ó Y[c@s”dZddlZddlZddlmZdZdejfd„ƒYZdZdZ dZ dZ dZ dZ dZedkrejƒndS(sTests for ocsp.pyiÿÿÿÿN(terrorss;Missing = in header key=value ocsp: Use -help for summary. tOCSPTestcBsÅeZd„Zd„Zejdƒejdƒejdƒd„ƒƒƒZejdƒejdƒd„ƒƒZejdƒejdƒd „ƒƒZejd ƒejdƒd „ƒƒZ RS( c Csƒddlm}tjdƒ^}tjdƒF}tjƒ}dtf|j_||_t |_|j ƒ|_ WdQXWdQXdS(Niÿÿÿÿ(tocspscertbot.ocsp.Popenscertbot.util.exe_exists( tcertbotRtmocktpatcht MagicMocktNonetoutt communicatet return_valuetTruetRevocationCheckertchecker(tselfRt mock_popent mock_existstmock_communicate((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pytsetUps   cCsdS(N((R((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyttearDownsscertbot.ocsp.logger.infoscertbot.ocsp.Popenscertbot.util.exe_existscCs3tjƒ}dtf|j_||_t|_ddlm}|j ƒ}|j |j dƒ|j |j dƒdgƒdtj dƒdf|j_|j ƒ}|j |j dƒddgƒ|j |jtƒt|_d |_ |j ƒ}|j |j d ƒ|j |j dƒ|j |jtƒdS( Niÿÿÿÿ(RitxsHost=xs itHosti(RRRRR R R RRR t assertEqualt call_countt host_argst partitiontbrokentFalse(RRRtmock_logRRR ((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyt test_inits$        s4certbot.ocsp.RevocationChecker.determine_ocsp_serverscertbot.util.run_scriptcCsõt|j_d |_|j|jjddƒtƒt|j_ttdƒ|_|j|jjddƒtƒ|j|j dƒd |_|j|jjdd ƒtƒt j d ƒ|_ |j|jjddƒtƒ|j|j d ƒdS(NtRtyiis http://x.cosx.cosblah.pems chain.pems#Unable to load certificate launcheri(RR(s http://x.cosx.co( R R RR Rt ocsp_revokedRttuplet openssl_happyRRtSubprocessErrort side_effect(Rtmock_runtmock_determine((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyttest_ocsp_revoked8s    cCs»d}d}|df|_|j|jjdƒ||fƒd|ddf|_|j|jjdƒd ƒ|j|jdƒd}tj|ƒ|_|j|jjdƒd ƒdS( Ns'http://ocsp.stg-int-x1.letsencrypt.org/socsp.stg-int-x1.letsencrypt.orgRtbeepsftp:/t/it confusion(NN(NN( R RR tdetermine_ocsp_serverRRRR#R$(RR%t mock_infoturithosttc((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyttest_determine_ocsp_serverKs"scertbot.ocsp.loggercCs”t|_ddlm}|j|jtŒtƒ|j|jtŒtƒ|j|jj dƒ|j|j j dƒd|j_ |j|jt Œtƒ|j|jj dƒ|j|j j dƒ|j|jt Œtƒ|j|jj dƒ|j|jt Œtƒ|j|j j dƒd|j_ |j|jtŒtƒ|j|jj dƒ|j|jtŒtƒ|j|jj dƒdS(Niÿÿÿÿ(Riii(topenssl_confusedR RRRt_translate_ocsp_queryR"RtdebugRtwarntopenssl_unknowntopenssl_expired_ocsptopenssl_brokentinfotopenssl_revokedR topenssl_expired_ocsp_revoked(RR%RR((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyttest_translate_ocspZs&   ( t__name__t __module__RRRRRR'R0R;(((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyRs      Rs€ /etc/letsencrypt/live/example.org/cert.pem: good This Update: Dec 17 00:00:00 2016 GMT Next Update: Dec 24 00:00:00 2016 GMT s´ Response Verify Failure 139903674214048:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:138:Verify error:unable to get local issuer certificate sblah.pems^ blah.pem: good This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT sResponse verify OKsŒ blah.pem: revoked This Update: Dec 20 01:00:00 2016 GMT Next Update: Dec 27 01:00:00 2016 GMT Revocation Time: Dec 20 01:46:34 2016 GMT sa blah.pem: unknown This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT t tentaclessÜ blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: good This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT sß blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: revoked This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT t__main__(Rs€ /etc/letsencrypt/live/example.org/cert.pem: good This Update: Dec 17 00:00:00 2016 GMT Next Update: Dec 24 00:00:00 2016 GMT s´ Response Verify Failure 139903674214048:error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error:ocsp_vfy.c:138:Verify error:unable to get local issuer certificate (sblah.pems^ blah.pem: good This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT sResponse verify OK(sblah.pemsŒ blah.pem: revoked This Update: Dec 20 01:00:00 2016 GMT Next Update: Dec 27 01:00:00 2016 GMT Revocation Time: Dec 20 01:46:34 2016 GMT sResponse verify OK(sblah.pemsa blah.pem: unknown This Update: Dec 20 18:00:00 2016 GMT Next Update: Dec 27 18:00:00 2016 GMT sResponse verify OK(RR>sResponse verify OK(sblah.pemsÜ blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: good This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT sResponse verify OK(sblah.pemsß blah.pem: WARNING: Status times invalid. 140659132298912:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:372: revoked This Update: Apr 6 00:00:00 2016 GMT Next Update: Apr 13 00:00:00 2016 GMT sResponse verify OK(t__doc__tunittestRRRRtTestCaseRR1R"R9R5R7R6R:R<tmain(((s;/usr/lib/python2.7/dist-packages/certbot/tests/ocsp_test.pyts4  f