hZSrSSKrSSKrSSKJrJrJrJr SSKJ r SSK J r SSK J r SSKJr SSKJr SS KJr SS KJr SS KJqJr SS KJq SS KJrJr SSKJ r "SS\ RB5r""SS\ RB5r#"SS\RH5r%"SS\RH5r&\ "\RN5"SS\RH55r(Sr)Sr*"SS5r+[.b"SS[2RX5r-"S S!\\5r."S"S#\5r/"S$S%\/5r0"S&S'\5r1"S(S)\\+5r2"S*S+5r3"S,S-\5r4"S.S/\5r5g!\a Sr\"5 GN!f=f)0z Tests for twisted SSL support. N)defer interfacesprotocolreactor)ConnectionDone)waitUntilAllDisconnected)basic)FilePath)platform)ProperlyCloseFilesMixin)TestCase)SSLcrypto)ssl)ClientTLSContextcertPathc S=qqgN)rr\/root/1688_scrapy/alibaba-scraper/venv/lib/python3.13/site-packages/twisted/test/test_ssl.py_noSSLrscr) implementerc@\rSrSrSr/SQrSS/rSrSrSr S r S r g ) UnintelligentProtocol'z @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @cvar pretext: text sent before TLS is set up. @type pretext: C{bytes} @cvar posttext: text sent after TLS is set up. @type posttext: C{bytes} )s first lineslast thing before tls startsSTARTTLSsfirst thing after tls startedslast thing everc8[R"5UlgrrDeferreddeferredselfs r__init__UnintelligentProtocol.__init__7( rcLURHnURU5 M gr)pretextsendLine)r#ls rconnectionMade$UnintelligentProtocol.connectionMade:sA MM! rcUS:XawURR[5URR5 UR HnUR U5 M URR5 gg)NREADY) transportstartTLSrfactoryclientposttextr)loseConnection)r#liner*s r lineReceived"UnintelligentProtocol.lineReceived>s[ 8  NN # #$4$6 8K8K L]] a # NN ) ) + rc:URRS5 grr!callbackr#reasons rconnectionLost$UnintelligentProtocol.connectionLostE t$rr!N) __name__ __module__ __qualname____firstlineno____doc__r(r3r$r+r6r=__static_attributes__rrrrr's. LG02DEH),%rrc:\rSrSrSrS SjrSrSrSrSr Sr g ) LineCollectorIa* @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @ivar doTLS: whether the protocol is initiate TLS or not. @type doTLS: C{bool} @ivar fillBuffer: if set to True, it will send lots of data once C{STARTTLS} is received. @type fillBuffer: C{bool} cPXlX l[R"5Ulgr)doTLS fillBufferrr r!)r#rKrLs rr$LineCollector.__init__Vs $( rcHSURl/URlg)Nr)r1rawdatalinesr"s rr+LineCollector.connectionMade[s"  rcURRRU5 US:XaUR(a#[ S5HnUR S5 M UR S5 UR (aB[[[S9nURRX0RR5 gUR5 gg)NrisXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXr.)privateKeyFileNamecertificateFileName) r1rPappendrLranger)rKServerTLSContextrr/r0server setRawMode)r#r5xctxs rr6LineCollector.lineReceived_s !!$' ; sAMM+.$ MM( #zz&'/(0''\\-@-@A! rcvUR=RU- slURR5 gr)r1rOr/r4r#datas rrawDataReceivedLineCollector.rawDataReceivedos' $ %%'rc:URRS5 grr9r;s rr=LineCollector.connectionLostsr?r)r!rKrLNF) rArBrCrDrEr$r+r6r`r=rFrrrrHrHIs  )  " (%rrHc\rSrSrSrSrSrg)SingleLineServerProtocolwzC A protocol that sends a single line of data at C{connectionMade}. cnURRS5 URR5 g)N+OK )r/writegetPeerCertificater"s rr+'SingleLineServerProtocol.connectionMade|s% 34 ))+rrN)rArBrCrDrEr+rFrrrrfrfws ,rrfc*\rSrSrSrSrSrSrSrg)RecordingClientProtocolzj @ivar deferred: a deferred that will fire with first received content. @type deferred: L{defer.Deferred} c8[R"5Ulgrrr"s rr$ RecordingClientProtocol.