File: //lib64/python3.9/site-packages/gssapi/tests/__pycache__/test_raw.cpython-39.pyc
a
��_� � @ sH d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dl
m m Z d dl
mZ d dlZejrvd dlmZ n d dlmZ dZe�� �d�Zed e ZG dd� dej�Z G dd � d e �Z G d
d � d ej �Z G d d
� d
e �Z G dd� de �Z!G dd� de �Z"ddd�ddd�ddd�ddd�dd d�d �Z#G d d � d ej �Z$dS ) � N)�Sets host�utf-8� /c sH e Zd Ze� fdd��Zedd� �Zedd� �Ze� fdd��Z� ZS ) �_GSSAPIKerberosTestCasec sj t t| ��� t�d�}| jj|dgd� | �� | jj� d�d �
d�| _ | jj � d�d �
d�| _
d S )N�UTF-8�-k��flags�@r )�superr �
setUpClass�SERVICE_PRINCIPAL�decode�realm�kinit� _init_env�
user_princ�split�encode�
USER_PRINCZ admin_princ� ADMIN_PRINC)�cls� svc_princ�� __class__� �;/usr/lib64/python3.9/site-packages/gssapi/tests/test_raw.pyr s
z"_GSSAPIKerberosTestCase.setUpClassc C s2 t �tj�| _| jj�� D ]\}}|tj|< qd S �N)�copy�deepcopy�os�environ�
_saved_envr �env�items)r �k�vr r r r & s z!_GSSAPIKerberosTestCase._init_envc C s@ t �tj�D ](}|| jv r,| j| tj|< q tj|= q d | _d S r )r r r r! r" )r r% r r r � _restore_env, s
z$_GSSAPIKerberosTestCase._restore_envc s t t| ��� | �� d S r )r r �
tearDownClassr' )r r r r r( 6 s z%_GSSAPIKerberosTestCase.tearDownClass) �__name__�
__module__� __qualname__� classmethodr r r' r( �
__classcell__r r r r r s
r c @ s e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Ze �
d
d�dd� �Z e �
d
d�dd� �Z e �
d
d�e �
dd�dd� ��Z
e �
d
d�e �dd�dd� ��Ze �
d
d�e �dd�dd � ��Ze �
d
d�e �dd�d d � ��Zd d � Zd!d"� Zd#d$� Ze �
d%d&�d'd(� �Zd)d*� Zd+d,� Ze �
d-d.�d/d0� �Ze �
d-d.�d1d2� �Ze �
d-d.�e �d3d4�d5d6� ��Ze �
d7d8�d9d:� �Z e �
d;d<�d=d>� �Z d?d@� Z dAdB� Z dCdD� Z dEdF� Z!dGdH� Z"dIdJ� Z#e �
dKdL�dMdN� �Z$e �
dOdP�dQdR� �Z%e �
dSdT�dUdV� �Z&e �
dSdT�dWdX� �Z'e �
dYdZ�d[d\� �Z(e �
d]d^�d_d`� �Z)e �
dadb�e �
d-d.�e �dcdd�dedf� ���Z*e �
dadb�dgdh� �Z+e �
dadb�didj� �Z,e �
dadb�e �
dKdk�dldm� ��Z-e �
dadb�e �
dKdk�dndo� ��Z.e �
dpdq�e �drds�dtdu� ��Z/e �
dpdq�dvdw� �Z0dxS )y�TestBaseUtilitiesc C s | j jt�d�dgd� d S )Nr r r )r r r
r ��selfr r r �setUp= s zTestBaseUtilities.setUpc C s4 t �� }|�� |�t� |�� |�t jj� d S r ) �gb�indicate_mechs�shouldnt_be_none� should_be_a�set�shouldnt_be_empty�should_include�MechType�kerberos)r0 �mechsr r r �test_indicate_mechs@ s
z%TestBaseUtilities.test_indicate_mechsc C s, t �t�}|�� |�t j� t �|� d S r )r2 � import_name�TARGET_SERVICE_NAMEr4 r5 �Name� release_name)r0 �
imported_namer r r �test_import_nameI s
z"TestBaseUtilities.test_import_namec C s^ t �| jt jj�}t �|t jj�}|�� |� t j
� t � |�}|�� |� t � |�
� d S r )r2 r= r �NameType�kerberos_principal�canonicalize_namer9 r: r4 r5 r? Z export_name�bytesr7 )r0 rA Zcanonicalized_name�
exported_namer r r � test_canonicalize_export_nameQ s ��
z/TestBaseUtilities.test_canonicalize_export_namec C s0 t �t�}t �|�}|�� t �||��� d S r )r2 r= r> Zduplicate_namer4 � compare_name�should_be_true)r0 Z orig_name�new_namer r r �test_duplicate_namea s
z%TestBaseUtilities.test_duplicate_namec C s` t �tt jj�}t �|�}|�� |\}}|�� |�t� |� t� |�� |� t jj� d S r )
r2 r= r> rC �hostbased_serviceZ display_namer4 r5 rF � should_be)r0 rA Z
displ_respZdisplayed_nameZout_typer r r �test_display_nameh s �
z#TestBaseUtilities.test_display_nameZrfc6680zRFC 6680c C s: t �tt jj�}t �|�}|�� |j�� |j �
� d S r ) r2 r= r> rC rM � inquire_namer4 � is_mech_name�should_be_false�mech�should_be_none)r0 � base_name� inquire_resr r r � test_inquire_name_not_mech_name{ s �
z1TestBaseUtilities.test_inquire_name_not_mech_namec C s^ t �tt jj�}t �|t jj�}t �|�}|� � |j
� � |j �
t j� |j �t jj� d S r )r2 r= r> rC rM rE r9 r: rP r4 rQ rJ rS r5 �OIDrN )r0 rU � mech_namerV r r r �test_inquire_name_mech_name� s �
z-TestBaseUtilities.test_inquire_name_mech_nameZrfc6680_comp_oidz RFC 6680 (COMPOSITE_EXPORT OID)c C sT t �tt jj�}t �|t jj�}t �|�}|� t
� t �|t jj �}|� t j � d S r )
r2 r= r> rC rM rE r9 r: �export_name_compositer5 rF Zcomposite_exportr? )r0 rU �
canon_namerG rA r r r �*test_import_export_name_composite_no_attrs� s ��
�z<TestBaseUtilities.test_import_export_name_composite_no_attrsZauthdataZ greet_clientc C s` t �tt jj�}t �|t jj�}t �|ddg� t � |�}|�
� |j � t
� |j �dg� d S )N� urn:greet:greetings
some greeting)r2 r= r> rC rM rE r9 r: �set_name_attributerP r4 �attrsr5 �listrN )r0 rU r\ rV r r r � test_inquire_name_with_attrs� s ��
z.TestBaseUtilities.test_inquire_name_with_attrsc C s� t �tt jj�}t �|t jj�}t j|ddgdd� t � |d�}|�
� |j � t
� |j �dg� |j� t
� |j�|j � |j�� |j�� t �|d� d S )Nr^ s some other valT)�complete)r2 r= r> rC rM rE r9 r: r_ �get_name_attributer4 �valuesr5 ra rN Zdisplay_valuesrc rJ Z
authenticatedrR Zdelete_name_attribute)r0 rU r\ �get_resr r r �1test_basic_get_set_delete_name_attributes_no_auth� s ��
zCTestBaseUtilities.test_basic_get_set_delete_name_attributes_no_authc C s~ t �tt jj�}t �|t jj�}t �|ddg� t � |�}|�
t � t �|t jj �}|�
t j
� t �|d�}|j�dg� d S )Nr^ s some val)r2 r= r> rC rM rE r9 r: r_ r[ r5 rF Zexportr? rd re rN )r0 rU r\ rG rA rf r r r �!test_import_export_name_composite� s �
z3TestBaseUtilities.test_import_export_name_compositec C sx t �t�}t �t�}t �| jt jj�}t �||��� t �||��� t �||��� t � |� t � |� t � |� d S r )
r2 r= r> r rC rD rI rJ rR r@ )r0 Z
service_name1Z
service_name2Z init_namer r r �test_compare_name� s
�
z#TestBaseUtilities.test_compare_namec C sN t �dd�}|�� |\}}}|�t� |�� |�� |�t� |�� d S )Nr F) �gbmiscZ_display_statusr4 r5 rF r7 �should_be_an_integer�boolrR )r0 Z status_resp�status�ctxZcontr r r �test_display_status s
z%TestBaseUtilities.test_display_statusc C sv t �tt jj�}t �|�}|�� |\}}}|�� |�t j� |� � |�
t j j � |�
� t �|� t �|� d S r )r2 r= r
rC rD � acquire_credr4 r5 �Credsr7 r8 r9 r: rk r@ � release_cred)r0 �nameZ cred_resp�creds� actual_mechs�ttlr r r �test_acquire_creds s �
z$TestBaseUtilities.test_acquire_credsZ cred_imp_expzcredentials import-exportc C sT t �d �j}t �|�}t �|�}t j|dd�}t j|dd�}t �|j|j��� d S )NT)rs ) r2 rp rt Z export_credZ import_cred� inquire_credrI rs rJ )r0 rt �tokenZimported_credsZ inquire_origZ inquire_impr r r �test_cred_import_export# s
z)TestBaseUtilities.test_cred_import_exportc C s� t �tt jj�}t �|�}|d }|d }t �tt jj�}t �|�d }t j ||d�}|d }t j|||d�} | d }
t �
|
�} | � � | � d� d S �N� r ��acceptor_creds��contextZ input_token)
r2 r= r> rC rM �init_sec_contextr
rD rp �accept_sec_contextZ context_timerk �should_be_greater_than) r0 � target_name�ctx_resp�
client_token1�
client_ctx� server_name� server_creds� server_resp�
server_tok� client_resp2rn rv r r r �test_context_time. s, �
���
z#TestBaseUtilities.test_context_timec C s" t �tt jj�}t �|�}|d }|d }t �tt jj�}t �|�d }t j ||d�}|d }t j|||d�} | d }
t �
|
�} | � � | \} }}
}}}}| � � | � t j
� |� � |� t j
� |
�� |� � |�t jj� |� � |� t� |�� |� t� |�� |� t� |�� d S r{ )r2 r= r> rC rM r� r
rD rp r� Zinquire_contextr4 r5 r? rk rN r9 r: r r7 rl rJ )r0 r� r� r� r� r� r� r� r� r� rn �inq_respZsrc_namerv � mech_typer Z local_estZis_openr r r �test_inquire_contextF sL �
���
�
z&TestBaseUtilities.test_inquire_contextZs4uZS4Uc
C s� t �tt jj�}t �|�}|d }~t �tt jj�}t j|dd�d }t j ||d�}t �
� }t � |||d t j j
�}|�� |\} }
} } |
�� |
�t j j
� | �t� | �t� | �t j
� d S �Nr| �both��usager r} � )r2 r= r> rC rM r� r
rD rp r� rq Zadd_cred_impersonate_namer9 r: r4 r7 r8 r5 �int�
r0 r� �client_ctx_resp� client_tokenr� r� �server_ctx_resp� input_creds�imp_resp� new_credsru �output_init_ttl�output_accept_ttlr r r � test_add_cred_impersonate_namew s4 �
���
z0TestBaseUtilities.test_add_cred_impersonate_namec C s� t �tt jj�}t �|�}|d }~t �tt jj�}t j|dd�d }t j ||d�}t �
||d �}|� � |\}} }
|� � |� t j
� | �� | �t jj� |
� t� d S r� )r2 r= r> rC rM r� r
rD rp r� Z acquire_cred_impersonate_namer4 r5 rq r7 r8 r9 r: r� ) r0 r� r� r� r� r� r� r� � imp_credsru �
output_ttlr r r �#test_acquire_creds_impersonate_name� s. �
���
z5TestBaseUtilities.test_acquire_creds_impersonate_namez1.11z)returning delegated S4U2Proxy credentialsc C s| t �d�}| jj|ddgd� t�ttjj�}t� |�j
}tj d dd�j }tj
||d�}|�� |j�� |j�tj� d S )Nr r �-fr r� r� r} )r
r r r r2 r= r> rC rM r� ry rp rt r� r4 �delegated_credsr5 rq )r0 r r� r� r� r� r r r � test_always_get_delegated_creds� s
� �
z1TestBaseUtilities.test_always_get_delegated_credsZrfc5588zRFC 5588c C s� t �d�}| jj|ddgd� t�ttjj�}tj d dd�j
}tj ||tj j
d�}|d }tj d d d�j
}tj||d
�}|j}|�� tj|dd d d �} | �� | j�d� | j�tjj� t�|�j}
tj |
dd�} | �� d S )
Nr r r� r �initiater� )rt r r| �acceptr} T)r� Z set_default� overwrite)r
r r r r2 r= r> rC rM rp rt r� �RequirementFlagZdelegate_to_peerr� r� r4 Z
store_credr� rN r; r8 r9 r: rx rs ) r0 r r� Z client_credsr� r� r� r� Z deleg_creds� store_resZ
deleg_nameZacq_respr r r � test_store_cred_acquire_cred� s4
���� z.TestBaseUtilities.test_store_cred_acquire_credZ
cred_storezcredentials storec C s dj | jjd�}dj | jjd�}|�d�|�d�d�}d| jj }| j�|� | j�||� | j�|d dd|g� tjd d d
�j }tj
||d d �}|j � � |j
�d � t�|�d��}t�||�}|� � |j � � |j �tj� |j �� |j �tjj� |j�� d S )
NzFILE:{tmpdir}/other_ccache)�tmpdirz{tmpdir}/other_keytabr )s ccaches keytabz service/cs@r z-tr� r� T)r� )�formatr r� r ZaddprincZextract_keytabr r2 rp rt Zstore_cred_intor; r4 r� rN r= Zacquire_cred_fromr5 rq r7 r8 r9 r: �lifetimerk ) r0 ZCCACHE�KT�storeZ
princ_nameZ
initial_credsr� rs Z retrieve_resr r r �!test_store_cred_into_acquire_cred� s* �
z3TestBaseUtilities.test_store_cred_into_acquire_credc
C s� t �tt jj�}t �|�}|d }~t �tt jj�}t j|dd�d }t j ||d�}t �
� }t � ||d t j j
�}|�� |\} }
} } |
�� |
�t j j
� | �t� | �t� | �t j
� d S r� )r2 r= r> rC rM r� r
rD rp r� rq Zadd_credr9 r: r4 r7 r8 r5 r� r� r r r �
test_add_cred
s2 �
���
z TestBaseUtilities.test_add_credc C s� t �tt jj�}t �|�j}t �|�}|�� |j �
t j � t � ||j �sNJ �|j
�� |j�d� |j�� |j�t jj� d S )Nr� )r2 r= r
rC rD rp rt rx r4 rs r5 r? rI r� rk r� rN r; r7 r8 r9 r: )r0 rs �credr� r r r �test_inquire_creds. s �
z$TestBaseUtilities.test_inquire_credsc C s, t jj�� }t j|d�}|�t jj� ~d S )N��elements)r2 r9 r: � __bytes__rX rN )r0 Zkerberos_bytesZnew_oidr r r �test_create_oid_from_bytesA s z,TestBaseUtilities.test_create_oid_from_bytesc C s@ t jj}t jj}t �||B d�}|�t j� |j� ||B � d S )Nr )
