T6[c@sdZddlmZmZddlmZmZmZmZm Z ddl m Z m Z ddl mZmZm Z ddlmZddlmZddlmZdd lmZdd lmZmZdd lmZmZmZdd lm Z m!Z!dd lm"Z"m#Z#m$Z$m%Z%ddlm&Z&m'Z'ddlm(Z(m)Z)ddlm*Z*ddl+m,Z,m-Z-m.Z.ddl+m/Z/m0Z0m1Z1ddl+m2Z2m3Z3ddl+m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9ddl+m:Z:m;Z;m<Z<ddl+m=Z=m>Z>m?Z?m@Z@ddl+mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHddl+mIZImJZJmKZKmLZLmMZMddl+mNZNmOZOmPZPmQZQmRZRmSZSddlTmUZVddlWmXZXmYZYmZZZm[Z[ddl\m]Z]m^Z^m_Z_m`Z`maZambZbmcZcyddl+mdZdWneek r9efZdnXyddl+mgZgWneek rgefZgnXyddl+mhZhWneek refZhnXydd l+miZiWneek refZinXydd!l+mjZjWneek refZjnXy dd"l+mkZkmlZlmmZmWneek r3efZkZlZmnXdd#l+mnZnmoZompZpmqZqmrZrmsZsmtZtmuZumvZvmwZwmxZxmyZymzZzm{Z{m|Z|m}Z}m~Z~mZmZmZd$Zd%Zd&Zd'Zd(Zd)Zd*fd+YZd,eZfd-YZd.eZefd/YZd0eZefd1YZd2eZefd3YZd4eZefd5YZd6eZfd7YZd8eZefd9YZd:eZfd;YZd<eZefd=YZd>Zd?eZefd@YZdAeZefdBYZdCeZefdDYZdEeZfdFYZdGeZfdHYZdIeZefdJYZdKeZfdLYZdMeZfdNYZedOkrendPS(Qs' Unit tests for :py:obj:`OpenSSL.SSL`. i(tcollectt get_referrers(t ECONNREFUSEDt EINPROGRESSt EWOULDBLOCKtEPIPEt ESHUTDOWN(tplatformtgetfilesystemencoding(t SHUT_RDWRterrortsocket(tmakedirs(tjoin(tmain(tref(tcatch_warningst simplefilter(tPY3t text_typetu(tTYPE_RSAt FILETYPE_PEM(tPKeytX509t X509Extensiont X509Store(tdump_privatekeytload_privatekey(tdump_certificatetload_certificate(tget_elliptic_curves(tOPENSSL_VERSION_NUMBERtSSLEAY_VERSIONt SSLEAY_CFLAGS(tSSLEAY_PLATFORMt SSLEAY_DIRtSSLEAY_BUILT_ON(t SENT_SHUTDOWNtRECEIVED_SHUTDOWN(t SSLv2_METHODt SSLv3_METHODt SSLv23_METHODt TLSv1_METHODtTLSv1_1_METHODtTLSv1_2_METHOD(tOP_SINGLE_DH_USEt OP_NO_SSLv2t OP_NO_SSLv3(t VERIFY_PEERtVERIFY_FAIL_IF_NO_PEER_CERTtVERIFY_CLIENT_ONCEt VERIFY_NONE(tSESS_CACHE_OFFtSESS_CACHE_CLIENTtSESS_CACHE_SERVERtSESS_CACHE_BOTHtSESS_CACHE_NO_AUTO_CLEARtSESS_CACHE_NO_INTERNAL_LOOKUPtSESS_CACHE_NO_INTERNAL_STOREtSESS_CACHE_NO_INTERNAL(tErrort SysCallErrort WantReadErrortWantWriteErrortZeroReturnError(tContextt ContextTypetSessiont ConnectiontConnectionTypetSSLeay_version(tlib(tWARNING_TYPE_EXPECTEDt NON_ASCIItTestCasetb(tcleartextCertificatePEMtcleartextPrivateKeyPEMtclient_cert_pemtclient_key_pemtserver_cert_pemtserver_key_pemt root_cert_pem(tOP_NO_QUERY_MTU(tOP_COOKIE_EXCHANGE(t OP_NO_TICKET(tOP_NO_COMPRESSION(tMODE_RELEASE_BUFFERS(t OP_NO_TLSv1t OP_NO_TLSv1_1t OP_NO_TLSv1_2(tSSL_ST_CONNECTt SSL_ST_ACCEPTt SSL_ST_MASKt SSL_ST_INITt SSL_ST_BEFOREt SSL_ST_OKtSSL_ST_RENEGOTIATEt SSL_CB_LOOPt SSL_CB_EXITt SSL_CB_READt SSL_CB_WRITEt SSL_CB_ALERTtSSL_CB_READ_ALERTtSSL_CB_WRITE_ALERTtSSL_CB_ACCEPT_LOOPtSSL_CB_ACCEPT_EXITtSSL_CB_CONNECT_LOOPtSSL_CB_CONNECT_EXITtSSL_CB_HANDSHAKE_STARTtSSL_CB_HANDSHAKE_DONEs[-----BEGIN DH PARAMETERS----- MBYCEQCobsg29c9WZP/54oAPcwiDAgEC -----END DH PARAMETERS----- cCsjt|t|kr%t||St|trMt||jtSt||jtSdS(s Join two path components of either ``bytes`` or ``unicode``. The return type is the same as the type of ``prefix``. N(ttypeR t isinstanceRtdecodeRtencode(tprefixtsuffix((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytjoin_bytes_or_unicodecs  cCs|S(N((tconntcertterrnumtdepthtok((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt verify_cbtscCst}|jd|jdt}|jt|jd|jdf|jt|jd}|j t d|j dt dkst |j t d|j dt dkst |jt|jt||fS( sQ Establish and return a pair of network sockets connected to each other. tiis 127.0.0.1txity(R}i( R tbindtlistent setblockingtFalset connect_ext getsocknametTruetaccepttsendRLtrecvtAssertionError(tporttclienttserver((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt socket_pairxs      !!  cCs]||g}xJ|rXx=|D]5}y|jWntk rCqX|j|qWqWdS(N(t do_handshakeR?tremove(RRtconnsRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt handshakes    cCsAttdttd}t}|jtdt}d|j_|j |j|j ||j td|j td|j |g|jd|j|dt}|jtdt}d |j_|j |j|j ||j td|j td|j |g|jd|j|dt}|jtdt}d |j_|j |j|j ||j td|j td|j ttdttd g|jd|j|d||f||f||fgS( s Construct and return a chain of certificates. 1. A new self-signed certificate authority certificate (cacert) 2. A new intermediate certificate signed by cacert (icert) 3. A new server certificate signed by icert (scert) tbasicConstraintssCA:trueisAuthority Certificatet20000101000000Zt20200101000000Zitsha1sIntermediate CertificatesServer CertificatesCA:false(RRLRRt generate_keyRRt get_subjectt commonNamet set_issuert set_pubkeyt set_notBeforet set_notAftertadd_extensionstset_serial_numbertsignR(tcaexttcakeytcacerttikeyticerttskeytscert((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_create_certificate_chainsH           " t_LoopbackMixincBsAeZdZdZdZdddZdZdZRS(s Helper mixin which defines methods for creating a connected socket pair and for forcing two connected SSL sockets to talk to each other via memory BIOs. cCs#ttt|}|j|S(N(RERBR+tset_connect_state(tselfR R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_loopbackClientFactorys cCsUtt}|jttt|jtttt ||}|j |S(N( RBR+tuse_privatekeyRRRRtuse_certificateRRQREtset_accept_state(RR tctxR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_loopbackServerFactorys   cCs|dkr|j}n|dkr0|j}nt\}}||}||}t|||jt|jt||fS(N(tNoneRRRRRR(Rt serverFactoryt clientFactoryRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt _loopbacks         cCst}x|rt}x||f||fgD]\}}y|jd}Wntk r`n X||fSxEtry|jd}Wntk rPqnXt}|j|qnWq.Wq WdS(s Try to read application bytes from each of the two :py:obj:`Connection` objects. Copy bytes back and forth between their send/receive buffers for as long as there is anything to copy. When there is nothing more to copy, return :py:obj:`None`. If one of them actually manages to deliver some application bytes, return a two-tuple of the connection from which the bytes were read and the bytes themselves. iiiNi(RRRR?tbio_readt bio_write(Rt client_connt server_conntwrotetreadtwritetdatatdirty((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_interactInMemorys"       cCsa|j|jx6||gD](}y|jWq!tk rHq!Xq!W|j||dS(s Perform the TLS handshake between two :py:class:`Connection` instances connected to each other via memory BIOs. N(RRRR?R(RRRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_handshakeInMemory,s   N( t__name__t __module__t__doc__RRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRs    /t VersionTestscBs eZdZdZdZRS(s Tests for version information exposed by :py:obj:`OpenSSL.SSL.SSLeay_version` and :py:obj:`OpenSSL.SSL.OPENSSL_VERSION_NUMBER`. cCs|jtttdS(s :py:obj:`OPENSSL_VERSION_NUMBER` is an integer with status in the low byte and the patch, fix, minor, and major versions in the nibbles above that. N(t assertTrueRqR tint(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_OPENSSL_VERSION_NUMBERDscCsli}xItttttgD]2}t|}|||<|jt|tqW|j t |ddS(s :py:obj:`SSLeay_version` takes a version type indicator and returns one of a number of version strings based on that indicator. iN( R!R"R%R#R$RGRRqtbytest assertEqualtlen(Rtversionstttversion((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_SSLeay_versionMs   (RRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR>s t ContextTestscBsqeZdZdZes'dZndZdZdZdZ dZ dZ esod Z nd Z d Zd Zd ZdZdZdZdZesdZndZdZdZdZdZdZdZdZes#dZndZe dVk rVdZ"esVdZ#qVndZ$d Z%d!Z&esd"Z'nd#Z(d$Z)d%Z*esd&Z+nd'Z,d(Z-d)Z.d*Z/d+Z0d,Z1d-Z2d.Z3d/Z4d0Z5d1Z6d2Z7d3Z8d4Z9d5Z:d6Z;d7Z<e=d8krXn d9Z>d:Z?d;Z@d<ZAd=ZBd>ZCd?ZDd@ZEdAZFdBZGdCZHdDZIdEZJdFZKesdGZLndHZMdIZNdJZOdKZPdLZQdMZRdNZSdOZTdPZUdQZVdRZWdSZXesfdTZYndUZZRS(Ws7 Unit tests for :py:obj:`OpenSSL.SSL.Context`. cCstttg}x|D]}t|qWtttg}x6|D].}yt|Wq@ttfk rmq@Xq@W|j t td|j ttddS(s :py:obj:`Context` can be instantiated with one of :py:obj:`SSLv2_METHOD`, :py:obj:`SSLv3_METHOD`, :py:obj:`SSLv23_METHOD`, :py:obj:`TLSv1_METHOD`, :py:obj:`TLSv1_1_METHOD`, or :py:obj:`TLSv1_2_METHOD`. R}i N( R)R*R+RBR(R,R-R=t ValueErrort assertRaisest TypeError(Rtmethodstmethtmaybe((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_method`s  cCstttdS(s On Python 2 :py:class:`Context` accepts values of type :py:obj:`long` as well as :py:obj:`int`. N(RBtlongR+(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_method_longzscCs'|jtt|jtdtdS(s :py:obj:`Context` and :py:obj:`ContextType` refer to the same type object and can be used to create instances of that type. RBN(tassertIdenticalRBRCtassertConsistentTypeR+(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_typescCsLt}|jtdtt}|j||jt|jddS(sc :py:obj:`Context.use_privatekey` takes an :py:obj:`OpenSSL.crypto.PKey` instance. iR}N(RRRRBR+RRR(RtkeyR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_privatekeys    cCs,tt}|jt|j|jdS(s :py:obj:`Context.use_privatekey_file` raises :py:obj:`OpenSSL.SSL.Error` when passed the name of a file which does not exist. N(RBR+RR=tuse_privatekey_filetmktemp(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_use_privatekey_file_missings cCspt}|jtdt|d&}|jtt|jdWdQXtt }|j ||dS(s Verify that calling ``Context.use_privatekey_file`` with the given arguments does not raise an exception. itwttasciiN( RRRtopenRRRRrRBR+R(RtpemfiletfiletypeRtpemR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_use_privatekey_file_tests  cCs*|j|jtjttdS(s A private key can be specified from a file by passing a ``bytes`` instance giving the file name to ``Context.use_privatekey_file``. N(RRRJRsRR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_privatekey_file_bytesscCs*|j|jjtttdS(s A private key can be specified from a file by passing a ``unicode`` instance giving the file name to ``Context.use_privatekey_file``. N(RRRrRRJR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_use_privatekey_file_unicodescCs |j|jttdS(s On Python 2 :py:obj:`Context.use_privatekey_file` accepts a filetype of type :py:obj:`long` as well as :py:obj:`int`. N(RRRR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_privatekey_file_longscCsUtt}|jt|j|jt|jd|jt|jtddS(s :py:obj:`Context.use_certificate_wrong_args` raises :py:obj:`TypeError` when not passed exactly one :py:obj:`OpenSSL.crypto.X509` instance as an argument. s hello, worldN(RBR+RRRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_certificate_wrong_argss cCs)tt}|jt|jtdS(s :py:obj:`Context.use_certificate` raises :py:obj:`OpenSSL.SSL.Error` when passed a :py:obj:`OpenSSL.crypto.X509` instance which has not been initialized (ie, which does not actually have any certificate data). N(RBR+RR=RR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt"test_use_certificate_uninitializeds cCs&tt}|jtttdS(s :py:obj:`Context.use_certificate` sets the certificate which will be used to identify connections created using the context. N(RBR+RRRRM(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_certificates cCstt}|jt|j|jt|jdt|jt|jdtt|jt|jtt|jt|jdtdS(s :py:obj:`Context.use_certificate_file` raises :py:obj:`TypeError` if called with zero arguments or more than two arguments, or if the first argument is not a byte string or the second argumnent is not an integer. tsomefileN(RBR+RRtuse_certificate_filetobjectR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt$test_use_certificate_file_wrong_argss cCs,tt}|jt|j|jdS(s :py:obj:`Context.use_certificate_file` raises `:py:obj:`OpenSSL.SSL.Error` if passed the name of a file which does not exist. N(RBR+RR=RR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt!test_use_certificate_file_missings cCsBt|d}|jtWdQXtt}|j|dS(s Verify that calling ``Context.use_certificate_file`` with the given filename doesn't raise an exception. twbN(RRRMRBR+R(Rtcertificate_filetpem_fileR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_use_certificate_file_tests  cCs-|jtjt}|j|dS(s :py:obj:`Context.use_certificate_file` sets the certificate (given as a ``bytes`` filename) which will be used to identify connections created using the context. N(RRJRsRR(Rtfilename((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_certificate_file_bytesscCs-|jjtt}|j|dS(s :py:obj:`Context.use_certificate_file` sets the certificate (given as a ``bytes`` filename) which will be used to identify connections created using the context. N(RRrRRJR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt!test_use_certificate_file_unicode(scCsW|j}t|d}|jtWdQXtt}|j|ttdS(s On Python 2 :py:obj:`Context.use_certificate_file` accepts a filetype of type :py:obj:`long` as well as :py:obj:`int`. RN( RRRRMRBR+RRR(Rt pem_filenameRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_use_certificate_file_long3s   cCs^ttt}ttt}tt}|j||j||j d|j dS(s :py:obj:`Context.check_privatekey` returns :py:obj:`None` if the :py:obj:`Context` instance has been configured to use a matched key and certificate pair. N( RRRPRRORBR+RRtassertIsRtcheck_privatekey(RRRxtcontext((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_check_privatekey_valid@s    cCs[ttt}ttt}tt}|j||j||j t |j dS(s :py:obj:`Context.check_privatekey` raises :py:obj:`Error` if the :py:obj:`Context` instance has been configured to use a key and certificate pair which don't relate to each other. N( RRRPRRQRBR+RRRR=R(RRRxR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_check_privatekey_invalidNs    cCs)tt}|jt|jtdS(s :py:obj:`Context.check_privatekey` raises :py:obj:`TypeError` if called with other than no arguments. N(RBR+RRRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_check_privatekey_wrong_args\s cCs<tt}|jt|j|jt|jdddS(s{ :py:obj:`Context.set_app_data` raises :py:obj:`TypeError` if called with other than one argument. N(RBR+RRt set_app_dataR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_app_data_wrong_argses cCs&tt}|jt|jddS(sq :py:obj:`Context.get_app_data` raises :py:obj:`TypeError` if called with any arguments. N(RBR+RRt get_app_dataR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_app_data_wrong_argsos cCs<t}tt}|j||j|j|dS(s :py:obj:`Context.set_app_data` stores an object for later retrieval using :py:obj:`Context.get_app_data`. N(RRBR+RRR(Rtapp_dataR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_app_dataxs   cCsRtt}|jt|j|jt|jd|jt|jdddS(s :py:obj:`Context.set_options` raises :py:obj:`TypeError` if called with the wrong number of arguments or a non-:py:obj:`int` argument. iN(RBR+RRt set_optionsR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_options_wrong_argss cCs0tt}|jt}|jt|@dS(sN :py:obj:`Context.set_options` returns the new options value. N(RBR+RR/R(RRtoptions((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_optionss cCs6tt}|jtt}|jt|@dS(s On Python 2 :py:obj:`Context.set_options` accepts values of type :py:obj:`long` as well as :py:obj:`int`. N(RBR+RRR/R(RRR ((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_options_longs cCsRtt}|jt|j|jt|jd|jt|jdddS(s :py:obj:`Context.set`mode} raises :py:obj:`TypeError` if called with the wrong number of arguments or a non-:py:obj:`int` argument. iN(RBR+RRtset_modeR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_mode_wrong_argss cCs*tt}|jt|jt@dS(sy :py:obj:`Context.set_mode` accepts a mode bitvector and returns the newly set mode. N(RBR+RRXR (RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_set_modes cCs6tt}|jtt}|jt|@dS(s On Python 2 :py:obj:`Context.set_mode` accepts values of type :py:obj:`long` as well as :py:obj:`int`. N(RBR+R RRXR(RRtmode((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_mode_longs cCsRtt}|jt|j|jt|jd|jt|jdddS(s :py:obj:`Context.set_timeout` raises :py:obj:`TypeError` if called with the wrong number of arguments or a non-:py:obj:`int` argument. iN(RBR+RRt set_timeoutR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_timeout_wrong_argss cCs&tt}|jt|jddS(sh :py:obj:`Context.get_timeout` raises :py:obj:`TypeError` if called with any arguments. N(RBR+RRt get_timeoutR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_timeout_wrong_argss cCs3tt}|jd|j|jddS(s :py:obj:`Context.set_timeout` sets the session timeout for all connections created using the context object. :py:obj:`Context.get_timeout` retrieves this value. iN(RBR+Rt assertEqualsR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_timeouts  cCs9tt}|jtd|j|jddS(s} On Python 2 :py:obj:`Context.set_timeout` accepts values of type `long` as well as int. iN(RBR+RRRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_timeout_longs cCsRtt}|jt|j|jt|jd|jt|jdddS(s :py:obj:`Context.set_verify_depth` raises :py:obj:`TypeError` if called with the wrong number of arguments or a non-:py:obj:`int` argument. iN(RBR+RRtset_verify_depthR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_set_verify_depth_wrong_argss cCs&tt}|jt|jddS(sm :py:obj:`Context.get_verify_depth` raises :py:obj:`TypeError` if called with any arguments. N(RBR+RRtget_verify_depthR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_get_verify_depth_wrong_argss cCs3tt}|jd|j|jddS(s :py:obj:`Context.set_verify_depth` sets the number of certificates in a chain to follow before giving up. The value can be retrieved with :py:obj:`Context.get_verify_depth`. i N(RBR+RRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_verify_depths  cCs9tt}|jtd|j|jddS(s On Python 2 :py:obj:`Context.set_verify_depth` accepts values of type `long` as well as int. i N(RBR+RRRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_verify_depth_long s cCsmt}|jtd|j}t|d}tt|d|}|j|jd|j |S(s Write a new private key out to a new file, encrypted using the given passphrase. Return the path to the new file. itwtblowfishR( RRRRRRRRRrtclose(Rt passphraseRtpemFiletfObjR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_write_encrypted_pems   cCsXtt}|jt|j|jt|jd|jt|jddddS(s :py:obj:`Context.set_passwd_cb` raises :py:obj:`TypeError` if called with the wrong arguments or with a non-callable first argument. cSsdS(N(R(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt-sN(RBR+RRt set_passwd_cbR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_passwd_cb_wrong_args%s cstd|j}gfd}tt}|j||j||jtd|jtddt |jtddt |j ddddS(s :py:obj:`Context.set_passwd_cb` accepts a callable which will be invoked when a private key is loaded from an encrypted PEM. tfoobarcsj|||fS(N(tappend(tmaxlentverifytextra(t calledWithR"(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytpassphraseCallback8siiiN( RLR%RBR+R'RRRRqRRR(RR#R/R((R.R"s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_passwd_cb0s    cCsQ|jtd}d}tt}|j||jt|j|dS(s{ :py:obj:`Context.use_privatekey_file` propagates any exception raised by the passphrase callback. smonkeys are nicecSstddS(NsSorry, I am a fail.