__init__r&rc8URR5 gr)r/rkr"s rr+&RecordingClientProtocol.connectionMades ))+rc:URRU5 grr9r^s r dataReceived$RecordingClientProtocol.dataReceivedr?rr@N) rArBrCrDrEr$r+rurFrrrrnrns ),%rrnc$\rSrSrSrSrSrSrg) ImmediatelyDisconnectingProtocolz A protocol that disconnect immediately on connection. It fires the C{connectionDisconnected} deferred of its factory on connetion lost. c8URR5 grr/r4r"s rhandshakeCompleted3ImmediatelyDisconnectingProtocol.handshakeCompleteds %%'rcNURRRS5 gr)r1connectionDisconnectedr:r;s rr=/ImmediatelyDisconnectingProtocol.connectionLosts ++44T:rrN)rArBrCrDrEr|r=rFrrrrxrxs (;rrxc[R"5nUR[RS5 [R"5nUR 5nXlXlURU5 URUS5 [R"5nURS5 URS5 URS5 URUR 55 URUR 55 URUR!55 URUS5 X#U4$)z Create a certificate for given C{organization} and C{organizationalUnit}. @return: a tuple of (key, request, certificate) objects. imd5r<)rPKey generate_keyTYPE_RSAX509Req get_subjectOOU set_pubkeysignX509set_serial_numbergmtime_adj_notBeforegmtime_adj_notAfter set_issuer set_subject get_pubkey) organizationorganizationalUnitpkeyreqsubjectcerts rgenerateCertificateObjectsrs ;;=Dfoot, .. CooGI#JNN4HHT5 ;;=D1a R OOCOO%&S__&'OOCNN$%IIdE d?rc`[X5up4nSU[R4SU[R4SU[R44Hdupgn[ R RX45RS5n [U 5RU"[RU55 Mf g)zy Create certificate files key, req and cert prefixed by C{basename} for given C{organization} and C{organizationalUnit}. keyrrzutf-8N) rrdump_privatekeydump_certificate_requestdump_certificateosextsepjoinencoder setContent FILETYPE_PEM) basenamerrrrrextobjdumpFuncfNames rgenerateCertificateFilesrs 1RODt f,,- V445 v../(  /66w?""8F,?,?#EF rc$\rSrSrSrSrSrSrg)ContextGeneratingMixina4 Offer methods to create L{ssl.DefaultOpenSSLContextFactory} for both client and server. @ivar clientBase: prefix of client certificate files. @type clientBase: C{str} @ivar serverBase: prefix of server certificate files. @type serverBase: C{str} @ivar clientCtxFactory: a generated context factory to be used in L{IReactorSSL.connectSSL}. @type clientCtxFactory: L{ssl.DefaultOpenSSLContextFactory} @ivar serverCtxFactory: a generated context factory to be used in L{IReactorSSL.listenSSL}. @type serverCtxFactory: L{ssl.DefaultOpenSSLContextFactory} cUR5n[XQU5 [R"[R R US45[R R US45/UQ70UD6nXV4$)Nrr)mktemprrDefaultOpenSSLContextFactoryrrr)r#orgorgUnitargskwArgsbaseserverCtxFactorys rmakeContextFactory)ContextGeneratingMixin.makeContextFactoryso{{} G4;; IINND%= ) IINND&> *    %%rcUR"U0UD6uUlUlUR"U0UD6uUlUlgr)r clientBaseclientCtxFactory serverBaser)r# clientArgs clientKwArgs serverArgs serverKwArgss rsetupServerAndClient+ContextGeneratingMixin.setupServerAndClientsN151H1H 2 '2 ..261H1H 2 '2 ..r)rrrrN)rArBrCrDrErrrFrrrrrs& & rrc"\rSrSrSrSrSrSrg)rWzN A context factory with a default method set to L{OpenSSL.SSL.SSLv23_METHOD}. Fcr[RUS'[RR"U/UQ70UD6 g)N sslmethod)r SSLv23_METHODrrr$)r#rkws rr$ServerTLSContext.__init__s/!