r2 ZParameterReadErrorZ CALLING_CODEZ BadNameErrorZ ROUTINE_CODE�GSSErrorr5 Z
NameReadErrorZmaj_coderN )r0 Z err_code1Z err_code2�errr r r �test_error_dispatchI s
z%TestBaseUtilities.test_error_dispatchc C s( t �t jj�}|�� |�t jj� d S r )r2 Zinquire_names_for_mechr9 r: r4 r8 rC rD )r0 �resr r r �test_inquire_names_for_mechQ s z-TestBaseUtilities.test_inquire_names_for_mechc C s6 t �| jt jj�}t �|�}|�� |�t jj � d S r )
r2 r= r rC rD Zinquire_mechs_for_namer4 r8 r9 r: )r0 rs r� r r r �test_inquire_mechs_for_nameW s �
z-TestBaseUtilities.test_inquire_mechs_for_name�passwordZPasswordc C s� | j �d�}| j j| j j|d� t�dtjj�}t�||� d��}|�
� |\}}}|�
� |� tj � |�
� |�tjj� |� t� d S �N�user)r� � userr )r r� r r r2 r= rC rD �acquire_cred_with_passwordr r4 r5 rq r7 r8 r9 r: r� )r0 r� rs r� r� ru r� r r r � test_acquire_cred_with_password` s �
z1TestBaseUtilities.test_acquire_cred_with_passwordZ password_addzPassword (add)c C s� | j �d�}| j j| j j|d� t�dtjj�}t�� }t� ||tj
j |� d��}|�
� |\}}}}|�� |�tj
j � |�t� |�t� |�tj� d S r� )r r� r r r2 r= rC rD rq Zadd_cred_with_passwordr9 r: r r4 r7 r8 r5 r� ) r0 r� rs r� r� r� ru r� r� r r r �test_add_cred_with_passwordu s �
z-TestBaseUtilities.test_add_cred_with_passwordZrfc5587zRFC 5587c C s, t �d d d �}|�t� |�� i }i }|D �]X}|�� |�t j� t �|�}|j}|j }|�t� |�t� |D ]�}|�� |�t j� t �
|�} | j �� | j �� | j
�� | j �t� | j �t� | j
�t� ||vr�t� ||< || �|� qt|D ]�}|�� |�t j� t �
|�} | j �� | j �� | j
�� | j �t� | j �t� | j
�t� ||v�rvt� ||< || �|� q�q,|�� D ]X\}
} t|
g�} t �| d d �}|�� |�| � t �d | d �}| D ]}
|�|
� �qԐq�|�� D ]4\}
} t|
g�} t �d d | �}|�� |�| � �q�d S r )r2 Zindicate_mechs_by_attrsr5 r6 r7 r4 rX Zinquire_attrs_for_mech�
mech_attrs�known_mech_attrs�display_mech_attrrs �
short_desc� long_descrF �addr$ rN �shouldnt_include)r0 r; Z
attrs_dictZknown_attrs_dictrS Z inquire_outr� r� Z mech_attr� display_out�attrZexpected_mechsr` Z
expected_mechr r r � test_rfc5587� sh
z TestBaseUtilities.test_rfc5587c C st t j�d�dddgt j�d�dddgg}|D ]B}t �|d �}|j�|d
� |j�|d � |j�|d � q,d S )
Nz1.3.6.1.5.5.13.24s GSS_C_MA_CBINDINGSs channel-bindingss$ Mechanism supports channel bindings.z1.3.6.1.5.5.13.1s GSS_C_MA_MECH_CONCRETEs
concrete-mechsB Mechanism is neither a pseudo-mechanism nor a composite mechanism.r r� � r| )r2 rX � from_int_seqr� rs rN r� r� )r0 Z
test_attrsr� r� r r r �test_display_mech_attr� s �
�� z(TestBaseUtilities.test_display_mech_attrZrfc5801z
SASL Namesc C s� t �� }|D ]z}t �|�}|j}|�� |�t� |�� |j}|�� |�t� |j }|�� |�t� t �
|�}|�� |� |� q d S r ) r2 r3 Zinquire_saslname_for_mechZsasl_mech_namer4 r5 rF r7 rY Zmech_descriptionZinquire_mech_for_saslnamerN )r0 r; rS �outZout_smnZout_mnZout_mdZcmp_mechr r r �test_sasl_names� s
z!TestBaseUtilities.test_sasl_namesZrfc4178zNegotiation Mechanismc C s� t �� }t j�d�}t j�d�}t j�d�}t �tt jj�}t jdt jjd�}t j d d||gd�j
}zt j |d||gd �j
}W n t j y� | �
d
� Y n0 t j |d |d�j
} t �| |g�}
|
�� t j|||d �} | j} t j| | d
�}
|
�� t j|||d �} | j} t jjt j | | d
� t �| |g�}
|
�� t j|||d �} | j} t j| | d
�}
|
�� t j|||d �} | j} t jjt j | | d
� d S )N�
1.3.6.1.5.5.2�1.2.840.113554.1.2.2�1.3.6.1.4.1.311.2.2.10r� �rs Z name_typer� )r� r; � password�rs r� r; �5You do not have the GSSAPI gss-ntlmssp mech installedr� �rt rS r} )r2 r3 rX r� r= r> rC rM r� rp rt r� r� �skipTestZ
set_neg_mechsrT r� ry r� r4 � should_raise)r0 Z all_mechsZ spnego_mechZ krb5_mech� ntlm_mechr� �usernameZkrb5_client_credsZntlm_client_credsr� Zneg_respr� r� r� r r r �test_set_neg_mechs s~ ���� ���� ���� �z$TestBaseUtilities.test_set_neg_mechsZggfzGlobal Grid Forumz1.16z^querying impersonator name of krb5 GSS Credential using the GSS_KRB5_GET_CRED_IMPERSONATOR OIDc C s� t �d�}| jj|ddgd� t�ttjj�}t� |�j
}tj d dd�j }tj
||d�}|�� |j�� |j�tj� tj�d�}t�|j|�}|�t� |�� |d �t� |d �d
t | jj�d �f � d S ) Nr r r� r r� r� r} z1.2.840.113554.1.2.2.5.14r s %s@%sr )r
r r r r2 r= r> rC rM r� ry rp rt r� r4 r� r5 rq rX r� Zinquire_cred_by_oidra r7 rF rN r )r0 r r� r� r� r� �oid�infor r r �%test_inquire_cred_by_oid_impersonatorJ s*
� �
�z7TestBaseUtilities.test_inquire_cred_by_oid_impersonatorc
C s� t �tt jj�}t �|�}t �tt jj�}t �|�d }t j |d |d�}|d }|d }t j||d |d�}|d } t j
� d�}
t � | |
�} t � ||
�} | �
t� | �� | �
t� | �� | �| � d S )Nr r| r} r z1.2.840.113554.1.2.2.5.5)r2 r= r> rC rM r� r
rD rp r� rX r� �inquire_sec_context_by_oidr5 ra r7 �should_have_same_items_as)
r0 r� � ctx_resp1r� r� r� �
server_ctxr� r� r� Zsession_key_oidZ
client_keyZ
server_keyr r r � test_inquire_sec_context_by_oidm s4 �
�
��
z1TestBaseUtilities.test_inquire_sec_context_by_oidc C s� t �tt jj�}t �|�}t �tt jj�}t �|�d }t j |d |d�}t j||d |d d�}|d }t j
� d�}t j �
t j||� d S )Nr r| r} r �1.2.3.4.5.6.7.8.9)r2 r= r> rC rM r� r
rD rp r� rX r� r� r� r� ) r0 r� r� r� r� r� r� r� � invalid_oidr r r �2test_inquire_sec_context_by_oid_should_raise_error� s( �
�
�� �zDTestBaseUtilities.test_inquire_sec_context_by_oid_should_raise_errorz Add Credential with Passwordc C s� t j�d�}t jdt jjd�}zt j|d|gd�}W n t jyR | �d� Y n0 t jdt jj d�}t j
||j |d�d }t j�d
�}t j ||d d �}|�
t j� d S )
Nr� r� r� r� r� r� � serverr� r �1.3.6.1.4.1.7165.655.1.3s )r� �value)r2 rX r� r= rC r� r� r� r� rM r� rt �set_sec_context_optionr5 �SecurityContext)r0 r� r� r� �serverZ orig_context�
reset_mechZ out_contextr r r �test_set_sec_context_option� s2 ��
�
�� �z-TestBaseUtilities.test_set_sec_context_optionc C s� t j�d�}t jdt jjd�}zt j|d|gd�}W n t jyR | �d� Y n0 t jdt jj d�}t j
||j |d�d }t j�d
�}t j �
t j||� d S ) Nr� r� r� r� r� r� r� r� r r� )r2 rX r� r= rC r� r� r� r� rM r� rt r� r� )r0 r� r� r� r� r� r� r r r � test_set_sec_context_option_fail� s. ��
�
�� �z2TestBaseUtilities.test_set_sec_context_option_failZ set_cred_optz Kitten Set Credential Optionz1.14z6GSS_KRB5_CRED_NO_CI_FLAGS_X was added in MIT krb5 1.14c C sF t �tt jj�}t j�d�}t �|�j}t j ||d�}|�
t j � d S )Nz1.2.752.43.13.29)rt ) r2 r= r
rC rD rX r� rp rt �set_cred_optionr5 rq )r0 rs Z
no_ci_flags_x� orig_credZ output_credr r r �test_set_cred_option� s � z&TestBaseUtilities.test_set_cred_optionc C s@ t �tt jj�}t �|�j}t j�d�}t j �
t j ||d� d S )Nr� � ) r2 r= r
rC rD rp rt rX r� r� r� r� )r0 rs r� r� r r r �'test_set_cred_option_should_raise_error� s � �z9TestBaseUtilities.test_set_cred_option_should_raise_errorN)1r) r* r+ r1 r< rB rH rL rO �ktu�gssapi_extension_testrW rZ r] Zkrb_plugin_testrb rg rh ri ro rw rz r� r� r� r� Zkrb_minversion_testr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r. < s�
�
1
�
!
O
B
�
�
r. c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%S )&�TestIntEnumFlagSetc C s0 t jjt jjB }t �t j|�}t|��|� d S r )r2 r� � integrity�confidentiality�IntEnumFlagSetr� rN )r0 �int_val�fsetr r r �test_create_from_int� s
�z'TestIntEnumFlagSet.test_create_from_intc C s: t jjt jjB }t �t j|�}t �t j|�}|�|� d S r )r2 r� r� r r rN )r0 r �fset1�fset2r r r �test_create_from_other_set� s �z-TestIntEnumFlagSet.test_create_from_other_setc C s0 t jjt jjg}t �t j|�}t|��|� d S r )r2 r� r� r r ra r� )r0 �lstr r r r �test_create_from_list s
�z(TestIntEnumFlagSet.test_create_from_listc C s t �t j�}|�� d S r )r2 r r� Zshould_be_empty�r0 r r r r �test_create_empty s z$TestIntEnumFlagSet.test_create_emptyc C s t jjt jjg}t �t j|�S r )r2 r� r� r r )r0 r r r r � _create_fset s �z TestIntEnumFlagSet._create_fsetc C s( | � � }|�tjj� |�tjj� d S r )r r8 r2 r� r� r� �protection_readyr
r r r �
test_contains s z TestIntEnumFlagSet.test_containsc C s | � � �d� d S �Nr� )r �should_have_lengthr/ r r r �test_len s zTestIntEnumFlagSet.test_lenc C s< | � � }|�d� |�tjj� |�d� |�tjj� d S )Nr� r| )r r r� r2 r� r
r8 r
r r r �test_add s
zTestIntEnumFlagSet.test_addc C sT | � � }|�d� |�tjj� |�d� |�tjj� |�d� |�tjj� d S )Nr� r� )r r �discardr2 r� r
r� r� r
r r r � test_discard! s
z TestIntEnumFlagSet.test_discardc C s, | � � }|tjj@ �� |tjj@ �� d S r )r r2 r� r� rJ r
rR r
r r r �
test_and_enum, s z TestIntEnumFlagSet.test_and_enumc C s& | � � }ttjj�}||@ �|� d S r �r r� r2 r� r� rN �r0 r r r r r � test_and_int1 s z TestIntEnumFlagSet.test_and_intc C sF | � � }| � � }| � � }|�tjj� |�tjj� ||@ �|� d S r �r r� r2 r� r
�out_of_sequence_detectionrN �r0 r r Zfset3r r r � test_and_set7 s z TestIntEnumFlagSet.test_and_setc C s2 | � � }|tjjB }||k �� |�tjj� d S r )r r2 r� r
rJ r8 )r0 r r r r r � test_or_enumA s z TestIntEnumFlagSet.test_or_enumc C s* | � � }ttjj�}||B �t|�� d S r r r r r r � test_or_intH s z TestIntEnumFlagSet.test_or_intc C sb | � � }| � � }| � � }|�tjj� |�tjj� |�tjj� |�tjj� ||B �|� d S r r r r r r � test_or_setN s z TestIntEnumFlagSet.test_or_setc C sT | � � }|tjjA }|tjjA }|�d� |�tjj� |�d� |�tjj� d S )Nr| r� )r r2 r� r
r� r r8 r� r r r r �
test_xor_enumZ s
z TestIntEnumFlagSet.test_xor_enumc C sP | � � }|ttjj�A �t|�tjjA � |ttjj�A �t|�tjjA � d S r )r r� r2 r� r
rN r� r
r r r � test_xor_intf s ��z TestIntEnumFlagSet.test_xor_intc C sz | � � }| � � }|�tjj� |�tjj� ||A }|�d� |�tjj� |�tjj � |�
tjj� |�
tjj� d S r ) r r� r2 r� r
r r r� r� r r8 r r r r � test_xor_seto s
z TestIntEnumFlagSet.test_xor_setN)r) r* r+ r r r r r r r r r r r r r r r r r! r" r r r r r� � s$
r� c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�TestInitContextc C s t �tt jj�| _d S r )r2 r= r> rC rM r� r/ r r r r1 s �zTestInitContext.setUpc C s t �| j� d S r )r2 r@ r� r/ r r r �tearDown� s zTestInitContext.tearDownc C s� t �| j�}|�� |\}}}}}}|�� |�t j� |�t jj� |�t � |�
d� |� � |� d� |�t
� t �|� d S �Nr� r )r2 r� r� r4 r5 r� rN r9 r: r �should_be_at_least_lengthr7 r� rl �delete_sec_context)r0 r� rn Z
out_mech_type�
out_req_flags� out_token�out_ttl� cont_neededr r r �test_basic_init_default_ctx� s �
z+TestInitContext.test_basic_init_default_ctxN)r) r* r+ r1 r$ r, r r r r r# ~ s r# c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
S )�TestAcceptContextc C sj t �tt jj�| _t �| j�}|d | _|d | _| j� � t �t
t jj �| _ t �
| j �d | _d | _d S )Nr| r )r2 r= r> rC rM r� r� r� r� r4 r
rD r� rp r� r� )r0 r� r r r r1 � s �
�zTestAcceptContext.setUpc C sJ t �| j� t �| j� t �| j� t �| j� | jd urFt �| j� d S r � r2 r@ r� r� rr r� r' r� r� r/ r r r r$ � s
zTestAcceptContext.tearDownc C s� t �| j�}|�� |\| _}}}}}}}| j�� | j�t j� |�� |�t j� |�t j j
� |� � |�t � |�
d� |�d� |d ur�|�t j� |�t� d S r% )r2 r� r� r4 r� r5 r� r? rN r9 r: r7 r r& r� rq rl � r0 r� rs r� r) r( r* Zdelegated_credr+ r r r �+test_basic_accept_context_no_acceptor_creds� s" �
z=TestAcceptContext.test_basic_accept_context_no_acceptor_credsc C s� t j| j| jd�}|�� |\| _}}}}}}}| j�� | j�t j� |�� |�t j� |� t j
j � |� � |�t
� |�d� |�d� |d ur�|�t j� |�t� d S )Nr} r� r )r2 r� r� r� r4 r� r5 r� r? rN r9 r: r7 r r& r� rq rl r/ r r r �test_basic_accept_context� s& ��
z+TestAcceptContext.test_basic_accept_contextc C s� t jdt jjdt jjdd�}t �tt jj�| _t j | j|d�}|d | _
|d | _ | j � � t �t
t jj�| _t �| j�d | _t j| j
| j|d�}|j |j| _d S )N� abcxyz� 127.0.0.1�Zapplication_dataZinitiator_address_typeZinitiator_addressZacceptor_address_type�acceptor_address��channel_bindingsr| r �r~ r7 )r2 �ChannelBindings� AddressType�ipr= r> rC rM r� r� r� r� r4 r
rD r� rp r� r� r� r� )r0 �bdgsr� r� r r r �test_channel_bindings� s2 ���
��z'TestAcceptContext.test_channel_bindingsc C s� t jdt jjdt jjdd�}t �tt jj�| _t j | j|d�}|d | _
|d | _ | j � � t �t
t jj�| _t �| j�d | _d|_t jjt j| j
| j|d� d S ) Nr2 r3 r4 r6 r| r s 127.0.1.0r8 )r2 r9 r: r; r= r> rC rM r� r� r� r� r4 r
rD r� rp r� r5 r� r� r� )r0 r< r� r r r �%test_bad_channel_binding_raises_error s0 ���
��z7TestAcceptContext.test_bad_channel_binding_raises_errorN) r) r* r+ r1 r$ r0 r1 r= r> r r r r r- � s r- c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z e
� dd�dd� �Z e
� dd�dd� �Z
e
� dd�dd� �Ze
� dd�dd� �Ze
� dd�dd� �Ze
� dd �d d � �Ze
� dd �d d � �Ze
� dd �d!d"� �Ze
� dd �d#d$� �Zd%S )&�TestWrapUnwrapc C s� t �tt jj�| _t �| j�}|d | _|d | _t �t t jj
�| _ t � | j �d | _
t j| j| j
d�}|d | _|d | _t j| j| j| jd�}|d | _|d | _d S r{ )r2 r= r> rC rM r� r� r� r� r
rD r� rp r� r� r� r� Z
client_token2)r0 r� r� r� r r r r1 " s* �
��
�
zTestWrapUnwrap.setUpc C s@ t �| j� t �| j� t �| j� t �| j� t �| j� d S r r. r/ r r r r$ 7 s
zTestWrapUnwrap.tearDownc C sN t �| j�}|�� |�t� |�� t �|�}|�� |�t j� || _d S r ) r2 Zexport_sec_contextr� r4 r5 rF r7 Zimport_sec_contextr� )r0 �tokZ imported_ctxr r r � test_import_export_sec_context> s
z-TestWrapUnwrap.test_import_export_sec_contextc C s, t �| jd�}|�� |�t� |�� d S )N� some message)r2 �get_micr� r4 r5 rF r7 )r0 � mic_tokenr r r � test_get_micK s
zTestWrapUnwrap.test_get_micc C s@ t �| jd�}t �| jd|�}|�� t j�t j| jdd� d S )NrB s some other messages some invalid mic)r2 rC r� Z
verify_micr� rk r� r� )r0 rD �qop_usedr r r �test_basic_verify_micR s �z$TestWrapUnwrap.test_basic_verify_micc C sH t �| jd�}t j| jddd�}|�� |�� |�d� |�d� d S )N�d F)Z confidential)r2 Zwrap_size_limitr� rk Zshould_be_less_than)r0 Z with_confZ without_confr r r �test_wrap_size_limit] s
�
z#TestWrapUnwrap.test_wrap_size_limitc C s� t �| jd�\}}|�t� |�� |�t� |�� |�d� t � | j
|�\}}}|�t� |�� |� � |� d� |�t� |�� |�
d� d S �N� test message� test messager )r2 �wrapr� r5 rl rJ rF r7 �should_be_longer_than�unwrapr� rk �should_be_at_leastrN �r0 �wrapped_message�conf�unwrapped_message�qopr r r �test_basic_wrap_unwraph s
�
z%TestWrapUnwrap.test_basic_wrap_unwrapZdcezDCE (IOV/AEAD)c C sL d}d}d}t jt jj|f||dd�}|d j�� |d j�� |d j�� t �| j|�}|�t � |�
� |d � d � |d � d � t � | j|�}|�t � |�
� |�
d� |�
d� |�
d� |d
j�d� |d j�d� t �| j|�\}}|�t � |�
� |�t� |d j�
|� |d
j�
|� |d j�
|� d S ) N� some encrypted data� some other encrypted data�
some sig dataF)�
auto_allocr � � r� r� r| )r2 �IOV�
IOVBufferType� sign_only�allocaterR Zwrap_iov_lengthr� r5 rl rJ Zshould_be_at_least_size�wrap_iovrN r� � shouldnt_be�
unwrap_iovr� r� �r0 Z init_dataZinit_other_dataZinit_signed_info� init_messagerS rU r r r �#test_basic_iov_wrap_unwrap_prealloc~ s: �
z2TestWrapUnwrap.test_basic_iov_wrap_unwrap_preallocc C s� d}d}d}t �t jj|f||�}t �| j|�}|�t� |�� |� d� |� d� |� d� |d j
� d� |d j
� d� t � | j
|�\}}|�t� |�� |�t� |d j
� |� |d j
� |� |d j
� |� d S )NrW rX rY r� r| r� )r2 r] r^ r_ ra r� r5 rl rJ rN r� rb rc r� r� rd r r r �$test_basic_iov_wrap_unwrap_autoalloc� s* �
z3TestWrapUnwrap.test_basic_iov_wrap_unwrap_autoallocc C s� d}t �| jd|�\}}|�t� |�� |�t� |�� |�d� t � | j
||�\}}}|�t� |�� |� � |� d� |�t� |�� |�
d� d S )NrY rK rL r �r2 � wrap_aeadr� r5 rl rJ rF r7 rN � unwrap_aeadr� rk rP rN )r0 �
assoc_datarR rS rT rU r r r �test_basic_aead_wrap_unwrap� s( �
�
z*TestWrapUnwrap.test_basic_aead_wrap_unwrapc C s� t �| jd�\}}|�t� |�� |�t� |�� |�d� t � | j
|�\}}}|�t� |�� |� � |� d� |�t� |�� |�
d� d S rJ rh rQ r r r �$test_basic_aead_wrap_unwrap_no_assoc� s$ �
�
z3TestWrapUnwrap.test_basic_aead_wrap_unwrap_no_assocc C s` d}t �| jd|�\}}|�t� |�� |�t� |�� |�d� t j �
t j | j |d� d S )NrY rK rL s some other sig data)
r2 ri r� r5 rl rJ rF r7 rN rj r� Z BadMICErrorr� )r0 rk rR rS r r r �2test_basic_aead_wrap_unwrap_bad_assoc_raises_error� s �
�zATestWrapUnwrap.test_basic_aead_wrap_unwrap_bad_assoc_raises_errorZiov_miczIOV MICc C sR t jdt jjdft jjdd�}t �| j|� |d j�t jj� |d j �
� d S �N� some datarY F��
std_layoutr� ) r2 r] r^ r_ rD � get_mic_iovr� �typerN r� r7 �r0 re r r r �test_get_mic_iov s
�z TestWrapUnwrap.test_get_mic_iovc C sh t jdt jjdft jjdd�}t �| j|� |d j�t jj� |d j �
� t � | j |�}|�
� d S ro )r2 r] r^ r_ rD rs r� rt rN r� r7 �verify_mic_iovr� rk )r0 re rF r r r �test_basic_verify_mic_iov s
�z(TestWrapUnwrap.test_basic_verify_mic_iovc C s: t jdt jjdft jjdfdd�}t j�t j| j|� d S )Nrp rY ZabaavaFrq ) r2 r] r^ r_ rD rw r� r� r� ru r r r �(test_verify_mic_iov_bad_mic_raises_error& s
��z7TestWrapUnwrap.test_verify_mic_iov_bad_mic_raises_errorc C sT t jdt jjdft jjddd�}t �| j|� |d j�t jj� |d j �
� d S )Nrp rY F)rr rZ r� ) r2 r] r^ r_ rD Zget_mic_iov_lengthr� rt rN r� r7 ru r r r �test_get_mic_iov_length1 s
�z&TestWrapUnwrap.test_get_mic_iov_lengthN)r) r* r+ r1 r$ rA rE rG rI rV r� r� rf rg rl rm rn rv rx ry rz r r r r r? ! s2
+
r? s +r� )rF �strings *�H��r� s +z 1.3.5.1.5.2s *�H��z1.2.840.48018.1.2.2s +z
1.3.6.1.5.2.5)�SPNEGO�KRB5ZKRB5_OLDZ
KRB5_WRONGZIAKERBc @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�TestOIDTransformsc C s> t �� D ]0}tj|d d�}t|�}|�d�|d �� qd S )NrF r� z <OID {0}>r{ )� TEST_OIDSre r2 rX �reprrN r� )r0 r� �o�textr r r �test_decode_from_bytesK s z(TestOIDTransforms.test_decode_from_bytesc C s4 t �� D ]&}tj�|d �}|�� �|d � qd S )Nr{ rF )r re r2 rX r� r� rN )r0 r� r� r r r �test_encode_from_stringQ s z)TestOIDTransforms.test_encode_from_stringc C s> t �� D ]0}|d �d�}tj�|�}|�� �|d � qd S )Nr{ �.rF )r re r r2 rX r� r� rN )r0 r� Zint_seqr� r r r �test_encode_from_int_seqV s z*TestOIDTransforms.test_encode_from_int_seqc C sx t j�td d �}t j�td d �}t j�td d �}||k�d� ||k�d� ||k�d� ||k�d� d S )Nr} r{ r| TF)r2 rX r� r rN )r0 Zkrb5Z
krb5_otherZspnegor r r �test_comparisons\ s z"TestOIDTransforms.test_comparisonsN)r) r* r+ r� r� r� r� r r r r r~ J s r~ )%r r ZsocketZunittestZsixZ
should_be.allrN Z
gssapi.raw�rawr2 Zgssapi.raw.miscZmiscrj Z k5test.unitZunitr� Zk5testZktZPY2� collectionsr �collections.abcr> Zgetfqdnr ZFQDNr
ZKerberosTestCaser r. ZTestCaser� r# r- r? r r~ r r r r �<module> sb # < ������