U  W[öÀã@s8dZddlmZmZddlZddlmZmZm Z ddl m Z ddl m Z ddlmZddlmZdd lmZdd lmZdd lmZdd lmZmZmZdd lmZedƒrúedƒrúddlmZm Z ddl!m"Z"m#Z#m$Z$m%Z%m&Z&ddl'm(Z(ddl)m*Z*ndZ+dZ,dZ-dZ.dZ/e e,ƒZ0e e-ƒZ1e e.ƒZ2e e/ƒZ3de,dZ4de-dZ5de,dZ6de,dZ7Gdd„dƒZ8Gd d!„d!e8eƒZ9Gd"d#„d#e9ƒZ:Gd$d%„d%e8eeƒZ;Gd&d'„d'e;ƒZGd,d-„d-eƒZ?Gd.d/„d/e@ƒZAGd0d1„d1eƒZBGd2d3„d3e@ƒZCGd4d5„d5e@ƒZDGd6d7„d7eƒZEdS)8z/ Tests for L{twisted.conch.client.knownhosts}. é)Úabsolute_importÚdivisionN)ÚErrorÚ b2a_base64Ú a2b_base64)Ú verifyObject)Ú networkString)Ú requireModule)ÚFilePath)ÚTestCase)ÚDeferred)ÚIKnownHostEntry)ÚHostKeyChangedÚUserRejectedKeyÚ InvalidEntry)ÚComparisonTestsMixinZ cryptographyZpyasn1)ÚKeyÚ BadKeyError)Ú PlainEntryÚ HashedEntryÚKnownHostsFileÚ UnparsedEntryÚ ConsoleUI)Údefault)Úkeydataz>cryptography and PyASN1 required for twisted.conch.knownhosts.stAAAAB3NzaC1yc2EAAAABIwAAAQEAsV0VMRbGmzhqxxayLRHmvnFvtyNqgbNKV46dU1bVFB+3ytNvue4Riqv/SVkPRNwMb7eWH29SviXaBxUhYyzKkDoNUq3rTNnH1Vnif6d6X4JCrUb5d3W+DmYClyJrZ5HgD/hUpdSkTRqdbQ2TrvSAxRacj+vHHT4F4dm1bJSewm3B2D8HVOoi/CbVh3dsIiCdp8VltdZx4qYVfYe2LwVINCbAa3d3tj9ma7RVfw3OH2Mfb+toLd1N5tBQFb7oqTt2nC6I/6Bd4JwPUld+IEitw/suElq/AIJVQXXujeyiZlea90HE65U2mF1ytr17HTAIT2ySokJWyuBANGACk6iIaw==sÈAAAAB3NzaC1yc2EAAAABIwAAAIEAwaeCZd3UCuPXhX39+/p9qO028jTF76DMVd9mPvYVDVXufWckKZauF7+0b7qm+ChT7kan6BzRVo4++gCVNfAlMzLysSt3ylmOR48tFpAfygg9UCX3DjHz0ElOOUKh3iifc9aUShD0OPaK3pR5JJ8jfiBfzSYWt/hDi/iZ4igsSs8=stAAAAB3NzaC1yc2EAAAABIwAAAQEAl/TQakPkePlnwCBRPitIVUTg6Z8VzN1en+DGkyo/evkmLw7o4NWR5qbysk9A9jXW332nxnEuAnbcCam9SHe1su1liVfyIK0+3bdn0YRB0sXIbNEtMs2LtCho/aV3cXPS+Cf1yut3wvIpaRnAzXxuKPCTXQ7/y0IXa8TwkRBH58OJa3RqfQ/NsSp5SAfdsrHyH2aitiVKm2jfbTKzSEqOQG/zq4J9GXTkq61gZugory/Tvl5/yPgSnOR6C9jVOMHf27ZPoRtyj9SY343Hd2QHiIE0KPZJEgCynKeWoKz8v6eTSK8n4rBnaqWdp8MnGZK1WGy05MguXbyCDuTC8AmJXQ==sŒAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIFwh3/zBANyPPIE60SMMfdKMYo3OvfvzGLZphzuKrzSt0q4uF+/iYqtYiHhryAwU/fDWlUQ9kck9f+IlpsNtY4=swww.twistedmatrix.com ssh-rsa ó sdivmod.com ssh-rsa s-www.twistedmatrix.com,198.49.126.131 ssh-rsa sE|1|gJbSEPBG9ZSBoZpHNtZBD1bHKBA=|bQv+0Xa0dByrwkA1EB0E7Xop/Fo= ssh-rsa c@s0eZdZdZdd„Zdd„Zdd„Zdd „Zd S) ÚEntryTestsMixina< Tests for implementations of L{IKnownHostEntry}. Subclasses must set the 'entry' attribute to a provider of that interface, the implementation of that interface under test. @ivar entry: a provider of L{IKnownHostEntry} with a hostname of www.twistedmatrix.com and an RSA key of sampleKey. cCstt|jƒdS)zA The given entry should provide IKnownHostEntry. N)rr Úentry©Úself©r úD/usr/lib/python3/dist-packages/twisted/conch/test/test_knownhosts.pyÚtest_providesInterfaceZsz&EntryTestsMixin.test_providesInterfacecCs,|j}| |jt t¡¡| |jd¡dS)a¦ Constructing a plain text entry from an unhashed known_hosts entry will result in an L{IKnownHostEntry} provider with 'keyString', 'hostname', and 'keyType' attributes. While outside the interface in question, these attributes are held in common by L{PlainEntry} and L{HashedEntry} implementations; other implementations should override this method in subclasses. óssh-rsaN)rÚ assertEqualÚ publicKeyrÚ fromStringÚ sampleKeyÚkeyType)rrr r r!Útest_fromStringas zEntryTestsMixin.test_fromStringcCs@t t¡}t t¡}| d|j |¡¡| d|j |¡¡dS)zj L{IKnownHostEntry.matchesKey} checks to see if an entry matches a given SSH key. TFN)rr&r'ÚotherSampleKeyr$rÚ matchesKey)rZtwistedmatrixDotComZ divmodDotComr r r!Útest_matchesKeyos   þ þzEntryTestsMixin.test_matchesKeycCs(| |j d¡¡| |j d¡¡dS)zl L{IKnownHostEntry.matchesHost} checks to see if an entry matches a given hostname. ówww.twistedmatrix.comswww.divmod.comN)Ú assertTruerÚ matchesHostÚ assertFalserr r r!Útest_matchesHost~sz EntryTestsMixin.test_matchesHostN)Ú__name__Ú __module__Ú __qualname__Ú__doc__r"r)r,r1r r r r!rPs  rc@s0eZdZdZeZeZdd„Zdd„Z dd„Z dS) ÚPlainEntryTestsz' Test cases for L{PlainEntry}. cCst |j¡|_dS)zU Set 'entry' to a sample plain-text entry with sampleKey as its key. N)rr&Ú plaintextLinerrr r r!