← Back
Editing: test_ckeygen.cpython-38.pyc
U s�@g9O � @ s� d Z ddlZddlZddlZddlZddlmZmZ ddlm Z m Z ddl m Z e d�r�e d�r�ddl mZmZmZmZ dd lmZmZmZmZmZ nd Zdd lmZ dd lm Z dd l m Z m Z m Z m!Z! dd� Z"G dd� de �Z#dS )z- Tests for L{twisted.conch.scripts.ckeygen}. � N)�BytesIO�StringIO)�unicode�_PY3)� requireModuleZ cryptographyZpyasn1)�Key� BadKeyError�BadFingerPrintFormat�FingerprintFormats)�changePassPhrase�displayPublicKey�printFingerprint�_saveKey�enumrepresentationzBcryptography and pyasn1 required for twisted.conch.scripts.ckeygen)�FilePath)�TestCase)�publicRSA_openssh�privateRSA_openssh� privateRSA_openssh_encrypted�privateECDSA_opensshc s t � �� � fdd�}|S )a@ Return a callable to patch C{getpass.getpass}. Yields a passphrase each time called. Use case is to provide an old, then new passphrase(s) as if requested interactively. @param passphrases: The list of passphrases returned, one per each call. @return: A callable to patch C{getpass.getpass}. c s t � �S �N)�next��_�� passphrases� �A/usr/lib/python3/dist-packages/twisted/conch/test/test_ckeygen.py� fakeGetpass. s z makeGetpass.<locals>.fakeGetpass)�iter)r r r r r � makeGetpass" s r c @ s e Zd ZdZdd� Zd?dd�Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z!dS )@� KeyGenTestszN Tests for various functions used to implement the I{ckeygen} script. c C s* t rt� | _nt� | _| �td| j� dS )zX Patch C{sys.stdout} so tests can make assertions about what's printed. �stdoutN)r r r" r �patch�sys��selfr r r �setUp9 s zKeyGenTests.setUpNc C s� | � � }|d kr(t�dd|d|dg� nt�dd|d|dd|g� t�|�}t�|d �}|dkrt| �|�� d� n| �|�� |�� � | �|� � � d S ) N�ckeygen�-t�-fz--no-passphrasez-bz.pub�ecdsaZEC) �mktemp� subprocess�callr ZfromFile� assertEqual�type�upperZ assertTrueZisPublic)r& ZkeyTypeZkeySize�filenameZprivKey�pubKeyr r r �_testrunE s � zKeyGenTests._testrunc C sF | � dd� | � d� | � dd� | � d� | � dd� | � d� d S )Nr+ Z384ZdsaZ2048Zrsa)r4 r% r r r �test_keygenerationU s z KeyGenTests.test_keygenerationc C sT | � � }| �tj��6 ttjd�� }tjdddd|g|d� W 5 Q R X W 5 Q R X d S )N�rbr( r) Zfoor* )�stderr)r, � assertRaisesr- ZCalledProcessError�open�os�devnullZ check_call)r& r2 r; r r r �test_runBadKeytype_ s �z KeyGenTests.test_runBadKeytypec C s" t ddi�}| �|d tj� dS )z� L{enumrepresentation} takes a dictionary as input and returns a dictionary with its attributes changed to enum representation. �format�md5-hexN)r �assertIsr ZMD5_HEX�r& Zoptionsr r r �test_enumrepresentationi s �z#KeyGenTests.test_enumrepresentationc C s" t ddi�}| �|d tj� dS )zF Test for format L{FingerprintFormats.SHA256-BASE64}. r= � sha256-base64N)r r? r Z SHA256_BASE64r@ r r r � test_enumrepresentationsha256s s �z)KeyGenTests.test_enumrepresentationsha256c C s: | � t��}tddi� W 5 Q R X | �d|jjd � dS )z9 Test for unsupported fingerprint format r= � sha-base64�*Unsupported fingerprint format: sha-base64r N)r8 r r r/ � exception�args)r& �emr r r � test_enumrepresentationBadFormat} s �z,KeyGenTests.test_enumrepresentationBadFormatc C s: | � � }t|��t� t|dd�� | �| j�� d� dS )z� L{printFingerprint} writes a line to standard out giving the number of bits of the key, its fingerprint, and the basename of the file from it was read. r> �r2 r= z:2048 