File: //usr/lib/python3/dist-packages/twisted/conch/test/__pycache__/test_knownhosts.cpython-310.pyc
o
�bY� � @ sB d Z ddlZddlmZmZmZ ddlmZ ddl m
Z
ddl m Z m
Z
mZ ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZ dd
lm Z ed�r{ed�r{ddl m Z ddl m Z m!Z!m"Z"m#Z#m$Z$ ddl%m&Z&m'Z' ddl(m)Z) ndZ*dZ+dZ,dZ-dZ.ee+�Z/ee,�Z0ee-�Z1ee.�Z2de+ d Z3de, d Z4d e+ d Z5d e+ d Z6G d d � d �Z7G d d!� d!e7e �Z8G d"d#� d#e8�Z9G d$d%� d%e7ee �Z:G d&d'� d'e:�Z;G d(d)� d)e e7�Z<G d*d+� d+e �Z=G d,d-� d-e �Z>G d.d/� d/�Z?G d0d1� d1e �Z@G d2d3� d3�ZAG d4d5� d5�ZBeed6��C� d7�G d8d9� d9e ��ZDdS ):z/
Tests for L{twisted.conch.client.knownhosts}.
� N)�Error�
a2b_base64�
b2a_base64)�skipIf)� verifyObject)�HostKeyChanged� InvalidEntry�UserRejectedKey)�IKnownHostEntry)�Deferred)�
networkString)�FilePath)�
requireModule)�ComparisonTestsMixin)�TestCase� cryptography�pyasn1)�default)� ConsoleUI� HashedEntry�KnownHostsFile�
PlainEntry�
UnparsedEntry)� BadKeyError�Key)�keydataz>cryptography and PyASN1 required for twisted.conch.knownhosts.st AAAAB3NzaC1yc2EAAAABIwAAAQEAsV0VMRbGmzhqxxayLRHmvnFvtyNqgbNKV46dU1bVFB+3ytNvue4Riqv/SVkPRNwMb7eWH29SviXaBxUhYyzKkDoNUq3rTNnH1Vnif6d6X4JCrUb5d3W+DmYClyJrZ5HgD/hUpdSkTRqdbQ2TrvSAxRacj+vHHT4F4dm1bJSewm3B2D8HVOoi/CbVh3dsIiCdp8VltdZx4qYVfYe2LwVINCbAa3d3tj9ma7RVfw3OH2Mfb+toLd1N5tBQFb7oqTt2nC6I/6Bd4JwPUld+IEitw/suElq/AIJVQXXujeyiZlea90HE65U2mF1ytr17HTAIT2ySokJWyuBANGACk6iIaw==s� AAAAB3NzaC1yc2EAAAABIwAAAIEAwaeCZd3UCuPXhX39+/p9qO028jTF76DMVd9mPvYVDVXufWckKZauF7+0b7qm+ChT7kan6BzRVo4++gCVNfAlMzLysSt3ylmOR48tFpAfygg9UCX3DjHz0ElOOUKh3iifc9aUShD0OPaK3pR5JJ8jfiBfzSYWt/hDi/iZ4igsSs8=st AAAAB3NzaC1yc2EAAAABIwAAAQEAl/TQakPkePlnwCBRPitIVUTg6Z8VzN1en+DGkyo/evkmLw7o4NWR5qbysk9A9jXW332nxnEuAnbcCam9SHe1su1liVfyIK0+3bdn0YRB0sXIbNEtMs2LtCho/aV3cXPS+Cf1yut3wvIpaRnAzXxuKPCTXQ7/y0IXa8TwkRBH58OJa3RqfQ/NsSp5SAfdsrHyH2aitiVKm2jfbTKzSEqOQG/zq4J9GXTkq61gZugory/Tvl5/yPgSnOR6C9jVOMHf27ZPoRtyj9SY343Hd2QHiIE0KPZJEgCynKeWoKz8v6eTSK8n4rBnaqWdp8MnGZK1WGy05MguXbyCDuTC8AmJXQ==s� AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIFwh3/zBANyPPIE60SMMfdKMYo3OvfvzGLZphzuKrzSt0q4uF+/iYqtYiHhryAwU/fDWlUQ9kck9f+IlpsNtY4=s www.twistedmatrix.com ssh-rsa �
s divmod.com ssh-rsa s- www.twistedmatrix.com,198.49.126.131 ssh-rsa sE |1|gJbSEPBG9ZSBoZpHNtZBD1bHKBA=|bQv+0Xa0dByrwkA1EB0E7Xop/Fo= ssh-rsa c @ �0 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
S ) �EntryTestsMixina<
Tests for implementations of L{IKnownHostEntry}. Subclasses must set the
'entry' attribute to a provider of that interface, the implementation of
that interface under test.
@ivar entry: a provider of L{IKnownHostEntry} with a hostname of
www.twistedmatrix.com and an RSA key of sampleKey.
c C s t t| j� dS )zA
The given entry should provide IKnownHostEntry.
N)r r
�entry��self� r" �D/usr/lib/python3/dist-packages/twisted/conch/test/test_knownhosts.py�test_providesInterfaceb � z&EntryTestsMixin.test_providesInterfacec C s, | j }| �|jt�t�� | �|jd� dS )a�
Constructing a plain text entry from an unhashed known_hosts entry will
result in an L{IKnownHostEntry} provider with 'keyString', 'hostname',
and 'keyType' attributes. While outside the interface in question,
these attributes are held in common by L{PlainEntry} and L{HashedEntry}
implementations; other implementations should override this method in
subclasses.
� ssh-rsaN)r � assertEqual� publicKeyr �
fromString� sampleKey�keyType)r! r r" r" r# �test_fromStringh s z EntryTestsMixin.test_fromStringc C s@ t �t�}t �t�}| �d| j�|�� | �d| j�|�� dS )zj
L{IKnownHostEntry.matchesKey} checks to see if an entry matches a given
SSH key.
TFN)r r) r* �otherSampleKeyr' r �
matchesKey)r! �twistedmatrixDotCom� divmodDotComr" r" r# �test_matchesKeyu s
z EntryTestsMixin.test_matchesKeyc C s( | � | j�d�� | �| j�d�� dS )zl
L{IKnownHostEntry.matchesHost} checks to see if an entry matches a
given hostname.
� www.twistedmatrix.coms www.divmod.comN)�
assertTruer � matchesHost� assertFalser r" r" r# �test_matchesHost s z EntryTestsMixin.test_matchesHostN)�__name__�
__module__� __qualname__�__doc__r$ r, r1 r6 r" r" r" r# r X s
r c @ s0 e Zd ZdZeZeZdd� Zdd� Z dd� Z
dS ) �PlainEntryTestsz'
Test cases for L{PlainEntry}.
c C � t �| j�| _dS )zU
Set 'entry' to a sample plain-text entry with sampleKey as its key.
N)r r) �
plaintextLiner r r" r" r# �setUp� s zPlainEntryTests.setUpc C s, t �| j�| _| �| j�d�� | �� dS )zU
A "hostname,ip" formatted line will match both the host and the IP.
s 198.49.126.131N)r r) �
hostIPLiner r3 r4 r6 r r" r" r# �test_matchesHostIP� s z"PlainEntryTests.test_matchesHostIPc C sB | � | j�� | j�d�� t�| j�}| � |�� | j�d�� dS )z|
L{PlainEntry.toString} generates the serialized OpenSSL format string
for the entry, sans newline.
r N)r' r �toStringr= �rstripr r) r? )r! �multiHostEntryr" r" r# �
test_toString� s z PlainEntryTests.test_toStringN) r7 r8 r9 r: �samplePlaintextLiner= �sampleHostIPLiner? r> r@ rD r" r" r" r# r; � s r; c @ s0 e Zd ZdZedd� d Zedd� d ZdS )�PlainTextWithCommentTests�N
Test cases for L{PlainEntry} when parsed from a line with a comment.
N���� plain text comment.
s text following host/IP line
)r7 r8 r9 r: rE r= rF r? r" r" r" r# rG � s rG c @ s, e Zd ZdZeZdd� Zdd� Zdd� ZdS ) �HashedEntryTestsaF
Tests for L{HashedEntry}.
This suite doesn't include any tests for host/IP pairs because hashed
entries store IP addresses the same way as hostnames and does not support
comma-separated lists. (If you hash the IP and host together you can't
tell if you've got the key already for one or the other.)
c C r< )zo
Set 'entry' to a sample hashed entry for twistedmatrix.com with
sampleKey as its key.
N)r r) �
hashedLiner r r" r" r# r> � s zHashedEntryTests.setUpc C s | � | j�� | j�d�� dS )z�
L{HashedEntry.toString} generates the serialized OpenSSL format string
for the entry, sans the newline.
r N)r' r rA rL rB r r" r" r# rD � s z HashedEntryTests.test_toStringc
C s� d}d}t �t�}t|�� �}d}t|||||�}t|||||�}| �||t|ddd� ||||�� | �||t||ddd� |||�� | �||t|||ddd� ||�� | �||t|||t �t�|�� | �||t|||||ddd� �� dS )z�
Two L{HashedEntry} instances compare equal if and only if they represent
the same host and key in exactly the same way: the host salt, host hash,
public key type, public key, and comment fields must all be equal.
s gJbSEPBG9ZSBoZpHNtZBD1bHKBAs bQv+0Xa0dByrwkA1EB0E7Xop/Fos hello, worldNrI )r r) r* r �typer �"assertNormalEqualityImplementationr- )r! �hostSalt�hostHashr( r+ �commentr � duplicater" r" r# �
test_equality� sD
����� �z HashedEntryTests.test_equalityN) r7 r8 r9 r: �sampleHashedLinerL r> rD rS r" r" r" r# rK � s rK c @ s e Zd ZdZedd� d ZdS )�HashedEntryWithCommentTestsrH NrI rJ )r7 r8 r9 r: rT rL r" r" r" r# rU s rU c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd S )
�UnparsedEntryTestsz$
Tests for L{UnparsedEntry}
c C s t d�| _dS )zR
Set up the 'entry' to be an unparsed entry for some random text.
� This is a bogus entry.
N)r r r r" r" r# r>
s zUnparsedEntryTests.setUpc C s | � d| jj� dS )ze
Creating an L{UnparsedEntry} should simply record the string it was
passed.
rW N)r' r �_stringr r" r" r# r, � z"UnparsedEntryTests.test_fromStringc C s | � | j�d�� dS )z:
An unparsed entry can't match any hosts.
r2 N)r5 r r4 r r" r" r# r6 s z#UnparsedEntryTests.test_matchesHostc C s | � | j�t�t��� dS )z9
An unparsed entry can't match any keys.
N)r5 r r. r r) r* r r" r" r# r1 s z"UnparsedEntryTests.test_matchesKeyc C s | � d| j�� � dS )zd
L{UnparsedEntry.toString} returns its input string, sans trailing
newline.
s This is a bogus entry. N)r' r rA r r" r" r# rD & s z UnparsedEntryTests.test_toStringN) r7 r8 r9 r: r> r, r6 r1 rD r" r" r" r# rV s rV c @ �X e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dS )�ParseErrorTestsa�
L{HashedEntry.fromString} and L{PlainEntry.fromString} can raise a variety
of errors depending on misformattings of certain strings. These tests make
sure those errors are caught. Since many of the ways that this can go
wrong are in the lower-level APIs being invoked by the parsing logic,
several of these are integration tests with the C{base64} and
L{twisted.conch.ssh.keys} modules.
c C � | � t|jd� dS )zm
If there are fewer than three elements, C{fromString} should raise
L{InvalidEntry}.
s invalidN)� assertRaisesr r) �r! �clsr" r" r# �invalidEntryTest8 rY z ParseErrorTests.invalidEntryTestc C r\ )zX
If the key is not base64, C{fromString} should raise L{BinasciiError}.
s x x xN)r] �
BinasciiErrorr) r^ r" r" r# �
notBase64Test? s z ParseErrorTests.notBase64Testc
C s( | � t|jd�|dtd��� g�� dS )z�
If the key portion of the entry is valid base64, but is not actually an
SSH key, C{fromString} should raise L{BadKeyError}.
� r& s Hey, this isn't an SSH key!N)r] r r) �joinr �strip)r! r_ �prefixr" r" r# �
badKeyTestE s ��zParseErrorTests.badKeyTestc C � | � t� dS )z�
If there are fewer than three whitespace-separated elements in an
entry, L{PlainEntry.fromString} should raise L{InvalidEntry}.
N)r` r r r" r" r# �test_invalidPlainEntryR � z&ParseErrorTests.test_invalidPlainEntryc C s< | � t� t�� \}}}| �ttjd�|d ||g�� dS )z�
If there are fewer than three whitespace-separated elements in an
entry, or the hostname salt/hash portion has more than two elements,
L{HashedEntry.fromString} should raise L{InvalidEntry}.
rc s ||N)r` r rT �splitr] r r) rd �r! �a�b�cr" r" r# �test_invalidHashedEntryY s
�z'ParseErrorTests.test_invalidHashedEntryc C rh )z�
If the key portion of a plain entry is not decodable as base64,
C{fromString} should raise L{BinasciiError}.
N)rb r r r" r" r# �test_plainNotBase64e rj z#ParseErrorTests.test_plainNotBase64c C s� | � t� t�� \}}}| �ttjd�dtd�� � ||g�� | �ttjd�tj
td�� � d ||g�� | �ttjd�d||g�� dS )z�
If the key, host salt, or host hash portion of a hashed entry is not
encoded, it will raise L{BinasciiError}.
rc s |1|x|� stuffs |xs |1|x|xN) rb r rT rk r] ra r) rd r re �MAGICrl r" r" r# �test_hashedNotBase64l s
� ��z$ParseErrorTests.test_hashedNotBase64c C s t �� \}}}| �t|� dS )z�
If the key portion of the entry is valid base64, but is not actually an
SSH key, C{HashedEntry.fromString} should raise L{BadKeyError}.
N)rT rk rg r rl r" r" r# �test_hashedBadKey� s z!ParseErrorTests.test_hashedBadKeyc C s | � td� dS )z�
If the key portion of the entry is valid base64, but is not actually an
SSH key, C{PlainEntry.fromString} should raise L{BadKeyError}.
s hostnameN)rg r r r" r" r# �test_plainBadKey� s z ParseErrorTests.test_plainBadKeyN)
r7 r8 r9 r: r` rb rg ri rp rq rt ru rv r" r" r" r# r[ . s
r[ c @ s< e Zd ZdZdd� Zee d fdd�Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Z d1d2� Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z!d;d<� Z"d=d>� Z#d?d@� Z$dAdB� Z%dCdD� Z&dEdF� Z'dGdH� Z(dIdJ� Z)dKS )L�KnownHostsDatabaseTestsz&
Tests for L{KnownHostsFile}.
c C s t | �� �}|�|� |S )zC
Return a FilePath with the given initial content.
)r
�mktemp�
setContent)r! �content�fpr" r" r# �pathWithContent� s
z'KnownHostsDatabaseTests.pathWithContentsN
# That was a blank line.
This is just unparseable.
|1|This also unparseable.
c C s t �| �|��S )zq
Return a sample hosts file, with keys for www.twistedmatrix.com and
divmod.com present.
)r �fromPathr| )r! rz r" r" r# �loadSampleHostsFile� s z+KnownHostsDatabaseTests.loadSampleHostsFilec C sD t | �� �}t | �� �}t|�}| �tt|d|� | �||j� dS )z�
L{KnownHostsFile.savePath} is read-only; if an assignment is made to
it, L{AttributeError} is raised and the value is unchanged.
�savePathN)r
rx r r] �AttributeError�setattrr' r )r! �path�new� hostsFiler" r" r# �test_readOnlySavePath� s
z-KnownHostsDatabaseTests.test_readOnlySavePathc C s& t | �t��}| �g t|�� �� dS )zz
The default initializer for L{KnownHostsFile} disregards any existing
contents in the save path.
N)r r| rT r' �list� iterentries�r! r� r" r" r# �&test_defaultInitializerIgnoresExisting� s z>KnownHostsDatabaseTests.test_defaultInitializerIgnoresExistingc C s^ | � t�}t|�}|�dt�t��}|�� | �|gt |�
� �� | �|� � d |� � � dS )z�
After using the default initializer for L{KnownHostsFile}, the first use
of L{KnownHostsFile.save} overwrites any existing contents in the save
path.
� www.example.comr N)
r| rT r �
addHostKeyr r) r- �saver' r� r� rA �
getContent)r! r� r� r r" r" r# �'test_defaultInitializerClobbersExisting� s
z?KnownHostsDatabaseTests.test_defaultInitializerClobbersExistingc C s^ t | �t��}|�dt�t��}|�� |�dt�t��}|�� | � ||gt
|� � �� dS )z�
After L{KnownHostsFile.save} is used once with an instance initialized
by the default initializer, contents of the save path are respected and
preserved.
r� s another.example.comN) r r| rT r� r r) r- r� �thirdSampleKeyr' r� r� )r! r� �preSave�postSaver" r" r# �test_saveResetsClobberState� s
�
� z3KnownHostsDatabaseTests.test_saveResetsClobberStatec C s$ | � � }| �dtt|�� ��� dS )z�
Loading a L{KnownHostsFile} from a path with six entries in it will
result in a L{KnownHostsFile} object with six L{IKnownHostEntry}
providers in it.
� N)r~ r' �lenr� r� r� r" r" r# �test_loadFromPath� s z)KnownHostsDatabaseTests.test_loadFromPathc C s> t t| �� ��}|�dt�t�� | �dtt |�
� ��� dS )z�
If the save path for a L{KnownHostsFile} does not exist,
L{KnownHostsFile.iterentries} still returns added but unsaved entries.
r� � N) r r
rx r� r r) r* r' r� r� r� r� r" r" r# �test_iterentriesUnsaved� s z/KnownHostsDatabaseTests.test_iterentriesUnsavedc C �N | � t�}t|�� �}| �|d t� | �|d �d�� | �dt |�� dS )z�
Loading a L{KnownHostsFile} from a path containing a single valid
L{HashedEntry} entry will result in a L{KnownHostsFile} object
with one L{IKnownHostEntry} provider.
r r2 r� N)
r~ rT r� r� �assertIsInstancer r3 r4 r' r� �r! r� �entriesr" r" r# �test_verifyHashedEntry� �
z.KnownHostsDatabaseTests.test_verifyHashedEntryc C r� )z�
Loading a L{KnownHostsFile} from a path containing a single valid
L{PlainEntry} entry will result in a L{KnownHostsFile} object
with one L{IKnownHostEntry} provider.
r �
divmod.comr� N)
r~ �otherSamplePlaintextLiner� r� r� r r3 r4 r' r� r� r" r" r# �test_verifyPlainEntry r� z-KnownHostsDatabaseTests.test_verifyPlainEntryc C �N | � d�}t|�� �}| �|d t� | �|d �� d� | �dt|�� dS )z�
Loading a L{KnownHostsFile} from a path that only contains '
' will
result in a L{KnownHostsFile} object containing a L{UnparsedEntry}
object.
r r � r� N�r~ r� r� r� r r' rA r� r� r" r" r# �test_verifyUnparsedEntry r� z0KnownHostsDatabaseTests.test_verifyUnparsedEntryc C s> | � d�}t|�� �}| �|d t� | �|d �� d� dS )z�
Loading a L{KnownHostsFile} from a path that contains a comment will
result in a L{KnownHostsFile} object containing a L{UnparsedEntry}
object.
s # That was a blank line.
r s # That was a blank line.N)r~ r� r� r� r r' rA r� r" r" r# �test_verifyUnparsedComment s
z2KnownHostsDatabaseTests.test_verifyUnparsedCommentc C r� )z�
Loading a L{KnownHostsFile} from a path that contains an unparseable
line will be represented as an L{UnparsedEntry} instance.
s This is just unparseable.
r s This is just unparseable.r� Nr� r� r" r" r# �test_verifyUnparsableLine& s
z1KnownHostsDatabaseTests.test_verifyUnparsableLinec C r� )z�
Loading a L{KnownHostsFile} from a path containing an unparseable line
that starts with an encryption marker will be represented as an
L{UnparsedEntry} instance.
s |1|This is unparseable.
r s |1|This is unparseable.r� Nr� r� r" r" r# �%test_verifyUnparsableEncryptionMarker1 r� z=KnownHostsDatabaseTests.test_verifyUnparsableEncryptionMarkerc C s^ | � � }t�t|��}t|�� �}| �g |� | �t|��� � |� � | �
t|��� � dS )z�
Loading a L{KnownHostsFile} from a path that does not exist should
result in an empty L{KnownHostsFile} that will save back to that path.
N) rx r r} r
r� r� r' r5 �existsr� r3 )r! �pn�knownHostsFiler� r" r" r# �test_loadNonExistent= s z,KnownHostsDatabaseTests.test_loadNonExistentc C sJ t | �� �}|�d��d�}t�|�}|�� |�d� | �|�� � dS )z�
Loading a L{KnownHostsFile} from a path whose parent directory does not
exist should result in an empty L{KnownHostsFile} that will save back
to that path, creating its parent directory(ies) in the process.
�foos known_hostsFN) r
rx �childr r} r� �restatr3 r� )r! �thePath�knownHostsPathr� r" r" r# �test_loadNonExistentParentJ s
z2KnownHostsDatabaseTests.test_loadNonExistentParentc C s� | � tt �}t�|�}|�dt�t��}tt t j
t |j ��
� d t |j��
� d t d }| �d|�d�� |�� | �||�� � dS )zq
L{KnownHostsFile.save} will write out a new file with any entries
that have been added.
� some.example.com� |s ssh-rsa r � N)r| rT r� r r} r� r r) r� r rs r � _hostSaltre � _hostHash�thirdSampleEncodedKeyr' �countr� r� )r! r� r� �newEntry�expectedContentr" r" r# �test_savingAddsEntryW s4
��� �� �����z,KnownHostsDatabaseTests.test_savingAddsEntryc C sZ t | �� �}t|�}|�dt�t��}|�� |�� t�|�}| � |gt
|� � �� dS )z�
L{KnownHostsFile.save} only writes new entries to the save path, not
entries which were added and already written by a previous call to
C{save}.
r� N) r
rx r r� r r) r* r� r} r' r� r� )r! r� �
knownHostsr r" r" r# � test_savingAvoidsDuplications s
z4KnownHostsDatabaseTests.test_savingAvoidsDuplicationc
C s� | � t�}t�|�}|�d��
}|�t� W d � n1 s w Y t�t �}|�
d|� |� � t�|�}| � g d�|�
dt�t��|�
dt�t��|�
d|�g� dS )z�
L{KnownHostsFile.save} will not overwrite existing entries in its save
path, even if they were only added after the L{KnownHostsFile} instance
was initialized.
rm N� brandnew.example.com)TTTr2 r� )r| rT r r} �open�writer� r r) r� r� r� r' �
hasHostKeyr* r- )r! r� r� � hostsFileObj�keyr" r" r# � test_savingsPreservesExisting� s$
�
�
��z5KnownHostsDatabaseTests.test_savingsPreservesExistingc C s$ | � � }| �|�dt�t��� dS )z�
L{KnownHostsFile.hasHostKey} returns C{True} when a key for the given
hostname is present and matches the expected key.
r2 N)r~ r3 r� r r) r* r� r" r" r# �test_hasPresentKey� s �z*KnownHostsDatabaseTests.test_hasPresentKeyc C sT | � � }| �|�dt�t��� | �|�dt�t��� | �|�dt�t��� dS )zy
L{KnownHostsFile.hasHostKey} returns C{False} when a key for the given
hostname is not present.
s non-existent.example.comr2 N)r~ r5 r� r r) r* r3 �ecdsaSampleKeyr� r" r" r# �test_notPresentKey� s ��
��z*KnownHostsDatabaseTests.test_notPresentKeyc C s| t �t�}tdg|�� |d�}| �� }|j�d��}|�|� � d � W d � n1 s-w Y | �
d|� d|�� dS )z�
L{KnownHostsFile.hasHostKey} returns C{True} when a key for the given
hostname is present in the file, even if it is only added to the file
after the L{KnownHostsFile} instance is initialized.
r� r� rm r NT) r r) r* r �sshTyper~ r r� r� rA r' r� )r! r� r r� r� r" r" r# �test_hasLaterAddedKey� s
�z-KnownHostsDatabaseTests.test_hasLaterAddedKeyc C s` | � � }t|�� �}| �t|jdt�t��}| � |j
|d � | � |j d� | � |j |j
� dS )a
L{KnownHostsFile.hasHostKey} raises L{HostKeyChanged} if the host key is
present in the underlying file, but different from the expected one.
The resulting exception should have an C{offendingEntry} indicating the
given entry.
r2 r r� N)r~ r� r� r] r r� r r) r- r' �offendingEntry�linenor� r )r! r� r� � exceptionr" r" r# � test_savedEntryHasKeyMismatch� s �z5KnownHostsDatabaseTests.test_savedEntryHasKeyMismatchc C sT | � � }|�dt�t�� | �t|jdt�t��}| �|j d� | �|j
|j � dS )ai
Even after a new entry has been added in memory but not yet saved, the
L{HostKeyChanged} exception raised by L{KnownHostsFile.hasHostKey} has a
C{lineno} attribute which indicates the 1-based line number of the
offending entry in the underlying file when the given host key does not
match the expected host key.
r� r2 r� N) r~ r� r r) r- r] r r� r' r� r� r )r! r� r� r" r" r# �%test_savedEntryAfterAddHasKeyMismatch� s �z=KnownHostsDatabaseTests.test_savedEntryAfterAddHasKeyMismatchc C sd t t| �� ��}|�dt�t��}| �t|j dt�t
��}| � |j |� | �
|j� | �
|j� dS )az
L{KnownHostsFile.hasHostKey} raises L{HostKeyChanged} if the host key is
present in memory (but not yet saved), but different from the expected
one. The resulting exception has a C{offendingEntry} indicating the
given entry, but no filename or line number information (reflecting the
fact that the entry exists only in memory).
r� N)r r
rx r� r r) r- r] r r� r� r' r� � assertIsNoner� r� )r! r� r r� r" r" r# � test_unsavedEntryHasKeyMismatch� s � z7KnownHostsDatabaseTests.test_unsavedEntryHasKeyMismatchc C s� | � � }t�t�}| �d|�d|�� |�d|�}| �dt|j�� | �d|� d�� | �|j
d� | �||j � | �d|�d|�� dS )zr
L{KnownHostsFile.addHostKey} adds a new L{HashedEntry} to the host
file, and returns it.
F� somewhere.example.com� Tr& N) r~ r r) r� r' r� r� r� r� r4 r+ r( )r! r� �aKeyr� r" r" r# �test_addHostKey s
z'KnownHostsDatabaseTests.test_addHostKeyc C s6 | � � }t�t�}| �|�d|�j|�d|�j� dS )z�
L{KnownHostsFile.addHostKey} generates a random salt for each new key,
so subsequent salts will be different.
r� s somewhere-else.example.comN)r~ r r) r� �assertNotEqualr� r� )r! r� r� r" r" r# �test_randomSalts s
�z(KnownHostsDatabaseTests.test_randomSaltsc C sX | � � }|�dt�t�� t� }|�|ddt�t��}g }|�|j� | � |dg� dS )zb
Verifying a valid key should return a L{Deferred} which fires with
True.
� 1.2.3.4r2 TN)
r~ r� r r) r* �FakeUI�
verifyHostKey� addCallback�appendr' )r! r� �ui�d�lr" r" r# �test_verifyValidKey% s � z+KnownHostsDatabaseTests.test_verifyValidKeyc C sF | � � }t�t�}t� }|�dt�t�� |�|dd|�}| �|t �S )z|
Verifying an invalid key should return a L{Deferred} which fires with a
L{HostKeyChanged} failure.
r� r2 )
r~ r r) r� r� r� r* r� �
assertFailurer �r! r� �wrongKeyr� r� r" r" r# �test_verifyInvalidKey4 s
z-KnownHostsDatabaseTests.test_verifyInvalidKeyc C s\ | � � }t�t�}t� }g }|�|dd|�}|�|j� | �g |� | �|j d� |||fS )a
Set up a test to verify a key that isn't present. Return a 3-tuple of
the UI, a list set up to collect the result of the verifyHostKey call,
and the sample L{KnownHostsFile} being used.
This utility method avoids returning a L{Deferred}, and records results
in the returned list instead, because the events which get generated
here are pre-recorded in the 'ui' object. If the L{Deferred} in
question does not fire, the it will fail quickly with an empty list.
� sample-host.example.com� 4.3.2.1s� The authenticity of host 'sample-host.example.com (4.3.2.1)' can't be established.
RSA key fingerprint is SHA256:mS7mDBGhewdzJkaKRkx+wMjUdZb/GzvgcdoYjX5Js9I=.
Are you sure you want to continue connecting (yes/no)? )
r~ r r) r� r� r� �addBothr� r' �
promptText)r! r� � absentKeyr� r� r� r" r" r# �verifyNonPresentKey@ s
� �
z+KnownHostsDatabaseTests.verifyNonPresentKeyc C sl | � � \}}}|j�d� | �dg|� t�|j�}| �d|�dt� t
��� | �d|�dt� t
��� dS )z�
Verifying a key where neither the hostname nor the IP are present
should result in the UI being prompted with a message explaining as
much. If the UI says yes, the Deferred should fire with True.
Tr� r� N) r� �promptDeferred�callbackr' r r} r r� r r) r� )r! r� r� r� �reloadedr" r" r# � test_verifyNonPresentKey_Yes^ s �
��z4KnownHostsDatabaseTests.test_verifyNonPresentKey_Yesc C s, | � � \}}}|j�d� |d �t� dS )z�
Verifying a key where neither the hostname nor the IP are present
should result in the UI being prompted with a message explaining as
much. If the UI says no, the Deferred should fail with
UserRejectedKey.
Fr N)r� r� r� �trapr )r! r� r� r� r" r" r# �test_verifyNonPresentKey_Nor s z3KnownHostsDatabaseTests.test_verifyNonPresentKey_Noc C sv t jtjd tjd tjd tjd d�}| �� }t� }g }|�|dd|�}|�|j� | � g |� | � |j
d� d S )
z�
Set up a test to verify an ECDSA key that isn't present.
Return a 3-tuple of the UI, a list set up to collect the result
of the verifyHostKey call, and the sample L{KnownHostsFile} being used.
�x�y� privateValue�curve)r� r� r� r� r� r� s� The authenticity of host 'sample-host.example.com (4.3.2.1)' can't be established.
ECDSA key fingerprint is SHA256:fJnSpgCcYoYYsaBbnWj1YBghGh/QTDgfe4w4U5M5tEo=.
Are you sure you want to continue connecting (yes/no)? N) r �_fromECComponentsr �ECDatanistp256r~ r� r� r� r� r' r� )r! �ecObjr� r� r� r� r" r" r# �test_verifyNonPresentECKey} s � �z2KnownHostsDatabaseTests.test_verifyNonPresentECKeyc C s4 | � � }t�t�}t� }|�|dd|�}| �|t�S )z�
Verifying a key where the host is present (and correct), but the IP is
present and different, should result the deferred firing in a
HostKeyChanged failure.
r2 r� )r~ r r) r� r� r� r� r r� r" r" r# �test_verifyHostIPMismatch� s
z1KnownHostsDatabaseTests.test_verifyHostIPMismatchc C sX t � }| �� }t�t�}|�|dd|� | �dt�|j ��
d|�� | �dg|j � dS )z�
Verifying a key where the hostname is present but the IP is not should
result in the key being added for the IP and the user being warned
about the change.
r2 s 5.4.3.2Tz`Warning: Permanently added the RSA host key for IP address '5.4.3.2' to the list of known hosts.N) r� r~ r r) r* r� r' r r} r r� � userWarnings)r! r� r� � expectedKeyr" r" r# �test_verifyKeyForHostAndIP� s
����z2KnownHostsDatabaseTests.test_verifyKeyForHostAndIPc C sh | � � }|�dt�t�� |�dt�t�� |�� i }|jj|d< t �
d|�}ddg}| � ||� dS )zn
For a given host, get the host key algorithms for that
host in the known_hosts file.
r2 � known-hostsr& s ecdsa-sha2-nistp256N) r~ r� r r) r- r� r� r r� r �getHostKeyAlgorithmsr' )r! r� �options�
algorithms�expectedAlgorithmsr" r" r# �test_getHostKeyAlgorithms� s z1KnownHostsDatabaseTests.test_getHostKeyAlgorithmsN)*r7 r8 r9 r: r| rT r� r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r" r" r" r# rw � sV ��
�
!
rw c @ r ) �FakeFilez[
A fake file-like object that acts enough like a file for
L{ConsoleUI.prompt}.
c C s g | _ g | _d| _d S )NF)�inlines� outchunks�closedr r" r" r# �__init__� �
zFakeFile.__init__c C s | j �d�S )z8
Return a line from the 'inlines' list.
r )r �popr r" r" r# �readline� s zFakeFile.readlinec C s | j rtd��| j�|� dS )z@
Append the given item to the 'outchunks' list.
zthe file was closedN)r �OSErrorr r� )r! �chunkr" r" r# r� � s zFakeFile.writec C s
d| _ dS )zd
Set the 'closed' flag to True, explicitly marking that it has been
closed.
TN)r r r" r" r# �close� s
zFakeFile.closeN)r7 r8 r9 r: r r r� r r" r" r" r# r � s r c @ rZ )�ConsoleUITestsz&
Test cases for L{ConsoleUI}.
c C s t � | _t| j�| _dS )zA
Create a L{ConsoleUI} pointed at a L{FakeFile}.
N)r �fakeFiler �openFiler� r r" r" r# r> � s zConsoleUITests.setUpc C s | j S )z/
Return the current fake file.
)r r r" r" r# r � s zConsoleUITests.openFilec C s t � | _|| j_dS )z�
Create a new fake file (the next file that self.ui will open) with the
given list of lines to be returned from readline().
N)r r r )r! �linesr" r" r# �newFile s zConsoleUITests.newFilec C �` dD ]+}| � |g� g }| j�d��|j� | �dg| jj� | �dg|� | �| jj � qdS )z�
L{ConsoleUI.prompt} writes a message to the console, then reads a line.
If that line is 'yes', then it returns a L{Deferred} that fires with
True.
)� yess Yess yes
z
Hello, world!TN�
r r� �promptr� r� r' r r r3 r )r! �okYesr� r" r" r# �test_promptYes � �z ConsoleUITests.test_promptYesc C r )z�
L{ConsoleUI.prompt} writes a message to the console, then reads a line.
If that line is 'no', then it returns a L{Deferred} that fires with
False.
)� nos Nos no
zGoodbye, world!FNr )r! �okNor� r" r" r# �
test_promptNo r z ConsoleUITests.test_promptNoc C s� | � g d�� g }| j�d��|j� | �dg|� | �| jjdgdgd � | �| jj � | � g d�� g }| j�d��|j� | �dg|� | �| jjdgdgd � | �| jj � d S )
a,
L{ConsoleUI.prompt} writes a message to the console, then reads a line.
If that line is neither 'yes' nor 'no', then it says "Please enter
'yes' or 'no'" until it gets a 'yes' or a 'no', at which point it
returns a Deferred that answers either True or False.
)s whats uhs okayr s Please say something useful.Ts Please type 'yes' or 'no': r� )s blahrr s fehr s Please say something negative.FNr �r! r� r" r" r# �test_promptRepeatedly$ s$ ��z$ConsoleUITests.test_promptRepeatedlyc C s& dd� }t |�}|�d�}| �|t�S )z�
If the C{opener} passed to L{ConsoleUI} raises an exception, that
exception will fail the L{Deferred} returned from L{ConsoleUI.prompt}.
c S s t � ��N)r
r" r" r" r# �raiseItD s z5ConsoleUITests.test_promptOpenFailed.<locals>.raiseItzThis is a test.)r r r� �IOError)r! r r� r� r" r" r# �test_promptOpenFailed> s
z$ConsoleUITests.test_promptOpenFailedc C s0 | j �d� | �dg| jj� | �| jj� dS )zR
L{ConsoleUI.warn} should output a message to the console object.
z
Test message.N)r� �warnr' r r r3 r r r" r" r# � test_warnK s zConsoleUITests.test_warnc C s4 dd� }t |�}|�d� | �t| �t��d� dS )zY
L{ConsoleUI.warn} should log a traceback if the output can't be opened.
c S s dd d S )Nr� r r" r" r" r" r# r X s z3ConsoleUITests.test_warnOpenFailed.<locals>.raiseItz This message never makes it.r� N)r r" r' r� �flushLoggedErrors�ZeroDivisionError)r! r r� r" r" r# �test_warnOpenFailedS s
z"ConsoleUITests.test_warnOpenFailedN)
r7 r8 r9 r: r> r r r r r r! r# r& r" r" r" r# r
� s
r
c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r� a
A fake UI object, adhering to the interface expected by
L{KnownHostsFile.verifyHostKey}
@ivar userWarnings: inputs provided to 'warn'.
@ivar promptDeferred: last result returned from 'prompt'.
@ivar promptText: the last input provided to 'prompt'.
c C s g | _ d | _d | _d S r )r� r� r� r r" r" r# r l r zFakeUI.__init__c C s || _ t� | _| jS )zV
Issue the user an interactive prompt, which they can accept or deny.
)r� r r� �r! �textr" r" r# r q s z
FakeUI.promptc C s | j �|� dS )z>
Issue a non-interactive warning to the user.
N)r� r� r' r" r" r# r" y r% z FakeUI.warnN)r7 r8 r9 r: r r r" r" r" r" r# r� ` s
r� c @ s e Zd ZdZdS )�
FakeObjectzw
A fake object that can have some attributes. Used to fake
L{SSHClientTransport} and L{SSHClientFactory}.
N)r7 r8 r9 r: r" r" r" r# r) � s r) �/dev/ttyzPlatform lacks /dev/ttyc @ sh e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dd� ZdS )�DefaultAPITestsz�
The API in L{twisted.conch.client.default.verifyHostKey} is the integration
point between the code in the rest of conch and L{KnownHostsFile}.
c K s. | � |d� | � |d� | � |d d� | jS )z
The patched version of 'open'; this returns a L{FakeFile} that the
instantiated L{ConsoleUI} can use.
r* zr+b� bufferingr )r' r )r! �fname�mode�kwargsr" r" r# � patchedOpen� s zDefaultAPITests.patchedOpenc C s� t � | _| �td| j� | �� | _i | _tt | j��}dD ]}|�
|t � t
��}|| j|< q |�� t� | _t� | j_d| jd� | _| jj_dS )z0
Patch 'open' in verifyHostKey.
�_open)� exists.example.comr� r2 )�hostr� N)r r �patchr r0 rx � hostsOption�
hashedEntriesr r
r� r r) r* r� r) �
fakeTransport�factoryr� )r! r� r3 r r" r" r# r> � s
�zDefaultAPITests.setUpc C s0 g }t �| jdtd��|j� | �dg|� dS )z�
L{default.verifyHostKey} should return a L{Deferred} which fires with
C{1} when passed a host, IP, and key which already match the
known_hosts file it is supposed to check.
r� �
I don't care.r� N)r r� r7 r* r� r� r' r r" r" r# �test_verifyOKKey� s
�
z DefaultAPITests.test_verifyOKKeyc s0 t j�d�� � fdd�}| �|� |t jd< dS )aC
Replace the HOME environment variable until the end of the current
test, with the given new home-directory, so that L{os.path.expanduser}
will yield controllable, predictable results.
@param tempHome: the pathname to replace the HOME variable with.
@type tempHome: L{str}
�HOMEc s" � d u r
t jd= d S � t jd< d S )Nr; )�os�environr" ��oldHomer" r# � cleanupHome� s z0DefaultAPITests.replaceHome.<locals>.cleanupHomeN)r< r= �get�
addCleanup)r! �tempHomer@ r" r> r# � replaceHome� s
zDefaultAPITests.replaceHomec C s� g }| � � }| j}t|��d��d�}|�� �� t|��|� | �|� d| jd< t �
| j dt d��
|j� | �dg|� dS )z�
L{default.verifyHostKey} should find your known_hosts file in
~/.ssh/known_hosts if you don't specify one explicitly on the command
line.
z.ssh� known_hostsNr� r� r9 r� )rx r5 r
r� �parent�makedirs�moveTorD r� r r� r7 r* r� r� r' )r! r� �tmpdir�oldHostsOption�hostsNonOptionr" r" r# �test_noKnownHostsOption� s
�
z'DefaultAPITests.test_noKnownHostsOptionc C sj g }t �| jdtd��|j� | �dg| jj� | �dg|� t �
t | j ��}| �
|�dt�t��� dS )a
L{default.verifyHostKey} should return a L{Deferred} which fires with
C{1} when passed a host which matches with an IP is not present in its
known_hosts file, and should also warn the user that it has added the
IP address.
s 8.7.6.5s Fingerprint not required.z`Warning: Permanently added the RSA host key for IP address '8.7.6.5' to the list of known hosts.r� N)r r� r7 r* r� r� r' r r r r} r
r5 r3 r� r r) )r! r� r� r" r" r# �test_verifyHostButNotIP� s
�
���z'DefaultAPITests.test_verifyHostButNotIPc C sL d| j jjd< | jj�d� t�| j dtd�}| � dg| jj
� | � |t �S )z�
L{default.verifyHostKey} should return a L{Default} which fires with
C{0} when passed an unknown host that the user refuses to acknowledge.
s fake.example.comr3 r s 9.8.7.6s No fingerprint!s� The authenticity of host 'fake.example.com (9.8.7.6)' can't be established.
RSA key fingerprint is SHA256:vD0YydsNIUYJa7yLZl3tIL8h0vZvQ8G+HPG7JLmQV0s=.
Are you sure you want to continue connecting (yes/no)? )
r7 r8 r� r r r� r r� r- r' r r� r �r! r� r" r" r# �test_verifyQuestion� s
���
z#DefaultAPITests.test_verifyQuestionc C s t �| jdtd�}| �|t�S )z�
L{default.verifyHostKey} should return a L{Deferred} which fails with
L{HostKeyChanged} if the host key is incorrect.
r� zAgain, not required.)r r� r7 r- r� r rN r" r" r# �test_verifyBadKey s
� z!DefaultAPITests.test_verifyBadKeyc C �J | j d �� �� d }t�|t�t��� dt | j
�j i�}| � d|� dS )zy
L{default.isInKnownHosts} should return C{1} when a host with a key
is in the known hosts file.
r� r r� r� N)
r6 rA rk r �isInKnownHostsr r) r* �blobr
r5 r� r' �r! r3 �rr" r" r# �test_inKnownHosts � �z!DefaultAPITests.test_inKnownHostsc C s* t �dddt| j�ji�}| �d|� dS )z}
L{default.isInKnownHosts} should return C{0} when a host with a key
is not in the known hosts file.
z not.theres
irrelevantr� r N)r rR r
r5 r� r' )r! rU r" r" r# �test_notInKnownHosts% s �z$DefaultAPITests.test_notInKnownHostsc C rQ )z�
L{default.isInKnownHosts} should return C{2} when a host with a key
other than the given one is in the known hosts file.
r� r r� � N)
r6 rA rk r rR r r) r- rS r
r5 r� r' rT r" r" r# �test_inKnownHostsKeyChanged/ rW z+DefaultAPITests.test_inKnownHostsKeyChangedN)r7 r8 r9 r: r0 r> r: rD rL rM rO rP rV rX rZ r" r" r" r# r+ � s
r+ )Er: r< �binasciir ra r r �unittestr �zope.interface.verifyr �twisted.conch.errorr r r �twisted.conch.interfacesr
�twisted.internet.deferr �twisted.python.compatr �twisted.python.filepathr
�twisted.python.reflectr �twisted.test.testutilsr �twisted.trial.unittestr �twisted.conch.clientr � twisted.conch.client.knownhostsr r r r r �twisted.conch.ssh.keysr r �twisted.conch.testr �skip�sampleEncodedKey�otherSampleEncodedKeyr� �ecdsaSampleEncodedKeyr* r- r� r� rE r� rF rT r r; rG rK rU rV r[ rw r r
r� r) r� r+ r" r" r" r# �<module> sv �
��
�
����0 O&f =!r