ÚsetUpszPlainEntryTests.setUpcCs,t |j¡|_| |j d¡¡| ¡dS)zU A "hostname,ip" formatted line will match both the host and the IP. s198.49.126.131N)rr&Ú hostIPLinerr.r/r1rr r r!Útest_matchesHostIP–sz"PlainEntryTests.test_matchesHostIPcCsB| |j ¡|j d¡¡t |j¡}| | ¡|j d¡¡dS)z| L{PlainEntry.toString} generates the serialized OpenSSL format string for the entry, sans newline. rN)r$rÚtoStringr7Úrstriprr&r9)rZmultiHostEntryr r r!Ú test_toStringŸs    ÿzPlainEntryTests.test_toStringN) r2r3r4r5ÚsamplePlaintextLiner7ÚsampleHostIPLiner9r8r:r=r r r r!r6ˆs  r6c@s0eZdZdZedd…dZedd…dZdS)ÚPlainTextWithCommentTestsúN Test cases for L{PlainEntry} when parsed from a line with a comment. Néÿÿÿÿó plain text comment. s text following host/IP line )r2r3r4r5r>r7r?r9r r r r!r@«sr@c@s,eZdZdZeZdd„Zdd„Zdd„ZdS) ÚHashedEntryTestsaF Tests for L{HashedEntry}. This suite doesn't include any tests for host/IP pairs because hashed entries store IP addresses the same way as hostnames and does not support comma-separated lists. (If you hash the IP and host together you can't tell if you've got the key already for one or the other.) cCst |j¡|_dS)zo Set 'entry' to a sample hashed entry for twistedmatrix.com with sampleKey as its key. N)rr&Ú hashedLinerrr r r!r8ÀszHashedEntryTests.setUpcCs| |j ¡|j d¡¡dS)z L{HashedEntry.toString} generates the serialized OpenSSL format string for the entry, sans the newline. rN)r$rr;rEr<rr r r!r=ÈszHashedEntryTests.test_toStringc Csöd}d}t t¡}t| ¡ƒ}d}t|||||ƒ}t|||||ƒ}| ||t|ddd…||||ƒ¡| ||t||ddd…|||ƒ¡| ||t|||ddd…||ƒ¡| ||t|||t t¡|ƒ¡| ||t|||||ddd…ƒ¡dS)zö Two L{HashedEntry} instances compare equal if and only if they represent the same host and key in exactly the same way: the host salt, host hash, public key type, public key, and comment fields must all be equal. sgJbSEPBG9ZSBoZpHNtZBD1bHKBAsbQv+0Xa0dByrwkA1EB0E7Xop/Fos hello, worldNrB)rr&r'rÚtyperZ"assertNormalEqualityImplementationr*)rZhostSaltZhostHashr%r(ZcommentrZ duplicater r r!Ú test_equalityÐs”  ÿÿ þþ þþ þþþþ þþzHashedEntryTests.test_equalityN) r2r3r4r5ÚsampleHashedLinerEr8r=rGr r r r!rDµs rDc@s eZdZdZedd…dZdS)ÚHashedEntryWithCommentTestsrANrBrC)r2r3r4r5rHrEr r r r!rIsrIc@s8eZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd S) ÚUnparsedEntryTestsz$ Tests for L{UnparsedEntry} cCstdƒ|_dS)zR Set up the 'entry' to be an unparsed entry for some random text. ó This is a bogus entry. N)rrrr r r!r8szUnparsedEntryTests.setUpcCs| d|jj¡dS)ze Creating an L{UnparsedEntry} should simply record the string it was passed. rKN)r$rZ_stringrr r r!r)sÿz"UnparsedEntryTests.test_fromStringcCs| |j d¡¡dS)z: An unparsed entry can't match any hosts. r-N)r0rr/rr r r!r1#sz#UnparsedEntryTests.test_matchesHostcCs| |j t t¡¡¡dS)z9 An unparsed entry can't match any keys. N)r0rr+rr&r'rr r r!r,*sz"UnparsedEntryTests.test_matchesKeycCs| d|j ¡¡dS)zd L{UnparsedEntry.toString} returns its input string, sans trailing newline. s This is a bogus entry. N)r$rr;rr r r!r=1sz UnparsedEntryTests.test_toStringN) r2r3r4r5r8r)r1r,r=r r r r!rJs  rJc@sXeZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd d „Z dd„Z dd„Z dd„Z dS)ÚParseErrorTestsa¢ L{HashedEntry.fromString} and L{PlainEntry.fromString} can raise a variety of errors depending on misformattings of certain strings. These tests make sure those errors are caught. Since many of the ways that this can go wrong are in the lower-level APIs being invoked by the parsing logic, several of these are integration tests with the C{base64} and L{twisted.conch.ssh.keys} modules. cCs| t|jd¡dS)zm If there are fewer than three elements, C{fromString} should raise L{InvalidEntry}. sinvalidN)Ú assertRaisesrr&©rÚclsr r r!ÚinvalidEntryTestDsz ParseErrorTests.invalidEntryTestcCs| t|jd¡dS)zX If the key is not base64, C{fromString} should raise L{BinasciiError}. sx x xN)rMÚ BinasciiErrorr&rNr r r!Ú notBase64TestLszParseErrorTests.notBase64Testc Cs(| t|jd |dtdƒ ¡g¡¡dS)z• If the key portion of the entry is valid base64, but is not actually an SSH key, C{fromString} should raise L{BadKeyError}. ó r#sHey, this isn't an SSH key!N)rMrr&ÚjoinrÚstrip)rrOÚprefixr r r!Ú badKeyTestSs ÿÿzParseErrorTests.badKeyTestcCs| t¡dS)z™ If there are fewer than three whitespace-separated elements in an entry, L{PlainEntry.fromString} should raise L{InvalidEntry}. N)rPrrr r r!Útest_invalidPlainEntry]sz&ParseErrorTests.test_invalidPlainEntryc Cs<| t¡t ¡\}}}| ttjd |d||g¡¡dS)zà If there are fewer than three whitespace-separated elements in an entry, or the hostname salt/hash portion has more than two elements, L{HashedEntry.fromString} should raise L{InvalidEntry}. rSs||N)rPrrHÚsplitrMrr&rT©rÚaÚbÚcr r r!Útest_invalidHashedEntryes   ÿz'ParseErrorTests.test_invalidHashedEntrycCs| t¡dS)z† If the key portion of a plain entry is not decodable as base64, C{fromString} should raise L{BinasciiError}. N)rRrrr r r!Útest_plainNotBase64qsz#ParseErrorTests.test_plainNotBase64c CsŽ| t¡t ¡\}}}| ttjd dtdƒ  ¡||g¡¡| ttjd tj tdƒ  ¡d||g¡¡| ttjd d||g¡¡dS)z‡ If the key, host salt, or host hash portion of a hashed entry is not encoded, it will raise L{BinasciiError}. rSs|1|x|óstuffs|xs|1|x|xN) rRrrHrYrMrQr&rTrrUÚMAGICrZr r r!Útest_hashedNotBase64ys, þÿÿþþz$ParseErrorTests.test_hashedNotBase64cCst ¡\}}}| t|¡dS)z¡ If the key portion of the entry is valid base64, but is not actually an SSH key, C{HashedEntry.fromString} should raise L{BadKeyError}. N)rHrYrWrrZr r r!Útest_hashedBadKeysz!ParseErrorTests.test_hashedBadKeycCs| td¡dS)z  If the key portion of the entry is valid base64, but is not actually an SSH key, C{PlainEntry.fromString} should raise L{BadKeyError}. shostnameN)rWrrr r r!Útest_plainBadKey™sz ParseErrorTests.test_plainBadKeyN) r2r3r4r5rPrRrWrXr^r_rbrcrdr r r r!rL:s    rLc@s<eZdZdZdd„Zeedfdd„Zdd„Zd d „Z d d „Z d d„Z dd„Z dd„Z dd„Zdd„Zdd„Zdd„Zdd„Zdd„Zdd „Zd!d"„Zd#d$„Zd%d&„Zd'd(„Zd)d*„Zd+d,„Zd-d.„Zd/d0„Zd1d2„Zd3d4„Zd5d6„Zd7d8„Z d9d:„Z!d;d<„Z"d=d>„Z#d?d@„Z$dAdB„Z%dCdD„Z&dEdF„Z'dGdH„Z(dIdJ„Z)dKS)LÚKnownHostsDatabaseTestsz& Tests for L{KnownHostsFile}. cCst| ¡ƒ}| |¡|S)zC Return a FilePath with the given initial content. )r ÚmktempZ setContent)rÚcontentÚfpr r r!ÚpathWithContent§s  z'KnownHostsDatabaseTests.pathWithContentsN # That was a blank line. This is just unparseable. |1|This also unparseable. cCst | |¡¡S)zq Return a sample hosts file, with keys for www.twistedmatrix.com and divmod.com present. )rÚfromPathri)rrgr r r!ÚloadSampleHostsFile°s z+KnownHostsDatabaseTests.loadSampleHostsFilecCsDt| ¡ƒ}t| ¡ƒ}t|ƒ}| tt|d|¡| ||j¡dS)zš L{KnownHostsFile.savePath} is read-only; if an assignment is made to it, L{AttributeError} is raised and the value is unchanged. ÚsavePathN)r rfrrMÚAttributeErrorÚsetattrr$rl)rÚpathÚnewÚ hostsFiler r r!Útest_readOnlySavePath¼s   z-KnownHostsDatabaseTests.test_readOnlySavePathcCs&t| t¡ƒ}| gt| ¡ƒ¡dS)zz The default initializer for L{KnownHostsFile} disregards any existing contents in the save path. N)rrirHr$ÚlistÚ iterentries©rrqr r r!Ú&test_defaultInitializerIgnoresExistingÈsz>KnownHostsDatabaseTests.test_defaultInitializerIgnoresExistingcCs^| t¡}t|ƒ}| dt t¡¡}| ¡| |gt |  ¡ƒ¡| |  ¡d|  ¡¡dS)z· After using the default initializer for L{KnownHostsFile}, the first use of L{KnownHostsFile.save} overwrites any existing contents in the save path. ówww.example.comrN) rirHrÚ addHostKeyrr&r*Úsaver$rsrtr;Ú getContent)rrorqrr r r!Ú'test_defaultInitializerClobbersExistingÑs ÿz?KnownHostsDatabaseTests.test_defaultInitializerClobbersExistingcCs^t| t¡ƒ}| dt t¡¡}| ¡| dt t¡¡}| ¡|  ||gt |  ¡ƒ¡dS)z» After L{KnownHostsFile.save} is used once with an instance initialized by the default initializer, contents of the save path are respected and preserved. rwsanother.example.comN) rrirHrxrr&r*ryÚthirdSampleKeyr$rsrt)rrqZpreSaveZpostSaver r r!Útest_saveResetsClobberStateâsÿÿz3KnownHostsDatabaseTests.test_saveResetsClobberStatecCs$| ¡}| dtt| ¡ƒƒ¡dS)z· Loading a L{KnownHostsFile} from a path with six entries in it will result in a L{KnownHostsFile} object with six L{IKnownHostEntry} providers in it. éN)rkr$Úlenrsrtrur r r!