�
N��ac@s�dd
lZdd
l
Z
ddlmZ
ddlmZ
dd
lZdd
lZdd
l	Z	dd
l
Z
dd
lZdd
lZdd
l
Z
dd
lZdd
lZdd
lZdd
lZdd
lZdd
lZdd
lZdd
lZdd
lZddlmZ
ejd�
Zeej�
ZejZejj d�
Z!e!o]
ej"dddfkZ#d	�Z$e$d
�
Z%e%j&ej'��
Z(e$d�
Z)e$d�
Z*e)j&ej'��
Z+e*j&ej'��
Z,e$d
�
Z-e$d�
Z.dZ/e$d�
Z0e0j&ej'��
Z1e$dd�Z2e$dd�Z3e$d�
Z4e$d�
Z5e$d�
Z6e$d�
Z7e$d�
Z8dZ9e$d�
Z:e$d�
Z;e$d�
Z<e$d�
Z=e$d�
Z>e$d�
Z?e$d�
Z@e$d �
ZAe$d!�
ZBeBj&ej'��
ZCeDed"d�ZEeDed#d�ZFeDed$d�ZGeDed%d�ZHeDed&d�ZId'�ZJd(e
jKf
d)��YZLd*�ZMd+�ZNd,�ZOd-�ZPd.�ZQd/�ZRd0�ZSe
jTejUd1�ZVd2e
jKf
d3��YZWd4e
jKf
d5��YZXd6e
jKf
d7��YZYd8e
jKf
d9��YZZydd
l[Z[Wne\k
rI


e]Z^n�Xe_Z^dd:l`maZa
d;e[jbf
d<��YZcd=e[jbf
d>��YZdd?e_e]eed@�ZfeedddA�ZgdBe
jKf
dC��YZhe]dD�
ZiejdEkr�ei�
nd
S(Fi����N(
ttest_support(
tassert_python_ok(
tclosingtssltLibreSSLi
ic
Gstj
jtj
jt�
|�
S(
N(tostpathtjointdirnamet__file__(
tname((s)/usr/local/lib/python2.7/test/test_ssl.pyt	data_file"s
skeycert.pemsssl_cert.pemsssl_key.pemskeycert.passwd.pemsssl_key.passwd.pemtsomepasstcapaths
4e1295a3.0s
5ed36f99.0srevocation.crlskeycert3.pemskeycert4.pemspycacert.pemsallsans.pemsself-signed.pythontest.netsselfsigned_pythontestdotnet.pemsnullcert.pemsbadcert.pemsXXXnonexisting.pems
badkey.pems	nokia.pemsnullbytecert.pemstalos-2019-0758.pemsffdh3072.pemtOP_NO_COMPRESSIONtOP_SINGLE_DH_USEtOP_SINGLE_ECDH_USEtOP_CIPHER_SERVER_PREFERENCEtOP_ENABLE_MIDDLEBOX_COMPATc
CsBd
jt
jtj���
}
tjr>tjj||
�

ndS(Nt
 (	Rt	tracebacktformat_exceptiontsystexc_infotsupporttverbosetstdouttwrite(tprefixt
exc_format((s)/usr/local/lib/python2.7/test/test_ssl.pythandle_errorYs

	
t
BasicTestsc
BseZ
d�ZRS(
c
Cs�ytj
tjtj�
�

Wn(tk
rG
}

|
jd
krAqH�n
Xy tj
tjtj�
j�

Wn(tk
r�
}

|
jd
kr�q��n
XdS(Ni (Rtsslwrap_simpletsockettAF_INETtIOErrorterrnot_sock(tselft
e((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_sslwrap_simpleas





 


