Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/cheroot/test/__pycache__/test_ssl.cpython-39.pyc
Ðазад
a p�h�V � @ s: d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddlZddlZddlZddlmZmZmZ ddlmZmZmZ ddlmZmZmZ ddlm Z m Z ddl m Z m Z m!Z!m"Z"m#Z# dd l$m%Z% e&e�'d ��Z(e�od e�)d �v Z*ej+�,d �Z-e j.�/e j.j0��,d�Z1ej2dd� dkZ3ej4e j.j5ej6e j.j7ej8e j.j7e j.j9 iZ:ej;j<e#d� dd�Z=G dd� de%�Z>dd� Z?ej@dd� �ZAej@dd� �ZBej@dd � �ZCej@d d � �ZDej@d d � �ZEej@d!d"� �ZFd#d$� ZGej@d%d&� �ZHej;�Id'd(�d)d*� �ZJej;�Id'd(�ej;�Id+d,�ej;�Id-ej4ej6ej8f�ej;jKe�oTed.d/d0�d1d2� ����ZLej;�Id'ejMd3ej;jKe�o�e3d4d/d0�d5�d6f�ej;�Id7ej4d/fej4d8fej6d/fej6d8fej8d8ff�d9d:� ��ZNej;�Id;e e f�d<d=� �ZOej;�Id'd(�ej;�Id;e ejMe e=d5�f�ej;jPd>dd?�d@dA� ���ZQdS )BzTests for TLS support.� N� )�bton�ntob�ntou)�IS_ABOVE_OPENSSL10�IS_CI�IS_PYPY)�IS_LINUX�IS_MACOS� IS_WINDOWS)� HTTPServer�get_ssl_adapter_class)�ANY_INTERFACE_IPV4�ANY_INTERFACE_IPV6�EPHEMERAL_PORT�_get_conn_data�_probe_ipv6_sock)� Gateway_10ZGITHUB_WORKFLOWs( Microsoft Windows Server 2016 Datacenter)Z systeminfoZLibreSSLs OpenSSL 1.0.)� � z::1zYIPv6 is disabled (for example, under Travis CI which runs under GCE supporting only IPv4))�reasonc s e Zd ZdZ� fdd�Z� ZS )�HelloWorldGatewayz0Gateway responding with Hello World to root URI.c s� | j }t|j�}|dkr4d|_|�� |�d� dS |dkr�d|_|�� | �� }|�d� |�d� t|� |�t � |�� d�� dS t t | ��� S ) z$Respond with dummy content via HTTP.�/s 200 OKs Hello world!N�/envz wsgi.errorsz wsgi.input�utf-8)�reqr �uri�statusZensure_headers_sent�writeZ get_environ�pop�print�json�dumps�encode�superr �respond)�selfr Zreq_uri�env�� __class__� ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/cheroot/test/test_ssl.pyr% F s" zHelloWorldGateway.respond)�__name__� __module__� __qualname__�__doc__r% � __classcell__r* r* r( r+ r C s r c C sF t | td�}||_tj|jd��� |js6t� d� q$|� |j � |S )z7Create and start an HTTP server bound to ``bind_addr``.)� bind_addrZgateway)�targetg�������?) r r � ssl_adapter� threading�ThreadZ safe_start�start�ready�time�sleepZ addfinalizer�stop)r1 r3 �request� httpserverr* r* r+ �make_tls_http_server\ s � r= c C s t jt| d�S )z(Provision a server creator as a fixture.�r; )� functools�partialr= r> r* r* r+ �tls_http_servero s rA c C s t �� S )z,Provide a certificate authority via fixture.)