Útest_loadFromPathósz)KnownHostsDatabaseTests.test_loadFromPathcCs>tt| ¡ƒƒ}| dt t¡¡| dtt |  ¡ƒƒ¡dS)z™ If the save path for a L{KnownHostsFile} does not exist, L{KnownHostsFile.iterentries} still returns added but unsaved entries. rwéN) rr rfrxrr&r'r$rrsrtrur r r!Útest_iterentriesUnsavedýsz/KnownHostsDatabaseTests.test_iterentriesUnsavedcCsN| t¡}t| ¡ƒ}| |dt¡| |d d¡¡| dt |ƒ¡dS)zÈ Loading a L{KnownHostsFile} from a path containing a single valid L{HashedEntry} entry will result in a L{KnownHostsFile} object with one L{IKnownHostEntry} provider. rr-rN) rkrHrsrtÚassertIsInstancerr.r/r$r©rrqÚentriesr r r!Útest_verifyHashedEntrys   z.KnownHostsDatabaseTests.test_verifyHashedEntrycCsN| t¡}t| ¡ƒ}| |dt¡| |d d¡¡| dt |ƒ¡dS)zÇ Loading a L{KnownHostsFile} from a path containing a single valid L{PlainEntry} entry will result in a L{KnownHostsFile} object with one L{IKnownHostEntry} provider. ró divmod.comrN) rkÚotherSamplePlaintextLinersrtrƒrr.r/r$rr„r r r!Útest_verifyPlainEntrys   z-KnownHostsDatabaseTests.test_verifyPlainEntrycCsN| d¡}t| ¡ƒ}| |dt¡| |d ¡d¡| dt|ƒ¡dS)z° Loading a L{KnownHostsFile} from a path that only contains ' ' will result in a L{KnownHostsFile} object containing a L{UnparsedEntry} object. rrórN©rkrsrtrƒrr$r;rr„r r r!Útest_verifyUnparsedEntry!s   z0KnownHostsDatabaseTests.test_verifyUnparsedEntrycCs>| d¡}t| ¡ƒ}| |dt¡| |d ¡d¡dS)z± Loading a L{KnownHostsFile} from a path that contains a comment will result in a L{KnownHostsFile} object containing a L{UnparsedEntry} object. s# That was a blank line. rs# That was a blank line.N)rkrsrtrƒrr$r;r„r r r!Útest_verifyUnparsedComment.s  z2KnownHostsDatabaseTests.test_verifyUnparsedCommentcCsN| d¡}t| ¡ƒ}| |dt¡| |d ¡d¡| dt|ƒ¡dS)z˜ Loading a L{KnownHostsFile} from a path that contains an unparseable line will be represented as an L{UnparsedEntry} instance. sThis is just unparseable. rsThis is just unparseable.rNr‹r„r r r!Útest_verifyUnparsableLine:s   z1KnownHostsDatabaseTests.test_verifyUnparsableLinecCsN| d¡}t| ¡ƒ}| |dt¡| |d ¡d¡| dt|ƒ¡dS)zà Loading a L{KnownHostsFile} from a path containing an unparseable line that starts with an encryption marker will be represented as an L{UnparsedEntry} instance. s|1|This is unparseable. rs|1|This is unparseable.rNr‹r„r r r!Ú%test_verifyUnparsableEncryptionMarkerFs   z=KnownHostsDatabaseTests.test_verifyUnparsableEncryptionMarkercCs^| ¡}t t|ƒ¡}t| ¡ƒ}| g|¡| t|ƒ ¡¡|  ¡|  t|ƒ ¡¡dS)z£ Loading a L{KnownHostsFile} from a path that does not exist should result in an empty L{KnownHostsFile} that will save back to that path. N) rfrrjr rsrtr$r0Úexistsryr.)rZpnÚknownHostsFiler…r r r!Útest_loadNonExistentSs  z,KnownHostsDatabaseTests.test_loadNonExistentcCsJt| ¡ƒ}| d¡ d¡}t |¡}| ¡| d¡| | ¡¡dS)zð Loading a L{KnownHostsFile} from a path whose parent directory does not exist should result in an empty L{KnownHostsFile} that will save back to that path, creating its parent directory(ies) in the process. Zfoos known_hostsFN) r rfÚchildrrjryZrestatr.r)rZthePathZknownHostsPathr‘r r r!Útest_loadNonExistentParentas    z2KnownHostsDatabaseTests.test_loadNonExistentParentcCs’| tt¡}t |¡}| dt t¡¡}ttt j t |j ƒ  ¡dt |jƒ  ¡dtd}| d| d¡¡| ¡| || ¡¡dS)zq L{KnownHostsFile.save} will write out a new file with any entries that have been added. ósome.example.comó|s ssh-rsa réN)rirHrˆrrjrxrr&r|rrarÚ _hostSaltrUZ _hostHashÚthirdSampleEncodedKeyr$Úcountryrz)rror‘ÚnewEntryZexpectedContentr r r!Útest_savingAddsEntryos8ÿ ÿÿÿ þþ ýýüüÿ z,KnownHostsDatabaseTests.test_savingAddsEntrycCsZt| ¡ƒ}t|ƒ}| dt t¡¡}| ¡| ¡t |¡}|  |gt |  ¡ƒ¡dS)z² L{KnownHostsFile.save} only writes new entries to the save path, not entries which were added and already written by a previous call to C{save}. r•N) r rfrrxrr&r'ryrjr$rsrt)rroÚ knownHostsrr r r!Útest_savingAvoidsDuplication‡s ÿ z4KnownHostsDatabaseTests.test_savingAvoidsDuplicationc Csœ| t¡}t |¡}| d¡}| t¡W5QRXt t ¡}|  d|¡|  ¡t |¡}|  dddg|  dt t¡¡|  dt t¡¡|  d|¡g¡dS)zÁ L{KnownHostsFile.save} will not overwrite existing entries in its save path, even if they were only added after the L{KnownHostsFile} instance was initialized. r[óbrandnew.example.comTr-r‡N)rirHrrjÚopenÚwriterˆrr&r|rxryr$Ú hasHostKeyr'r*)rrorÚ hostsFileObjÚkeyr r r!