OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/25/2021 01:14:26 PM	rwxr-xr-x
📄 __init__.py	30 bytes	02/07/2019 09:20:29 PM	rw-r--r--
📁 __pycache__	-	05/25/2021 01:14:27 PM	rwxr-xr-x
📄 common.py	16.9 KB	02/07/2019 09:20:29 PM	rw-r--r--
📄 common_test.py	16.53 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 disco.py	9.92 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 disco_test.py	11.34 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 dns_common.py	11.7 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 dns_common_lexicon.py	5.39 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 dns_common_lexicon_test.py	651 bytes	02/07/2019 09:20:30 PM	rw-r--r--
📄 dns_common_test.py	8.25 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 dns_test_common.py	1.61 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 dns_test_common_lexicon.py	5.48 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 enhancements.py	5.58 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 enhancements_test.py	2.36 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 manual.py	10.6 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 manual_test.py	7.37 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 null.py	1.34 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 null_test.py	624 bytes	02/07/2019 09:20:30 PM	rw-r--r--
📄 selection.py	13.55 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 selection_test.py	7.76 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 standalone.py	11.36 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 standalone_test.py	9.26 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 storage.py	4.08 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 storage_test.py	5.37 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 util.py	1.7 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 util_test.py	1.61 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 webroot.py	11.9 KB	02/07/2019 09:20:30 PM	rw-r--r--
📄 webroot_test.py	11.95 KB	02/07/2019 09:20:30 PM	rw-r--r--

Editing: manual_test.py

"""Tests for certbot.plugins.manual"""
import os
import unittest

import six
import mock
import sys

from acme import challenges

from certbot import errors

from certbot.tests import acme_util
from certbot.tests import util as test_util

class AuthenticatorTest(test_util.TempDirTestCase):
    """Tests for certbot.plugins.manual.Authenticator."""

def setUp(self):
        super(AuthenticatorTest, self).setUp()
        self.http_achall = acme_util.HTTP01_A
        self.dns_achall = acme_util.DNS01_A
        self.dns_achall_2 = acme_util.DNS01_A_2
        self.tls_sni_achall = acme_util.TLSSNI01_A
        self.achalls = [self.http_achall, self.dns_achall, self.tls_sni_achall, self.dns_achall_2]
        for d in ["config_dir", "work_dir", "in_progress"]:
            os.mkdir(os.path.join(self.tempdir, d))
            # "backup_dir" and "temp_checkpoint_dir" get created in
            # certbot.util.make_or_verify_dir() during the Reverter
            # initialization.
        self.config = mock.MagicMock(
            http01_port=0, manual_auth_hook=None, manual_cleanup_hook=None,
            manual_public_ip_logging_ok=False, noninteractive_mode=False,
            validate_hooks=False,
            config_dir=os.path.join(self.tempdir, "config_dir"),
            work_dir=os.path.join(self.tempdir, "work_dir"),
            backup_dir=os.path.join(self.tempdir, "backup_dir"),
            temp_checkpoint_dir=os.path.join(
                                        self.tempdir, "temp_checkpoint_dir"),
            in_progress_dir=os.path.join(self.tempdir, "in_progess"),
            tls_sni_01_port=5001)

from certbot.plugins.manual import Authenticator
        self.auth = Authenticator(self.config, name='manual')

def test_prepare_no_hook_noninteractive(self):
        self.config.noninteractive_mode = True
        self.assertRaises(errors.PluginError, self.auth.prepare)

def test_prepare_bad_hook(self):
        self.config.manual_auth_hook = os.path.abspath(os.sep)  # is / on UNIX
        self.config.validate_hooks = True
        self.assertRaises(errors.HookCommandNotFound, self.auth.prepare)

def test_more_info(self):
        self.assertTrue(isinstance(self.auth.more_info(), six.string_types))

def test_get_chall_pref(self):
        self.assertEqual(self.auth.get_chall_pref('example.org'),
                         [challenges.HTTP01,
                          challenges.DNS01,
                          challenges.TLSSNI01])

@test_util.patch_get_utility()
    def test_ip_logging_not_ok(self, mock_get_utility):
        mock_get_utility().yesno.return_value = False
        self.assertRaises(errors.PluginError, self.auth.perform, [])

@test_util.patch_get_utility()
    def test_ip_logging_ok(self, mock_get_utility):
        mock_get_utility().yesno.return_value = True
        self.auth.perform([])
        self.assertTrue(self.config.manual_public_ip_logging_ok)

def test_script_perform(self):
        self.config.manual_public_ip_logging_ok = True
        self.config.manual_auth_hook = (
            '{0} -c "from __future__ import print_function;'
            'import os;  print(os.environ.get(\'CERTBOT_DOMAIN\'));'
            'print(os.environ.get(\'CERTBOT_TOKEN\', \'notoken\'));'
            'print(os.environ.get(\'CERTBOT_CERT_PATH\', \'nocert\'));'
            'print(os.environ.get(\'CERTBOT_KEY_PATH\', \'nokey\'));'
            'print(os.environ.get(\'CERTBOT_SNI_DOMAIN\', \'nosnidomain\'));'
            'print(os.environ.get(\'CERTBOT_VALIDATION\', \'novalidation\'));"'
            .format(sys.executable))
        dns_expected = '{0}\n{1}\n{2}\n{3}\n{4}\n{5}'.format(
            self.dns_achall.domain, 'notoken',
            'nocert', 'nokey', 'nosnidomain',
            self.dns_achall.validation(self.dns_achall.account_key))
        http_expected = '{0}\n{1}\n{2}\n{3}\n{4}\n{5}'.format(
            self.http_achall.domain, self.http_achall.chall.encode('token'),
            'nocert', 'nokey', 'nosnidomain',
            self.http_achall.validation(self.http_achall.account_key))

self.assertEqual(
            self.auth.perform(self.achalls),
            [achall.response(achall.account_key) for achall in self.achalls])
        self.assertEqual(
            self.auth.env[self.dns_achall]['CERTBOT_AUTH_OUTPUT'],
            dns_expected)
        self.assertEqual(
            self.auth.env[self.http_achall]['CERTBOT_AUTH_OUTPUT'],
            http_expected)
        # tls_sni_01 challenge must be perform()ed above before we can
        # get the cert_path and key_path.
        tls_sni_expected = '{0}\n{1}\n{2}\n{3}\n{4}\n{5}'.format(
            self.tls_sni_achall.domain, 'notoken',
            self.auth.tls_sni_01.get_cert_path(self.tls_sni_achall),
            self.auth.tls_sni_01.get_key_path(self.tls_sni_achall),
            self.auth.tls_sni_01.get_z_domain(self.tls_sni_achall),
            'novalidation')
        self.assertEqual(
            self.auth.env[self.tls_sni_achall]['CERTBOT_AUTH_OUTPUT'],
            tls_sni_expected)

@test_util.patch_get_utility()
    def test_manual_perform(self, mock_get_utility):
        self.config.manual_public_ip_logging_ok = True
        self.assertEqual(
            self.auth.perform(self.achalls),
            [achall.response(achall.account_key) for achall in self.achalls])
        for i, (args, kwargs) in enumerate(mock_get_utility().notification.call_args_list):
            achall = self.achalls[i]
            if isinstance(achall.chall, challenges.TLSSNI01):
                self.assertTrue(
                        self.auth.tls_sni_01.get_cert_path(
                            self.tls_sni_achall) in args[0])
            else:
                self.assertTrue(
                        achall.validation(achall.account_key) in args[0])
            self.assertFalse(kwargs['wrap'])

@test_util.broken_on_windows
    def test_cleanup(self):
        self.config.manual_public_ip_logging_ok = True
        self.config.manual_auth_hook = 'echo foo;'
        self.config.manual_cleanup_hook = '# cleanup'
        self.auth.perform(self.achalls)

for achall in self.achalls:
            self.auth.cleanup([achall])
            self.assertEqual(os.environ['CERTBOT_AUTH_OUTPUT'], 'foo')
            self.assertEqual(os.environ['CERTBOT_DOMAIN'], achall.domain)
            if (isinstance(achall.chall, challenges.HTTP01) or
                isinstance(achall.chall, challenges.DNS01)):
                self.assertEqual(
                    os.environ['CERTBOT_VALIDATION'],
                    achall.validation(achall.account_key))
            if isinstance(achall.chall, challenges.HTTP01):
                self.assertEqual(
                    os.environ['CERTBOT_TOKEN'],
                    achall.chall.encode('token'))
            else:
                self.assertFalse('CERTBOT_TOKEN' in os.environ)
            if isinstance(achall.chall, challenges.TLSSNI01):
                self.assertEqual(
                    os.environ['CERTBOT_CERT_PATH'],
                    self.auth.tls_sni_01.get_cert_path(achall))
                self.assertEqual(
                    os.environ['CERTBOT_KEY_PATH'],
                    self.auth.tls_sni_01.get_key_path(achall))
                self.assertFalse(
                    os.path.exists(os.environ['CERTBOT_CERT_PATH']))
                self.assertFalse(
                    os.path.exists(os.environ['CERTBOT_KEY_PATH']))

if __name__ == '__main__':
    unittest.main()  # pragma: no cover