85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da temp N�r, r � setContentr r r/ r" �getvalue�r& r2 r r r �test_printFingerprint� s ��z!KeyGenTests.test_printFingerprintc C s: | � � }t|��t� t|dd�� | �| j�� d� dS )z� L{printFigerprint} will print key fingerprint in L{FingerprintFormats.SHA256-BASE64} format if explicitly specified. rB rJ z72048 FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI= temp NrK rN r r r �test_printFingerprintsha256� s ��z'KeyGenTests.test_printFingerprintsha256c C sR | � � }t|��t� | �t��}t|dd�� W 5 Q R X | �d|jj d � dS )zx L{printFigerprint} raises C{keys.BadFingerprintFormat} when unsupported formats are requested. rD rJ rE r N) r, r rL r r8 r r r/ rF rG )r& r2 rH r r r �)test_printFingerprintBadFingerPrintFormat� s �z5KeyGenTests.test_printFingerprintBadFingerPrintFormatc C s� t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j � � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|� � � dS )z� L{_saveKey} writes the private and public parts of a key to two different files and writes a report of this to standard out. �id_rsa� passphraser> �r2 �passr= z�Your identification has been saved in %s Your public key has been saved in %s.pub The key fingerprint in <FingerprintFormats=MD5_HEX> is: 85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da N� id_rsa.pub�r r, �makedirs�child�pathr � fromStringr r r/ r" rM � getContent�public�r& �baser2 �keyr r r � test_saveKey� s6 ���� ���zKeyGenTests.test_saveKeyc C s� t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j � � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|� � � dS )z� L{_saveKey} writes the private and public parts of a key to two different files and writes a report of this to standard out. Test with ECDSA key. �id_ecdsarS r> rT z�Your identification has been saved in %s Your public key has been saved in %s.pub The key fingerprint in <FingerprintFormats=MD5_HEX> is: 1e:ab:83:a6:f2:04:22:99:7c:64:14:d2:ab:fa:f5:16 Nz id_ecdsa.pub)r r, rX rY rZ r r[ r r r/ r" rM r\ r] r^ r r r �test_saveKeyECDSA� s6 ���� ���z KeyGenTests.test_saveKeyECDSAc C s� t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j � � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|� � � dS )z� L{_saveKey} will generate key fingerprint in L{FingerprintFormats.SHA256-BASE64} format if explicitly specified. rR rS rB rT z�Your identification has been saved in %s Your public key has been saved in %s.pub The key fingerprint in <FingerprintFormats=SHA256_BASE64> is: FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI= NrV rW r^ r r r �test_saveKeysha256� s6 ���� ���z KeyGenTests.test_saveKeysha256c C sj t | �� �}|�� |�d�j}t�t�}| �t ��}t ||ddd�� W 5 Q R X | � d|j j d � dS )zq L{_saveKey} raises C{keys.BadFingerprintFormat} when unsupported formats are requested. rR rS rD rT rE r N)r r, rX rY rZ r r[ r r8 r r r/ rF rG )r& r_ r2 r` rH r r r � test_saveKeyBadFingerPrintformat s � �z,KeyGenTests.test_saveKeyBadFingerPrintformatc C s` t | �� �}|�� |�d�j}t�t�}t||ddd�� | � |�|�d�� � dd�|� dS )�q L{_saveKey} will choose an empty string for the passphrase if no-passphrase is C{True}. rR Tr> �r2 z no-passphraser= N� ) r r, rX rY rZ r r[ r r r/ r\ r^ r r r �test_saveKeyEmptyPassphrase