(t__name__t
__module__R((((s)/usr/local/lib/python2.7/test/test_ssl.pyR_scCs
tj
dkS(Nii	ii
i(ii	ii
i(Rt_OPENSSL_API_VERSION(((s)/usr/local/lib/python2.7/test/test_ssl.pytcan_clear_optionssscCs
tj
dkS(Nii	iii(ii	iii(RtOPENSSL_VERSION_INFO(((s)/usr/local/lib/python2.7/test/test_ssl.pytno_sslv2_implies_sslv3_hellowscCs
tj
dkS(Nii	ii(ii	iii(RR-(((s)/usr/local/lib/python2.7/test/test_ssl.pythave_verify_flags{scCs.tj
r&tj�jd
kr&tjStjS(Ni(ttimetdaylightt	localtimettm_isdsttaltzonettimezone(((s)/usr/local/lib/python2.7/test/test_ssl.pyt
utc_offsets

c
Cs{tj
dkrwd}
tjj||
�}|jdd
�
}|j|
�
}|ddkrw|d d	|d
}qwn|S(Nii	iis%b %d %H:%M:%S %Y GMTtsecondit
0Ri(ii	ii	i(RR+tdatetimetstrptimetreplacetstrftime(t	cert_timetfmttdt((s)/usr/local/lib/python2.7/test/test_ssl.pytasn1time�s




c
s9tt
d
�r1tj��
�f
d��
}
|
S�SdS(NtPROTOCOL_SSLv2cskytj
tj�

WnGtjk
r]


tjd	kr^tj�d
kr^tjd�
�
q^n
X�||
�S(Nii	iitdebianssqueeze/sidts'Patched Ubuntu OpenSSL breaks behaviour(ii	iii(RBssqueeze/sidRC(	Rt
SSLContextRAtSSLErrorR-tplatformtlinux_distributiontunittesttSkipTest(targstkwargs(
tfunc(s)/usr/local/lib/python2.7/test/test_ssl.pyt
f�s





(thasattrRt	functoolstwraps(RLRM((
RLs)/usr/local/lib/python2.7/test/test_ssl.pytskip_if_broken_ubuntu_ssl�s

	c
s"tj
��
�f
d
��
}
|
S(sy
Skip a test if the OpenSSL config MinProtocol is > TLSv1.
    OS distros with an /etc/ssl/openssl.cnf and MinProtocol set often do so to
    require TLSv1.2 or higher (Debian Buster).  Some of our tests for older
    protocol versions will fail under such a config.
    Alternative workaround: Run this test in a process with
    OPENSSL_CONF=/dev/null in the environment.
    c	s�tj
jd
d�}yt|d��j}x`|D]X}tjd|�}|r1|jd�
}|dkr�tjd||f�
�
q�q1q1WWdQXWn?t	t
fk
r�
}
tjr�t
jjd||f�

q�n
X�||
�S(	NtOPENSSL_CONFs/etc/ssl/openssl.cnft
rsMinProtocol\s*=\s*(TLSv\d+\S*)i
tTLSv1s)%s has MinProtocol = %s which is > TLSv1.s(
 Could not scan %s for MinProtocol: %s
(RtenvirontgettopentretmatchtgroupRHRItEnvironmentErrortUnicodeDecodeErrorRRRRR(RJRKtopenssl_cnftconfigtlineRYttls_verterr(
RL(s)/usr/local/lib/python2.7/test/test_ssl.pyRM�s 










$
	


(RORP(RLRM((
RLs)/usr/local/lib/python2.7/test/test_ssl.pyt'skip_if_openssl_cnf_minprotocol_gt_tls1�ss SNI support needed for this testtBasicSocketTestscBs�
eZ
d�Zd
�Zd�Zd�Zd�Zd�Zd�Zd�Z	e
jd��
Zd	�Z
d
�Zd�Zd�Zd
�Zd�Zd�Zd�Zd�Zd�Zejdejkd�d��
Zd�Zejejdkd�d��
Zejejdkd�d��
Z d�Z!d�Z"d�Z#d�Z$d�Z%eje&�d �d!��
Z'd"�Z(e
j)d#d$�d%��
Z*RS(&c