(t RuntimeError(R+R,R-((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR/JsN(R%RLRBR+R'RR1R(RR#R/R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_passwd_callback_exceptionDs    cCsQ|jtd}d}tt}|j||jt|j|dS(s :py:obj:`Context.use_privatekey_file` raises :py:obj:`OpenSSL.SSL.Error` if the passphrase callback returns a false value. smonkeys are nicecSsdS(NR}((R+R,R-((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR/XsN(R%RLRBR+R'RR=R(RR#R/R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_passwd_callback_falseRs    cCsQ|jtd}d}tt}|j||jt|j|dS(s :py:obj:`Context.use_privatekey_file` raises :py:obj:`OpenSSL.SSL.Error` if the passphrase callback returns a true non-string value. smonkeys are nicecSsdS(Ni ((R+R,R-((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR/fsN(R%RLRBR+R'RRR(RR#R/R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_passwd_callback_non_string`s    csXtdd|j}fd}tt}|j||j|dS(s If the passphrase returned by the passphrase callback returns a string longer than the indicated maximum length, it is truncated. R~ics |dksttdS(NiR(RRL(R+R,R-(R"(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR/vsN(RLR%RBR+R'R(RR#R/R((R"s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_passwd_callback_too_longns   c st\}}ttt|}|jgfd}tt}|j||jttt |j t tt t||}|j t||gD]$\}}} t|ts|^q} |jg| ddS(s :py:obj:`Context.set_info_callback` accepts a callable which will be invoked when certain information about an SSL connection is available. csj|||fdS(N(R*(Rwtwheretret(tcalled(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytinfoss:Some info callback arguments were not Connection instaces.N(RRERBR+Rtset_info_callbackRRRRMRRRNRRRqR( RRRt clientSSLR9Rt serverSSLRwR6R7tnotConnections((R8s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_info_callbacks&     c Gst\}}tt}|j||jtdt||}|jtt}|jt t t |j t t tt||}|jt|||j}|j|jjddS(s Create a client context which will verify the peer certificate and call its :py:obj:`load_verify_locations` method with the given arguments. Then connect it to a server and ensure that the handshake succeeds. cSs|S(N((RwRxterrnoRzt preverify_ok((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR&ssTesting Root CAN(RRBR+tload_verify_locationst set_verifyR1RERRRRRMRRRNRRtget_peer_certificateRRtCN( RtargsRRt clientContextR;t serverContextR<Rx((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_load_verify_locations_tests$        cCs@t|d}|jtjd|j|j|dS(s  Verify that if path to a file containing a certificate is passed to ``Context.load_verify_locations`` for the ``cafile`` parameter, that certificate is used as a trust root for the purposes of verifying connections created using that ``Context``. RRN(RRRMRrR!RH(RtcafileR$((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_load_verify_cafiles cCs-|jtjt}|j|dS(s :py:obj:`Context.load_verify_locations` accepts a file name as a ``bytes`` instance and uses the certificates within for verification purposes. N(RRJRsRRJ(RRI((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_verify_bytes_cafilescCs'|j|jjttdS(s :py:obj:`Context.load_verify_locations` accepts a file name as a ``unicode`` instance and uses the certificates within for verification purposes. N(RJRRrRRJ(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_verify_unicode_cafilescCs,tt}|jt|j|jdS(s{ :py:obj:`Context.load_verify_locations` raises :py:obj:`Error` when passed a non-existent cafile. N(RBR+RR=RAR(RRF((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_verify_invalid_files cCsrt|xQddgD]C}t||}t|d}|jtjdWdQXqW|jd|dS(s+ Verify that if path to a directory containing certificate files is passed to ``Context.load_verify_locations`` for the ``capath`` parameter, those certificates are used as trust roots for the purposes of verifying connections created using that ``Context``. s c7adac82.0s c3705638.0RRN(R RvRRRMRrRHR(RtcapathtnameRIR$((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt'_load_verify_directory_locations_capaths   cCs'|j|jtjtdS(s :py:obj:`Context.load_verify_locations` accepts a directory name as a ``bytes`` instance and uses the certificates within for verification purposes. N(RPRRJRsR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt'test_load_verify_directory_bytes_capath scCs'|j|jjttdS(s :py:obj:`Context.load_verify_locations` accepts a directory name as a ``unicode`` instance and uses the certificates within for verification purposes. N(RPRRrRRJ(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt)test_load_verify_directory_unicode_capathscCswtt}|jt|j|jt|jt|jt|jtt|jt|jddddS(s :py:obj:`Context.load_verify_locations` raises :py:obj:`TypeError` if called with the wrong number of arguments or with non-:py:obj:`str` arguments. N(RBR+RRRARR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt%test_load_verify_locations_wrong_args#s  twin32cCsdS(s :py:obj:`Context.set_default_verify_paths` causes the platform-specific CA certificate locations to be used for verification purposes. N((R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_default_verify_paths3s cCsRtt}|jt|jd|jt|jd|jt|jddS(s :py:obj:`Context.set_default_verify_paths` takes no arguments and raises :py:obj:`TypeError` if given any. iR}N(RBR+RRtset_default_verify_pathsR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt'test_set_default_verify_paths_signatureQs cCs[tt}|jt|j|jt|jt|jt|jttdS(s :py:obj:`Context.add_extra_chain_cert` raises :py:obj:`TypeError` if called with other than one argument or if called with an object which is not an instance of :py:obj:`X509`. N(RBR+RRtadd_extra_chain_certR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt&test_add_extra_chain_cert_invalid_cert\s c Cst\}}t||}|jt||}|jxMtdD]?}x6||gD](}y|jWqatk rqaXqaWqNWdS(s Verify that a client and server created with the given contexts can successfully handshake and communicate. iN(RRERRtrangeRR?( RRGRFt serverSockett clientSocketRRtits((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_handshake_tesths   cCstt}|jttt|jtttt |d}dt fdY}|}tt}|j t |jt |d}|j|j|||j|j|dS(s The first argument passed to the verify callback is the :py:class:`Connection` instance for which verification is taking place. tVerifyCallbackcBseZdZRS(cWs ||_dS(Ni(t connection(RRaRE((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytcallbacks (RRRb(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR`sN(RBR+RRRRNRRRMRERRRBR1RbRRRRa(RRGtserverConnectionR`R,RFtclientConnection((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt,test_set_verify_callback_connection_arguments    cCstt}|jttt|jtttt |d}d}tt}|j t |t |d}|j |j||dS(s We had a bug where the X509 cert instantiated in the callback wrapper didn't __init__ so it was missing objects needed when calling get_subject. This test sets up a handshake where we call get_subject on the cert provided to the verify callback. cSs|jstdS(Ni(RR(RwRxRyRzR{((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytverify_cb_get_subjectsN(RBR+RRRRNRRRMRERRBR1RR(RRGRcRfRFRd((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_x509_in_verify_workss    cCstt}|jttt|jttttt}d}|j t ||j t |j ||}|jdt|dS(s If the verify callback passed to :py:obj:`Context.set_verify` raises an exception, verification fails and the exception is propagated to the caller of :py:obj:`Connection.do_handshake`. cWstddS(Nssilly verify failure(t Exception(RE((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytverify_callbacksssilly verify failureN(RBR+RRRRNRRRMRBR1RRhR_Rtstr(RRGRFRitexc((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt"test_set_verify_callback_exceptions   cCsrt}|\\}}\}}\}}xg|df|df|dfgD]D\}} t| d} | jtt|jd| jqLWxg|df|df|dfgD]D\} } t| d} | jtt| jd| jqWtt } | j || j || j |tt } | j ttBt| jd|j| | d S( s :py:obj:`Context.add_extra_chain_cert` accepts an :py:obj:`X509` instance to add to the certificate chain. See :py:obj:`_create_certificate_chain` for the details of the certificate chain tested. The chain is tested by starting a server with scert and connecting to it with a client which trusts cacert and requires verification to succeed. sca.pemsi.pemss.pemRRsca.keysi.keyss.keyN(RRRRRRrR!RRBR+RRRXRBR1R2R|RAR_(RtchainRRRRRRRxROR$RRGRF((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_add_extra_chain_certs& !..      c CsJt}|\\}}\}}\}}t|t|d} t|d} t| dI} | jtt|| jtt|| jtt|WdQXt| d&} | jtt|jdWdQXtt } | j | | j |tt } | j t tBt| j| |j| | dS(s- Verify that :py:obj:`Context.use_certificate_chain_file` reads a certificate chain from a specified file. The chain is tested by starting a server with scert and connecting to it with a client which trusts cacert and requires verification to succeed. s chain.pemsca.pemRNRR(RR RvRRRRRrRBR+tuse_certificate_chain_fileRRBR1R2R|RAR_(RtcertdirRmRRRRRRt chainFiletcaFileR$RGRF((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt _use_certificate_chain_file_tests& ! %     cCs'|j|jtjtdS(s ``Context.use_certificate_chain_file`` accepts the name of a file (as an instance of ``bytes``) to specify additional certificates to use to construct and verify a trust chain. N(RsRRJRsR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt%test_use_certificate_chain_file_bytesscCs'|j|jjttdS(s ``Context.use_certificate_chain_file`` accepts the name of a file (as an instance of ``unicode``) to specify additional certificates to use to construct and verify a trust chain. N(RsRRrRRJ(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt'test_use_certificate_chain_file_unicode(scCsttt}|jt|j|jt|jt|jt|jdt|jt|j|jdS(sZ :py:obj:`Context.use_certificate_chain_file` raises :py:obj:`TypeError` if passed zero or more than one argument or when passed a non-byte string single argument. It also raises :py:obj:`OpenSSL.SSL.Error` when passed a bad chain file name (for example, the name of a file which does not exist). tfooN(RBR+RRRoRR=R(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt*test_use_certificate_chain_file_wrong_args3s  cCs&tt}|jt|jddS(st :py:obj:`Context.get_verify_mode` raises :py:obj:`TypeError` if called with any arguments. N(RBR+RRtget_verify_modeR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_verify_mode_wrong_argsEs cCsWtt}|j|jd|jttBd|j|jttBdS(s :py:obj:`Context.get_verify_mode` returns the verify mode flags previously passed to :py:obj:`Context.set_verify`. icWsdS(N(R(RE((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR&VsN(RBR+RRxRBR1R3(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_verify_modeNs  cCs]tt}|j|jd|jtttBd|j|jttBdS(s On Python 2 :py:obj:`Context.set_verify_mode` accepts values of type :py:obj:`long` as well as :py:obj:`int`. icWsdS(N(R(RE((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR&dsN(RBR+RRxRBRR1R3(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_verify_mode_long\s  cCsUtt}|jt|j|jt|jdd|jt|jtdS(s :py:obj:`Context.load_tmp_dh` raises :py:obj:`TypeError` if called with the wrong number of arguments or with a non-:py:obj:`str` argument. RvN(RBR+RRt load_tmp_dhRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_tmp_dh_wrong_argsis cCs&tt}|jt|jddS(s :py:obj:`Context.load_tmp_dh` raises :py:obj:`OpenSSL.SSL.Error` if the specified file does not exist. thelloN(RBR+RR=R|(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_tmp_dh_missing_filets cCsBtt}t|d}|jtWdQX|j|dS(sz Verify that calling ``Context.load_tmp_dh`` with the given filename does not raise an exception. RN(RBR+RRtdhparamR|(Rt dhfilenameRtdhfile((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_load_tmp_dh_test}s cCs'|j|jtjtdS(s :py:obj:`Context.load_tmp_dh` loads Diffie-Hellman parameters from the specified file (given as ``bytes``). N(RRRJRsR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_tmp_dh_bytesscCs'|j|jjttdS(s :py:obj:`Context.load_tmp_dh` loads Diffie-Hellman parameters from the specified file (given as ``unicode``). N(RRRrRRJ(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_load_tmp_dh_unicodescCs1tt}xtD]}|j|qWdS(s{ :py:obj:`Context.set_tmp_ecdh` sets the elliptic curve for Diffie-Hellman to the specified curve. N(RBR+Rt set_tmp_ecdh(RRtcurve((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_tmp_ecdhs cCsEtt}|jdt|d}|j|jdgdS(s :py:obj:`Context.set_cipher_list` accepts a :py:obj:`bytes` naming the ciphers which connections created with the context object will be able to choose from. shello world:EXP-RC4-MD5s EXP-RC4-MD5N(RBR+tset_cipher_listRERRtget_cipher_list(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_cipher_list_bytess  cCsKtt}|jtdt|d}|j|jdgdS(s :py:obj:`Context.set_cipher_list` accepts a :py:obj:`unicode` naming the ciphers which connections created with the context object will be able to choose from. shello world:EXP-RC4-MD5s EXP-RC4-MD5N(RBR+RRRERRR(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_cipher_list_texts cCsntt}|jt|j|jt|jt|jt|jdt|jt|jddS(s :py:obj:`Context.set_cipher_list` raises :py:obj:`TypeError` when passed zero arguments or more than one argument or when passed a non-string single argument and raises :py:obj:`OpenSSL.SSL.Error` when passed an incorrect cipher list string. s EXP-RC4-MD5simaginary-cipherN(RBR+RRRRR=(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_cipher_list_wrong_argss  cCs<tt}|jt|j|jt|jtdS(s :py:obj:`Context.set_session_cache_mode` raises :py:obj:`TypeError` if called with other than one integer argument. N(RBR+RRtset_session_cache_modeR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt&test_set_session_cache_mode_wrong_argss cCs&tt}|jt|jddS(s{ :py:obj:`Context.get_session_cache_mode` raises :py:obj:`TypeError` if called with any arguments. iN(RBR+RRtget_session_cache_mode(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt&test_get_session_cache_mode_wrong_argss cCsRtt}|jt|jt}|jt||jt|jdS(s :py:obj:`Context.set_session_cache_mode` specifies how sessions are cached. The setting can be retrieved via :py:obj:`Context.get_session_cache_mode`. N(RBR+RR5R8RR(RRtoff((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_session_cache_modes   cCs9tt}|jtt|jt|jdS(s On Python 2 :py:obj:`Context.set_session_cache_mode` accepts values of type :py:obj:`long` as well as :py:obj:`int`. N(RBR+RRR8RR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_session_cache_mode_longs cCs,tt}|j}|j|tdS(sZ :py:obj:`Context.get_cert_store` returns a :py:obj:`X509Store` instance. N(RBR+tget_cert_storetassertIsInstanceR(RRtstore((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_cert_stores  N([RRRRRRRRRRRRRRRRRRRRRRRRRRRRR R R RRXRRRRRRRRRRRR%R(R0R2R3R4R5R>RHRJRKRLRMRPRQRRRSRRURWRYR_ReRgRlRnRsRtRuRwRyRzR{R}RRRRRRRRRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR\s                       & &         , '     tServerNameCallbackTestscBs2eZdZdZdZdZdZRS(sw Tests for :py:obj:`Context.set_tlsext_servername_callback` and its interaction with :py:obj:`Connection`. cCs<tt}|jt|j|jt|jdddS(s :py:obj:`Context.set_tlsext_servername_callback` raises :py:obj:`TypeError` if called with other than one argument. iiN(RBR+RRtset_tlsext_servername_callback(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_wrong_args s cCsd}d}tt}|j|t|}~|j|tt|}|dk rt|}t|dkr|jd|fqndS(s If :py:obj:`Context.set_tlsext_servername_callback` is used to specify a new callback, the one it replaces is dereferenced. cSsdS(N((Ra((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRbscSsdS(N((Ra((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt replacementsisSome references remain: %rN( RBR+RRRRRRtfail(RRbRRttrackert referrers((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_old_callback_forgottens         csgfd}tt}|j|~t|jttt|jt tt t |d}|j t ttd}|j|j|||j|dfgdS(s When a client specifies no server name, the callback passed to :py:obj:`Context.set_tlsext_servername_callback` is invoked and the result of :py:obj:`Connection.get_servername` is :py:obj:`None`. csj||jfdS(N(R*tget_servername(Rw(RE(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt servername>sN(RBR+RRRRRRRRRRQRERRRRR(RRRRR((REs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_no_servername7s    csgfd}tt}|j||jttt|jttt t |d}|j t ttd}|j |jtd|j|||j|tdfgdS(s When a client specifies a server name in its hello message, the callback passed to :py:obj:`Contexts.set_tlsext_servername_callback` is invoked and the result of :py:obj:`Connection.get_servername` is that server name. csj||jfdS(N(R*R(Rw(RE(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR_ssfoo1.example.comN(RBR+RRRRRRRRRQRERRRtset_tlsext_host_nameRLRR(RRRRR((REs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_servernameXs    (RRRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRs  ! !tNextProtoNegotiationTestscBsGeZdZejr<dZdZdZdZn dZ RS(s: Test for Next Protocol Negotiation in PyOpenSSL. cs/ggfd}fd}tt}|j|tt}|j||jttt|jt tt t |d}|j t |d}|j|j|||j|fg|j|ddgfg|j|jd|j|jddS(s Tests that clients and servers that agree on the negotiated next protocol can correct establish a connection, and that the agreed protocol is reported by the connections. csj|fddgS(Nshttp/1.1sspdy/2(R*(Rw(tadvertise_args(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt advertisescsj||fdS(Nsspdy/2(R*(RwR (t select_args(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytselectsshttp/1.1sspdy/2N(RBR+tset_npn_advertise_callbacktset_npn_select_callbackRRRRRRRRQRERRRRRtget_next_proto_negotiated(RRRtserver_contexttclient_contextRR((RRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_npn_successzs*      cs ggfd}fd}tt}|j|tt}|j||jttt|jt tt t |d}|j t |d}|j|jt|j|||j|fg|j|ddgfgdS(s Tests that when clients and servers cannot agree on what protocol to use next that the TLS connection does not get established. csj|fddgS(Nshttp/1.1sspdy/2(R*(Rw(R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRscsj||fdS(NR}(R*(RwR (R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRsshttp/1.1sspdy/2N(RBR+RRRRRRRRRRQRERRRRR=RR(RRRRRRR((RRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_npn_client_fails&      csgfd}d}tt}|j|tt}|j||jttt|jt tt t |d}|j t |d}|j|jt|j|||j|fgdS(s Test that we can handle exceptions in the select callback. If select fails it should be fatal to the connection. csj|fddgS(Nshttp/1.1sspdy/2(R*(Rw(R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRscSs tdS(N(R(RwR ((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRsN(RBR+RRRRRRRRRRQRERRRRRRR(RRRRRRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_npn_select_errors$       csgd}fd}tt}|j|tt}|j||jttt|jt tt t |d}|j t |d}|j|jt|j|||jgdS(s Test that we can handle exceptions in the advertise callback. If advertise fails no NPN is advertised to the client. cSs tdS(N(R(Rw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRscsj||fdS(NR}(R*(RwR (R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRsN(RBR+RRRRRRRRRRQRERRRRRRR(RRRRRRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_npn_advertise_errors$       cCstt}|j|jg}x!|D]}|jt|dq%Wt|}|jg}x|D]}|jt|qaWdS(N( RBR+RRRtNotImplementedErrorRRER(RRt fail_methodstmethodRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_npn_not_implementeds      ( RRRt_libtCryptography_HAS_NEXTPROTONEGRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRus  + ( & 't%ApplicationLayerProtoNegotiationTestscBsPeZdZejrEdZdZdZdZdZ n dZ RS(s& Tests for ALPN in PyOpenSSL. cs gfd}tt}|jddgtt}|j||jttt|jt tt t |d}|j t |d}|j|j|||j|ddgfg|j|jd|j|jddS(s Clients and servers that agree on the negotiated ALPN protocol can correct establish a connection, and the agreed protocol is reported by the connections. csj||fdS(Nsspdy/2(R*(RwR (R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR>sshttp/1.1sspdy/2N(RBR+tset_alpn_protostset_alpn_select_callbackRRRRRRRRQRERRRRRtget_alpn_proto_negotiated(RRRRRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_alpn_success7s$     cs gfd}tt}tt}|j||jttt|jttt t |d}|j t |d}|j ddg|j|j|||j|ddgfg|j|jd|j|jddS(s The same as test_alpn_success, but setting the ALPN protocols on the connection rather than the context. csj||fdS(Nsspdy/2(R*(RwR (R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRcsshttp/1.1sspdy/2N(RBR+RRRRRRRRRQRERRRRRRR(RRRRRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_alpn_set_on_connection]s$     csgfd}tt}|jddgtt}|j||jttt|jt tt t |d}|j t |d}|j|jt|j|||j|ddgfgdS(s When clients and servers cannot agree on what protocol to use next the TLS connection does not get established. csj||fdS(NR}(R*(RwR (R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRsshttp/1.1sspdy/2N(RBR+RRRRRRRRRRQRERRRRR=RR(RRRRRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_alpn_server_fails      cCstt}|jddgtt}|jttt|jttt t |d}|j t |d}|j |j|||j|jddS(s When clients and servers cannot agree on what protocol to use next because the server doesn't offer ALPN, no protocol is negotiated. shttp/1.1sspdy/2R}N(RBR+RRRRRRRRRQRERRRRRR(RRRRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_alpn_no_servers    csgfd}tt}|jddgtt}|j||jttt|jt tt t |d}|j t |d}|j|jt|j|||j|ddgfgdS(sO We can handle exceptions in the ALPN select callback. cs j||ftdS(N(R*R(RwR (R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRsshttp/1.1sspdy/2N(RBR+RRRRRRRRRRQRERRRRRRR(RRRRRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_alpn_callback_exceptions"     cCs^tt}|jt|jd|jt|jdt|}|jt|jddS(sY If ALPN is not in OpenSSL, we should raise NotImplementedError. N(RBR+RRRRRRE(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_alpn_not_implementeds  ( RRRRtCryptography_HAS_ALPNRRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR0s  & ' #  #t SessionTestscBs eZdZdZdZRS(s7 Unit tests for :py:obj:`OpenSSL.SSL.Session`. cCs#t}|jt|tdS(sy :py:class:`Session` can be constructed with no arguments, creating a new instance of that type. N(RDRRq(Rt new_session((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_constructions cCs@|jttd|jttd|jtttdS(sl If any arguments are passed to :py:class:`Session`, :py:obj:`TypeError` is raised. i{R~N(RRRDR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_construction_wrong_args s(RRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRs tConnectionTestscBseZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zed krn dZdZdZdZdZdZdZdZesdZndZdZdZdZdZdZdZ dZ!dZ"d Z#d!Z$d"Z%d#Z&d$Z'd%Z(d&Z)d'Z*d(Z+d)Z,d*Z-d+Z.d,Z/d-Z0d.Z1d/Z2RS(0s: Unit tests for :py:obj:`OpenSSL.SSL.Connection`. cCs6|jtttt}|jtd|ddS(s :py:obj:`Connection` and :py:obj:`ConnectionType` refer to the same type object and can be used to create instances of that type. REN(RRERFRBR+RR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR(s cCs5tt}t|d}|j|j|dS(s :py:obj:`Connection.get_context` returns the :py:obj:`Context` instance used to construct the :py:obj:`Connection` instance. N(RBR+RERRt get_context(RRRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_context2s cCs/tttd}|jt|jddS(ss :py:obj:`Connection.get_context` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+RRRR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_context_wrong_args<scCstt}t|d}|jt|j|jt|jt|jt|jd|jt|jd|jt|jdd|jt|jttd|j||j dS(s :py:obj:`Connection.set_context` raises :py:obj:`TypeError` if called with a non-:py:obj:`Context` instance argument or with any number of arguments other than 1. R~iiN( RBR+RERRRt set_contextRRR(RRRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_context_wrong_argsEs cCs[tt}tt}t|d}|j||j||j~~tdS(s :py:obj:`Connection.set_context` specifies a new :py:obj:`Context` instance to be used for the connection. N( RBR*R+RERRRRR(RtoriginalRRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_contextWs   cCstttd}|jt|j|jt|jt|jt|jdd|jt|jtdt r|jt|jtdj dndS(s If :py:obj:`Connection.set_tlsext_host_name` is called with a non-byte string argument or a byte string with an embedded NUL or other than one argument, :py:obj:`TypeError` is raised. i{it withnulls example.comRN( RERBR+RRRRRRLRRr(RRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt$test_set_tlsext_host_name_wrong_argsgscCs^tttd}|jt|jt|jt|jd|jt|jddS(sv :py:obj:`Connection.get_servername` raises :py:obj:`TypeError` if called with any arguments. iR~N(RERBR+RRRRR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_servername_wrong_args{scCs/tttd}|j|jddS(sp :py:obj:`Connection.pending` returns the number of bytes available for immediate read. iN(RERBR+RRtpending(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_pendingscCs/tttd}|jt|jddS(sg :py:obj:`Connection.pending` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+RRRR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_pending_wrong_argsscCs^tttt}|jt|jd|jt|j|jt|jdddS(s :py:obj:`Connection.connect` raises :py:obj:`TypeError` if called with a non-address argument or with the wrong number of arguments. s 127.0.0.1iN(s 127.0.0.1i(RERBR+R RRtconnectR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_connect_wrong_argsscCsWt}tt}t||}|jt|jd}|j|jdt dS(s :py:obj:`Connection.connect` raises :py:obj:`socket.error` if the underlying socket connect method raises it. s 127.0.0.1iiN(s 127.0.0.1i( R RBR+RERR RRRER(RRRR;Rk((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_connect_refuseds   cCs\t}|jd|jdtttt}|jd|jdfdS(sa :py:obj:`Connection.connect` establishes a connection to the specified address. R}iis 127.0.0.1iN(R}i(R RRRERBR+RR(RRR;((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_connects    tdarwincCst}|jd|jdtttt}|jt|j|j }t t f}|j ||kd||fdS(s If there is a connection error, :py:obj:`Connection.connect_ex` returns the errno instead of raising an exception. R}iis %r not in %rN(R}i( R RRRERBR+RRRRRRR(RRR;tresulttexpected((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_connect_exs     cCs2tttt}|jt|jddS(sf :py:obj:`Connection.accept` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+R RRRR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_accept_wrong_argsscCstt}|jttt|jtttt }t ||}|j d|j dt ttt }|j d|jdf|j\}}|jt|t |j|j||j||jdS(s :py:obj:`Connection.accept` accepts a pending connection attempt and returns a tuple of a new :py:obj:`Connection` (the accepted client) and the address the connection originated from. R}iis 127.0.0.1iN(R}i(RBR+RRRRRRRRQR RERRRRRRRqRRR(RRRtportSSLR;R<taddress((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_accepts    cCstttd}|jt|jd|jt|jd|jt|j|jt|jd|jt|jdddS(s :py:obj:`Connection.shutdown` raises :py:obj:`TypeError` if called with the wrong number of arguments or with arguments other than integers. iiN( RERBR+RRRtshutdownt get_shutdownt set_shutdown(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_shutdown_wrong_argss cCs|j\}}|j|j|j|jt|jt|jd|j|jt |j|j|jtt B|jt|jd|j|jtt BdS(sZ :py:obj:`Connection.shutdown` performs an SSL-level connection shutdown. iN( Rt assertFalseRRRR&RRARR'(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_shutdowns cCsu|j\}}|jd|jt|j}tdkrZ|j|jdtn|j|jdt dS(s If the underlying socket is closed, :py:obj:`Connection.shutdown` propagates the write error from the low level write call. iRTiN( Rt sock_shutdownRR>RRRRERR(RRRRk((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_shutdown_closed s   cCstt}tt}|jttt|jtttt |d}t |d}|j |||j |j t|jt|j |j|jt|j dS(sw If the underlying connection is truncated, :obj:`Connection.shutdown` raises an :obj:`Error`. N(RBR+RRRRRRRRQRERRRRRRR?t bio_shutdownR=(Rt server_ctxt client_ctxRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_shutdown_truncated s   cCs?tttt}|jt|j|jtdS(sr :py:obj:`Connection.set_shutdown` sets the state of the SSL connection shutdown process. N(RERBR+R RR'RR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_shutdown0 s cCsEtttt}|jtt|j|jtdS(s On Python 2 :py:obj:`Connection.set_shutdown` accepts an argument of type :py:obj:`long` as well as :py:obj:`int`. N( RERBR+R RRR'RR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_shutdown_long; scCs[tttd}|jt|jd|jt|j|jt|jdddS(s :py:obj:`Connection.set_app_data` raises :py:obj:`TypeError` if called with other than one argument. :py:obj:`Connection.get_app_data` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+RRRRR(RRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_app_data_wrong_argsE scCsEtttd}t}|j||j|j|dS(s Any object can be set as app data by passing it to :py:obj:`Connection.set_app_data` and later retrieved with :py:obj:`Connection.get_app_data`. N(RERBR+RRRRR(RRwR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRQ s  cCs,tttd}|jt|jdS(s :py:obj:`Connection.makefile` is not implemented and calling that method raises :py:obj:`NotImplementedError`. N(RERBR+RRRtmakefile(RRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_makefile] scCsttttd}|jt|jd|jt|jd|jt|jt|jt|jgdS(s{ :py:obj:`Connection.get_peer_cert_chain` raises :py:obj:`TypeError` if called with any arguments. iRvN(RERBR+RRRtget_peer_cert_chainR(RRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt#test_get_peer_cert_chain_wrong_argsf s c CsEt}|\\}}\}}\}}tt}|j||j||j||j|t|d} | jtt} | j t t t| d} | j |j | | | j}|jt|d|jd|djj|jd|djj|jd|djjdS( s :py:obj:`Connection.get_peer_cert_chain` returns a list of certificates which the connected server returned for the certification verification. isServer CertificateisIntermediate CertificateisAuthority CertificateiN(RRBR+RRRXRERRRBR4R|RRRRRRRD( RRmRRRRRRRGRRFR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_peer_cert_chainr s, !         