File: //usr/lib/python3/dist-packages/twisted/conch/test/__pycache__/test_ckeygen.cpython-38.pyc
U
s�@g9O � @ s� d Z ddlZddlZddlZddlZddlmZmZ ddlm Z m
Z
ddl m Z e d�r�e d�r�ddl
mZmZmZmZ dd lmZmZmZmZmZ nd
Zdd lmZ dd lm Z dd
l m Z m Z m Z m!Z! dd� Z"G dd� de �Z#dS )z-
Tests for L{twisted.conch.scripts.ckeygen}.
� N)�BytesIO�StringIO)�unicode�_PY3)�
requireModuleZ cryptographyZpyasn1)�Key� BadKeyError�BadFingerPrintFormat�FingerprintFormats)�changePassPhrase�displayPublicKey�printFingerprint�_saveKey�enumrepresentationzBcryptography and pyasn1 required for twisted.conch.scripts.ckeygen)�FilePath)�TestCase)�publicRSA_openssh�privateRSA_openssh� privateRSA_openssh_encrypted�privateECDSA_opensshc s t � �� � fdd�}|S )a@
Return a callable to patch C{getpass.getpass}. Yields a passphrase each
time called. Use case is to provide an old, then new passphrase(s) as if
requested interactively.
@param passphrases: The list of passphrases returned, one per each call.
@return: A callable to patch C{getpass.getpass}.
c s t � �S �N)�next��_�� passphrases� �A/usr/lib/python3/dist-packages/twisted/conch/test/test_ckeygen.py� fakeGetpass. s z makeGetpass.<locals>.fakeGetpass)�iter)r r r r r � makeGetpass" s
r c @ s e Zd ZdZdd� Zd?dd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z!dS )@� KeyGenTestszN
Tests for various functions used to implement the I{ckeygen} script.
c C s* t rt� | _nt� | _| �td| j� dS )zX
Patch C{sys.stdout} so tests can make assertions about what's printed.
�stdoutN)r r r" r �patch�sys��selfr r r �setUp9 s
zKeyGenTests.setUpNc
C s� | � � }|d kr(t�dd|d|dg� nt�dd|d|dd|g� t�|�}t�|d �}|dkrt| �|�� d� n| �|�� |�� � | �|� � � d S ) N�ckeygen�-t�-fz--no-passphrasez-bz.pub�ecdsaZEC)
�mktemp�
subprocess�callr ZfromFile� assertEqual�type�upperZ
assertTrueZisPublic)r& ZkeyTypeZkeySize�filenameZprivKey�pubKeyr r r �_testrunE s �
zKeyGenTests._testrunc C sF | � dd� | � d� | � dd� | � d� | � dd� | � d� d S )Nr+ Z384ZdsaZ2048Zrsa)r4 r% r r r �test_keygenerationU s
z KeyGenTests.test_keygenerationc
C sT | � � }| �tj��6 ttjd�� }tjdddd|g|d� W 5 Q R X W 5 Q R X d S )N�rbr( r) Zfoor* )�stderr)r, � assertRaisesr- ZCalledProcessError�open�os�devnullZ
check_call)r& r2 r; r r r �test_runBadKeytype_ s �z KeyGenTests.test_runBadKeytypec C s" t ddi�}| �|d tj� dS )z�
L{enumrepresentation} takes a dictionary as input and returns a
dictionary with its attributes changed to enum representation.
�format�md5-hexN)r �assertIsr
ZMD5_HEX�r& Zoptionsr r r �test_enumrepresentationi s
�z#KeyGenTests.test_enumrepresentationc C s" t ddi�}| �|d tj� dS )zF
Test for format L{FingerprintFormats.SHA256-BASE64}.
r= �
sha256-base64N)r r? r
Z
SHA256_BASE64r@ r r r � test_enumrepresentationsha256s s
�z)KeyGenTests.test_enumrepresentationsha256c C s: | � t��}tddi� W 5 Q R X | �d|jjd � dS )z9
Test for unsupported fingerprint format
r= �
sha-base64�*Unsupported fingerprint format: sha-base64r N)r8 r r r/ � exception�args)r& �emr r r � test_enumrepresentationBadFormat} s
�z,KeyGenTests.test_enumrepresentationBadFormatc C s: | � � }t|��t� t|dd�� | �| j�� d� dS )z�
L{printFingerprint} writes a line to standard out giving the number of
bits of the key, its fingerprint, and the basename of the file from it
was read.
r> �r2 r= z:2048 85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da temp
N�r, r �
setContentr r
r/ r" �getvalue�r& r2 r r r �test_printFingerprint� s ��z!KeyGenTests.test_printFingerprintc C s: | � � }t|��t� t|dd�� | �| j�� d� dS )z�
L{printFigerprint} will print key fingerprint in
L{FingerprintFormats.SHA256-BASE64} format if explicitly specified.
rB rJ z72048 FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI= temp
NrK rN r r r �test_printFingerprintsha256� s ��z'KeyGenTests.test_printFingerprintsha256c C sR | � � }t|��t� | �t��}t|dd�� W 5 Q R X | �d|jj d � dS )zx
L{printFigerprint} raises C{keys.BadFingerprintFormat} when unsupported
formats are requested.
rD rJ rE r N)
r, r rL r r8 r r
r/ rF rG )r& r2 rH r r r �)test_printFingerprintBadFingerPrintFormat� s
�z5KeyGenTests.test_printFingerprintBadFingerPrintFormatc C s� t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j
� � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|�
� � dS )z�
L{_saveKey} writes the private and public parts of a key to two
different files and writes a report of this to standard out.
�id_rsa�
passphraser> �r2 �passr= z�Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=MD5_HEX> is:
85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da
N�
id_rsa.pub�r r, �makedirs�child�pathr �
fromStringr r r/ r" rM �
getContent�public�r& �baser2 �keyr r r � test_saveKey� s6
���� ���zKeyGenTests.test_saveKeyc C s� t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j
� � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|�
� � dS )z�
L{_saveKey} writes the private and public parts of a key to two
different files and writes a report of this to standard out.
Test with ECDSA key.
�id_ecdsarS r> rT z�Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=MD5_HEX> is:
1e:ab:83:a6:f2:04:22:99:7c:64:14:d2:ab:fa:f5:16
Nz id_ecdsa.pub)r r, rX rY rZ r r[ r r r/ r" rM r\ r] r^ r r r �test_saveKeyECDSA� s6
���� ���z KeyGenTests.test_saveKeyECDSAc C s� t | �� �}|�� |�d�j}t�t�}t||ddd�� | � | j
� � d||f � | � |�|�d�� � dd�|� | � t�|�d�� � �|�
� � dS )z�
L{_saveKey} will generate key fingerprint in
L{FingerprintFormats.SHA256-BASE64} format if explicitly specified.
rR rS rB rT z�Your identification has been saved in %s
Your public key has been saved in %s.pub
The key fingerprint in <FingerprintFormats=SHA256_BASE64> is:
FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI=
NrV rW r^ r r r �test_saveKeysha256� s6
���� ���z KeyGenTests.test_saveKeysha256c C sj t | �� �}|�� |�d�j}t�t�}| �t ��}t
||ddd�� W 5 Q R X | � d|j j
d � dS )zq
L{_saveKey} raises C{keys.BadFingerprintFormat} when unsupported
formats are requested.
rR rS rD rT rE r N)r r, rX rY rZ r r[ r r8 r r r/ rF rG )r& r_ r2 r` rH r r r � test_saveKeyBadFingerPrintformat s
�
�z,KeyGenTests.test_saveKeyBadFingerPrintformatc C s` t | �� �}|�� |�d�j}t�t�}t||ddd�� | � |�|�d��
� dd�|� dS )�q
L{_saveKey} will choose an empty string for the passphrase if
no-passphrase is C{True}.
rR Tr> �r2 z
no-passphraser= N� ) r r, rX rY rZ r r[ r r r/ r\ r^ r r r �test_saveKeyEmptyPassphrase s
� ��z'KeyGenTests.test_saveKeyEmptyPassphrasec C s^ t | �� �}|�� |�d�j}t�t�}t||ddd�� | � |�|�d��
� d�|� dS )rf rb Tr> rg N) r r, rX rY rZ r r[ r r r/ r\ r^ r r r � test_saveKeyECDSAEmptyPassphrase) s
� ��z,KeyGenTests.test_saveKeyECDSAEmptyPassphrasec s� t | �� �}|�� |�d�j� ddl}| �|jjj d� fdd�� t
� t �}t
|dddd �� |�d��� }|� |dd
�}| �||� dS ) zd
When no path is specified, it will ask for the path used to store the
key.
Z
custom_keyr NZ raw_inputc s � S r r r �ZkeyPathr r �<lambda>E rh z4KeyGenTests.test_saveKeyNoFilename.<locals>.<lambda>Tr> rg rh )r r, rX rY rZ � twisted.conch.scripts.ckeygenr# ZconchZscriptsr( r r[ r r r\ r/ )r& r_ Ztwistedr` ZpersistedKeyContentZ persistedKeyr rk r �test_saveKeyNoFilename; s
�z"KeyGenTests.test_saveKeyNoFilenamec C sf | � � }t�t�}t|��t� td|i� | j� � �
d�}t |t �rP|�
d�}| �||�d�� dS )zl
L{displayPublicKey} prints out the public key associated with a given
private key.
r2 �
�ascii�opensshN)r, r r[ r r rL r r r" rM �strip�
isinstancer �encoder/ �toString�r& r2 r3 Z displayedr r r �test_displayPublicKeyO s
�z!KeyGenTests.test_displayPublicKeyc C sh | � � }t�t�}t|��t� t|dd�� | j� � �
d�}t |t �rR|�
d�}| �||�d�� dS )z�
L{displayPublicKey} prints out the public key associated with a given
private key using the given passphrase when it's encrypted.
� encrypted�r2 rU ro rp rq N)r, r r[ r r rL r r r" rM rr rs r rt r/ ru rv r r r � test_displayPublicKeyEncrypted` s
�z*KeyGenTests.test_displayPublicKeyEncryptedc C sx | � � }t�t�}t|��t� | �tddd� � t d|i� | j
� � � d�}t
|t�rb|�d�}| �||�d�� dS ) z�
L{displayPublicKey} prints out the public key associated with a given
private key, asking for the passphrase when it's encrypted.
�getpassc S s dS )Nrx r )�xr r r rl y rh zLKeyGenTests.test_displayPublicKeyEncryptedPassphrasePrompt.<locals>.<lambda>r2 ro rp rq N)r, r r[ r r rL r r# r{ r r" rM rr rs r rt r/ ru rv r r r �.test_displayPublicKeyEncryptedPassphrasePromptq s
�z:KeyGenTests.test_displayPublicKeyEncryptedPassphrasePromptc C s. | � � }t|��t� | �tt|dd�� dS )z�
L{displayPublicKey} fails with a L{BadKeyError} when trying to decrypt
an encrypted key with the wrong password.
�wrongry N)r, r rL r r8 r r rN r r r �$test_displayPublicKeyWrongPassphrase� s �z0KeyGenTests.test_displayPublicKeyWrongPassphrasec C sl t ddd�}| �td|� | �� }t|��t� td|i� | �| j �
� � d�d� | � tt|��
� � dS )zt
L{changePassPhrase} allows a user to change the passphrase of a
private key interactively.
rx �newpassr{ r2 ro �;Your identification has been saved with the new passphrase.N�r r# r{ r, r rL r r r/ r" rM rr �assertNotEqualr\ )r& Z
oldNewConfirmr2 r r r �test_changePassphrase� s �
�z!KeyGenTests.test_changePassphrasec C sl t dd�}| �td|� | �� }t|��t� t|dd�� | �| j �
� � d�d� | � tt|��
� � dS )z�
L{changePassPhrase} allows a user to change the passphrase of a
private key, providing the old passphrase and prompting for new one.
r� r{ rx ry ro r� Nr� )r& Z
newConfirmr2 r r r � test_changePassphraseWithOld� s
�
�z(KeyGenTests.test_changePassphraseWithOldc C sV | � � }t|��t� t|ddd�� | �| j�� �d�d� | � tt|��
� � dS )z�
L{changePassPhrase} allows a user to change the passphrase of a private
key by providing both old and new passphrases without prompting.
rx �
newencrypt)r2 rU r� ro r� N) r, r rL r r r/ r" rM rr r� r\ rN r r r � test_changePassphraseWithBoth� s ���
�z)KeyGenTests.test_changePassphraseWithBothc C sR | � � }t|��t� | �tt|dd��}| �dt|�� | �tt|�� � � dS )z�
L{changePassPhrase} exits if passed an invalid old passphrase when
trying to change the passphrase of a private key.
r~ ry z1Could not change passphrase: old passphrase errorN)
r, r rL r r8 �
SystemExitr r/ �strr\ �r& r2 �errorr r r �$test_changePassphraseWrongPassphrase� s ��
�z0KeyGenTests.test_changePassphraseWrongPassphrasec C sb | � tdtd�� | �� }t|��t� | �tt d|i�}| �
dt |�� | �
tt|�� � � dS )z�
L{changePassPhrase} exits if no passphrase is specified for the
C{getpass} call and the key is encrypted.
r{ � r2 zMCould not change passphrase: Passphrase must be provided for an encrypted keyN)
r# r{ r r, r rL r r8 r� r r/ r� r\ r� r r r �!test_changePassphraseEmptyGetPass� s ��
�z-KeyGenTests.test_changePassphraseEmptyGetPassc C s^ | � � }t|��d� | �ttd|i�}tr2d}nd}| �|t|�� | �dt|�� � � dS )zc
L{changePassPhrase} exits if the file specified points to an invalid
key.
s foobarr2 z?Could not change passphrase: cannot guess the type of b'foobar'z>Could not change passphrase: cannot guess the type of 'foobar'N)
r, r rL r8 r� r r r/ r� r\ )r& r2 r� �expectedr r r �test_changePassphraseBadKey� s �z'KeyGenTests.test_changePassphraseBadKeyc C sh | � � }t|��t� dd� }| �td|� | �tt|dd��}| � dt
|�� | � tt|�� � � dS )z�
L{changePassPhrase} doesn't modify the key file if an unexpected error
happens when trying to create the key with the new passphrase.
c _ s t d��d S )NZoops)� RuntimeError�rG �kwargsr r r ru s z>KeyGenTests.test_changePassphraseCreateError.<locals>.toStringru r� �r2 r� z!Could not change passphrase: oopsN) r, r rL r r# r r8 r� r r/ r� r\ )r& r2 ru r� r r r � test_changePassphraseCreateError� s �� �z,KeyGenTests.test_changePassphraseCreateErrorc C sv | � � }t|��t� dd� }| �td|� | �tt|dd��}t rJd}nd}| �
|t |�� | �
tt|�� � � dS ) zq
L{changePassPhrase} doesn't modify the key file if C{toString} returns
an empty string.
c _ s dS )Nr� r r� r r r ru s zCKeyGenTests.test_changePassphraseEmptyStringError.<locals>.toStringru r� r� z9Could not change passphrase: cannot guess the type of b''z8Could not change passphrase: cannot guess the type of ''N)
r, r rL r r# r r8 r� r r r/ r� r\ )r& r2 ru r� r� r r r �%test_changePassphraseEmptyStringError s ���z1KeyGenTests.test_changePassphraseEmptyStringErrorc C sR | � � }t|��t� | �tt|dd��}| �dt|�� | �tt|�� � � dS )z�
L{changePassPhrase} exits when trying to change the passphrase on a
public key, and doesn't change the file.
rU r� z.Could not change passphrase: key not encryptedN)
r, r rL r r8 r� r r/ r� r\ r� r r r � test_changePassphrasePublicKey/ s � �z*KeyGenTests.test_changePassphrasePublicKey)N)"�__name__�
__module__� __qualname__�__doc__r' r4 r5 r< rA rC rI rO rP rQ ra rc rd re ri rj rn rw rz r} r r� r� r� r� r� r� r� r� r� r r r r r! 5 s>
r! )$r� r{ r$ r: r- �ior r Ztwisted.python.compatr r Ztwisted.python.reflectr Ztwisted.conch.ssh.keysr r r r
rm r r r
r r �skipZtwisted.python.filepathr Ztwisted.trial.unittestr Ztwisted.conch.test.keydatar r r r r r! r r r r �<module> s