ó [³XMc@s“dZyddlmZmZWnek r9dZnYXddlmZddlm Z m Z m Z m Z ddl mZmZddl mZddlmZdd lmZmZdd lmZdd lmZmZdd lmZmZmZdd lm Z m!Z!ddl"m#Z#ddl$m%Z%ddl&m'Z'ddl(m)Z)ddd„ƒYZ*defd„ƒYZ+de#fd„ƒYZ,dS(s% Tests for L{twisted.protocols.tls}. iÿÿÿÿ(tTLSMemoryBIOProtocoltTLSMemoryBIOFactorys9pyOpenSSL 0.10 or newer required for twisted.protocol.tls(tX509Type(t TLSv1_METHODtErrortContexttConnectionType(tClientContextFactorytPrivateCertificate(tDefaultOpenSSLContextFactory(tFilePath(t ISystemHandlet ISSLTransport(tConnectionDone(tDeferredt gatherResults(tProtocolt ClientFactoryt ServerFactory(t loopbackAsynctcollapsingPumpPolicy(tTestCase(tConnectionLostNotifyingProtocol(tcertPath(tStringTransporttHandshakeCallbackContextFactorycBsDeZdZdZd„Zd„ZeeƒZd„Zd„ZRS(s L{HandshakeCallbackContextFactory} is a factory for SSL contexts which allows applications to get notification when the SSL handshake completes. @ivar _finished: A L{Deferred} which will be called back when the handshake is done. i cCstƒ|_dS(N(Rt _finished(tself((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt__init__-scCs|ƒ}||jfS(sÍ Create a new L{HandshakeCallbackContextFactory} and return a two-tuple of it and a L{Deferred} which will fire when a connection created with it completes a TLS handshake. (R(tclstcontextFactory((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pytfactoryAndDeferred1s cCs$||j@r |jjdƒndS(s This is the "info callback" on the context. It will be called periodically by pyOpenSSL with information about the state of a connection. When it indicates the handshake is complete, it will fire C{self._finished}. N(tSSL_CB_HANDSHAKE_DONERtcallbacktNone(Rt connectiontwheretret((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt_info<s cCs ttƒ}|j|jƒ|S(sp Create and return an SSL context configured to use L{self._info} as the info callback. (RRtset_info_callbackR&(Rtcontext((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt getContextGs ( t__name__t __module__t__doc__R RRt classmethodR&R)(((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR!s    tAccumulatingProtocolcBs)eZdZd„Zd„Zd„ZRS(s$ A protocol which collects the bytes it receives and closes its connection after receiving a certain minimum of data. @ivar howMany: The number of bytes of data to wait for before closing the connection. @ivar receiving: A C{list} of C{str} of the bytes received so far. cCs ||_dS(N(thowMany(RR/((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRZscCs g|_dS(N(treceived(R((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pytconnectionMade^scCsE|jj|ƒttt|jƒƒ|jkrA|jjƒndS(N(R0tappendtsumtmaptlenR/t transporttloseConnection(Rtbytes((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt dataReceivedbs!(R*R+R,RR1R9(((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR.Rs  tTLSMemoryBIOTestscBsƒeZdZd„Zd„Zd„Zd„Zd„Zd„Zd„Z d„Z d „Z d „Z d „Z d „Zd „ZRS(se Tests for the implementation of L{ISSLTransport} which runs over another L{ITransport}. cCs?tddƒ}|jtj|ƒƒ|jtj|ƒƒdS(sj L{TLSMemoryBIOProtocol} instances provide L{ISSLTransport} and L{ISystemHandle}. N(RR"t assertTrueR t providedByR (Rtproto((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_interfacesnscCsftƒ}tƒ}t|t|ƒ}t|tƒƒ}tƒ}|j|ƒ|j|j ƒt ƒdS(s/ L{TLSMemoryBIOProtocol.getHandle} returns the L{OpenSSL.SSL.Connection} instance it uses to actually implement TLS. This may seem odd. In fact, it is. The L{OpenSSL.SSL.Connection} is not actually the "system handle" here, nor even an object the reactor knows about directly. However, L{twisted.internet.ssl.Certificate}'s C{peerFromTransport} and C{hostFromTransport} methods depend on being able to get an L{OpenSSL.SSL.Connection} object in order to work properly. Implementing L{ISystemHandle.getHandle} like this is the easiest way for those APIs to be made to work. If they are changed, then it may make sense to get rid of this implementation of L{ISystemHandle} and return the underlying socket