�trustme�CAr* r* r* r+ �cau s rD c c s4 | j �� �}|V W d � n1 s&0 Y dS )z=Provide a certificate authority certificate file via fixture.N)�cert_pem�tempfile)rD Z ca_cert_pemr* r* r+ �tls_ca_certificate_pem_path{ s rG c C s t t�\}}}| �t|��S )z'Provide a leaf certificate via fixture.)r r � issue_certr )rD � interface�_hostZ_portr* r* r+ �tls_certificate� s rK c c s4 | j �� �}|V W d � n1 s&0 Y dS )z6Provide a certificate chain PEM file path via fixture.N)� private_key_and_cert_chain_pemrF )rK rE r* r* r+ � tls_certificate_chain_pem_path� s rM c c s4 | j �� �}|V W d � n1 s&0 Y dS )z<Provide a certificate private key PEM file path via fixture.N)Zprivate_key_pemrF )rK Z cert_key_pemr* r* r+ �$tls_certificate_private_key_pem_path� s rN c C sB t |jt�rdS | �|jt|j�d�t�|j|j|j ��f� dS )z@Append uncaught exception ``args`` in threads to ``exceptions``.N� ) � issubclass�exc_type� SystemExit�append�str� exc_value�join� traceback�format_exception� exc_traceback)� exceptions�argsr* r* r+ �_thread_except_hook� s ���r\ c c sT g } t tdd�}|dur&t�t| �t_z| V W |durP|t_n|durN|t_0 dS )z�Provide a list of uncaught exceptions from threads via a fixture. Only catches exceptions on Python 3.8+. The list contains: ``(type, str(value), str(traceback))`` � excepthookN)�getattrr4 r? r@ r\ r] )rZ Z orig_hookr* r* r+ �thread_exceptions� s ��r_ � adapter_type)�builtin� pyopensslc C s� t t�\}}} t|d�} | ||�} |dkr4| �� | _|�| j� ||| f| �} t | j�\}}} tjdj || d�| |d�} | j dks�J �| j dks�J �dS ) z;Test ability to connect to server via HTTPS using adapters.��namerb �https://{host!s}:{port!s}/��host�port)�timeout�verify�� � Hello world!N) r r r � get_context�context�configure_certr1 �requests�get�format� status_code�text)�http_request_timeoutrA r` rK rM rN rG rI rJ rh �tls_adapter_cls� tls_adapter� tlshttpserver�respr* r* r+ �test_ssl_adapters� s& � � �rz )�is_trusted_cert�tls_client_identity))T� localhost)T� 127.0.0.1)Tz *.localhost)TZ not_localhost)Fr} �tls_verify_modez)Fails under PyPy in CI for unknown reasonF)r �strictc s^ | t jko| } tt�\} }}| r&|nt�� }|jjdt| �d�� |� t | ��}~W d � n1 sh0 Y |j � � ���}t |d�}|||�}|dkr�|�� |_|j�t| dd� � n| |j_|�|j� |�|j� || |f|�}t|j�\} }}tjtjdj| |d �| ||d �}| �s�|� }|jd k}|�snt �rn|d k�rn| t j k�rn| d k�rn| �rnt � d� |�sxJ �|j dk�s�J �|�!� W d � dS t"�o�|d k�o�| t jk}|�r�t � d� tj#j$f}t%�s�t&�r�|tj#j'f7 }t �(|��}|� �!� W d � n1 �s0 Y z |j)j*d j+j*d j*d � W n. t,�yp t%�s^t&�rjt-|j)�� n� Y n0 t.� t/��r�t-|j)�� t0�r�dndf} t"�r�t1�r�|dk�r�d} | t j t j2fv �r�| �s�| d k�r�| t%�r�dnt&�r�t3�r�dnd7 } t4�r| d7 } t&�r t%�r t4�r | d7 } t5� fdd�| D ���s:J �W d � n1 �sP0 Y dS ) z8Verify that client TLS certificate auth works correctly.�idna.core.ulabel�� return_valueNrc rb c S s |S �Nr* ��conn�cert�errno�depthZ preverify_okr* r* r+ �<lambda>- � z&test_tls_client_auth.<locals>.