//B{O  , , 5 5d HT HR HrrN)rArBrCrDrEisClientr$rFrrrrWrWs  IrrWc\\rSrSrSr\R "\S5cSrSr Sr Sr Sr S r g) StolenTCPTestsizW For SSL transports, test many of the same things which are tested for TCP transports. N2Reactor does not support SSL, cannot run SSL testsc[RR[[5R 55nUR 5n[R"X#XQS9$)zI Create an SSL server with a certificate using L{IReactorSSL.listenSSL}.  interface) rPrivateCertificateloadPEMr r getContentoptionsr listenSSL)r#address portNumberr1rcontextFactorys r createServerStolenTCPTests.createServer sF%%--hx.@.K.K.MN  nXXrcP[R"5nURXU5$)z7 Create an SSL client using L{IReactorSSL.connectSSL}. )rCertificateOptions connectSSL)r#rr clientCreatorrs r connectClientStolenTCPTests.connectClients%//1''^LLrc"[R$)z Return L{OpenSSL.SSL.Error} as the expected error type which will be raised by a write to the L{OpenSSL.SSL.Connection} object after it has been closed. )rErrorr"s rgetHandleExceptionType%StolenTCPTests.getHandleExceptionTypes yyrc N[R"[R"[R"S5[R"[R"S5[R"S5[R"S55[R"S555$)a Return a L{hamcrest.core.matcher.Matcher} for the argument L{OpenSSL.SSL.Error} will be constructed with for this case. This is basically just a random OpenSSL implementation detail. It would be better if this test worked in a way which did not require this. z SSL routines SSL_writessl_write_internalzprotocol is shutdown)hamcrestcontainsequal_toany_ofr"s rgetHandleErrorCodeMatcher(StolenTCPTests.getHandleErrorCodeMatcher#s{    !!.1%%k2%%&:;%%b) !!"89   rr)rArBrCrDrEr IReactorSSLrskiprrrrrFrrrrrs7 gt,4CYM rrcr\rSrSrSr\R "\S5cSrSr Sr Sr Sr S Sjr SrS rS rS rg) TLSTestsi:zs Tests for startTLS support. @ivar fillBuffer: forwarded to L{LineCollector.fillBuffer} @type fillBuffer: C{bool} NrFcURRb$URRR5 URRb%URRR5 ggr) clientProtor/r4 serverProtor"s rtearDownTLSTests.tearDownJs[    % % 1    & & 5 5 7    % % 1    & & 5 5 7 2rc,^^TUl[R"5=o@lU4SjUlU(aSUlOSUlTUl[R"5=oPlU4SjUlU(aSUlOSUl[R"SUSS9nURUR5 [R"SUR5RU5 [ R""TR$TR$/5$)am Helper method to run TLS tests. @param clientProto: protocol instance attached to the client connection. @param serverProto: protocol instance attached to the server connection. @param clientIsServer: flag indicated if client should initiate startTLS instead of server. @return: a L{defer.Deferred} that will fire when both connections are lost. c>T$rrrsr#TLSTests._runTest..`krFTc>T$rrrsrrrhrrr 127.0.0.1r)rr ClientFactory clientFactoryrXr2r ServerFactory serverFactoryr listenTCP addCleanup stopListening connectTCPgetHostportr gatherResultsr!)r#rrclientIsServercfsfr s `` r_runTestTLSTests._runTestPs'"*"8"8":: ) BIBI&"*"8"8":: ) BIBI  B+> **+; (;(;R@""K$8$8+:N:N#OPPrc^U4SjnTR[5[STR55nUR U5$)zf Test for server and client startTLS: client should received data both before and after the startTLS. c>TRTRR[R[R -5 gr) assertEqualrrPrr(r3)ignorer#s rcheck TLSTests.test_TLS..check{5   ""((%--0E0N0NN rTrrrHrL addCallbackr#rds` rtest_TLSTLSTests.test_TLSus8   MM/1=t3W X}}U##rc^U4SjnTR[5[STR55nUR U5$)z Test for server startTLS not followed by a startTLS in client: the data received after server startTLS should be received as raw. c>TRTRR[R5 TR TRR S5 g)NzNo encrypted bytes received)rrrPrr( assertTruerOignoredr#s rr"TLSTests.test_unTLS..checksA   T//557L7T7T U OOD..668U VrFrrs` r test_unTLSTLSTests.test_unTLSs=  W MM ! #]5$//%J }}U##rc^U4SjnTR[STR5[5S5nUR U5$)z* Test startTLS first initiated by client. c>TRTRR[R[R -5 gr)rrrPrr(r3r#s rr)TLSTests.test_backwardsTLS..checkrrT)rrHrLrrrs` rtest_backwardsTLSTLSTests.test_backwardsTLSs?   