Útest_savingsPreservesExisting˜s&       ÿÿ ûz5KnownHostsDatabaseTests.test_savingsPreservesExistingcCs$| ¡}| | dt t¡¡¡dS)z‘ L{KnownHostsFile.hasHostKey} returns C{True} when a key for the given hostname is present and matches the expected key. r-N)rkr.r¢rr&r'rur r r!Útest_hasPresentKey¶s ÿz*KnownHostsDatabaseTests.test_hasPresentKeycCsT| ¡}| | dt t¡¡¡| | dt t¡¡¡| | dt t¡¡¡dS)zy L{KnownHostsFile.hasHostKey} returns C{False} when a key for the given hostname is not present. snon-existent.example.comr-N)rkr0r¢rr&r'r.ÚecdsaSampleKeyrur r r!Útest_notPresentKeyÀsÿÿÿz*KnownHostsDatabaseTests.test_notPresentKeyc Csht t¡}tdg| ¡|dƒ}| ¡}|j d¡}| |  ¡d¡W5QRX|  d|  d|¡¡dS)zâ L{KnownHostsFile.hasHostKey} returns C{True} when a key for the given hostname is present in the file, even if it is only added to the file after the L{KnownHostsFile} instance is initialized. rŸrŠr[rTN) rr&r'rZsshTyperkrlr r¡r;r$r¢)rr¤rrqr£r r r!Útest_hasLaterAddedKeyÎs  ÿz-KnownHostsDatabaseTests.test_hasLaterAddedKeycCs`| ¡}t| ¡ƒ}| t|jdt t¡¡}|  |j |d¡|  |j d¡|  |j |j ¡dS)a  L{KnownHostsFile.hasHostKey} raises L{HostKeyChanged} if the host key is present in the underlying file, but different from the expected one. The resulting exception should have an C{offendingEntry} indicating the given entry. r-rrN)rkrsrtrMrr¢rr&r*r$ÚoffendingEntryÚlinenororl)rrqr…Ú exceptionr r r!Útest_savedEntryHasKeyMismatchÝs þz5KnownHostsDatabaseTests.test_savedEntryHasKeyMismatchcCsT| ¡}| dt t¡¡| t|jdt t¡¡}| |j d¡| |j |j ¡dS)ai Even after a new entry has been added in memory but not yet saved, the L{HostKeyChanged} exception raised by L{KnownHostsFile.hasHostKey} has a C{lineno} attribute which indicates the 1-based line number of the offending entry in the underlying file when the given host key does not match the expected host key. rwr-rN) rkrxrr&r*rMrr¢r$r«rorl)rrqr¬r r r!Ú%test_savedEntryAfterAddHasKeyMismatchîsÿþz=KnownHostsDatabaseTests.test_savedEntryAfterAddHasKeyMismatchcCsdtt| ¡ƒƒ}| dt t¡¡}| t|j dt t ¡¡}|  |j |¡|  |j¡|  |j¡dS)az L{KnownHostsFile.hasHostKey} raises L{HostKeyChanged} if the host key is present in memory (but not yet saved), but different from the expected one. The resulting exception has a C{offendingEntry} indicating the given entry, but no filename or line number information (reflecting the fact that the entry exists only in memory). rwN)rr rfrxrr&r*rMrr¢r|r$rªZ assertIsNoner«ro)rrqrr¬r r r!Útest_unsavedEntryHasKeyMismatchsÿþ z7KnownHostsDatabaseTests.test_unsavedEntryHasKeyMismatchcCsŠ| ¡}t t¡}| d| d|¡¡| d|¡}| dt|jƒ¡| d|  d¡¡| |j d¡| ||j ¡| d| d|¡¡dS)zr L{KnownHostsFile.addHostKey} adds a new L{HashedEntry} to the host file, and returns it. Fósomewhere.example.coméTr#N) rkrr&r|r$r¢rxrr˜r/r(r%)rrqÚaKeyr›r r r!Útest_addHostKeys  ÿ ÿ ÿz'KnownHostsDatabaseTests.test_addHostKeycCs6| ¡}t t¡}| | d|¡j| d|¡j¡dS)z‡ L{KnownHostsFile.addHostKey} generates a random salt for each new key, so subsequent salts will be different. r°ssomewhere-else.example.comN)rkrr&r|ZassertNotEqualrxr˜)rrqr²r r r!Útest_randomSalts*s    þz(KnownHostsDatabaseTests.test_randomSaltscCsX| ¡}| dt t¡¡tƒ}| |ddt t¡¡}g}| |j¡|  |dg¡dS)zb Verifying a valid key should return a L{Deferred} which fires with True. ó1.2.3.4r-TN) rkrxrr&r'ÚFakeUIÚ verifyHostKeyÚ addCallbackÚappendr$)rrqÚuiÚdÚlr r r!Útest_verifyValidKey6s ÿ z+KnownHostsDatabaseTests.test_verifyValidKeycCsF| ¡}t t¡}tƒ}| dt t¡¡| |dd|¡}| |t ¡S)z| Verifying an invalid key should return a L{Deferred} which fires with a L{HostKeyChanged} failure. rµr-) rkrr&r|r¶rxr'r·Ú assertFailurer©rrqZwrongKeyrºr»r r r!Útest_verifyInvalidKeyEs ÿz-KnownHostsDatabaseTests.test_verifyInvalidKeycCs\| ¡}t t¡}tƒ}g}| |dd|¡}| |j¡| g|¡| |j d¡|||fS)a Set up a test to verify a key that isn't present. Return a 3-tuple of the UI, a list set up to collect the result of the verifyHostKey call, and the sample L{KnownHostsFile} being used. This utility method avoids returning a L{Deferred}, and records results in the returned list instead, because the events which get generated here are pre-recorded in the 'ui' object. If the L{Deferred} in question does not fire, the it will fail quickly with an empty list. ósample-host.example.comó4.3.2.1sÖThe authenticity of host 'sample-host.example.com (4.3.2.1)' can't be established. RSA key fingerprint is SHA256:mS7mDBGhewdzJkaKRkx+wMjUdZb/GzvgcdoYjX5Js9I=. Are you sure you want to continue connecting (yes/no)? ) rkrr&r|r¶r·ÚaddBothr¹r$Ú promptText)rrqZ absentKeyrºr¼r»r r r!ÚverifyNonPresentKeySs"  ÿ  þz+KnownHostsDatabaseTests.verifyNonPresentKeyc Csl| ¡\}}}|j d¡| dg|¡t |j¡}| d| dt  t ¡¡¡| d| dt  t ¡¡¡dS)zæ Verifying a key where neither the hostname nor the IP are present should result in the UI being prompted with a message explaining as much. If the UI says yes, the Deferred should fire with True. TrÂrÁN) rÅÚpromptDeferredÚcallbackr$rrjrlr¢rr&r|)rrºr¼r‘Zreloadedr r r!Útest_verifyNonPresentKey_Yesps  þÿþz4KnownHostsDatabaseTests.test_verifyNonPresentKey_YescCs,| ¡\}}}|j d¡|d t¡dS)zø Verifying a key where neither the hostname nor the IP are present should result in the UI being prompted with a message explaining as much. If the UI says no, the Deferred should fail with UserRejectedKey. FrN)rÅrÆrÇZtrapr)rrºr¼r‘r r r!Útest_verifyNonPresentKey_Noƒs z3KnownHostsDatabaseTests.test_verifyNonPresentKey_NocCsvtjtjdtjdtjdtjdd}| ¡}tƒ}g}| |dd|¡}| |j¡|  g|¡|  |j d¡d S) zâ Set up a test to verify an ECDSA key that isn't present. Return a 3-tuple of the UI, a list set up to collect the result of the verifyHostKey call, and the sample L{KnownHostsFile} being used. ÚxÚyÚ privateValueÚcurve)rÊrËrÌrÍrÁrÂsØThe authenticity of host 'sample-host.example.com (4.3.2.1)' can't be established. ECDSA key fingerprint is SHA256:fJnSpgCcYoYYsaBbnWj1YBghGh/QTDgfe4w4U5M5tEo=. Are you sure you want to continue connecting (yes/no)? N) rZ_fromECComponentsrZECDatanistp256rkr¶r·rÃr¹r$rÄ)rZecObjrqrºr¼r»r r r!Útest_verifyNonPresentECKeys*üÿ  þz2KnownHostsDatabaseTests.test_verifyNonPresentECKeycCs4| ¡}t t¡}tƒ}| |dd|¡}| |t¡S)z¾ Verifying a key where the host is present (and correct), but the IP is present and different, should result the deferred firing in a HostKeyChanged failure. r-rÂ)rkrr&r|r¶r·r¾rr¿r r r!Útest_verifyHostIPMismatch¬s ÿz1KnownHostsDatabaseTests.test_verifyHostIPMismatchcCsXtƒ}| ¡}t t¡}| |dd|¡| dt |j ¡  d|¡¡| dg|j ¡dS)z½ Verifying a key where the hostname is present but the IP is not should result in the key being added for the IP and the user being warned about the change. r-s5.4.3.2Tz`Warning: Permanently added the RSA host key for IP address '5.4.3.2' to the list of known hosts.N) r¶rkrr&r'r·r$rrjrlr¢Ú userWarnings)rrºrqZ expectedKeyr r r!Útest_verifyKeyForHostAndIPºs( ÿ ÿÿýz2KnownHostsDatabaseTests.test_verifyKeyForHostAndIPcCsh| ¡}| dt t¡¡| dt t¡¡| ¡i}|jj|d<t   d|¡}ddg}|  ||¡dS)zn For a given host, get the host key algorithms for that host in the known_hosts file. r-ú known-hostsr#secdsa-sha2-nistp256N) rkrxrr&r*r§ryrlrorZgetHostKeyAlgorithmsr$)rrqÚoptionsZ algorithmsZexpectedAlgorithmsr r r!Útest_getHostKeyAlgorithmsÎs$ÿÿ ÿz1KnownHostsDatabaseTests.test_getHostKeyAlgorithmsN)*r2r3r4r5rirHrˆrkrrrvr{r}r€r‚r†r‰rŒrrŽrr’r”rœržr¥r¦r¨r©r­r®r¯r³r´r½rÀrÅrÈrÉrÎrÏrÑrÔr r r r!re¢sP ÿÿ              rec@s0eZdZdZdd„Zdd„Zdd„Zdd „Zd S) ÚFakeFilez[ A fake file-like object that acts enough like a file for L{ConsoleUI.prompt}. cCsg|_g|_d|_dS)NF)ÚinlinesÚ outchunksÚclosedrr r r!Ú__init__èszFakeFile.__init__cCs |j d¡S)z8 Return a line from the 'inlines' list. r)rÖÚpoprr r r!ÚreadlineîszFakeFile.readlinecCs|jrtdƒ‚|j |¡dS)z@ Append the given item to the 'outchunks' list. zthe file was closedN)rØÚIOErrorr×r¹)rÚchunkr r r!r¡õszFakeFile.writecCs d|_dS)zd Set the 'closed' flag to True, explicitly marking that it has been closed. TN)rØrr r r!