<lambda>re rf �ri rj r� rk ra r} z4OpenSSL 1.0 has problems with verifying client certsrl zTest sometimes failsr zsslv3 alert bad certificate�tlsv1 alert unknown ca)r� )z3bad handshake: SysCallError(10054, 'WSAECONNRESET')z<('Connection aborted.', OSError("(10054, 'WSAECONNRESET')"))z=('Connection aborted.', OSError("(10054, 'WSAECONNRESET')",))z;('Connection aborted.', error("(10054, 'WSAECONNRESET')",))z�('Connection aborted.', ConnectionResetError(10054, 'An existing connection was forcibly closed by the remote host', None, 10054, None))zf('Connection aborted.', error(10054, 'An existing connection was forcibly closed by the remote host')))z7('Connection aborted.', OSError("(104, 'ECONNRESET')"))z8('Connection aborted.', OSError("(104, 'ECONNRESET')",))z6('Connection aborted.', error("(104, 'ECONNRESET')",))zN('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))z?('Connection aborted.', error(104, 'Connection reset by peer')))z;('Connection aborted.', BrokenPipeError(32, 'Broken pipe')))zGSSLError(SSLEOFError(8, 'EOF occurred in violation of protocol (_ssl.c:)z\('Connection aborted.', RemoteDisconnected('Remote end closed connection without response'))c 3 s | ]}|� v V qd S r� r* )�.0�e��err_textr* r+ � <genexpr>� r� z'test_tls_client_auth.<locals>.<genexpr>)6�ssl� CERT_NONEr r rB rC � mock_module�patchr rH r rL rF r rm rn � set_verify�_stdlib_to_openssl_verify� verify_mode�configure_trustro r1 r? r@ rp rq rr rs � IS_PYOPENSSL_SSL_VERSION_1_0� CERT_REQUIRED�pytest�xfailrt �closer rZ �SSLErrorr �IS_GITHUB_ACTIONS_WORKFLOW�ConnectionError�raises�valuer[ r �AttributeErrorrT � isinstance�int�IS_LIBRESSL_BACKENDr � CERT_OPTIONALr � PY310_PLUS�any) ru �mockerrA r` rD rK rM rN rG r{ r| r Ztest_cert_rejectionrI rJ rh Zclient_cert_root_ca� client_cert�cl_pemrv rw rx Zmake_https_requestry Zis_req_successfulZ issue_237Zexpected_ssl_errors�ssl_errZexpected_substringsr* r� r+ �test_tls_client_auth� s� + ��� � � � ������� �� * ������ � ��$r� ra zGUnclosed TLS resource warnings happen on macOS under Python 3.10 (#508))Zmarksrb )r �use_client_certTc C s� t t�\} }}|jjdtd�d�� |�td��}W d � n1 sF0 Y |j�� ���}t |d�}|| | �}|dkr�|� � |_ |j � t | dd� � n||j _|�|j � |�|j � || |f|�}t |j�\} }}tjd | d t|� d || | �r|ndd �}t�|j�d ��}|d dk�s.J �|d dk�s@J �dD ]}||v �sDJ ��qD|dk�rtW d � dS dD ]}||v �sxJ ��qx|tjk�s�| �s�|d dk�s"J �nn|d dk�s�J �t|d��&}|d |� � v �s�J �W d � n1 �s�0 Y dD ]}||v �s J ��q W d � n1 �s80 Y t �rLdS |D ]J}t |j t ��sf�qPt|j!�}d|v �r�t"�#d�$d |f�� t"�%|� �qP| D ]\}}} t&| t'j(d � �q�| �r�J d �$| d d j)| d d f���dS )!z7Test the SSL environment generated by the SSL adapters.r� r~ r� Nrc rb c S s |S r� r* r� r* r* r+ r� � r� z test_ssl_env.<locals>.