MM $ 02G2I4 }}U##r)rrrrrd)rArBrCrDrErrrrrLrrrrrr&r+rFrrrrr:sKgt,4CJKK8 #QJ $ $$rrcH\rSrSrSr\R "\S5cSrSr Sr g)SpammyTLSTestsiz9 Test TLS features with bytes sitting in the out buffer. NrTr) rArBrCrDrErrrrrLrFrrrr.r.s&gt,4CJrr.cT\rSrSr\R "\S5cSrSrSr Sr Sr Sr g)BufferingTestsiNrc:URRb$URRR5 URRb$URRR5 [ [ URUR/5$r)rr/r4rrrr"s rrBufferingTests.tearDownst    % % 1    & & 5 5 7    % % 1    & & 5 5 7'$2B2BDDTDT1UVVrc^^[5=mUl[5=mUl[R "5n[R "5=o lU4SjUlU4SjUl[R"[[5n[R"5n[R"SXSS9nURUR5 [R "SUR#5R$X$5nURUR&5 TR(R+UR,S5$)Nc>T$rrrsrr6BufferingTests.test_openSSLBuffering..+rc>T$rrrsrrr5r6rrrrri)rfrrnrrrrr2rrrClientContextFactoryrrrr rr r  disconnectr!rr) r#rXr2sCTXcCTXr clientConnectorrrs @@rtest_openSSLBuffering$BufferingTests.test_openSSLBufferings)A)CC d&)@)BB d&'')'5577--//(C'')  FKH **+!,, ,,f  223##//   4  r)r2rr) rArBrCrDrrrrrrrr=rFrrrr0r0s/gt,4CKKW rr0c\\rSrSrSr\R "\S5cSrSr Sr Sr Sr S r g) ConnectionLostTestsiz SSL connection closing tests. Nrc^SnTRXS-40XS-405 [R"5n[RUl[R "SUTR 5=Tln[R"5n[Ul[R"5Ul [R"SUR5RUTR 5 URR#U4Sj5$)Ntwisted.test.test_ssl, client, serverrrc8>TRR5$r) serverPortr ) ignoredResultr#s rr=ConnectionLostTests.testImmediateDisconnect..s$//"?"?"Ar)rrrProtocolrrrrFrrxrr rrr r rr)r#rserverProtocolFactoryrFclientProtocolFactorys` rtestImmediateDisconnect+ConnectionLostTests.testImmediateDisconnects% !!  " #R#Z/?)@" !) 6 6 8)1):):&'.'8'8 $d&;&;(  *!) 6 6 8)I&7<~~7G4     % % !  ! !  %;;GG A  rc^^[[R5"SS[R55nSnUR X"S-40X"S-405 U"5m[R "5nU4SjUl[R"SX0R5nURUR5 U"5m[R"5nU4SjUl[R"S UR5RUUR 5 S n["R$"TR&R)U5TR&R)U5/5$) z Both sides of SSL connection close connection; the connections should close cleanly, and only after the underlying TCP connection has disconnected. c*\rSrSrSrSrSrSrSrg)MConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshakeiFc8[R"5Ulgr)rr doner"s rr$VConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.__init__s!NN, rc8URR5 grr{r"s rr|`ConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.handshakeCompleted s--/rc>URRU5 U?gr)rRerrbackr;s rr=\ConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.connectionLost s !!&)Ir)rRN) rArBrCrDgotDatar$r|r=rFrrrCloseAfterHandshakerPsG - 0 rrZrBrCrDc>T$rrserverProtocolsrrBConnectionLostTests.test_bothSidesLoseConnection..rrc>T$rrclientProtocolsrrr^r_rrc.UR[5 gr)trapr)failures r checkResultEConnectionLostTests.test_bothSidesLoseConnection..checkResult&s LL (r)rrIHandshakeListenerrrIrrrrrrr rrr r rrr rR addErrback) r#rZrrJrFrKrfrbr]s @@rtest_bothSidesLoseConnection0ConnectionLostTests.test_bothSidesLoseConnections@ Z22 3 ("3"3  4 & !!  " #R#Z/?)@" -. ( 6 6 8)?&&&q*?AVAVW   001,. ( 6 6 8)?&     % % !  ! !   )""##..{;##..{;   rcL^ ^ SnURXS-40XS-405 SnURR5R[R U5 [ R"5n[R"5m URT l [R"5nU 4SjUl[R"SX@R5=Uln[ R"5n[R"5m URT l [R""5nU 4SjUl[R$"SUR'5R(UUR5 [ R*"X6/S S 9nUR-UR.5$) NrBrCrDcg)NFr)as rverify4ConnectionLostTests.testFailedVerify..verify6src>T$rrr\srr6ConnectionLostTests.testFailedVerify..?r_rrc>T$rrrasrrrrHr_rrT) consumeErrors)rr getContext set_verifyr VERIFY_PEERrr rrIr:r=rrrrrFrrr r  DeferredListr _cbLostConns) r#rroserverConnLostrJrFclientConnLostrKdlrbr]s @@rtestFailedVerify$ConnectionLostTests.testFailedVerify0s\% !!  " #R#Z/?)@"   ((*55coovN)!**,(6(?(?% ( 6 6 8)?&'.'8'8 $&;&;(  *)!**,(6(?(?% ( 6 6 8)?&     % % !  ! !     @PT U~~d//00rcLUuup#upEURU5 URU5 [R/n[R"5(aSSKJn URU5 UR"U6 UR"U6 URR5$)Nr)ConnectionLost) assertFalserrr isWindowstwisted.internet.errorrrUrdrFr )r#resultssSuccesssResultcSuccesscResultacceptableErrorsrs rry ConnectionLostTests._cbLostConnsSs3:00h " "II;      =  # #N 3 &' &',,..r)rF)rArBrCrDrErrrrrLrjr}ryrFrrrr@r@s7gt,4C 82 h!1F/rr@c0\rSrSrSrSrSrSrSrSr g) FakeContextinzC L{OpenSSL.SSL.Context} double which can more easily be inspected. cXlSUlg)Nr_method_options)r#methods rr$FakeContext.__init__ss  rc.U=RU-slgr)r)r#rs r set_optionsFakeContext.set_optionsws  rcgrrr#fileNames ruse_certificate_file FakeContext.use_certificate_filez rcgrrrs ruse_privatekey_fileFakeContext.use_privatekey_file}rrrN) rArBrCrDrEr$rrrrFrrrrrns!  rrc\\rSrSrSr\R "\S5cSrSr Sr Sr Sr S r g) !DefaultOpenSSLContextFactoryTestsiz0 Tests for L{ssl.DefaultOpenSSLContextFactory}. Nrc[R"[[[S9UlURR 5Ulg)N)_contextFactory)rrrrrrucontextr"s rsetUp'DefaultOpenSSLContextFactoryTests.setUps6">> h  **557 rcbURURR[R5 URURR [R -[R 5 URURR [R-5 g)zs L{ssl.DefaultOpenSSLContextFactory.getContext} returns an SSL context which can use SSLv3 or TLSv1 but not SSLv2. N) rrrr TLS_METHODr OP_NO_SSLv2r OP_NO_TLSv1_2r"s r test_method-DefaultOpenSSLContextFactoryTests.test_methodsp --s~~> ..@#//R ..1B1BBCrcUR[R[R[ UR 55 g)z Instantiating L{ssl.DefaultOpenSSLContextFactory} with a certificate filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N) assertRaisesrrrrrrr"s rtest_missingCertificateFile=DefaultOpenSSLContextFactoryTests.test_missingCertificateFiles+  IIs774;;= rcUR[R[RUR 5[ 5 g)z Instantiating L{ssl.DefaultOpenSSLContextFactory} with a private key filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N)rrrrrrrr"s rtest_missingPrivateKeyFile ..@#//R  --?@  --?@rr) rArBrCrDrErrrrrrrFrrrrrs,gt,4C8 Arr)6rErrtwisted.internetrrrrrrtwisted.internet.testingrtwisted.protocolsr twisted.python.filepathr twisted.python.runtimer twisted.test.test_tcpr twisted.trial.unittestr OpenSSLrrrtwisted.test.ssl_helpersrr ImportErrorrzope.interfacer LineReceiverrrHrIrfrnrhrxrrrrrWrrr.r0r@rrrrrrrst AA1=#,+9+  #$C'%E..%D+%E&&+%\,x00, %h// %  Z * *+ ;x'8'8 ;, ;8 G & & R? I3;; I4 ,h4 ng$xg$TX& X& RS/($:S/l  &0 0 fAAu   H sE&&E:9E: