File: //lib/python3/dist-packages/twisted/conch/test/__pycache__/test_ckeygen.cpython-310.pyc
o
^h�b_ � @ s� d Z ddlZddlZddlZddlZddlmZ ddlmZm Z m
Z
m Z m Z ddl
mZ ddlmZ ddlmZ ed�r[ed �r[dd
lmZmZmZmZmZ dd lmZmZm Z m Z nd Z d
d� Z G dd� de�Z dS )z-
Tests for L{twisted.conch.scripts.ckeygen}.
� N)�StringIO)�privateECDSA_openssh�privateEd25519_openssh_new�privateRSA_openssh� privateRSA_openssh_encrypted�publicRSA_openssh)�FilePath)�
requireModule)�TestCase� cryptography�pyasn1)�_saveKey�changePassPhrase�displayPublicKey�enumrepresentation�printFingerprint)�BadFingerPrintFormat� BadKeyError�FingerprintFormats�KeyzBcryptography and pyasn1 required for twisted.conch.scripts.ckeygenc s t � �� � fdd�}|S )a@
Return a callable to patch C{getpass.getpass}. Yields a passphrase each
time called. Use case is to provide an old, then new passphrase(s) as if
requested interactively.
@param passphrases: The list of passphrases returned, one per each call.
@return: A callable to patch C{getpass.getpass}.
c s t � �S �N)�next��_�� passphrases� �A/usr/lib/python3/dist-packages/twisted/conch/test/test_ckeygen.py� fakeGetpass7 � z makeGetpass.<locals>.fakeGetpass)�iter)r r r r r � makeGetpass+ s
r! c @ s" e Zd ZdZdd� ZdGdd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z!d?d@� Z"dAdB� Z#dCdD� Z$dEdF� Z%dS )H� KeyGenTestszN
Tests for various functions used to implement the I{ckeygen} script.
c C s t � | _| �td| j� dS )zX
Patch C{sys.stdout} so tests can make assertions about what's printed.
�stdoutN)r r# �patch�sys��selfr r r �setUpB s zKeyGenTests.setUpNc C s� | � � }dd|d|dg}|d ur|�d|g� |d ur"|�d|g� zt�|� W n ty; d|d< t�|� Y nw t�|�}t�|d �}|d
krU| �|�� d � n|d krb| �|�� d
� n
| �|�� |� � � | �
|� � � d S )N�ckeygen�-t�-fz--no-passphrasez-bz--private-key-subtype�ckeygen3r z.pub�ecdsa�EC�ed25519�Ed25519) �mktemp�extend�
subprocess�call�FileNotFoundErrorr �fromFile� assertEqual�type�upper�
assertTrue�isPublic)r' �keyType�keySize�privateKeySubtype�filename�args�privKey�pubKeyr r r �_testrunI s( �
zKeyGenTests._testrunc C s� | � dd� | j dddd� | � d� | j ddd� | � d� | � dd� | j dddd� | � d� | j ddd� | � dd� | j dddd� | � d� | j ddd� d S ) Nr- �384�v1)r> r/ �dsa�2048�rsa)rC r& r r r �test_keygeneration_ s
z KeyGenTests.test_keygenerationc C s� | � � }| �tj��K ttjd��,}ztjdddd|g|d� W n ty5 tjdddd|g|d� Y nw W d � n1 s@w Y W d � d S W d � d S 1 sXw Y d S )N�rbr) r* �foor+ )�stderrr, ) r1 � assertRaisesr3 �CalledProcessError�open�os�devnull�
check_callr5 )r' r? rQ r r r �test_runBadKeytypen s&
�
��� ��"�z KeyGenTests.test_runBadKeytypec C �" t ddi�}| �|d tj� dS )z�
L{enumrepresentation} takes a dictionary as input and returns a
dictionary with its attributes changed to enum representation.
�format�md5-hexN)r �assertIsr �MD5_HEX�r' �optionsr r r �test_enumrepresentation{ s z#KeyGenTests.test_enumrepresentationc C rT )zF
Test for format L{FingerprintFormats.SHA256-BASE64}.
rU �
sha256-base64N)r rW r �
SHA256_BASE64rY r r r � test_enumrepresentationsha256� s z)KeyGenTests.test_enumrepresentationsha256c C sN | � t��}tddi� W d � n1 sw Y | �d|jjd � dS )z9
Test for unsupported fingerprint format
rU �
sha-base64N�*Unsupported fingerprint format: sha-base64r )rM r r r7 � exceptionr@ )r' �emr r r � test_enumrepresentationBadFormat� s � �z,KeyGenTests.test_enumrepresentationBadFormatc C �: | � � }t|��t� t|dd�� | �| j�� d� dS )z�
L{printFingerprint} writes a line to standard out giving the number of
bits of the key, its fingerprint, and the basename of the file from it
was read.
rV �r? rU z:2048 85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da temp
N�r1 r �
setContentr r r7 r# �getvalue�r' r? r r r �test_printFingerprint� s �z!KeyGenTests.test_printFingerprintc C rd )z�
L{printFigerprint} will print key fingerprint in
L{FingerprintFormats.SHA256-BASE64} format if explicitly specified.
r\ re z72048 FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI= temp
Nrf ri r r r �test_printFingerprintsha256� s �z'KeyGenTests.test_printFingerprintsha256c C sf | � � }t|��t� | �t��}t|dd�� W d � n1 s"w Y | �d|jj d � dS )zx
L{printFigerprint} raises C{keys.BadFingerprintFormat} when unsupported
formats are requested.
r_ re Nr` r )
r1 r rg r rM r r r7 ra r@ )r' r? rb r r r �)test_printFingerprintBadFingerPrintFormat� s � �z5KeyGenTests.test_printFingerprintBadFingerPrintFormatc C � t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j
� � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|�
� � dS )z�
L{_saveKey} writes the private and public parts of a key to two
different files and writes a report of this to standard out.
�id_rsa�
passphraserV �r? �passrU ��Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=MD5_HEX> is:
85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da
N�
id_rsa.pub�r r1 �makedirs�child�pathr �
fromStringr r
r7 r# rh �
getContent�public�r' �baser? �keyr r r � test_saveKey� s"
����zKeyGenTests.test_saveKeyc C rm )z�
L{_saveKey} writes the private and public parts of a key to two
different files and writes a report of this to standard out.
Test with ECDSA key.
�id_ecdsaro rV rp z�Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=MD5_HEX> is:
1e:ab:83:a6:f2:04:22:99:7c:64:14:d2:ab:fa:f5:16
Nz id_ecdsa.pub)r r1 ru rv rw r rx r r
r7 r# rh ry rz r{ r r r �test_saveKeyECDSA� s"
����z KeyGenTests.test_saveKeyECDSAc C rm )z�
L{_saveKey} writes the private and public parts of a key to two
different files and writes a report of this to standard out.
Test with Ed25519 key.
�
id_ed25519ro rV rp z�Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=MD5_HEX> is:
ab:ee:c8:ed:e5:01:1b:45:b7:8d:b2:f0:8f:61:1c:14
Nzid_ed25519.pub)r r1 ru rv rw r rx r r
r7 r# rh ry rz r{ r r r �test_saveKeyEd25519� s$
����z KeyGenTests.test_saveKeyEd25519c C rm )z�
L{_saveKey} will generate key fingerprint in
L{FingerprintFormats.SHA256-BASE64} format if explicitly specified.
rn ro r\ rp z�Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=SHA256_BASE64> is:
FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI=
Nrs rt r{ r r r �test_saveKeysha256 s&
�����z KeyGenTests.test_saveKeysha256c C s~ t | �� �}|�� |�d�j}t�t�}| �t ��}t
||ddd�� W d � n1 s.w Y | � d|j j
d � dS )zq
L{_saveKey} raises C{keys.BadFingerprintFormat} when unsupported
formats are requested.
rn ro r_ rp Nr` r )r r1 ru rv rw r rx r rM r r
r7 ra r@ )r' r| r? r} rb r r r � test_saveKeyBadFingerPrintformat! s
� � �z,KeyGenTests.test_saveKeyBadFingerPrintformatc C s` t | �� �}|�� |�d�j}t�t�}t||ddd�� | � |�|�d��
� dd�|� dS )�q
L{_saveKey} will choose an empty string for the passphrase if
no-passphrase is C{True}.
rn TrV �r? z
no-passphraserU N� ) r r1 ru rv rw r rx r r
r7 ry r{ r r r �test_saveKeyEmptyPassphrase3 s
��z'KeyGenTests.test_saveKeyEmptyPassphrasec C �^ t | �� �}|�� |�d�j}t�t�}t||ddd�� | � |�|�d��
� d�|� dS )r� r TrV r� N) r r1 ru rv rw r rx r r
r7 ry r{ r r r � test_saveKeyECDSAEmptyPassphraseC s
�"z,KeyGenTests.test_saveKeyECDSAEmptyPassphrasec C r� )r� r� TrV r� N) r r1 ru rv rw r rx r r
r7 ry r{ r r r �"test_saveKeyEd25519EmptyPassphraseQ s
��z.KeyGenTests.test_saveKeyEd25519EmptyPassphrasec s� t | �� �}|�� |�d�j� ddl}| �|jjj d� fdd�� t
� t �}t
|dddd �� |�d��� }|� |dd
�}| �||� dS ) zd
When no path is specified, it will ask for the path used to store the
key.
�
custom_keyr N�_inputSaveFilec s � S r r r ��keyPathr r �<lambda>l � z4KeyGenTests.test_saveKeyNoFilename.<locals>.<lambda>TrV r� r� )r r1 ru rv rw � twisted.conch.scripts.ckeygenr$ �conch�scriptsr) r rx r r
ry r7 )r' r| �twistedr} �persistedKeyContent� persistedKeyr r� r �test_saveKeyNoFilenamea s
z"KeyGenTests.test_saveKeyNoFilenamec C s� t | �� �}|�� |�d�j}t�t�}t||dddd�� | � | j
� � d||f � |�d�� � }| � |�|dd�|� | �
|�d�� | � t�|�d �� � �|�� � dS )
zi
L{_saveKey} can be told to write the new private key file in OpenSSH
v1 format.
rn ro rV rE )r? rq rU �private-key-subtyperr N�$ -----BEGIN OPENSSH PRIVATE KEY-----
rs )r r1 ru rv rw r rx r r
r7 r# rh ry r: �
startswithrz )r' r| r? r} �privateKeyContentr r r �test_saveKeySubtypeV1t s4
�� ����z!KeyGenTests.test_saveKeySubtypeV1c C sf | � � }t�t�}t|��t� td|i� | j� � �
d�}t |t �r(|�
d�}| �||�d�� dS )zl
L{displayPublicKey} prints out the public key associated with a given
private key.
r? �
�ascii�opensshN)r1 r rx r r rg r r r# rh �strip�
isinstance�str�encoder7 �toString�r' r? rB � displayedr r r �test_displayPublicKey� s
z!KeyGenTests.test_displayPublicKeyc C sh | � � }t�t�}t|��t� t|dd�� | j� � �
d�}t |t �r)|�
d�}| �||�d�� dS )z�
L{displayPublicKey} prints out the public key associated with a given
private key using the given passphrase when it's encrypted.
� encrypted�r? rq r� r� r� N)r1 r rx r r rg r r r# rh r� r� r� r� r7 r� r� r r r � test_displayPublicKeyEncrypted� s
z*KeyGenTests.test_displayPublicKeyEncryptedc C sx | � � }t�t�}t|��t� | �tddd� � t d|i� | j
� � � d�}t
|t�r1|�d�}| �||�d�� dS ) z�
L{displayPublicKey} prints out the public key associated with a given
private key, asking for the passphrase when it's encrypted.
�getpassc S � dS )Nr� r )�xr r r r� � r� zLKeyGenTests.test_displayPublicKeyEncryptedPassphrasePrompt.<locals>.<lambda>r? r� r� r� N)r1 r rx r r rg r r$ r� r r# rh r� r� r� r� r7 r� r� r r r �.test_displayPublicKeyEncryptedPassphrasePrompt� s
z:KeyGenTests.test_displayPublicKeyEncryptedPassphrasePromptc C s. | � � }t|��t� | �tt|dd�� dS )z�
L{displayPublicKey} fails with a L{BadKeyError} when trying to decrypt
an encrypted key with the wrong password.
�wrongr� N)r1 r rg r rM r r ri r r r �$test_displayPublicKeyWrongPassphrase� s
�z0KeyGenTests.test_displayPublicKeyWrongPassphrasec C sl t ddd�}| �td|� | �� }t|��t� td|i� | �| j �
� � d�d� | � tt|��
� � dS )zt
L{changePassPhrase} allows a user to change the passphrase of a
private key interactively.
r� �newpassr� r? r� �;Your identification has been saved with the new passphrase.N�r! r$ r� r1 r rg r r r7 r# rh r� �assertNotEqualry )r' �
oldNewConfirmr? r r r �test_changePassphrase� s � �z!KeyGenTests.test_changePassphrasec C sl t dd�}| �td|� | �� }t|��t� t|dd�� | �| j �
� � d�d� | � tt|��
� � dS )z�
L{changePassPhrase} allows a user to change the passphrase of a
private key, providing the old passphrase and prompting for new one.
r� r� r� r� r� r� Nr� )r' �
newConfirmr? r r r � test_changePassphraseWithOld� s
� �z(KeyGenTests.test_changePassphraseWithOldc C sV | � � }t|��t� t|ddd�� | �| j�� �d�d� | � tt|��
� � dS )z�
L{changePassPhrase} allows a user to change the passphrase of a private
key by providing both old and new passphrases without prompting.
r� �
newencrypt)r? rq r� r� r� N) r1 r rg r r r7 r# rh r� r� ry ri r r r � test_changePassphraseWithBoth� s
�� �z)KeyGenTests.test_changePassphraseWithBothc C �R | � � }t|��t� | �tt|dd��}| �dt|�� | �tt|�� � � dS )z�
L{changePassPhrase} exits if passed an invalid old passphrase when
trying to change the passphrase of a private key.
r� r� z1Could not change passphrase: old passphrase errorN)
r1 r rg r rM �
SystemExitr r7 r� ry �r' r? �errorr r r �$test_changePassphraseWrongPassphrase s ��z0KeyGenTests.test_changePassphraseWrongPassphrasec C sb | � tdtd�� | �� }t|��t� | �tt d|i�}| �
dt |�� | �
tt|�� � � dS )z�
L{changePassPhrase} exits if no passphrase is specified for the
C{getpass} call and the key is encrypted.
r� � r? zMCould not change passphrase: Passphrase must be provided for an encrypted keyN)
r$ r� r! r1 r rg r rM r� r r7 r� ry r� r r r �!test_changePassphraseEmptyGetPass s �z-KeyGenTests.test_changePassphraseEmptyGetPassc C sT | � � }t|��d� | �ttd|i�}d}| �|t|�� | �dt|��� � dS )zc
L{changePassPhrase} exits if the file specified points to an invalid
key.
s foobarr? z?Could not change passphrase: cannot guess the type of b'foobar'N) r1 r rg rM r� r r7 r� ry )r' r? r� �expectedr r r �test_changePassphraseBadKey& s z'KeyGenTests.test_changePassphraseBadKeyc C sh | � � }t|��t� dd� }| �td|� | �tt|dd��}| � dt
|�� | � tt|�� � � dS )z�
L{changePassPhrase} doesn't modify the key file if an unexpected error
happens when trying to create the key with the new passphrase.
c _ s t d��)N�oops)� RuntimeError�r@ �kwargsr r r r� ; r z>KeyGenTests.test_changePassphraseCreateError.<locals>.toStringr� r� �r? r� z!Could not change passphrase: oopsN� r1 r rg r r$ r rM r� r r7 r� ry )r' r? r� r� r r r � test_changePassphraseCreateError3 s �z,KeyGenTests.test_changePassphraseCreateErrorc C sl | � � }t|��t� dd� }| �td|� | �tt|dd��}d}| � |t
|�� | � tt|�� � � dS )zq
L{changePassPhrase} doesn't modify the key file if C{toString} returns
an empty string.
c _ r� )Nr� r r� r r r r� R s zCKeyGenTests.test_changePassphraseEmptyStringError.<locals>.toStringr� r� r� z9Could not change passphrase: cannot guess the type of b''Nr� )r' r? r� r� r� r r r �%test_changePassphraseEmptyStringErrorJ s �z1KeyGenTests.test_changePassphraseEmptyStringErrorc C r� )z�
L{changePassPhrase} exits when trying to change the passphrase on a
public key, and doesn't change the file.
rq r� z.Could not change passphrase: key not encryptedN)
r1 r rg r rM r� r r7 r� ry r� r r r � test_changePassphrasePublicKeyb s �z*KeyGenTests.test_changePassphrasePublicKeyc C s� t ddd�}| �td|� | �� }t|��t� t|dd�� | �| j �
� � d�d� t|�� � }| �
t|� | �|�d�� d S )
zq
L{changePassPhrase} can be told to write the new private key file in
OpenSSH v1 format.
r� r� r� rE )r? r� r� r� r� N)r! r$ r� r1 r rg r r r7 r# rh r� ry r� r: r� )r' r� r? r� r r r � test_changePassphraseSubtypeV1o s � �z*KeyGenTests.test_changePassphraseSubtypeV1)NN)&�__name__�
__module__� __qualname__�__doc__r( rC rI rS r[ r^ rc rj rk rl r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r" = sH
"
r" )!r� r� r3 r% rP �ior �twisted.conch.test.keydatar r r r r �twisted.python.filepathr �twisted.python.reflectr �twisted.trial.unittestr
r� r
r r r r �twisted.conch.ssh.keysr r r r �skipr! r" r r r r �<module> s