<lambda>zhttps://�:r r� r zwsgi.url_scheme�httpsZHTTPS�on> ZSSL_VERSION_LIBRARYZSSL_VERSION_INTERFACE> Z SSL_CIPHERZ SSL_PROTOCOLZSSL_CLIENT_VERIFY�NONE�SUCCESS�rtZSSL_CLIENT_CERT> ZSSL_CLIENT_M_VERSIONZSSL_CLIENT_I_DNZSSL_CLIENT_M_SERIALZSSL_CLIENT_S_DNz socket.socket� zASometimes this test fails due to a socket.socket ResourceWarning:)�filez: r � )*r r r� r� r rH r rL rF r rm rn r� r� r� r� ro r1 rp rq rT r! �loads�content�decoder� r� �open�readr rP �category�ResourceWarning�messager� r� rV Zfailr �sys�stderrr, ) r_ Zrecwarnr� ru rA r` rD r rK rM rN rG r� rI rJ rh r� r� rv rw Z tlswsgiserverry r' �key�f�warn�msg�_�tracer* r* r+ � test_ssl_env� s� &�, � � � 62 �� �r� �ip_addrc C s� | � |tf�}t|j�\}}}t�tj��.}tj � dj ||d��� dd� W d � n1 s^0 Y t rpdnd}||jjd v s�J �dS ) z:Ensure that connecting over HTTPS to HTTP port is handled.z{interface}:{port})rI rh �GETr Nzwrong version numberzunknown protocol���)�sendr r r1 r� r� r� r� �http�client�HTTPSConnectionrr r; r r� r[ )Z http_serverr� r< rI rJ rh r� Zexpected_substringr* r* r+ �test_https_over_http_errorE s ���"�r� r )ZrerunsZ reruns_delayc C s� t o |dk}|rt�d� t|d�} | ||�} |dkr@| �� | _|�| j� t|�\} } } || | f| �}t|j�\} } } | }|t u r�dj f i t � ��}|dk}|r�t j dj || d�| d�}|jd ks�J �|jd ks�J �d S t�t jj��(}t j dj || d�| d� W d � n1 �s0 Y t�r0d \}}t �r>d \}}t�rLd\}}|jjd jd }t|�}|j|k�s�J dj f i t � ����||v �s�J �d S )z:Ensure that connecting over HTTP to HTTPS port is handled.ra zTest fails in Travis-CIrc rb z[{fqdn}]zhttp://{host!s}:{port!s}/rf )ri i� zUThe client sent a plain HTTP request, but this server only speaks HTTPS on this port.N)�h �Connection reset by peer)�6 r� )iF' z=An existing connection was forcibly closed by the remote hostr r� z,The underlying error is {underlying_error!r})r r� r� r rm rn ro r r1 r rr �localsrp rq rs rt r� rZ r� r r r� r[ rT r� )ru rA r` rD r� rK rM rN Z issue_225rv rw rI rJ rh rx ZfqdnZ(expect_fallback_response_over_plain_httpry r� Zexpected_error_codeZexpected_error_textZunderlying_errorr� r* r* r+ �test_http_over_https_error^ sf � � � � �� �&��r� )Rr/ r? r! �osr� � subprocessr� r4 r8 rW � http.clientr� Z OpenSSL.SSLZOpenSSLr� rp rB �_compatr r r r r r r r r �serverr r Ztestingr r r r r Zwsgir �bool�getenvr� � check_outputZ IS_WIN2016�OPENSSL_VERSION� startswithr� ZSSLZSSLeay_versionZSSLEAY_VERSIONr� � version_infor� r� Z VERIFY_NONEr� Z VERIFY_PEERr� ZVERIFY_FAIL_IF_NO_PEER_CERTr� �markZskipifZ missing_ipv6r r= ZfixturerA rD rG rK rM rN r\ r_ Z parametrizerz r� r� �paramr� r� Zflakyr� r* r* r* r+ �<module> s� �� �� �� � &����� 3�� ���� u�� � ��
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка