D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
lib64
/
python3.9
/
site-packages
/
gssapi
/
tests
/
__pycache__
/
Filename :
test_raw.cpython-39.pyc
back
Copy
a ��_� � @ sH d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m m Z d dl mZ d dlZejrvd dlmZ n d dlmZ dZe�� �d�Zed e ZG dd� dej�Z G dd � d e �Z G d d � d ej �Z G d d � d e �Z G dd� de �Z!G dd� de �Z"ddd�ddd�ddd�ddd�dd d�d �Z#G d d � d ej �Z$dS ) � N)�Sets host�utf-8� /c sH e Zd Ze� fdd��Zedd� �Zedd� �Ze� fdd��Z� ZS ) �_GSSAPIKerberosTestCasec sj t t| ��� t�d�}| jj|dgd� | �� | jj� d�d � d�| _ | jj � d�d � d�| _ d S )N�UTF-8�-k��flags�@r )�superr � setUpClass�SERVICE_PRINCIPAL�decode�realm�kinit� _init_env� user_princ�split�encode� USER_PRINCZ admin_princ� ADMIN_PRINC)�cls� svc_princ�� __class__� �;/usr/lib64/python3.9/site-packages/gssapi/tests/test_raw.pyr s z"_GSSAPIKerberosTestCase.setUpClassc C s2 t �tj�| _| jj�� D ]\}}|tj|< qd S �N)�copy�deepcopy�os�environ� _saved_envr �env�items)r �k�vr r r r & s z!_GSSAPIKerberosTestCase._init_envc C s@ t �tj�D ](}|| jv r,| j| tj|< q tj|= q d | _d S r )r r r r! r" )r r% r r r � _restore_env, s z$_GSSAPIKerberosTestCase._restore_envc s t t| ��� | �� d S r )r r � tearDownClassr' )r r r r r( 6 s z%_GSSAPIKerberosTestCase.tearDownClass) �__name__� __module__� __qualname__� classmethodr r r' r( � __classcell__r r r r r s r c @ s e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Ze � d d�dd� �Z e � d d�dd� �Z e � d d�e � dd�dd� ��Z e � d d�e �dd�dd� ��Ze � d d�e �dd�dd � ��Ze � d d�e �dd�d d � ��Zd d � Zd!d"� Zd#d$� Ze � d%d&�d'd(� �Zd)d*� Zd+d,� Ze � d-d.�d/d0� �Ze � d-d.�d1d2� �Ze � d-d.�e �d3d4�d5d6� ��Ze � d7d8�d9d:� �Z e � d;d<�d=d>� �Z d?d@� Z dAdB� Z dCdD� Z dEdF� Z!dGdH� Z"dIdJ� Z#e � dKdL�dMdN� �Z$e � dOdP�dQdR� �Z%e � dSdT�dUdV� �Z&e � dSdT�dWdX� �Z'e � dYdZ�d[d\� �Z(e � d]d^�d_d`� �Z)e � dadb�e � d-d.�e �dcdd�dedf� ���Z*e � dadb�dgdh� �Z+e � dadb�didj� �Z,e � dadb�e � dKdk�dldm� ��Z-e � dadb�e � dKdk�dndo� ��Z.e � dpdq�e �drds�dtdu� ��Z/e � dpdq�dvdw� �Z0dxS )y�TestBaseUtilitiesc C s | j jt�d�dgd� d S )Nr r r )r r r r ��selfr r r �setUp= s zTestBaseUtilities.setUpc C s4 t �� }|�� |�t� |�� |�t jj� d S r ) �gb�indicate_mechs�shouldnt_be_none� should_be_a�set�shouldnt_be_empty�should_include�MechType�kerberos)r0 �mechsr r r �test_indicate_mechs@ s z%TestBaseUtilities.test_indicate_mechsc C s, t �t�}|�� |�t j� t �|� d S r )r2 � import_name�TARGET_SERVICE_NAMEr4 r5 �Name� release_name)r0 � imported_namer r r �test_import_nameI s z"TestBaseUtilities.test_import_namec C s^ t �| jt jj�}t �|t jj�}|�� |� t j � t � |�}|�� |� t � |� � d S r )r2 r= r �NameType�kerberos_principal�canonicalize_namer9 r: r4 r5 r? Z export_name�bytesr7 )r0 rA Zcanonicalized_name� exported_namer r r � test_canonicalize_export_nameQ s �� z/TestBaseUtilities.test_canonicalize_export_namec C s0 t �t�}t �|�}|�� t �||��� d S r )r2 r= r> Zduplicate_namer4 � compare_name�should_be_true)r0 Z orig_name�new_namer r r �test_duplicate_namea s z%TestBaseUtilities.test_duplicate_namec C s` t �tt jj�}t �|�}|�� |\}}|�� |�t� |� t� |�� |� t jj� d S r ) r2 r= r> rC �hostbased_serviceZ display_namer4 r5 rF � should_be)r0 rA Z displ_respZdisplayed_nameZout_typer r r �test_display_nameh s � z#TestBaseUtilities.test_display_nameZrfc6680zRFC 6680c C s: t �tt jj�}t �|�}|�� |j�� |j � � d S r ) r2 r= r> rC rM � inquire_namer4 � is_mech_name�should_be_false�mech�should_be_none)r0 � base_name� inquire_resr r r � test_inquire_name_not_mech_name{ s � z1TestBaseUtilities.test_inquire_name_not_mech_namec C s^ t �tt jj�}t �|t jj�}t �|�}|� � |j � � |j � t j� |j �t jj� d S r )r2 r= r> rC rM rE r9 r: rP r4 rQ rJ rS r5 �OIDrN )r0 rU � mech_namerV r r r �test_inquire_name_mech_name� s � z-TestBaseUtilities.test_inquire_name_mech_nameZrfc6680_comp_oidz RFC 6680 (COMPOSITE_EXPORT OID)c C sT t �tt jj�}t �|t jj�}t �|�}|� t � t �|t jj �}|� t j � d S r ) r2 r= r> rC rM rE r9 r: �export_name_compositer5 rF Zcomposite_exportr? )r0 rU � canon_namerG rA r r r �*test_import_export_name_composite_no_attrs� s �� �z<TestBaseUtilities.test_import_export_name_composite_no_attrsZauthdataZ greet_clientc C s` t �tt jj�}t �|t jj�}t �|ddg� t � |�}|� � |j � t � |j �dg� d S )N� urn:greet:greetings some greeting)r2 r= r> rC rM rE r9 r: �set_name_attributerP r4 �attrsr5 �listrN )r0 rU r\ rV r r r � test_inquire_name_with_attrs� s �� z.TestBaseUtilities.test_inquire_name_with_attrsc C s� t �tt jj�}t �|t jj�}t j|ddgdd� t � |d�}|� � |j � t � |j �dg� |j� t � |j�|j � |j�� |j�� t �|d� d S )Nr^ s some other valT)�complete)r2 r= r> rC rM rE r9 r: r_ �get_name_attributer4 �valuesr5 ra rN Zdisplay_valuesrc rJ Z authenticatedrR Zdelete_name_attribute)r0 rU r\ �get_resr r r �1test_basic_get_set_delete_name_attributes_no_auth� s �� zCTestBaseUtilities.test_basic_get_set_delete_name_attributes_no_authc C s~ t �tt jj�}t �|t jj�}t �|ddg� t � |�}|� t � t �|t jj �}|� t j � t �|d�}|j�dg� d S )Nr^ s some val)r2 r= r> rC rM rE r9 r: r_ r[ r5 rF Zexportr? rd re rN )r0 rU r\ rG rA rf r r r �!test_import_export_name_composite� s � z3TestBaseUtilities.test_import_export_name_compositec C sx t �t�}t �t�}t �| jt jj�}t �||��� t �||��� t �||��� t � |� t � |� t � |� d S r ) r2 r= r> r rC rD rI rJ rR r@ )r0 Z service_name1Z service_name2Z init_namer r r �test_compare_name� s � z#TestBaseUtilities.test_compare_namec C sN t �dd�}|�� |\}}}|�t� |�� |�� |�t� |�� d S )Nr F) �gbmiscZ_display_statusr4 r5 rF r7 �should_be_an_integer�boolrR )r0 Z status_resp�status�ctxZcontr r r �test_display_status s z%TestBaseUtilities.test_display_statusc C sv t �tt jj�}t �|�}|�� |\}}}|�� |�t j� |� � |� t j j � |� � t �|� t �|� d S r )r2 r= r rC rD � acquire_credr4 r5 �Credsr7 r8 r9 r: rk r@ � release_cred)r0 �nameZ cred_resp�creds� actual_mechs�ttlr r r �test_acquire_creds s � z$TestBaseUtilities.test_acquire_credsZ cred_imp_expzcredentials import-exportc C sT t �d �j}t �|�}t �|�}t j|dd�}t j|dd�}t �|j|j��� d S )NT)rs ) r2 rp rt Z export_credZ import_cred� inquire_credrI rs rJ )r0 rt �tokenZimported_credsZ inquire_origZ inquire_impr r r �test_cred_import_export# s z)TestBaseUtilities.test_cred_import_exportc C s� t �tt jj�}t �|�}|d }|d }t �tt jj�}t �|�d }t j ||d�}|d }t j|||d�} | d } t � | �} | � � | � d� d S �N� r ��acceptor_creds��contextZ input_token) r2 r= r> rC rM �init_sec_contextr rD rp �accept_sec_contextZ context_timerk �should_be_greater_than) r0 � target_name�ctx_resp� client_token1� client_ctx� server_name� server_creds� server_resp� server_tok� client_resp2rn rv r r r �test_context_time. s, � ��� z#TestBaseUtilities.test_context_timec C s" t �tt jj�}t �|�}|d }|d }t �tt jj�}t �|�d }t j ||d�}|d }t j|||d�} | d } t � | �} | � � | \} }} }}}}| � � | � t j � |� � |� t j � | �� |� � |�t jj� |� � |� t� |�� |� t� |�� |� t� |�� d S r{ )r2 r= r> rC rM r� r rD rp r� Zinquire_contextr4 r5 r? rk rN r9 r: r r7 rl rJ )r0 r� r� r� r� r� r� r� r� r� rn �inq_respZsrc_namerv � mech_typer Z local_estZis_openr r r �test_inquire_contextF sL � ��� � z&TestBaseUtilities.test_inquire_contextZs4uZS4Uc C s� t �tt jj�}t �|�}|d }~t �tt jj�}t j|dd�d }t j ||d�}t � � }t � |||d t j j �}|�� |\} } } } | �� | �t j j � | �t� | �t� | �t j � d S �Nr| �both��usager r} � )r2 r= r> rC rM r� r rD rp r� rq Zadd_cred_impersonate_namer9 r: r4 r7 r8 r5 �int� r0 r� �client_ctx_resp� client_tokenr� r� �server_ctx_resp� input_creds�imp_resp� new_credsru �output_init_ttl�output_accept_ttlr r r � test_add_cred_impersonate_namew s4 � ��� z0TestBaseUtilities.test_add_cred_impersonate_namec C s� t �tt jj�}t �|�}|d }~t �tt jj�}t j|dd�d }t j ||d�}t � ||d �}|� � |\}} } |� � |� t j � | �� | �t jj� | � t� d S r� )r2 r= r> rC rM r� r rD rp r� Z acquire_cred_impersonate_namer4 r5 rq r7 r8 r9 r: r� ) r0 r� r� r� r� r� r� r� � imp_credsru � output_ttlr r r �#test_acquire_creds_impersonate_name� s. � ��� z5TestBaseUtilities.test_acquire_creds_impersonate_namez1.11z)returning delegated S4U2Proxy credentialsc C s| t �d�}| jj|ddgd� t�ttjj�}t� |�j }tj d dd�j }tj ||d�}|�� |j�� |j�tj� d S )Nr r �-fr r� r� r} )r r r r r2 r= r> rC rM r� ry rp rt r� r4 �delegated_credsr5 rq )r0 r r� r� r� r� r r r � test_always_get_delegated_creds� s � � z1TestBaseUtilities.test_always_get_delegated_credsZrfc5588zRFC 5588c C s� t �d�}| jj|ddgd� t�ttjj�}tj d dd�j }tj ||tj j d�}|d }tj d d d�j }tj||d �}|j}|�� tj|dd d d �} | �� | j�d� | j�tjj� t�|�j} tj | dd�} | �� d S ) Nr r r� r �initiater� )rt r r| �acceptr} T)r� Z set_default� overwrite)r r r r r2 r= r> rC rM rp rt r� �RequirementFlagZdelegate_to_peerr� r� r4 Z store_credr� rN r; r8 r9 r: rx rs ) r0 r r� Z client_credsr� r� r� r� Z deleg_creds� store_resZ deleg_nameZacq_respr r r � test_store_cred_acquire_cred� s4 ���� z.TestBaseUtilities.test_store_cred_acquire_credZ cred_storezcredentials storec C s dj | jjd�}dj | jjd�}|�d�|�d�d�}d| jj }| j�|� | j�||� | j�|d dd|g� tjd d d �j }tj ||d d �}|j � � |j �d � t�|�d��}t�||�}|� � |j � � |j �tj� |j �� |j �tjj� |j�� d S ) NzFILE:{tmpdir}/other_ccache)�tmpdirz{tmpdir}/other_keytabr )s ccaches keytabz service/cs@r z-tr� r� T)r� )�formatr r� r ZaddprincZextract_keytabr r2 rp rt Zstore_cred_intor; r4 r� rN r= Zacquire_cred_fromr5 rq r7 r8 r9 r: �lifetimerk ) r0 ZCCACHE�KT�storeZ princ_nameZ initial_credsr� rs Z retrieve_resr r r �!test_store_cred_into_acquire_cred� s* � z3TestBaseUtilities.test_store_cred_into_acquire_credc C s� t �tt jj�}t �|�}|d }~t �tt jj�}t j|dd�d }t j ||d�}t � � }t � ||d t j j �}|�� |\} } } } | �� | �t j j � | �t� | �t� | �t j � d S r� )r2 r= r> rC rM r� r rD rp r� rq Zadd_credr9 r: r4 r7 r8 r5 r� r� r r r � test_add_cred s2 � ��� z TestBaseUtilities.test_add_credc C s� t �tt jj�}t �|�j}t �|�}|�� |j � t j � t � ||j �sNJ �|j �� |j�d� |j�� |j�t jj� d S )Nr� )r2 r= r rC rD rp rt rx r4 rs r5 r? rI r� rk r� rN r; r7 r8 r9 r: )r0 rs �credr� r r r �test_inquire_creds. s � z$TestBaseUtilities.test_inquire_credsc C s, t jj�� }t j|d�}|�t jj� ~d S )N��elements)r2 r9 r: � __bytes__rX rN )r0 Zkerberos_bytesZnew_oidr r r �test_create_oid_from_bytesA s z,TestBaseUtilities.test_create_oid_from_bytesc C s@ t jj}t jj}t �||B d�}|�t j� |j� ||B � d S )Nr ) r2 ZParameterReadErrorZ CALLING_CODEZ BadNameErrorZ ROUTINE_CODE�GSSErrorr5 Z NameReadErrorZmaj_coderN )r0 Z err_code1Z err_code2�errr r r �test_error_dispatchI s z%TestBaseUtilities.test_error_dispatchc C s( t �t jj�}|�� |�t jj� d S r )r2 Zinquire_names_for_mechr9 r: r4 r8 rC rD )r0 �resr r r �test_inquire_names_for_mechQ s z-TestBaseUtilities.test_inquire_names_for_mechc C s6 t �| jt jj�}t �|�}|�� |�t jj � d S r ) r2 r= r rC rD Zinquire_mechs_for_namer4 r8 r9 r: )r0 rs r� r r r �test_inquire_mechs_for_nameW s � z-TestBaseUtilities.test_inquire_mechs_for_name�passwordZPasswordc C s� | j �d�}| j j| j j|d� t�dtjj�}t�||� d��}|� � |\}}}|� � |� tj � |� � |�tjj� |� t� d S �N�user)r� � userr )r r� r r r2 r= rC rD �acquire_cred_with_passwordr r4 r5 rq r7 r8 r9 r: r� )r0 r� rs r� r� ru r� r r r � test_acquire_cred_with_password` s � z1TestBaseUtilities.test_acquire_cred_with_passwordZ password_addzPassword (add)c C s� | j �d�}| j j| j j|d� t�dtjj�}t�� }t� ||tj j |� d��}|� � |\}}}}|�� |�tj j � |�t� |�t� |�tj� d S r� )r r� r r r2 r= rC rD rq Zadd_cred_with_passwordr9 r: r r4 r7 r8 r5 r� ) r0 r� rs r� r� r� ru r� r� r r r �test_add_cred_with_passwordu s � z-TestBaseUtilities.test_add_cred_with_passwordZrfc5587zRFC 5587c C s, t �d d d �}|�t� |�� i }i }|D �]X}|�� |�t j� t �|�}|j}|j }|�t� |�t� |D ]�}|�� |�t j� t � |�} | j �� | j �� | j �� | j �t� | j �t� | j �t� ||vr�t� ||< || �|� qt|D ]�}|�� |�t j� t � |�} | j �� | j �� | j �� | j �t� | j �t� | j �t� ||v�rvt� ||< || �|� q�q,|�� D ]X\} } t| g�} t �| d d �}|�� |�| � t �d | d �}| D ]} |�| � �qԐq�|�� D ]4\} } t| g�} t �d d | �}|�� |�| � �q�d S r )r2 Zindicate_mechs_by_attrsr5 r6 r7 r4 rX Zinquire_attrs_for_mech� mech_attrs�known_mech_attrs�display_mech_attrrs � short_desc� long_descrF �addr$ rN �shouldnt_include)r0 r; Z attrs_dictZknown_attrs_dictrS Z inquire_outr� r� Z mech_attr� display_out�attrZexpected_mechsr` Z expected_mechr r r � test_rfc5587� sh z TestBaseUtilities.test_rfc5587c C st t j�d�dddgt j�d�dddgg}|D ]B}t �|d �}|j�|d � |j�|d � |j�|d � q,d S ) Nz1.3.6.1.5.5.13.24s GSS_C_MA_CBINDINGSs channel-bindingss$ Mechanism supports channel bindings.z1.3.6.1.5.5.13.1s GSS_C_MA_MECH_CONCRETEs concrete-mechsB Mechanism is neither a pseudo-mechanism nor a composite mechanism.r r� � r| )r2 rX � from_int_seqr� rs rN r� r� )r0 Z test_attrsr� r� r r r �test_display_mech_attr� s � �� z(TestBaseUtilities.test_display_mech_attrZrfc5801z SASL Namesc C s� t �� }|D ]z}t �|�}|j}|�� |�t� |�� |j}|�� |�t� |j }|�� |�t� t � |�}|�� |� |� q d S r ) r2 r3 Zinquire_saslname_for_mechZsasl_mech_namer4 r5 rF r7 rY Zmech_descriptionZinquire_mech_for_saslnamerN )r0 r; rS �outZout_smnZout_mnZout_mdZcmp_mechr r r �test_sasl_names� s z!TestBaseUtilities.test_sasl_namesZrfc4178zNegotiation Mechanismc C s� t �� }t j�d�}t j�d�}t j�d�}t �tt jj�}t jdt jjd�}t j d d||gd�j }zt j |d||gd �j }W n t j y� | � d � Y n0 t j |d |d�j } t �| |g�} | �� t j|||d �} | j} t j| | d �} | �� t j|||d �} | j} t jjt j | | d � t �| |g�} | �� t j|||d �} | j} t j| | d �} | �� t j|||d �} | j} t jjt j | | d � d S )N� 1.3.6.1.5.5.2�1.2.840.113554.1.2.2�1.3.6.1.4.1.311.2.2.10r� �rs Z name_typer� )r� r; � password�rs r� r; �5You do not have the GSSAPI gss-ntlmssp mech installedr� �rt rS r} )r2 r3 rX r� r= r> rC rM r� rp rt r� r� �skipTestZ set_neg_mechsrT r� ry r� r4 � should_raise)r0 Z all_mechsZ spnego_mechZ krb5_mech� ntlm_mechr� �usernameZkrb5_client_credsZntlm_client_credsr� Zneg_respr� r� r� r r r �test_set_neg_mechs s~ ���� ���� ���� �z$TestBaseUtilities.test_set_neg_mechsZggfzGlobal Grid Forumz1.16z^querying impersonator name of krb5 GSS Credential using the GSS_KRB5_GET_CRED_IMPERSONATOR OIDc C s� t �d�}| jj|ddgd� t�ttjj�}t� |�j }tj d dd�j }tj ||d�}|�� |j�� |j�tj� tj�d�}t�|j|�}|�t� |�� |d �t� |d �d t | jj�d �f � d S ) Nr r r� r r� r� r} z1.2.840.113554.1.2.2.5.14r s %s@%sr )r r r r r2 r= r> rC rM r� ry rp rt r� r4 r� r5 rq rX r� Zinquire_cred_by_oidra r7 rF rN r )r0 r r� r� r� r� �oid�infor r r �%test_inquire_cred_by_oid_impersonatorJ s* � � �z7TestBaseUtilities.test_inquire_cred_by_oid_impersonatorc C s� t �tt jj�}t �|�}t �tt jj�}t �|�d }t j |d |d�}|d }|d }t j||d |d�}|d } t j � d�} t � | | �} t � || �} | � t� | �� | � t� | �� | �| � d S )Nr r| r} r z1.2.840.113554.1.2.2.5.5)r2 r= r> rC rM r� r rD rp r� rX r� �inquire_sec_context_by_oidr5 ra r7 �should_have_same_items_as) r0 r� � ctx_resp1r� r� r� � server_ctxr� r� r� Zsession_key_oidZ client_keyZ server_keyr r r � test_inquire_sec_context_by_oidm s4 � � �� z1TestBaseUtilities.test_inquire_sec_context_by_oidc C s� t �tt jj�}t �|�}t �tt jj�}t �|�d }t j |d |d�}t j||d |d d�}|d }t j � d�}t j � t j||� d S )Nr r| r} r �1.2.3.4.5.6.7.8.9)r2 r= r> rC rM r� r rD rp r� rX r� r� r� r� ) r0 r� r� r� r� r� r� r� � invalid_oidr r r �2test_inquire_sec_context_by_oid_should_raise_error� s( � � �� �zDTestBaseUtilities.test_inquire_sec_context_by_oid_should_raise_errorz Add Credential with Passwordc C s� t j�d�}t jdt jjd�}zt j|d|gd�}W n t jyR | �d� Y n0 t jdt jj d�}t j ||j |d�d }t j�d �}t j ||d d �}|� t j� d S ) Nr� r� r� r� r� r� � serverr� r �1.3.6.1.4.1.7165.655.1.3s )r� �value)r2 rX r� r= rC r� r� r� r� rM r� rt �set_sec_context_optionr5 �SecurityContext)r0 r� r� r� �serverZ orig_context� reset_mechZ out_contextr r r �test_set_sec_context_option� s2 �� � �� �z-TestBaseUtilities.test_set_sec_context_optionc C s� t j�d�}t jdt jjd�}zt j|d|gd�}W n t jyR | �d� Y n0 t jdt jj d�}t j ||j |d�d }t j�d �}t j � t j||� d S ) Nr� r� r� r� r� r� r� r� r r� )r2 rX r� r= rC r� r� r� r� rM r� rt r� r� )r0 r� r� r� r� r� r� r r r � test_set_sec_context_option_fail� s. �� � �� �z2TestBaseUtilities.test_set_sec_context_option_failZ set_cred_optz Kitten Set Credential Optionz1.14z6GSS_KRB5_CRED_NO_CI_FLAGS_X was added in MIT krb5 1.14c C sF t �tt jj�}t j�d�}t �|�j}t j ||d�}|� t j � d S )Nz1.2.752.43.13.29)rt ) r2 r= r rC rD rX r� rp rt �set_cred_optionr5 rq )r0 rs Z no_ci_flags_x� orig_credZ output_credr r r �test_set_cred_option� s � z&TestBaseUtilities.test_set_cred_optionc C s@ t �tt jj�}t �|�j}t j�d�}t j � t j ||d� d S )Nr� � ) r2 r= r rC rD rp rt rX r� r� r� r� )r0 rs r� r� r r r �'test_set_cred_option_should_raise_error� s � �z9TestBaseUtilities.test_set_cred_option_should_raise_errorN)1r) r* r+ r1 r< rB rH rL rO �ktu�gssapi_extension_testrW rZ r] Zkrb_plugin_testrb rg rh ri ro rw rz r� r� r� r� Zkrb_minversion_testr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r. < s� � 1 � ! O B � � r. c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%S )&�TestIntEnumFlagSetc C s0 t jjt jjB }t �t j|�}t|��|� d S r )r2 r� � integrity�confidentiality�IntEnumFlagSetr� rN )r0 �int_val�fsetr r r �test_create_from_int� s �z'TestIntEnumFlagSet.test_create_from_intc C s: t jjt jjB }t �t j|�}t �t j|�}|�|� d S r )r2 r� r� r r rN )r0 r �fset1�fset2r r r �test_create_from_other_set� s �z-TestIntEnumFlagSet.test_create_from_other_setc C s0 t jjt jjg}t �t j|�}t|��|� d S r )r2 r� r� r r ra r� )r0 �lstr r r r �test_create_from_list s �z(TestIntEnumFlagSet.test_create_from_listc C s t �t j�}|�� d S r )r2 r r� Zshould_be_empty�r0 r r r r �test_create_empty s z$TestIntEnumFlagSet.test_create_emptyc C s t jjt jjg}t �t j|�S r )r2 r� r� r r )r0 r r r r � _create_fset s �z TestIntEnumFlagSet._create_fsetc C s( | � � }|�tjj� |�tjj� d S r )r r8 r2 r� r� r� �protection_readyr r r r � test_contains s z TestIntEnumFlagSet.test_containsc C s | � � �d� d S �Nr� )r �should_have_lengthr/ r r r �test_len s zTestIntEnumFlagSet.test_lenc C s< | � � }|�d� |�tjj� |�d� |�tjj� d S )Nr� r| )r r r� r2 r� r r8 r r r r �test_add s zTestIntEnumFlagSet.test_addc C sT | � � }|�d� |�tjj� |�d� |�tjj� |�d� |�tjj� d S )Nr� r� )r r �discardr2 r� r r� r� r r r r � test_discard! s z TestIntEnumFlagSet.test_discardc C s, | � � }|tjj@ �� |tjj@ �� d S r )r r2 r� r� rJ r rR r r r r � test_and_enum, s z TestIntEnumFlagSet.test_and_enumc C s& | � � }ttjj�}||@ �|� d S r �r r� r2 r� r� rN �r0 r r r r r � test_and_int1 s z TestIntEnumFlagSet.test_and_intc C sF | � � }| � � }| � � }|�tjj� |�tjj� ||@ �|� d S r �r r� r2 r� r �out_of_sequence_detectionrN �r0 r r Zfset3r r r � test_and_set7 s z TestIntEnumFlagSet.test_and_setc C s2 | � � }|tjjB }||k �� |�tjj� d S r )r r2 r� r rJ r8 )r0 r r r r r � test_or_enumA s z TestIntEnumFlagSet.test_or_enumc C s* | � � }ttjj�}||B �t|�� d S r r r r r r � test_or_intH s z TestIntEnumFlagSet.test_or_intc C sb | � � }| � � }| � � }|�tjj� |�tjj� |�tjj� |�tjj� ||B �|� d S r r r r r r � test_or_setN s z TestIntEnumFlagSet.test_or_setc C sT | � � }|tjjA }|tjjA }|�d� |�tjj� |�d� |�tjj� d S )Nr| r� )r r2 r� r r� r r8 r� r r r r � test_xor_enumZ s z TestIntEnumFlagSet.test_xor_enumc C sP | � � }|ttjj�A �t|�tjjA � |ttjj�A �t|�tjjA � d S r )r r� r2 r� r rN r� r r r r � test_xor_intf s ��z TestIntEnumFlagSet.test_xor_intc C sz | � � }| � � }|�tjj� |�tjj� ||A }|�d� |�tjj� |�tjj � |� tjj� |� tjj� d S r ) r r� r2 r� r r r r� r� r r8 r r r r � test_xor_seto s z TestIntEnumFlagSet.test_xor_setN)r) r* r+ r r r r r r r r r r r r r r r r r! r" r r r r r� � s$ r� c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�TestInitContextc C s t �tt jj�| _d S r )r2 r= r> rC rM r� r/ r r r r1 s �zTestInitContext.setUpc C s t �| j� d S r )r2 r@ r� r/ r r r �tearDown� s zTestInitContext.tearDownc C s� t �| j�}|�� |\}}}}}}|�� |�t j� |�t jj� |�t � |� d� |� � |� d� |�t � t �|� d S �Nr� r )r2 r� r� r4 r5 r� rN r9 r: r �should_be_at_least_lengthr7 r� rl �delete_sec_context)r0 r� rn Z out_mech_type� out_req_flags� out_token�out_ttl� cont_neededr r r �test_basic_init_default_ctx� s � z+TestInitContext.test_basic_init_default_ctxN)r) r* r+ r1 r$ r, r r r r r# ~ s r# c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd S )�TestAcceptContextc C sj t �tt jj�| _t �| j�}|d | _|d | _| j� � t �t t jj �| _ t � | j �d | _d | _d S )Nr| r )r2 r= r> rC rM r� r� r� r� r4 r rD r� rp r� r� )r0 r� r r r r1 � s � �zTestAcceptContext.setUpc C sJ t �| j� t �| j� t �| j� t �| j� | jd urFt �| j� d S r � r2 r@ r� r� rr r� r' r� r� r/ r r r r$ � s zTestAcceptContext.tearDownc C s� t �| j�}|�� |\| _}}}}}}}| j�� | j�t j� |�� |�t j� |�t j j � |� � |�t � |� d� |�d� |d ur�|�t j� |�t� d S r% )r2 r� r� r4 r� r5 r� r? rN r9 r: r7 r r& r� rq rl � r0 r� rs r� r) r( r* Zdelegated_credr+ r r r �+test_basic_accept_context_no_acceptor_creds� s" � z=TestAcceptContext.test_basic_accept_context_no_acceptor_credsc C s� t j| j| jd�}|�� |\| _}}}}}}}| j�� | j�t j� |�� |�t j� |� t j j � |� � |�t � |�d� |�d� |d ur�|�t j� |�t� d S )Nr} r� r )r2 r� r� r� r4 r� r5 r� r? rN r9 r: r7 r r& r� rq rl r/ r r r �test_basic_accept_context� s& �� z+TestAcceptContext.test_basic_accept_contextc C s� t jdt jjdt jjdd�}t �tt jj�| _t j | j|d�}|d | _ |d | _ | j � � t �t t jj�| _t �| j�d | _t j| j | j|d�}|j |j| _d S )N� abcxyz� 127.0.0.1�Zapplication_dataZinitiator_address_typeZinitiator_addressZacceptor_address_type�acceptor_address��channel_bindingsr| r �r~ r7 )r2 �ChannelBindings� AddressType�ipr= r> rC rM r� r� r� r� r4 r rD r� rp r� r� r� r� )r0 �bdgsr� r� r r r �test_channel_bindings� s2 ��� ��z'TestAcceptContext.test_channel_bindingsc C s� t jdt jjdt jjdd�}t �tt jj�| _t j | j|d�}|d | _ |d | _ | j � � t �t t jj�| _t �| j�d | _d|_t jjt j| j | j|d� d S ) Nr2 r3 r4 r6 r| r s 127.0.1.0r8 )r2 r9 r: r; r= r> rC rM r� r� r� r� r4 r rD r� rp r� r5 r� r� r� )r0 r< r� r r r �%test_bad_channel_binding_raises_error s0 ��� ��z7TestAcceptContext.test_bad_channel_binding_raises_errorN) r) r* r+ r1 r$ r0 r1 r= r> r r r r r- � s r- c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z e � dd�dd� �Z e � dd�dd� �Z e � dd�dd� �Ze � dd�dd� �Ze � dd�dd� �Ze � dd �d d � �Ze � dd �d d � �Ze � dd �d!d"� �Ze � dd �d#d$� �Zd%S )&�TestWrapUnwrapc C s� t �tt jj�| _t �| j�}|d | _|d | _t �t t jj �| _ t � | j �d | _ t j| j| j d�}|d | _|d | _t j| j| j| jd�}|d | _|d | _d S r{ )r2 r= r> rC rM r� r� r� r� r rD r� rp r� r� r� r� Z client_token2)r0 r� r� r� r r r r1 " s* � �� � zTestWrapUnwrap.setUpc C s@ t �| j� t �| j� t �| j� t �| j� t �| j� d S r r. r/ r r r r$ 7 s zTestWrapUnwrap.tearDownc C sN t �| j�}|�� |�t� |�� t �|�}|�� |�t j� || _d S r ) r2 Zexport_sec_contextr� r4 r5 rF r7 Zimport_sec_contextr� )r0 �tokZ imported_ctxr r r � test_import_export_sec_context> s z-TestWrapUnwrap.test_import_export_sec_contextc C s, t �| jd�}|�� |�t� |�� d S )N� some message)r2 �get_micr� r4 r5 rF r7 )r0 � mic_tokenr r r � test_get_micK s zTestWrapUnwrap.test_get_micc C s@ t �| jd�}t �| jd|�}|�� t j�t j| jdd� d S )NrB s some other messages some invalid mic)r2 rC r� Z verify_micr� rk r� r� )r0 rD �qop_usedr r r �test_basic_verify_micR s �z$TestWrapUnwrap.test_basic_verify_micc C sH t �| jd�}t j| jddd�}|�� |�� |�d� |�d� d S )N�d F)Z confidential)r2 Zwrap_size_limitr� rk Zshould_be_less_than)r0 Z with_confZ without_confr r r �test_wrap_size_limit] s � z#TestWrapUnwrap.test_wrap_size_limitc C s� t �| jd�\}}|�t� |�� |�t� |�� |�d� t � | j |�\}}}|�t� |�� |� � |� d� |�t� |�� |� d� d S �N� test message� test messager )r2 �wrapr� r5 rl rJ rF r7 �should_be_longer_than�unwrapr� rk �should_be_at_leastrN �r0 �wrapped_message�conf�unwrapped_message�qopr r r �test_basic_wrap_unwraph s � z%TestWrapUnwrap.test_basic_wrap_unwrapZdcezDCE (IOV/AEAD)c C sL d}d}d}t jt jj|f||dd�}|d j�� |d j�� |d j�� t �| j|�}|�t � |� � |d � d � |d � d � t � | j|�}|�t � |� � |� d� |� d� |� d� |d j�d� |d j�d� t �| j|�\}}|�t � |� � |�t� |d j� |� |d j� |� |d j� |� d S ) N� some encrypted data� some other encrypted data� some sig dataF)� auto_allocr � � r� r� r| )r2 �IOV� IOVBufferType� sign_only�allocaterR Zwrap_iov_lengthr� r5 rl rJ Zshould_be_at_least_size�wrap_iovrN r� � shouldnt_be� unwrap_iovr� r� �r0 Z init_dataZinit_other_dataZinit_signed_info� init_messagerS rU r r r �#test_basic_iov_wrap_unwrap_prealloc~ s: � z2TestWrapUnwrap.test_basic_iov_wrap_unwrap_preallocc C s� d}d}d}t �t jj|f||�}t �| j|�}|�t� |�� |� d� |� d� |� d� |d j � d� |d j � d� t � | j |�\}}|�t� |�� |�t� |d j � |� |d j � |� |d j � |� d S )NrW rX rY r� r| r� )r2 r] r^ r_ ra r� r5 rl rJ rN r� rb rc r� r� rd r r r �$test_basic_iov_wrap_unwrap_autoalloc� s* � z3TestWrapUnwrap.test_basic_iov_wrap_unwrap_autoallocc C s� d}t �| jd|�\}}|�t� |�� |�t� |�� |�d� t � | j ||�\}}}|�t� |�� |� � |� d� |�t� |�� |� d� d S )NrY rK rL r �r2 � wrap_aeadr� r5 rl rJ rF r7 rN � unwrap_aeadr� rk rP rN )r0 � assoc_datarR rS rT rU r r r �test_basic_aead_wrap_unwrap� s( � � z*TestWrapUnwrap.test_basic_aead_wrap_unwrapc C s� t �| jd�\}}|�t� |�� |�t� |�� |�d� t � | j |�\}}}|�t� |�� |� � |� d� |�t� |�� |� d� d S rJ rh rQ r r r �$test_basic_aead_wrap_unwrap_no_assoc� s$ � � z3TestWrapUnwrap.test_basic_aead_wrap_unwrap_no_assocc C s` d}t �| jd|�\}}|�t� |�� |�t� |�� |�d� t j � t j | j |d� d S )NrY rK rL s some other sig data) r2 ri r� r5 rl rJ rF r7 rN rj r� Z BadMICErrorr� )r0 rk rR rS r r r �2test_basic_aead_wrap_unwrap_bad_assoc_raises_error� s � �zATestWrapUnwrap.test_basic_aead_wrap_unwrap_bad_assoc_raises_errorZiov_miczIOV MICc C sR t jdt jjdft jjdd�}t �| j|� |d j�t jj� |d j � � d S �N� some datarY F�� std_layoutr� ) r2 r] r^ r_ rD � get_mic_iovr� �typerN r� r7 �r0 re r r r �test_get_mic_iov s �z TestWrapUnwrap.test_get_mic_iovc C sh t jdt jjdft jjdd�}t �| j|� |d j�t jj� |d j � � t � | j |�}|� � d S ro )r2 r] r^ r_ rD rs r� rt rN r� r7 �verify_mic_iovr� rk )r0 re rF r r r �test_basic_verify_mic_iov s �z(TestWrapUnwrap.test_basic_verify_mic_iovc C s: t jdt jjdft jjdfdd�}t j�t j| j|� d S )Nrp rY ZabaavaFrq ) r2 r] r^ r_ rD rw r� r� r� ru r r r �(test_verify_mic_iov_bad_mic_raises_error& s ��z7TestWrapUnwrap.test_verify_mic_iov_bad_mic_raises_errorc C sT t jdt jjdft jjddd�}t �| j|� |d j�t jj� |d j � � d S )Nrp rY F)rr rZ r� ) r2 r] r^ r_ rD Zget_mic_iov_lengthr� rt rN r� r7 ru r r r �test_get_mic_iov_length1 s �z&TestWrapUnwrap.test_get_mic_iov_lengthN)r) r* r+ r1 r$ rA rE rG rI rV r� r� rf rg rl rm rn rv rx ry rz r r r r r? ! s2 + r? s +r� )rF �strings *�H��r� s +z 1.3.5.1.5.2s *�H��z1.2.840.48018.1.2.2s +z 1.3.6.1.5.2.5)�SPNEGO�KRB5ZKRB5_OLDZ KRB5_WRONGZIAKERBc @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S ) �TestOIDTransformsc C s> t �� D ]0}tj|d d�}t|�}|�d�|d �� qd S )NrF r� z <OID {0}>r{ )� TEST_OIDSre r2 rX �reprrN r� )r0 r� �o�textr r r �test_decode_from_bytesK s z(TestOIDTransforms.test_decode_from_bytesc C s4 t �� D ]&}tj�|d �}|�� �|d � qd S )Nr{ rF )r re r2 rX r� r� rN )r0 r� r� r r r �test_encode_from_stringQ s z)TestOIDTransforms.test_encode_from_stringc C s> t �� D ]0}|d �d�}tj�|�}|�� �|d � qd S )Nr{ �.rF )r re r r2 rX r� r� rN )r0 r� Zint_seqr� r r r �test_encode_from_int_seqV s z*TestOIDTransforms.test_encode_from_int_seqc C sx t j�td d �}t j�td d �}t j�td d �}||k�d� ||k�d� ||k�d� ||k�d� d S )Nr} r{ r| TF)r2 rX r� r rN )r0 Zkrb5Z krb5_otherZspnegor r r �test_comparisons\ s z"TestOIDTransforms.test_comparisonsN)r) r* r+ r� r� r� r� r r r r r~ J s r~ )%r r ZsocketZunittestZsixZ should_be.allrN Z gssapi.raw�rawr2 Zgssapi.raw.miscZmiscrj Z k5test.unitZunitr� Zk5testZktZPY2� collectionsr �collections.abcr> Zgetfqdnr ZFQDNr ZKerberosTestCaser r. ZTestCaser� r# r- r? r r~ r r r r �<module> sb # < ������