cCstt}|jttt|jtttt |d}|j t ttd}|j |j |||jd|jdS(s :py:obj:`Connection.get_peer_cert_chain` returns :py:obj:`None` if the peer sends no certificate chain. N(RBR+RRRRRRRRQRERRRRRR(RRRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_peer_cert_chain_none s   cCsdtt}t|d}|jt|jd|jt|jd|jt|jtdS(ss :py:obj:`Connection.get_session` raises :py:obj:`TypeError` if called with any arguments. i{R~N(RBR+RERRRt get_sessionR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_session_wrong_args s  cCs;tt}t|d}|j}|jd|dS(s :py:obj:`Connection.get_session` returns :py:obj:`None` when used with an object which has not been connected. N(RBR+RERRR(RRRtsession((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_session_unconnected s  cCs2|j\}}|j}|j|tdS(s On the server side of a connection, :py:obj:`Connection.get_session` returns a :py:class:`Session` instance representing the SSL session for that connection. N(RRRRD(RRRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_server_get_session s cCs2|j\}}|j}|j|tdS(s On the client side of a connection, :py:obj:`Connection.get_session` returns a :py:class:`Session` instance representing the SSL session for that connection. N(RRRRD(RRRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_client_get_session s cCstt}t|d}|jt|j|jt|jd|jt|jd|jt|jt|jt|jttdS(s If called with an object that is not an instance of :py:class:`Session`, or with other than one argument, :py:obj:`Connection.set_session` raises :py:obj:`TypeError`. i{R~N( RBR+RERRRt set_sessionRRD(RRRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_session_wrong_args s c sttt}ttt}ttj|j|j dfd}j d|\}}|j fd}j d|d|\}}j |j |j dS(s :py:obj:`Connection.set_session`, when used prior to a connection being established, accepts a :py:class:`Session` instance and causes an attempt to re-use the session it represents when the SSL handshake is performed. s unity-testcst|}|j|S(N(RER(R R(R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt makeServer s Rcs j|}|j|S(N(RR(R R(toriginalSessionR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt makeClient s RN(RRRRRRQRBR+RRtset_session_idRRRt master_key( RRRxRtoriginalServertoriginalClientRt resumedServert resumedClient((RRRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_client_set_session s        csttt}ttt}ttj|j|j dfd}|j d|\}}|j fd}|j t |j d|d|dS(s If :py:obj:`Connection.set_session` is passed a :py:class:`Session` instance associated with a context using a different SSL method than the :py:obj:`Connection` is using, a :py:class:`OpenSSL.SSL.Error` is raised. s unity-testcst|}|j|S(N(RER(R R(R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR s Rcs0ttt|}|j|j|S(N(RERBR)RR(R R(R(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR! s  RN(RRRRRRQRBR+RRRRRRR=(RRRxRRRR((RRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_session_wrong_method s      cCst\}}d}x^tdD]C}y|j|Wq"tk rd}|jtkr^Pnq"Xq"W|jdtt}t ||}|j |j t |j dS(s :py:obj:`Connection` methods which generate output raise :py:obj:`OpenSSL.SSL.WantWriteError` if writing to the connection's BIO fail indicating a should-write state. R~iis8Failed to fill socket buffer, cannot test BIO want writeNii@(RRZRR R?RRRBR+RERRR@R(Rt client_sockett server_sockettmsgR]teRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_wantWriteError- s   cCs5tt}t|d}|j|jddS(su :py:obj:`Connection.get_finished` returns :py:obj:`None` before TLS handshake is completed. N(RBR+RERRt get_finished(RRRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_get_finished_before_connectN s cCs5tt}t|d}|j|jddS(sz :py:obj:`Connection.get_peer_finished` returns :py:obj:`None` before TLS handshake is completed. N(RBR+RERRtget_peer_finished(RRRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt%test_get_peer_finished_before_connectX s cCsK|j\}}|j|jd|jt|jdkdS(s :py:obj:`Connection.get_finished` method returns the TLS Finished message send from client, or server. Finished messages are send during TLS handshake. iN(RtassertNotEqualRRRR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_finishedb scCsK|j\}}|j|jd|jt|jdkdS(s :py:obj:`Connection.get_peer_finished` method returns the TLS Finished message received from client, or server. Finished messages are send during TLS handshake. iN(RRRRRR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_peer_finishedo scCsN|j\}}|j|j|j|j|j|jdS(s The TLS Finished message send by server must be the TLS Finished message received by client. The TLS Finished message send by client must be the TLS Finished message received by server. N(RRRR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt"test_tls_finished_message_symmetry{ scCs5tt}t|d}|j|jddS(s| :py:obj:`Connection.get_cipher_name` returns :py:obj:`None` if no connection has been established. N(RBR+RERRtget_cipher_name(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt#test_get_cipher_name_before_connect s cCs_|j\}}|j|j}}|j|t|j|t|j||dS(s :py:obj:`Connection.get_cipher_name` returns a :py:class:`unicode` string giving the name of the currently used cipher. N(RRRRR(RRRtserver_cipher_nametclient_cipher_name((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_cipher_name s cCs5tt}t|d}|j|jddS(s :py:obj:`Connection.get_cipher_version` returns :py:obj:`None` if no connection has been established. N(RBR+RERRtget_cipher_version(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt&test_get_cipher_version_before_connect s cCs_|j\}}|j|j}}|j|t|j|t|j||dS(s :py:obj:`Connection.get_cipher_version` returns a :py:class:`unicode` string giving the protocol name of the currently used cipher. N(RRRRR(RRRtserver_cipher_versiontclient_cipher_version((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_cipher_version s cCs5tt}t|d}|j|jddS(s| :py:obj:`Connection.get_cipher_bits` returns :py:obj:`None` if no connection has been established. N(RBR+RERRtget_cipher_bits(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt#test_get_cipher_bits_before_connect s cCs_|j\}}|j|j}}|j|t|j|t|j||dS(s~ :py:obj:`Connection.get_cipher_bits` returns the number of secret bits of the currently used cipher. N(RR"RRR(RRRtserver_cipher_bitstclient_cipher_bits((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_get_cipher_bits s (3RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR R RRRRRRRRRR!R#R&(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRsd             "   ) # !    tConnectionGetCipherListTestscBs eZdZdZdZRS(s9 Tests for :py:obj:`Connection.get_cipher_list`. cCs/tttd}|jt|jddS(sw :py:obj:`Connection.get_cipher_list` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+RRRR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR scCsbtttd}|j}|jt|tx$|D]}|jt|tq>WdS(s :py:obj:`Connection.get_cipher_list` returns a :py:obj:`list` of :py:obj:`bytes` giving the names of the ciphers which might be used. N( RERBR+RRRRqtlistRj(RRatcipherstcipher((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_result s   (RRRRR+(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR' s tConnectionSendTestscBsseZdZdZdZdZyeWnek rBn XdZye Wnek rgn XdZ RS(s- Tests for :py:obj:`Connection.send` cCsdtttd}|jt|j|jt|jt|jt|jdtddS(s When called with arguments other than string argument for its first parameter or more than two arguments, :py:obj:`Connection.send` raises :py:obj:`TypeError`. RvtbarN(RERBR+RRRRR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR scCsZ|j\}}|jtd}|j|d|j|jdtddS(s When passed a short byte string, :py:obj:`Connection.send` transmits all of it and returns the number of bytes sent. txyiN(RRRLRR(RRRtcount((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_short_bytes sc Cs|j\}}tdtf}td|jdjd}|jdjtt |dj |j |dj t WdQX|j|d|j|jdddS( s When passed a text, :py:obj:`Connection.send` transmits all of it and returns the number of bytes sent. It also raises a DeprecationWarning. trecordtalwaysR.Rs,{0} for buf is no longer accepted, use bytesiNi(RRRRRRrRtformatRIRjtmessageRtcategorytDeprecationWarningRR(RRRRR/((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_text s cCs`|j\}}|jttd}|j|d|j|jdtddS(s When passed a memoryview onto a small number of bytes, :py:obj:`Connection.send` transmits all of them and returns the number of bytes sent. R.iN(RRt memoryviewRLRR(RRRR/((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_short_memoryview" scCs`|j\}}|jttd}|j|d|j|jdtddS(s When passed a buffer containing a small number of bytes, :py:obj:`Connection.send` transmits all of them and returns the number of bytes sent. R.iN(RRtbufferRLRR(RRRR/((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_short_buffer3 s( RRRRR0R7R8t NameErrorR9R:R;(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR, s    cCstt|S(s[ Create a new ``memoryview`` wrapped around a ``bytearray`` of the given size. (R8t bytearray(tsize((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_make_memoryview@ stConnectionRecvIntoTestscBseZdZdZdZdZdZdZdZdZ dZ ye Wne k ron%Xd Z d Zd Zd ZRS( s2 Tests for :py:obj:`Connection.recv_into` cCsj|d}|j\}}|jtd|j|j|d|j|ttddS(s Assert that when the given buffer is passed to ``Connection.recv_into``, whatever bytes are available to be received that fit into that buffer are written into that buffer. iR.itxyN(RRRLRt recv_intoR=(Rtfactoryt output_bufferRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_no_length_testM s  cCs|jtdS(s :py:obj:`Connection.recv_into` can be passed a ``bytearray`` instance and data in the receive buffer is written to it. N(RER=(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_bytearray_no_length\ scCsm|d}|j\}}|jtd|j|j|dd|j|ttddS(s Assert that when the given buffer is passed to ``Connection.recv_into`` along with a value for ``nbytes`` that is less than the size of that buffer, only ``nbytes`` bytes are written into the buffer. i t abcdefghijit abcdeN(RRRLRRBR=(RRCRDRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_respects_length_testd s  cCs|jtdS(s When called with a ``bytearray`` instance, :py:obj:`Connection.recv_into` respects the ``nbytes`` parameter and doesn't copy in more than that number of bytes. N(RIR=(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_bytearray_respects_lengthu scCs|d}|j\}}|jtd|j|j|d|j|ttd|jd}|jtd|dS(s Assert that if there are more bytes available to be read from the receive buffer than would fit into the buffer passed to :py:obj:`Connection.recv_into`, only as many as fit are written into it. iRGtabcdetfghijN(RRRLRRBR=R(RRCRDRRtrest((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_doesnt_overfill_test~ s cCs|jtdS(s When called with a ``bytearray`` instance, :py:obj:`Connection.recv_into` respects the size of the array and doesn't write more bytes into it than will fit. N(RNR=(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_bytearray_doesnt_overfill scCs|d}|j\}}|jtd|j|j|dd|j|ttd|jd}|jtd|dS(s Assert that if the value given by ``nbytes`` is greater than the actual size of the output buffer passed to :py:obj:`Connection.recv_into`, the behavior is as if no value was given for ``nbytes`` at all. iRGi2RKRLN(RRRLRRBR=R(RRCRDRRRM((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_really_doesnt_overfill_test s cCs|jtdS(s When called with a ``bytearray`` instance and an ``nbytes`` value that is too large, :py:obj:`Connection.recv_into` respects the size of the array and not the ``nbytes`` value and doesn't write more bytes into the buffer than will fit. N(RNR=(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt%test_bytearray_really_doesnt_overfill scCs|jtdS(s :py:obj:`Connection.recv_into` can be passed a ``memoryview`` instance and data in the receive buffer is written to it. N(RER?(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_memoryview_no_length scCs|jtdS(s When called with a ``memoryview`` instance, :py:obj:`Connection.recv_into` respects the ``nbytes`` parameter and doesn't copy more than that number of bytes in. N(RIR?(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_memoryview_respects_length scCs|jtdS(s When called with a ``memoryview`` instance, :py:obj:`Connection.recv_into` respects the size of the array and doesn't write more bytes into it than will fit. N(RNR?(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_memoryview_doesnt_overfill scCs|jtdS(s* When called with a ``memoryview`` instance and an ``nbytes`` value that is too large, :py:obj:`Connection.recv_into` respects the size of the array and not the ``nbytes`` value and doesn't write more bytes into the buffer than will fit. N(RNR?(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt&test_memoryview_really_doesnt_overfill s(RRRRERFRIRJRNRORPRQR8R<RRRSRTRU(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR@I s"         tConnectionSendallTestscBseZdZdZdZdZyeWnek rBn XdZye Wnek rgn XdZ dZ dZ RS(s1 Tests for :py:obj:`Connection.sendall`. cCsdtttd}|jt|j|jt|jt|jt|jdtddS(s When called with arguments other than a string argument for its first parameter or with more than two arguments, :py:obj:`Connection.sendall` raises :py:obj:`TypeError`. RvR-N(RERBR+RRRtsendallR(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR s cCsH|j\}}|jtd|j|jdtddS(sm :py:obj:`Connection.sendall` transmits all of the bytes in the string passed to it. R~iN(RRWRLRR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_short sc Cs|j\}}tdtd}td|jdjd|jdjtt |dj |j |dj t WdQX|j|jdddS( s :py:obj:`Connection.sendall` transmits all the content in the string passed to it raising a DeprecationWarning in case of this being a text. R1R2R~Rs,{0} for buf is no longer accepted, use bytesiNi(RRRRRWRrRR3RIRjR4RR5R6RR(RRRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR7 s cCsN|j\}}|jttd|j|jdtddS(s When passed a memoryview onto a small number of bytes, :py:obj:`Connection.sendall` transmits all of them. R~iN(RRWR8RLRR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR9 scCsN|j\}}|jttd|j|jdtddS(s When passed a buffer containing a small number of bytes, :py:obj:`Connection.sendall` transmits all of them. R~iN(RRWR:RLRR(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_short_buffers scCs|j\}}tdd td}|j|g}d}xB|t|kr|jd}|j||t|7}qHW|j|tdj|dS( s :py:obj:`Connection.sendall` transmits all of the bytes in the string passed to it even if this requires multiple calls of an underlying write function. R~ii iRiR}Nii(RRLRWRRR*RR (RRRR4taccumtreceivedR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_long* s  cCsx|j\}}|jd|jt|jd}tdkr]|j|jdtn|j|jdt dS(s If the underlying socket is closed, :py:obj:`Connection.sendall` propagates the write error from the low level write call. is hello, worldRTiN( RRRR>RWRRRERR(RRRRk((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_closed> s   ( RRRRRXR7R8R<R9R:RYR\R](((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRV s      tConnectionRenegotiateTestscBs)eZdZdZdZdZRS(s+ Tests for SSL renegotiation APIs. cCs/tttd}|jt|jddS(ss :py:obj:`Connection.renegotiate` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+RRRt renegotiate(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_renegotiate_wrong_argsQ scCs/tttd}|jt|jddS(s| :py:obj:`Connection.total_renegotiations` raises :py:obj:`TypeError` if called with any arguments. N(RERBR+RRRttotal_renegotiations(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt$test_total_renegotiations_wrong_argsZ scCs/tttd}|j|jddS(s :py:obj:`Connection.total_renegotiations` returns :py:obj:`0` before any renegotiations have happened. iN(RERBR+RRRa(RRa((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_total_renegotiationsc s(RRRR`RbRc(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR^M s t ErrorTestscBseZdZdZRS(s5 Unit tests for :py:obj:`OpenSSL.SSL.Error`. cCs-|jttt|jtjddS(s7 :py:obj:`Error` is an exception type. R=N(Rt issubclassR=RhRR(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR s(RRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRd stConstantsTestscBseZdZed k r$dZned k r<dZned k rTdZ ne d k rldZ ndZ dZ dZdZd Zd Zd Zd ZRS(s Tests for the values of constants exposed in :py:obj:`OpenSSL.SSL`. These are values defined by OpenSSL intended only to be used as flags to OpenSSL APIs. The only assertions it seems can be made about them is their values. cCs|jtddS(s The value of :py:obj:`OpenSSL.SSL.OP_NO_QUERY_MTU` is 0x1000, the value of :py:const:`SSL_OP_NO_QUERY_MTU` defined by :file:`openssl/ssl.h`. iN(RRT(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_op_no_query_mtu scCs|jtddS(s The value of :py:obj:`OpenSSL.SSL.OP_COOKIE_EXCHANGE` is 0x2000, the value of :py:const:`SSL_OP_COOKIE_EXCHANGE` defined by :file:`openssl/ssl.h`. i N(RRU(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_op_cookie_exchange scCs|jtddS(s The value of :py:obj:`OpenSSL.SSL.OP_NO_TICKET` is 0x4000, the value of :py:const:`SSL_OP_NO_TICKET` defined by :file:`openssl/ssl.h`. i@N(RRV(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_op_no_ticket scCs|jtddS(s The value of :py:obj:`OpenSSL.SSL.OP_NO_COMPRESSION` is 0x20000, the value of :py:const:`SSL_OP_NO_COMPRESSION` defined by :file:`openssl/ssl.h`. iN(RRW(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_op_no_compression scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_OFF` 0x0, the value of :py:obj:`SSL_SESS_CACHE_OFF` defined by ``openssl/ssl.h``. iN(RR5(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_sess_cache_off scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_CLIENT` 0x1, the value of :py:obj:`SSL_SESS_CACHE_CLIENT` defined by ``openssl/ssl.h``. iN(RR6(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_sess_cache_client scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_SERVER` 0x2, the value of :py:obj:`SSL_SESS_CACHE_SERVER` defined by ``openssl/ssl.h``. iN(RR7(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_sess_cache_server scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_BOTH` 0x3, the value of :py:obj:`SSL_SESS_CACHE_BOTH` defined by ``openssl/ssl.h``. iN(RR8(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_sess_cache_both scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_NO_AUTO_CLEAR` 0x80, the value of :py:obj:`SSL_SESS_CACHE_NO_AUTO_CLEAR` defined by ``openssl/ssl.h``. iN(RR9(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_sess_cache_no_auto_clear scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_NO_INTERNAL_LOOKUP` 0x100, the value of :py:obj:`SSL_SESS_CACHE_NO_INTERNAL_LOOKUP` defined by ``openssl/ssl.h``. iN(RR:(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt"test_sess_cache_no_internal_lookup scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_NO_INTERNAL_STORE` 0x200, the value of :py:obj:`SSL_SESS_CACHE_NO_INTERNAL_STORE` defined by ``openssl/ssl.h``. iN(RR;(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt!test_sess_cache_no_internal_store scCs|jdtdS(s The value of :py:obj:`OpenSSL.SSL.SESS_CACHE_NO_INTERNAL` 0x300, the value of :py:obj:`SSL_SESS_CACHE_NO_INTERNAL` defined by ``openssl/ssl.h``. iN(RR<(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_sess_cache_no_internal sN(RRRRTRRgRURhRVRiRWRjRkRlRmRnRoRpRqRr(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRf s"         tMemoryBIOTestscBseZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZRS(sH Tests for :py:obj:`OpenSSL.SSL.Connection` using a memory BIO. cCstt}|jttBtB|jttBt Bt |j }|j t tt|jttt|j|jtttt||}|j|S(sq Create a new server-side SSL :py:obj:`Connection` object wrapped around :py:obj:`sock`. (RBR+RR/R0R.RBR1R2R3R|RRRRRRRRRQRtadd_certRSRER(RtsockRt server_storeR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_server s    cCstt}|jttBtB|jttBt Bt |j }|j t tt|jttt|j|jtttt||}|j|S(sq Create a new client-side SSL :py:obj:`Connection` object wrapped around :py:obj:`sock`. (RBR+RR/R0R.RBR1R2R3R|RRRRRPRRRORRtRSRER(RRuRt client_storeR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_client# s    cCs|jd}|jd}|j|jd|j|jd|j|jd|j|j||d|j|jd|j|jd|j|jd|j |j|j|j |j|j|j |j|j|j |j|jt d}|j ||j |j||||f|j |ddd|j |j||||dddfdS(s% Two :py:obj:`Connection`s which use memory BIOs can be manually connected by reading from the output of each and writing those bytes to the input of the other and in this way establish a connection and exchange application-level bytes with each other. sOne if by land, two if by sea.Ni( RwRRyRRt client_randomt server_randomRtassertNotIdenticalRtassertNotEqualsRLR(RRRtimportant_message((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_memoryConnect7 s.   cCs|j\}}td}|j||jd}|j|||ddd}|j||jd}|j||dS(s Just like :py:obj:`test_memoryConnect` but with an actual socket. This is primarily to rule out the memory BIO code as the source of any problems encountered while passing data over a :py:obj:`Connection` (if this test fails, there must be a problem outside the memory BIO code, as no memory BIO is involved here). Even though this isn't a memory BIO test, it's convenient to have it here. s,Help me Obi Wan Kenobi, you're my only hope.iNi(RRLRRR(RRRR~R ((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_socketConnectc s    cCsgtt}t}t||}|jt|jd|jt|jd|jt|jdS(s Test that :py:obj:`OpenSSL.SSL.bio_read` and :py:obj:`OpenSSL.SSL.bio_write` don't work on :py:obj:`OpenSSL.SSL.Connection`() that use sockets. idRvN( RBR)R RERRRRR(RRRR;((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_socketOverridesMemory{ s   cCs|jd}|jd}|j||d}|jd|}|j||k|j||\}}|j|||jt||dS(s' If more bytes than can be written to the memory BIO are passed to :py:obj:`Connection.send` at once, the number of bytes which were written is returned and that many bytes from the beginning of the input can be read from the other end of the connection. iiR~Ni( RwRRyRRRRRR(RRRR>tsenttreceiverR[((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_outgoingOverflow scCsH|jd}|j|jt|jd}|j|jtdS(s :py:obj:`Connection.bio_shutdown` signals the end of the data stream from which the :py:obj:`Connection` reads. iN(RwRRRR=RRt __class__(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR s cCsN|j\}}|jt|jt|jd}|j|jddS(s If the connection is lost before an orderly SSL shutdown occurs, :py:obj:`OpenSSL.SSL.SysCallError` is raised with a message of "Unexpected EOF". iisUnexpected EOFN(isUnexpected EOF(RRR RR>RRRE(RRRRk((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_unexpectedEndOfFile s cCs|jd}|jd}|j|jg|j|jg|j}||}|j|jg|j|j||j|||j|j||j|j|dS(s Verify the return value of the :py:obj:`get_client_ca_list` method for server and client connections. :param func: A function which will be called with the server context before the client and server are connected to each other. This function should specify a list of CAs for the server to send to the client and return that same list. The list will be used to verify that :py:obj:`get_client_ca_list` returns the proper value at various times. N(RwRRyRtget_client_ca_listRR(RtfuncRRRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt_check_client_ca_list s   cCsXtt}|jt|jd|jt|jdg|j|jgddS(s :py:obj:`Context.set_client_ca_list` raises a :py:obj:`TypeError` if called with a non-list or a list that contains objects other than X509Names. tspamN(RBR+RRtset_client_ca_listRR(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_client_ca_list_errors s cCsd}|j|dS(s( If passed an empty list, :py:obj:`Context.set_client_ca_list` configures the context to send no CA names to the client and, on both the server and client sides, :py:obj:`Connection.get_client_ca_list` returns an empty list after the connection is set up. cSs|jggS(N(R(R((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytno_ca s N(R(RR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_empty_ca_list s cs;ttt}|jfd}|j|dS(sY If passed a list containing a single X509Name, :py:obj:`Context.set_client_ca_list` configures the context to send that CA name to the client and, on both the server and client sides, :py:obj:`Connection.get_client_ca_list` returns a list containing that X509Name after the connection is set up. cs|jggS(N(R(R(tcadesc(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt single_ca sN(RRRSRR(RRR((Rs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_one_ca_list s csYttt}ttt}|j|jfd}|j|dS(se If passed a list containing multiple X509Name objects, :py:obj:`Context.set_client_ca_list` configures the context to send those CA names to the client and, on both the server and client sides, :py:obj:`Connection.get_client_ca_list` returns a list containing those X509Names after the connection is set up. csg}|j||S(N(R(RtL(tcldesctsedesc(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt multiple_ca s  N(RRRQRR(RtsecerttclcertR((RRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_multiple_ca_list s   cswttt}ttt}ttt}|j|j|jfd}|j|dS(s If called multiple times, only the X509Names passed to the final call of :py:obj:`Context.set_client_ca_list` are used to configure the CA names sent to the client. cs*|jg|jggS(N(R(R(RRR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt changed_casN(RRRSRQRR(RRRRR((RRRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_reset_ca_lists   csYttt}ttt}|j|jfd}|j|dS(s If the list passed to :py:obj:`Context.set_client_ca_list` is mutated afterwards, this does not affect the list of CA names sent to the client. cs-g}|jg|jgS(N(RR*(RR(RR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt mutated_ca2s  N(RRRSRQRR(RRRR((RRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_mutated_ca_list&s   cCsatt}ttt}|jt|j|jt|jd|jt|j||dS(s :py:obj:`Context.add_client_ca` raises :py:obj:`TypeError` if called with a non-X509 object or with a number of arguments other than one. RN(RBR+RRRSRRt add_client_ca(RRR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_add_client_ca_errors:s  cs>tttjfd}|j|dS(s A certificate's subject can be added as a CA to be sent to the client with :py:obj:`Context.add_client_ca`. cs|jgS(N(R(R(RR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRMs N(RRRSRR(RR((RRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_one_add_client_caFs cs_ttttttjjfd}|j|dS(s Multiple CA names can be sent to the client by calling :py:obj:`Context.add_client_ca` with multiple X509 objects. cs$|j|jgS(N(R(R(RRRR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyR^s  N(RRRSRQRR(RR((RRRRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_multiple_add_client_caSs   cszttt}ttt}ttt|j|jjfd}|j|dS(s A call to :py:obj:`Context.set_client_ca_list` followed by a call to :py:obj:`Context.add_client_ca` results in using the CA names from the first call and the CA name from the second call. cs-|jg|jgS(N(RR(R(RRRR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytmixed_set_add_cass N(RRRSRQRR(RRRR((RRRRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_and_add_client_caes   csnttt}tttttt|jjfd}|j|dS(s A call to :py:obj:`Context.set_client_ca_list` after a call to :py:obj:`Context.add_client_ca` replaces the CA name specified by the former call with the names specified by the latter cal. cs4|j|jg|jgS(N(RR(R(RRRR(s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pytset_replaces_add_cas  N(RRRSRQRR(RRR((RRRRs9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_set_after_add_client_cazs  (RRRRwRyRRRRRRRRRRRRRRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRs s*   ,         tConnectionBIOTestscBs2eZdZdZdZes0dZnRS(sU Tests for :py:obj:`Connection.bio_read` and :py:obj:`Connection.bio_write`. cCs5tt}t|d}|jt|jddS(s :py:obj:`Connection.bio_read` raises :py:obj:`OpenSSL.SSL.WantReadError` if there are no bytes available to be read from the BIO. iN(RBR+RERRR?R(RRRw((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_wantReadErrors cCsptt}t|d}|jy|jWntk rFnX|jd}|jdt |dS(s :py:obj:`Connection.bio_read` accepts an integer giving the maximum number of bytes to read and return. iN( RBR+RERRRR?RRR(RRRwR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_buffer_sizes   cCsvtt}t|d}|jy|jWntk rFnX|jtd}|j dt |dS(s On Python 2 :py:obj:`Connection.bio_read` accepts values of type :py:obj:`long` as well as :py:obj:`int`. iN( RBR+RERRRR?RRRR(RRRwR((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyttest_buffer_size_longs   (RRRRRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRs  tInfoConstantTestscBseZdZdZRS(sI Tests for assorted constants exposed for use in info callbacks. cCsgx`tttttttttt t t t t ttttttgD]}|jt|tqCWdS(s  All of the info constants are integers. This is a very weak test. It would be nice to have one that actually verifies that as certain info events happen, the value passed to the info callback matches up with the constant exposed by OpenSSL.SSL. N(R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRRqR(Rtconst((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyt test_integerss    (RRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyRst__main__N(RtgcRRR?RRRRRtsysRRR R R tosR tos.pathR tunittestRtweakrefRtwarningsRRtsixRRRtOpenSSL.cryptoRRRRRRRRRRRt OpenSSL.SSLR R!R"R#R$R%R&R'R(R)R*R+R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;R<R=R>R?R@RARBRCRDRERFRGt OpenSSL._utilRHRtOpenSSL.test.utilRIRJRKRLtOpenSSL.test.test_cryptoRMRNRORPRQRRRSRTt ImportErrorRRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRRvR|RRRRRRRRRRRR'R,R?R@RVR^RdRfRsRRR(((s9/usr/lib/python2.7/dist-packages/OpenSSL/test/test_ssl.pyts(".":(."4                6foQ o5 z1