r# r1 r r r r �<module> sP
�
".
)
6j * 4