s � ��z'KeyGenTests.test_saveKeyEmptyPassphrasec C s^ t | �� �}|�� |�d�j}t�t�}t||ddd�� | � |�|�d�� � d�|� dS )rf rb Tr> rg N) r r, rX rY rZ r r[ r r r/ r\ r^ r r r � test_saveKeyECDSAEmptyPassphrase) s � ��z,KeyGenTests.test_saveKeyECDSAEmptyPassphrasec s� t | �� �}|�� |�d�j� ddl}| �|jjj d� fdd�� t � t �}t |dddd �� |�d��� }|� |dd �}| �||� dS ) zd When no path is specified, it will ask for the path used to store the key. Z custom_keyr NZ raw_inputc s � S r r r �ZkeyPathr r �<lambda>E rh z4KeyGenTests.test_saveKeyNoFilename.<locals>.<lambda>Tr> rg rh )r r, rX rY rZ � twisted.conch.scripts.ckeygenr# ZconchZscriptsr( r r[ r r r\ r/ )r& r_ Ztwistedr` ZpersistedKeyContentZ persistedKeyr rk r �test_saveKeyNoFilename; s �z"KeyGenTests.test_saveKeyNoFilenamec C sf | � � }t�t�}t|��t� td|i� | j� � � d�}t |t �rP|� d�}| �||�d�� dS )zl L{displayPublicKey} prints out the public key associated with a given private key. r2 � �ascii�opensshN)r, r r[ r r rL r r r" rM �strip� isinstancer �encoder/ �toString�r& r2 r3 Z displayedr r r �test_displayPublicKeyO s �z!KeyGenTests.test_displayPublicKeyc C sh | � � }t�t�}t|��t� t|dd�� | j� � � d�}t |t �rR|� d�}| �||�d�� dS )z� L{displayPublicKey} prints out the public key associated with a given private key using the given passphrase when it's encrypted. � encrypted�r2 rU ro rp rq N)r, r r[ r r rL r r r" rM rr rs r rt r/ ru rv r r r � test_displayPublicKeyEncrypted` s �z*KeyGenTests.test_displayPublicKeyEncryptedc C sx | � � }t�t�}t|��t� | �tddd� � t d|i� | j � � � d�}t |t�rb|�d�}| �||�d�� dS ) z� L{displayPublicKey} prints out the public key associated with a given private key, asking for the passphrase when it's encrypted. �getpassc S s dS )Nrx r )�xr r r rl y rh zLKeyGenTests.test_displayPublicKeyEncryptedPassphrasePrompt.<locals>.<lambda>r2 ro rp rq N)r, r r[ r r rL r r# r{ r r" rM rr rs r rt r/ ru rv r r r �.test_displayPublicKeyEncryptedPassphrasePromptq s �z:KeyGenTests.test_displayPublicKeyEncryptedPassphrasePromptc C s. | � � }t|��t� | �tt|dd�� dS )z� L{displayPublicKey} fails with a L{BadKeyError} when trying to decrypt an encrypted key with the wrong password. �wrongry N)r, r rL r r8 r r rN r r r �$test_displayPublicKeyWrongPassphrase� s �z0KeyGenTests.test_displayPublicKeyWrongPassphrasec C sl t ddd�}| �td|� | �� }t|��t� td|i� | �| j � � � d�d� | � tt|�� � � dS )zt L{changePassPhrase} allows a user to change the passphrase of a private key interactively. rx �newpassr{ r2 ro �;Your identification has been saved with the new passphrase.N�r r# r{ r, r rL r r r/ r" rM rr �assertNotEqualr\ )r& Z oldNewConfirmr2 r r r �test_changePassphrase� s � �z!KeyGenTests.test_changePassphrasec C sl t dd�}| �td|� | �� }t|��t� t|dd�� | �| j � � � d�d� | � tt|�� � � dS )z� L{changePassPhrase} allows a user to change the passphrase of a private key, providing the old passphrase and prompting for new one. r� r{ rx ry ro r� Nr� )r& Z newConfirmr2 r r r � test_changePassphraseWithOld� s � �z(KeyGenTests.test_changePassphraseWithOldc C sV | � � }t|��t� t|ddd�� | �| j�� �d�d� | � tt|�� � � dS )z� L{changePassPhrase} allows a user to change the passphrase of a private key by providing both old and new passphrases without prompting. rx � newencrypt)r2 rU r� ro r� N) r, r rL r r r/ r" rM rr r� r\ rN r r r � test_changePassphraseWithBoth� s ��� �z)KeyGenTests.test_changePassphraseWithBothc C sR | � � }t|��t� | �tt|dd��}| �dt|�� | �tt|�� � � dS )z� L{changePassPhrase} exits if passed an invalid old passphrase when trying to change the passphrase of a private key. r~ ry z1Could not change passphrase: old passphrase errorN) r, r rL r r8 � SystemExitr r/ �strr\ �r& r2 �errorr r r �$test_changePassphraseWrongPassphrase� s �� �z0KeyGenTests.test_changePassphraseWrongPassphrasec C sb | � tdtd�� | �� }t|��t� | �tt d|i�}| � dt |�� | � tt|�� � � dS )z� L{changePassPhrase} exits if no passphrase is specified for the C{getpass} call and the key is encrypted. r{ � r2 zMCould not change passphrase: Passphrase must be provided for an encrypted keyN) r# r{ r r, r rL r r8 r� r r/ r� r\ r� r r r �!test_changePassphraseEmptyGetPass� s �� �z-KeyGenTests.test_changePassphraseEmptyGetPassc C s^ | � � }t|��d� | �ttd|i�}tr2d}nd}| �|t|�� | �dt|�� � � dS )zc L{changePassPhrase} exits if the file specified points to an invalid key. s foobarr2 z?Could not change passphrase: cannot guess the type of b'foobar'z>Could not change passphrase: cannot guess the type of 'foobar'N) r, r rL r8 r� r r r/ r� r\ )r& r2 r� �expectedr r r �test_changePassphraseBadKey� s �z'KeyGenTests.test_changePassphraseBadKeyc C sh | � � }t|��t� dd� }| �td|� | �tt|dd��}| � dt |�� | � tt|�� � � dS )z� L{changePassPhrase} doesn't modify the key file if an unexpected error happens when trying to create the key with the new passphrase. c _ s t d��d S )NZoops)� RuntimeError�rG �kwargsr r r ru s z>KeyGenTests.test_changePassphraseCreateError.<locals>.toStringru r� �r2 r� z!Could not change passphrase: oopsN) r, r rL r r# r r8 r� r r/ r� r\ )r& r2 ru r� r r r � test_changePassphraseCreateError� s �� �z,KeyGenTests.test_changePassphraseCreateErrorc C sv | � � }t|��t� dd� }| �td|� | �tt|dd��}t rJd}nd}| � |t |�� | � tt|�� � � dS ) zq L{changePassPhrase} doesn't modify the key file if C{toString} returns an empty string. c _ s dS )Nr� r r� r r r ru s zCKeyGenTests.test_changePassphraseEmptyStringError.<locals>.toStringru r� r� z9Could not change passphrase: cannot guess the type of b''z8Could not change passphrase: cannot guess the type of ''N) r, r rL r r# r r8 r� r r r/ r� r\ )r& r2 ru r� r� r r r �%test_changePassphraseEmptyStringError s ���z1KeyGenTests.test_changePassphraseEmptyStringErrorc C sR | � � }t|��t� | �tt|dd��}| �dt|�� | �tt|�� � � dS )z� L{changePassPhrase} exits when trying to change the passphrase on a public key, and doesn't change the file. rU r� z.Could not change passphrase: key not encryptedN) r, r rL r r8 r� r r/ r� r\ r� r r r � test_changePassphrasePublicKey/ s � �z*KeyGenTests.test_changePassphrasePublicKey)N)"�__name__� __module__� __qualname__�__doc__r' r4 r5 r< rA rC rI rO rP rQ ra rc rd re ri rj rn rw rz r} r r� r� r� r� r� r� r� r� r� r r r r r! 5 s> r! )$r� r{ r$ r: r- �ior r Ztwisted.python.compatr r Ztwisted.python.reflectr Ztwisted.conch.ssh.keysr r r r rm r r r r r �skipZtwisted.python.filepathr Ztwisted.trial.unittestr Ztwisted.conch.test.keydatar r r r r r! r r r r �<module> s
Save File
Cancel