ÚcloseþszFakeFile.closeN)r2r3r4r5rÙrÛr¡rÞr r r r!rÕâs  rÕc@sXeZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd d „Z dd„Z dd„Z dd„Z dS)ÚConsoleUITestsz& Test cases for L{ConsoleUI}. cCstƒ|_t|jƒ|_dS)zA Create a L{ConsoleUI} pointed at a L{FakeFile}. N)rÕÚfakeFilerÚopenFilerºrr r r!r8 szConsoleUITests.setUpcCs|jS)z/ Return the current fake file. )ràrr r r!rászConsoleUITests.openFilecCstƒ|_||j_dS)z” Create a new fake file (the next file that self.ui will open) with the given list of lines to be returned from readline(). N)rÕràrÖ)rÚlinesr r r!ÚnewFileszConsoleUITests.newFilecCs`dD]V}| |g¡g}|j d¡ |j¡| dg|jj¡| dg|¡| |jj ¡qdS)z´ L{ConsoleUI.prompt} writes a message to the console, then reads a line. If that line is 'yes', then it returns a L{Deferred} that fires with True. )óyessYessyes z Hello, world!TN© rãrºÚpromptr¸r¹r$ràr×r.rØ)rZokYesr¼r r r!Útest_promptYes$s zConsoleUITests.test_promptYescCs`dD]V}| |g¡g}|j d¡ |j¡| dg|jj¡| dg|¡| |jj ¡qdS)z´ L{ConsoleUI.prompt} writes a message to the console, then reads a line. If that line is 'no', then it returns a L{Deferred} that fires with False. )ónosNosno zGoodbye, world!FNrå)rZokNor¼r r r!Ú test_promptNo3s zConsoleUITests.test_promptNocCsÈ| ddddg¡g}|j d¡ |j¡| dg|¡| |jjdgdgd¡| |jj ¡| d d d d g¡g}|j d ¡ |j¡| dg|¡| |jjd gdgd¡| |jj ¡dS)a, L{ConsoleUI.prompt} writes a message to the console, then reads a line. If that line is neither 'yes' nor 'no', then it says "Please enter 'yes' or 'no'" until it gets a 'yes' or a 'no', at which point it returns a Deferred that answers either True or False. swhatsuhsokayräsPlease say something useful.TsPlease type 'yes' or 'no': r—sblahr`sfehrèsPlease say something negative.FNrå©rr¼r r r!Útest_promptRepeatedlyBs( ÿÿ ÿÿz$ConsoleUITests.test_promptRepeatedlycCs&dd„}t|ƒ}| d¡}| |t¡S)z¢ If the C{opener} passed to L{ConsoleUI} raises an exception, that exception will fail the L{Deferred} returned from L{ConsoleUI.prompt}. cSs tƒ‚dS©N)rÜr r r r!ÚraiseIt`sz5ConsoleUITests.test_promptOpenFailed..raiseItzThis is a test.)rrær¾rÜ)rrírºr»r r r!Útest_promptOpenFailed[s z$ConsoleUITests.test_promptOpenFailedcCs0|j d¡| dg|jj¡| |jj¡dS)zR L{ConsoleUI.warn} should output a message to the console object. z Test message.N)rºÚwarnr$ràr×r.rØrr r r!Ú test_warngs zConsoleUITests.test_warncCs4dd„}t|ƒ}| d¡| t| t¡ƒd¡dS)zY L{ConsoleUI.warn} should log a traceback if the output can't be opened. cSs dddS)Nrrr r r r r!rítsz3ConsoleUITests.test_warnOpenFailed..raiseItzThis message never makes it.rN)rrïr$rZflushLoggedErrorsÚZeroDivisionError)rrírºr r r!Útest_warnOpenFailedps z"ConsoleUITests.test_warnOpenFailedN) r2r3r4r5r8rárãrçrérërîrðròr r r r!rßs   rßc@s(eZdZdZdd„Zdd„Zdd„ZdS) r¶a A fake UI object, adhering to the interface expected by L{KnownHostsFile.verifyHostKey} @ivar userWarnings: inputs provided to 'warn'. @ivar promptDeferred: last result returned from 'prompt'. @ivar promptText: the last input provided to 'prompt'. cCsg|_d|_d|_dSrì)rÐrÆrÄrr r r!rÙˆszFakeUI.__init__cCs||_tƒ|_|jS)zV Issue the user an interactive prompt, which they can accept or deny. )rÄr rÆ©rÚtextr r r!ræŽsz FakeUI.promptcCs|j |¡dS)z> Issue a non-interactive warning to the user. N)rÐr¹rór r r!rï—sz FakeUI.warnN)r2r3r4r5rÙrærïr r r r!r¶|s  r¶c@seZdZdZdS)Ú FakeObjectzw A fake object that can have some attributes. Used to fake L{SSHClientTransport} and L{SSHClientFactory}. N)r2r3r4r5r r r r!rõŸsrõc@sheZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd d „Z dd„Z dd„Z dd„Z dd„Z dd„ZdS)ÚDefaultAPITestszœ The API in L{twisted.conch.client.default.verifyHostKey} is the integration point between the code in the rest of conch and L{KnownHostsFile}. cKs.| |d¡| |d¡| |dd¡|jS)z The patched version of 'open'; this returns a L{FakeFile} that the instantiated L{ConsoleUI} can use. z/dev/ttyzr+bÚ bufferingr)r$rà)rÚfnameÚmodeÚkwargsr r r!Ú patchedOpen¬s  zDefaultAPITests.patchedOpencCs’tƒ|_| td|j¡| ¡|_i|_tt |jƒƒ}dD] }|  |t   t ¡¡}||j|<q:| ¡tƒ|_tƒ|j_d|jdœ|_|jj_dS)z0 Patch 'open' in verifyHostKey. Z_open)óexists.example.comrÂrü)ÚhostrÒN)rÕràZpatchrrûrfÚ hostsOptionÚ hashedEntriesrr rxrr&r'ryrõÚ fakeTransportÚfactoryrÓ)rr‘rýrr r r!r8·s   þzDefaultAPITests.setUpcCs0g}t |jdtd¡ |j¡| dg|¡dS)zÎ L{default.verifyHostKey} should return a L{Deferred} which fires with C{1} when passed a host, IP, and key which already match the known_hosts file it is supposed to check. rÂó I don't care.rN)rr·rr'r¸r¹r$rêr r r!Útest_verifyOKKeyÌs ÿÿz DefaultAPITests.test_verifyOKKeycs0tj d¡‰‡fdd„}| |¡|tjd<dS)aC Replace the HOME environment variable until the end of the current test, with the given new home-directory, so that L{os.path.expanduser} will yield controllable, predictable results. @param tempHome: the pathname to replace the HOME variable with. @type tempHome: L{str} ÚHOMEcs ˆdkrtjd=n ˆtjd<dS)Nr)ÚosÚenvironr ©ZoldHomer r!Ú cleanupHomeãs z0DefaultAPITests.replaceHome..cleanupHomeN)rrÚgetZ addCleanup)rZtempHomerr rr!Ú replaceHomeØs   zDefaultAPITests.replaceHomecCs€g}| ¡}|j}t|ƒ d¡ d¡}| ¡ ¡t|ƒ |¡| |¡d|jd<t   |j dt d¡  |j¡| dg|¡dS)z« L{default.verifyHostKey} should find your known_hosts file in ~/.ssh/known_hosts if you don't specify one explicitly on the command line. z.sshZ known_hostsNrÒrÂrr)rfrþr r“ÚparentÚmakedirsZmoveTor rÓrr·rr'r¸r¹r$)rr¼ZtmpdirZoldHostsOptionZhostsNonOptionr r r!Útest_noKnownHostsOptionìs    ÿÿz'DefaultAPITests.test_noKnownHostsOptioncCsjg}t |jdtd¡ |j¡| dg|jj¡| dg|¡t   t |j ƒ¡}|  | dt t¡¡¡dS)a L{default.verifyHostKey} should return a L{Deferred} which fires with C{1} when passed a host which matches with an IP is not present in its known_hosts file, and should also warn the user that it has added the IP address. s8.7.6.5sFingerprint not required.z`Warning: Permanently added the RSA host key for IP address '8.7.6.5' to the list of known hosts.rN)rr·rr'r¸r¹r$ràr×rrjr rþr.r¢rr&)rr¼r‘r r r!Útest_verifyHostButNotIPÿs ÿÿý ÿz'DefaultAPITests.test_verifyHostButNotIPcCsLd|jjjd<|jj d¡t |jdtd¡}|  dg|jj ¡|  |t ¡S)z¥ L{default.verifyHostKey} should return a L{Default} which fires with C{0} when passed an unknown host that the user refuses to acknowledge. sfake.example.comrýrès9.8.7.6sNo fingerprint!sÏThe authenticity of host 'fake.example.com (9.8.7.6)' can't be established. RSA key fingerprint is SHA256:vD0YydsNIUYJa7yLZl3tIL8h0vZvQ8G+HPG7JLmQV0s=. Are you sure you want to continue connecting (yes/no)? ) rrrÓràrÖr¹rr·r*r$r×r¾r©rr»r r r!Útest_verifyQuestionsþúz#DefaultAPITests.test_verifyQuestioncCst |jdtd¡}| |t¡S)z L{default.verifyHostKey} should return a L{Deferred} which fails with L{HostKeyChanged} if the host key is incorrect. rÂzAgain, not required.)rr·rr*r¾rrr r r!Útest_verifyBadKey'sþz!DefaultAPITests.test_verifyBadKeycCsJ|jd ¡ ¡d}t |t t¡ ¡dt |j ƒj i¡}|  d|¡dS)zy L{default.isInKnownHosts} should return C{1} when a host with a key is in the known hosts file. rÂrrÒrN) rÿr;rYrÚisInKnownHostsrr&r'Úblobr rþror$©rrýÚrr r r!Útest_inKnownHosts2s þz!DefaultAPITests.test_inKnownHostscCs*t dddt|jƒji¡}| d|¡dS)z} L{default.isInKnownHosts} should return C{0} when a host with a key is not in the known hosts file. z not.theres irrelevantrÒrN)rrr rþror$)rrr r r!Útest_notInKnownHosts>s þz$DefaultAPITests.test_notInKnownHostscCsJ|jd ¡ ¡d}t |t t¡ ¡dt |j ƒj i¡}|  d|¡dS)z’ L{default.isInKnownHosts} should return C{2} when a host with a key other than the given one is in the known hosts file. rÂrrÒéN) rÿr;rYrrrr&r*rr rþror$rr r r!Útest_inKnownHostsKeyChangedIs þz+DefaultAPITests.test_inKnownHostsKeyChangedN)r2r3r4r5rûr8rr r rrrrrrr r r r!rö¦s     rö)Fr5Z __future__rrrZbinasciirrQrrZzope.interface.verifyrZtwisted.python.compatrZtwisted.python.reflectr Ztwisted.python.filepathr Ztwisted.trial.unittestr Ztwisted.internet.deferr Ztwisted.conch.interfacesr Ztwisted.conch.errorrrrZtwisted.test.testutilsrZtwisted.conch.ssh.keysrrZtwisted.conch.client.knownhostsrrrrrZtwisted.conch.clientrZtwisted.conch.testrÚskipZsampleEncodedKeyZotherSampleEncodedKeyr™ZecdsaSampleEncodedKeyr'r*r|r§r>rˆr?rHrr6r@rDrIrJrLreÚobjectrÕrßr¶rõrör r r r!Úsv         ÿ ÿÿ ÿ ÿ ÿ ÿÿÿÿ8# Q +hD%u#