instead. N( RRRtTrueRRRtmakeConnectiontassertIsInstancet getHandleR(RtfactoryRtwrapperFactoryR=R6((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_getHandlexs    csŽtƒ‰tƒ}‡fd†|_tƒ}t|t|ƒ}|jdƒ}tƒ}|j |ƒ|j ˆj dƒ|j ˆj |ƒdS(s… When L{TLSMemoryBIOProtocol} is connected to a transport, it connects the protocol it wraps to a transport. csˆS(N(((tclientProtocol(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt—sN( RRtprotocolRRR?t buildProtocolR"RR@tassertNotIdenticalR6(Rt clientFactoryRRDt sslProtocolR6((RFsC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_makeConnections     c Csštƒ}t|_tjƒ\}}t|t|ƒ}|jdƒ}t ƒ}t|_t t t ƒ}t|t |ƒ}|jdƒ}t ||ƒ} |S(sr The TLS handshake is performed when L{TLSMemoryBIOProtocol} is connected to a transport. N(RRRHRRRR?RIR"RR RtFalseR( RRKtclientContextFactorythandshakeDeferredRDtsslClientProtocolt serverFactorytserverContextFactorytsslServerProtocoltconnectionDeferred((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_handshake¥s    c stƒ‰tƒ}‡fd†|_tƒ}t|t|ƒ}|jdƒ}tƒ‰tƒ}‡fd†|_t t ƒj ƒ}t j |ƒ}|j|ƒ}t|t|ƒ}|jdƒ} t| |ƒ} d„} ˆj| ƒˆj| ƒtˆˆ| gƒS(s× L{TLSMemoryBIOProtocol} reports errors in the handshake process to the application-level protocol object using its C{connectionLost} method and disconnects the underlying transport. cs tˆƒS(N(R((tclientConnectionLost(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRGËscs tˆƒS(N(R((tserverConnectionLost(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRGÖscSs|jjtƒdS(N(tlostConnectionReasonttrapR(RH((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pytcbConnectionLostäsN(RRRHRRR?RIR"RR Rt getContentRtloadPEMtoptionsRNRt addCallbackR( RRKRORDRQRRtcertificateDatat certificateRSRTRUR[((RWRXsC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_handshakeFailureÂs.        c s¹tƒ}t|_tjƒ\}}t|t|ƒ}|jdƒ‰t ƒ}t|_t t t ƒ}t|t |ƒ}|jdƒ}t |ˆƒ}‡‡fd†} |j| ƒ|S(s  L{TLSMemoryBIOFactory.getPeerCertificate} returns the L{OpenSSL.crypto.X509Type} instance representing the peer's certificate. cs9ˆjƒ}ˆj|tƒˆj|jdƒdƒdS(Ntmd5s/9B:A4:AB:43:10:BE:82:AE:94:3E:6B:91:F2:F3:40:E8(tgetPeerCertificateRARt assertEqualstdigest(tignoredtcert(RRQ(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt cbHandshooks   N(RRRHRRRR?RIR"RR RRNRR_( RRKRORPRDRRRSRTRURi((RRQsC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_getPeerCertificateôs"      c sd‰tƒ‰tƒ}‡fd†|_tjƒ\}}t|t|ƒ}|jdƒ}t t ˆƒƒ‰t ƒ}‡fd†|_t t t ƒ}t|t|ƒ}|jdƒ}t||ƒ‰‡‡‡fd†} |j| ƒ‡‡‡fd†} |j| ƒ|S(sÉ Bytes written to L{TLSMemoryBIOProtocol} before the handshake is complete are received by the protocol on the other side of the connection once the handshake succeeds. s some bytescsˆS(N(((RF(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRG%scsˆS(N(((tserverProtocol(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRG/scsˆjjˆƒˆS(N(R6twrite(Rg(RUR8RF(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRi9scs ˆjdjˆjƒˆƒdS(Nt(RetjoinR0(Rg(RRkR8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pytcbDisconnectedBsN(RRRHRRRR?RIR"R.R5RR RRNRR_( RRKRORPRDRQRRRSRTRiRo((RURRFRkR8sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_writeAfterHandshakes*     c sùd‰dtf‡fd†ƒY}tƒ}||_tjƒ\}}t|t|ƒ}|jdƒ}t t ˆƒƒ‰t ƒ}‡fd†|_t t t ƒ}t|t|ƒ}|jdƒ} t| |ƒ} ‡‡‡fd†} | j| ƒ| S(sÉ Bytes written to L{TLSMemoryBIOProtocol} before the handshake is complete are received by the protocol on the other side of the connection once the handshake succeeds. s some bytestSimpleSendingProtocolcseZ‡fd†ZRS(cs|jjˆƒdS(N(R6Rl(R(R8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR1Rs(R*R+R1((R8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRqQscsˆS(N(((Rk(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRG`scs ˆjdjˆjƒˆƒdS(NRm(ReRnR0(Rg(RRkR8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pytcbConnectionDoneksN(RRRHRRRR?RIR"R.R5RR RRNRR_( RRqRKRORPRDRQRRRSRTRURr((RRkR8sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_writeBeforeHandshakeIs&    c sðd‰dtf‡fd†ƒY}tƒ}||_tƒ}t|t|ƒ}|jdƒ}tt ˆƒƒ‰t ƒ}‡fd†|_t t t ƒ}t|t |ƒ}|jdƒ}t||ƒ} ‡‡‡fd†} | j| ƒ| S(sš Bytes written to L{TLSMemoryBIOProtocol} with C{writeSequence} are received by the protocol on the other side of the connection. s some bytesRqcseZ‡fd†ZRS(cs|jjtˆƒƒdS(N(R6t writeSequencetlist(R(R8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR1xs(R*R+R1((R8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRqwscsˆS(N(((Rk(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRG…scs ˆjdjˆjƒˆƒdS(NRm(ReRnR0(Rg(RRkR8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRrsN(RRRHRRR?RIR"R.R5RR RRNRR_( RRqRKRORDRQRRRSRTRURr((RRkR8sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_writeSequenceqs&     c sgtdƒD]}t|ƒ^q ‰dtf‡fd†ƒY}tƒ}||_tƒ}t|t|ƒ}|jdƒ}t t t t ˆƒƒƒ‰tƒ}‡fd†|_tttƒ}t|t|ƒ}|jdƒ} t| |tƒ} ‡‡‡fd†} | j| ƒ| S(sá If multiple separate TLS messages are received in a single chunk from the underlying transport, all of the application bytes from each message are delivered to the application-level protocol. i RqcseZ‡fd†ZRS(cs%xˆD]}|jj|ƒqWdS(N(R6Rl(Rtb(R8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR1žs (R*R+R1((R8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRqscsˆS(N(((Rk(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRG¬scs)ˆjdjˆjƒdjˆƒƒdS(NRm(ReRnR0(Rg(RRkR8(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRr·sN(trangetstrRRRHRRR?RIR"R.R3R4R5RR RRNRRR_( RtiRqRKRORDRQRRRSRTRURr((RRkR8sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_multipleWrites–s&%     c sd‰d‰dtf‡‡fd†ƒY}tƒ}||_tƒ}t|t|ƒ}|jdƒ}tt ˆƒˆƒ‰t ƒ}‡fd†|_t t t ƒ}t|t |ƒ}|jdƒ}t||ƒ} ‡‡‡‡fd†} | j| ƒ| S(s¸ If a very long string is passed to L{TLSMemoryBIOProtocol.write}, any trailing part of it which cannot be send immediately is buffered and sent later. s some bytesi RqcseZ‡‡fd†ZRS(cs|jjˆˆƒdS(N(R6Rl(R(R8tfactor(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR1Æs(R*R+R1((R8R|(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRqÅscsˆS(N(((Rk(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRGÓscs$ˆjdjˆjƒˆˆƒdS(NRm(ReRnR0(Rg(RRkR8R|(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRrÞsN(RRRHRRR?RIR"R.R5RR RRNRR_( RRqRKRORDRQRRRSRTRURr((RR|RkR8sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_hugeWrite½s(     cstƒ‰tƒ}‡fd†|_tƒ}t|t|ƒ}|jdƒ}tƒ}t ||ƒ}|j j ƒd„}ˆj |ƒˆS(s~ If a L{TLSMemoryBIOProtocol} loses its connection unexpectedly, this is reported to the application. cs tˆƒS(N(R((RW(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRGìscSs|jjtƒdS(N(RYRZR(RF((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRoýsN( RRRHRRR?RIR"RRR6R7R_(RRKRORDRQRkRURo((RWsC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyttest_disorderlyShutdownäs       c sütƒ‰tƒ}‡fd†|_tjƒ\}}t|t|ƒ}|jdƒ}t ƒ‰t ƒ}‡fd†|_t t t ƒ}t|t |ƒ}|jdƒ}t||ƒ} ‡‡fd†} |j| ƒ‡‡fd†} |j| ƒ|S(s‚ L{TLSMemoryBIOProtocol.loseConnection} sends a TLS close alert and shuts down the underlying connection. cs tˆƒS(N(R((RW(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRG scsˆS(N(((Rk(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRGscsˆjjƒˆS(N(R6R7(Rg(RkRW(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt cbHandshake s cs@|jjtƒˆjˆjjjƒˆj|jjjƒdS(N(RYRZR R;R6tqt disconnect(RF(RRk(sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyRr)sN(RRRHRRRR?RIR"RRR RRNRR_( RRKRORPRDRQRRRSRTRURRr((RWRRksC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyt!test_loseConnectionAfterHandshakes(      (R*R+R,R>RERMRVRbRjRpRsRvR{R}R~R‚(((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyR:is    2 ' . ( % ' ' N((-R,ttwisted.protocols.tlsRRt ImportErrortskiptOpenSSL.cryptoRt OpenSSL.SSLRRRRttwisted.internet.sslRRR ttwisted.python.filepathR ttwisted.internet.interfacesR R ttwisted.internet.errorR ttwisted.internet.deferRRttwisted.internet.protocolRRRttwisted.protocols.loopbackRRttwisted.trial.unittestRttwisted.test.test_tcpRttwisted.test.test_sslRttwisted.test.proto_helpersRRR.R:(((sC/usr/lib/python2.7/dist-packages/twisted/protocols/test/test_tls.pyts*  "1