Cs�tj

tj
tj
tj
tj
tjr6tj
ntjdkrOtj	
n|j
tjtt
h�
|j
tjtt
h�
tj
tj
tj
tj
tjdkr�tj
tj
ndS(Ni
i(i
i(i
ii
(Rt	CERT_NONEt
CERT_OPTIONALt
CERT_REQUIREDRRtHAS_ECDHRR-RtassertIntHAS_SNItTruetFalsetOP_NO_SSLv2tOP_NO_SSLv3tOP_NO_TLSv1t
OP_NO_TLSv1_3t
OP_NO_TLSv1_1t
OP_NO_TLSv1_2(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_constants�s$





	













c
Cs�tj
�}
tjr>tjjd
|
|
r0dp3df�

nttd�r|jt	tj
d�
|jt	tj
dd�
ntjdd�
dS(	Ns
 RAND_status is %d (%s)
ssufficient randomnesssinsufficient randomnesstRAND_egdi
tfoosthis is a random stringg�R@(RtRAND_statusRRRRRRNtassertRaisest	TypeErrorRstRAND_add(R&t
v((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_random�s

	






c
Cst
tj
jt�
}
tjr?tjjd
t	j
|
�
d
�

n|j|
dddd!d#f�
|j|
dtd�
�
|j|
d
td�
�
|j|
dd�
|j|
dd%d'd)d+f�
|j|
dd-�
tj
jt
�
}
tjr
tjjd
t	j
|
�
d
�

n|j|
dd.d/f�
|j|
dd0�
|j|
dd1�
|j|
dd2�
dS(3Ns

tissuertcountryNametXYtlocalityNamesCastle AnthraxtorganizationNamesPython Software Foundationt
commonNamet	localhosttnotAftersAug 26 14:23:15 2028 GMTt	notBeforesAug 29 14:23:15 2018 GMTtserialNumbert98A7CF88C74A32EDtsubjecttsubjectAltNametDNSsprojects.developer.nokia.comsprojects.forum.nokia.comtOCSPshttp://ocsp.verisign.comt	caIssuerss0http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.certcrlDistributionPointss0http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl(R|R}(
(R|R}(R~sCastle Anthrax(
(R~sCastle Anthrax(RsPython Software Foundation(
(RsPython Software Foundation(R�R�(
(R�R�(R|R}(
(R|R}(R~sCastle Anthrax(
(R~sCastle Anthrax(RsPython Software Foundation(
(RsPython Software Foundation(R�R�(
(R�R�(R�R�(
(R�R�(R�sprojects.developer.nokia.com(R�sprojects.forum.nokia.com(
shttp://ocsp.verisign.com(
s0http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer(
s0http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl(Rt_sslt_test_decode_certtCERTFILERRRRRtpprinttpformattassertEqualR@t	NOKIACERT(R&t
p((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_parse_cert�s8
	
$
















	
$










c
Cs�tj
jt�
}
tjr?tjjd
t	j
|
�
d
�

n|j|
iddfd6dd6d	d
6dd6ddfd6dd6dd6�
dS(Ns

R|tUKR�scody-caR{sJun 14 18:00:58 2028 GMTR�sJun 18 18:00:58 2018 GMTR�t02R�s#codenomicon-vm-2.test.lal.cisco.comR�R�R�itversion(R|R�(
(R|R�(R�scody-ca(
(R�scody-ca(R|R�(
(R|R�(R�s#codenomicon-vm-2.test.lal.cisco.com(
(R�s#codenomicon-vm-2.test.lal.cisco.com(R�s#codenomicon-vm-2.test.lal.cisco.com(
(R�s#codenomicon-vm-2.test.lal.cisco.com(RR�R�tTALOS_INVALID_CRLDPRRRRRR�R�R�(R&R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_parse_cert_CVE_2019_5010

s

	
$











c
Cs�tj
jt�
}
tjr?tjjd
t	j
|
�
d
�

nd!d#d%d'd)d+d-f}|j|
d|�
|j|
d|�
tjd.kr�d/d0d1d2d3f}nd4d5d6d7d8f}|j|
d|�
dS(9Ns

R|tUStstateOrProvinceNametOregonR~t	BeavertonRsPython Software FoundationtorganizationalUnitNamesPython Core DevelopmentR�snull.python.orgexample.orgtemailAddressspython-dev@python.orgR�R{ii	iR�saltnull.python.orgexample.comtemails null@python.orguser@example.orgtURIs)http://null.python.orghttp://example.orgs
IP Addresss	192.0.2.1s2001:DB8:0:0:0:0:0:1
s	<invalid>R�(R|R�(
(R|R�(R�R�(
(R�R�(R~R�(
(R~R�(RsPython Software Foundation(
(RsPython Software Foundation(R�sPython Core Development(
(R�sPython Core Development(R�snull.python.orgexample.org(
(R�snull.python.orgexample.org(R�spython-dev@python.org(
(R�spython-dev@python.org(ii	i(R�saltnull.python.orgexample.com(R�s null@python.orguser@example.org(R�s)http://null.python.orghttp://example.org(s
IP Addresss	192.0.2.1(s
IP Addresss2001:DB8:0:0:0:0:0:1
(R�saltnull.python.orgexample.com(R�s null@python.orguser@example.org(R�s)http://null.python.orghttp://example.org(s
IP Addresss	192.0.2.1(s
IP Addresss	<invalid>(
RR�R�tNULLBYTECERTRRRRRR�R�R�R+(R&R�R�tsan((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_parse_cert_CVE_2013_4238"
s0

	
$






	











	c

CsZtj
jt�
}
|j|
d
dddddd	dd!d#d%ffd&d'd(d)f
�
dS(*NR�R�tallsanst	othernames
<unsupported>R�suser@example.orgswww.example.orgtDirNameR|R}R~sCastle AnthraxRsPython Software FoundationR�sdirname exampleR�shttps://www.python.org/s
IP Addresss	127.0.0.1s0:0:0:0:0:0:0:1
s
Registered IDs	1.2.3.4.5(R�R�(R�s
<unsupported>(R�s
<unsupported>(R�suser@example.org(R�swww.example.org(R|R}(
(R|R}(R~sCastle Anthrax(
(R~sCastle Anthrax(RsPython Software Foundation(
(RsPython Software Foundation(R�sdirname example(
(R�sdirname example(R�shttps://www.python.org/(s
IP Addresss	127.0.0.1(s
IP Addresss0:0:0:0:0:0:0:1
(s
Registered IDs	1.2.3.4.5(RR�R�t
ALLSANFILER�(R&R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_parse_all_sans?
s 











	



c
Cs�tt
d
��}
|
j�}WdQXtj|�
}tj|�
}tj|�
}|j||�
|jtjd�
s�|j	d|�

n|j
dtjd�
s�|j	d|�

ndS(NRSs

s-DER-to-PEM didn't include correct header:
%r
s-DER-to-PEM didn't include correct footer:
%r
(RWt
CAFILE_CACERTtreadRtPEM_cert_to_DER_certtDER_cert_to_PEM_certR�t
startswitht
PEM_HEADERtfailtendswitht
PEM_FOOTER(R&RMtpemtd1tp2td2((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_DER_to_PEMT
s









c
	Cs�
tj
}
tj}tj}|j|
ttf�
|j|t�
|j|t�
|j	|
d
�
|j
|
d�
|\}}}}}|j	|d�
|j
|d�
|j	|d�
|j
|d�
|j	|d�
|j
|d�
|j	|d�
|j|d�
|j	|d�
|j|d�
tr`
|j
|jdj|�
�
||t|
�
f�
n.|j
|jd	j|||��
||f�
dS(
Ni�i0iii
i?is
LibreSSL {:d}sOpenSSL {:d}.{:d}.{:d}(RtOPENSSL_VERSION_NUMBERR-tOPENSSL_VERSIONtassertIsInstancetinttlongttupletstrtassertGreaterEqualt
assertLesstassertLessEqualtIS_LIBRESSLt
assertTrueR�tformatthex(	R&t
nt
tt
stmajortminortfixtpatchtstatus((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_openssl_version`
s0
	
	
	















!
c
CsJtjtj
�
}
tj|
�
}tj|�
}~|j|�d�
dS(
N(R!R"Rtwrap_sockettweakreftrefR�tNone(R&R�tsstwr((s)/usr/local/lib/python2.7/test/test_ssl.pyt
test_refcycle
s




c

Cs�tjtj
�
}
ttj|
�
�
��}|jtj|jd
�
|jtj|jt	d�
�
|jtj|j
d
�
|jtj|jt	d�
d
�
|jtj|jd�
|jtj|j
dd�
|jt|j�
WdQXdS(Ni
t
xs0.0.0.0i(s0.0.0.0i(R!R"RRR�Rvterrortrecvt	recv_intot	bytearraytrecvfromt
recvfrom_intotsendtsendtotNotImplementedErrortdup(R&R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_wrapped_unconnected�
s




"


c
CshxadD]Y}
t
j
t
j�
}|j|
�

ttj|�
�
�}|j|
|j��
WdQXqWdS(Ngg@(Ngg@(	R�R!R"t
settimeoutRRR�R�t
gettimeout(R&ttimeoutR�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_timeout�
s






c
Cs�
tj�}
|j
td
tj|
dt�

|j
tdtj|
dt�

|j
tdtj|
dtdd�
ttj|
dtdt�
�
�&}|j
td|jt	df�
WdQX|j
t�
�5}ttj��
�}
tj|
dt�


WdQXWdQX|j
|jjtj�
|j
t�
�;}ttj��
� }
tj|
dtdt�

WdQXWdQX|j
|jjtj�
|j
t�
�;}ttj��
� }
tj|
dtdt�

WdQXWdQX|j
|jjtj�
dS(	Nscertfile must be specifiedtkeyfiles5certfile must be specified for server-side operationstserver_sidetcertfileRCs!can't connect in server-side modei�(R!tassertRaisesRegexpt
ValueErrorRR�R�RjRtconnecttHOSTRvR#tNONEXISTINGCERTR�t	exceptionR$tENOENT(R&tsockR�tcm((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_errors�
s6

	


	


	


$















c
Cstj
jtj
jt�
p!tj|
�}
tj�}|j|j�

|j	t
j�
�!
t
j|d
|
dt
j
�

WdQXdS(s;Check that trying to use the given client certificate failsR�tssl_versionN(RRRRR	tcurdirR!t
addCleanuptcloseRvRRER�tPROTOCOL_TLSv1(R&R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyt
bad_cert_test�
s!
	





c

Cs|jd
�

dS(s Wrapping with an empty cert filesnullcert.pemN(
R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_empty_cert�
sc

Cs|jd
�

dS(s:Wrapping with a badly formatted certificate (syntax error)sbadcert.pemN(
R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_malformed_cert�
sc

Cs|jd
�

dS(s2Wrapping with a badly formatted key (syntax error)s
badkey.pemN(
R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_malformed_key�
sc
s�d
�}
�f
d�}i
dEd6}|
|d�
|
|d�
||d�
||d�
||d	�
||d
�
i
dHd6}|
|d�
||d
�
||d�
||d�
||d�
i
dKd6}|
|d�
|
|d�
||d�
||d�
||d�
i
dNd6}|
|d�
||d	�
||d�
i
dQd6}||d
�
||d�
||d�
||d�
i
dTd6}||d�
||d�
||d�
djd�
j
d�
}i
d|ff
f
d6}|
||�
i
dWd6}|||�
i
dZd6}|||�
d!jd�
j
d�
}i
d|ff
f
d6}|
|d"jd�
j
d�
�
|
|d#jd�
j
d�
�
||d$jd�
j
d�
�
||d%jd�
j
d�
�
id&d'6d]d6d^d_d`fd.6}|
|d*�
|
|d+�
||d-�
||d(�
id/d'6dbdddfdhdjfd6}|
|d8�
||d9�
||d3�
id/d'6dldndpdrfd6}||d8�
id:d'6dtdvdxdzfd6d|d.6}|
|d8�
id:d'6d~d�d�d�fd6d�d.6}||d<�
�jttjdd�
�jttjid�
i
d�d6}|
|d>�
i
d�d6}||d>�
i
d�d6}�jtj�
�}tj|dA�
WdQX�jdBt	|j
�
�
dS(�NcSstj
||
�
dS(
N(Rtmatch_hostname(tcertthostname((s)/usr/local/lib/python2.7/test/test_ssl.pytok�
s
cs �jt
jt
j||
�
dS(
N(RvRtCertificateErrorR�(R�R�(
R&(s)/usr/local/lib/python2.7/test/test_ssl.pyR��
s

R�sexample.comR�sExAmple.cOmswww.example.coms.example.comsexample.orgtexampleXcoms*.a.coms	foo.a.coms
bar.foo.a.comsa.comsXa.coms.a.comsf*.comsfoo.comsf.comsbar.comsbar.foo.comsnull.python.orgexample.orgsnull.python.orgs	*.*.a.comsa.*.coms	a.foo.comsa..comupüthon.python.orgtidnatasciis
x*.python.orgsxn--p*.python.orguwww*.pythön.orguwww.pythön.orguwww1.pythön.orguftp.pythön.orgupythön.orgsJun 26 21:41:46 2011 GMTR�slinuxfrz.orgR�slinuxfr.orgslinuxfr.comR�s
<unsupported>R�sDec 18 23:59:59 2011 GMTR|R�R�t
CaliforniaR~s
Mountain ViewRs
Google Incsmail.google.coms	gmail.comsDec 18 23:59:59 2099 GMTtblablas
google.comsa*b.comsaxxb.comsa*b.co*sa*b*.comsaxxbxxc.comstoo many wildcards(R�sexample.com(
(R�sexample.com(
(
(R�sexample.com(R�s*.a.com(
(R�s*.a.com(
(
(R�s*.a.com(R�sf*.com(
(R�sf*.com(
(
(R�sf*.com(R�snull.python.orgexample.org(
(R�snull.python.orgexample.org(
(
(R�snull.python.orgexample.org(R�s	*.*.a.com(
(R�s	*.*.a.com(
(
(R�s	*.*.a.com(R�sa.*.com(
(R�sa.*.com(
(
(R�sa.*.com(R�s
x*.python.org(
(R�s
x*.python.org(
(
(R�s
x*.python.org(R�sxn--p*.python.org(
(R�sxn--p*.python.org(
(
(R�sxn--p*.python.org(R�slinuxfrz.org(
(R�slinuxfrz.org(
(
(R�slinuxfrz.org(R�slinuxfr.org(R�slinuxfr.com(R�s
<unsupported>(R|R�(
(R|R�(R�R
(
(R�R
(R~s
Mountain View(
(R~s
Mountain View(Rs
Google Inc(
(Rs
Google Inc(R�smail.google.com(
(R�smail.google.com(R|R�(
(R|R�(R�R
(
(R�R
(R~s
Mountain View(
(R~s
Mountain View(Rs
Google Inc(
(Rs
Google Inc(R|R�(
(R|R�(R�R
(
(R�R
(R~s
Mountain View(
(R~s
Mountain View(R�smail.google.com(
(R�smail.google.com(R�R
(
(R�R
(R|R�(
(R|R�(R�R
(
(R�R
(R~s
Mountain View(
(R~s
Mountain View(Rs
Google Inc(
(Rs
Google Inc(R�R
(
(R�R
(R�sa*b.com(
(R�sa*b.com(
(
(R�sa*b.com(R�sa*b.co*(
(R�sa*b.co*(
(
(R�sa*b.co*(R�sa*b*.com(
(R�sa*b*.com(
(
(R�sa*b*.com(tencodetdecodeRvR�RR�R�R
RhR�R�(R&R�R�R�R
R�((
R&s)/usr/local/lib/python2.7/test/test_ssl.pyttest_match_hostname�
s�
	











































































































































c
CsPtj
tj�
}
ttj��
�&}|jt|
j|td
d�

WdQXdS(Ntserver_hostnames
some.hostname(	RRDtPROTOCOL_SSLv23RR!RvR�R�Rj(R&tctxR�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_server_sideXs


c

CsWtjtj
�
}
ttj|
�
�
�*}|jt�
�
|jd
�

WdQXWdQXdS(Nsunknown-type(R!R"RRR�RvR�tget_channel_binding(R&R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_unknown_channel_binding_s


s
tls-uniques*'tls-unique' channel binding not availablec
Cs�tjtj
�
}
ttj|
�
�
�}|j|jd
�
�

WdQXtjtj
�
}
ttj|
dtdt�
�
�}|j|jd
�
�

WdQXdS(Ns
tls-uniqueR�R�(	R!R"RRR�tassertIsNoneR

RjR�(R&R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_tls_unique_channel_bindingfs


$
c
Cs�tj
�}
|jt|
�
d
�
|j|
tj�
tj��M}t|d<t	|d<tj
�}
|j|
j
t	�
|j|
jt�
WdQXdS(NitSSL_CERT_DIRt
SSL_CERT_FILE(Rtget_default_verify_pathsR�tlenR�tDefaultVerifyPathsRtEnvironmentVarGuardtCAPATHR�tcafileR
(R&tpathstenv((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_get_default_verify_pathsrs









twin32sWindows specificc
	CsI
|jt
jd
�
�

|jt
jd�
�

|jtt
j�
|jtt
jd�
t�}
x�dD]�}t
j|�
}|j|t�
x�|D]�}|j|t	�
|j
t|�
d�
|\}}}|j|t�
|j
|ddh�
|j|ttf�
t|t�r�|
j|�

q�q�WqeWd}|j
||
�
dS(	NtCAtROOTRCitx509_asnt
pkcs_7_asns1.3.6.1.5.5.7.3.1(R
R
(R�Rtenum_certificatesRvRwtWindowsErrortsetR�tlistR�R�R
tbytesRhtboolt
isinstancetupdate(	R&t
trust_oidst	storenametstoretelementR�tencttrustt
serverAuth((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_enum_certificates~s&

	














c
Cs�|jt
jd
�
�

|jtt
j�
|jtt
jd�
t
jd
�
}
|j|
t�
xb|
D]Z}|j|t�
|j	t
|�
d�
|j|dt�
|j|dddh�
qeWdS(NR
RCiii
R
R 
(
R�Rt	enum_crlsRvRwR"
R�R$
R�R�R
R%
Rh(R&tcrlsR,
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_enum_crls�s








c
CsDd}
tj
d�
}|j||
�
|j|jd
�
|j|jd�
|j|jd�
|j|jd�
|j|tj
�
|jt	tj
d�
tj
j
d
�
}|j||
�
|j|tj
�
|jt	tj
j
d�
|jt	d��
tj
j
d�

WdQXx�td�
D]�}ytj
j
|�
}Wnt	k
rM



q
X|j|jt
�
|j|jt�
|j|jt�
|j|jttd�
f�
q
Wtj
jd�
}|j||
�
|j|tj
�
|jtj
jd�
|
�
|jtj
jd�
|
�
|jt	d	��
tj
jd
�

WdQXdS(Ni�R/
sTLS Web Server Authentications1.3.6.1.5.5.7.3.1i����sunknown NID 100000i��
i�sunknown object 'serverauth't
serverauth(i�R/
sTLS Web Server Authentications1.3.6.1.5.5.7.3.1(Rt_ASN1ObjectR�tnidt	shortnametlongnametoidR�RvR�tfromnidR�trangeR�R�ttypeR�tfromname(R&texpectedtvalt
itobj((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_asn1object�sB






















#






c
Cs
tj
d
�
}
|jtjjtj
�
|jtjj|
�
|jtjjjd�
|jtjjjd�
|jtjjjd
�
tj
d�
}
|jtjj	tj
�
|jtjj	|
�
|jtjj	jd�
|jtjj	jd�
|jtjj	jd�
dS(Ns1.3.6.1.5.5.7.3.1i�R/
s1.3.6.1.5.5.7.3.2i�t
clientAuth(
RR5
R�tPurposetSERVER_AUTHR�R6
R7
R9
tCLIENT_AUTH(R&R?
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_purpose_enum�s












c
Cs�tjtj
tj�}
|j|
j�

|jt�
�}tj|
d
tj	�


WdQX|j
t|j�
d�
tj
tj�
}|jt�
�}|j|
�

WdQX|j
t|j�
d�
dS(Nt	cert_reqss!only stream sockets are supported(R!R"t
SOCK_DGRAMR�R�RvR�RR�RdR�R�R�RDR

(R&R�tcxR
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_unsupported_dtls�s








cCs|jt
j|
�
|�
dS(
N(R�Rtcert_time_to_seconds(R&t
timestringt	timestamp((s)/usr/local/lib/python2.7/test/test_ssl.pytcert_time_ok�s
cCs'|jt
�
�
tj|
�

WdQXdS(
N(RvR�RRL
(R&RM
((s)/usr/local/lib/python2.7/test/test_ssl.pytcert_time_fail�s

s)local time needs to be different from UTCc

Cs$|jd
d�
|jdd�
dS(NsMay  9 00:00:00 2007 GMTg�C��AsJan  5 09:34:43 2018 GMTg��ѓ�A(
RO
(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyt"test_cert_time_to_seconds_timezone�s
c
Cs*
d
}
d}|j|
|�
|j
tjd|
�
|�
|jd|�
|jd|�
|jd�

|jd�

|jd�

|jd	�

|jd
�

|jd�

|jd�

d
}|jd|�
|jd|�
|jdd�
|jdd�
|jdd�
|jd�

|jdd�
dS(NsJan  5 09:34:43 2018 GMTg��ѓ�AR=sJan 05 09:34:43 2018 GMTsJaN  5 09:34:43 2018 GmTsJan  5 09:34 2018 GMTsJan  5 09:34:43 2018sJan  5 09:34:43 2018 UTCsJan 35 09:34:43 2018 GMTsJon  5 09:34:43 2018 GMTsJan  5 24:00:00 2018 GMTsJan  5 09:60:43 2018 GMTg�
W�AsDec 31 23:59:60 2008 GMTsJan  1 00:00:00 2009 GMTsJan  5 09:34:59 2018 GMTi�FOZsJan  5 09:34:60 2018 GMTi�FOZsJan  5 09:34:61 2018 GMTi�FOZsJan  5 09:34:62 2018 GMTsDec 31 23:59:59 9999 GMTg�� �MB(RO
R�RRL
RP
(R&RM
ttst
newyear_ts((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_cert_time_to_seconds�s*


















tLC_ALLRCc
CsVd
�}
|
�j�dkr.|j
d�

n|jdd�
|j|
�d�

dS(NcSstj
d
d	�S(
Ns%bi
iiiiii(	i
iiiiiiii(R0R<(((s)/usr/local/lib/python2.7/test/test_ssl.pytlocal_february_names
tfebs>locale-specific month name needs to be different from C localesFeb  9 00:00:00 2007 GMTg`�r�As  9 00:00:00 2007 GMT(tlowertskipTestRO
RP
(R&RV
((s)/usr/local/lib/python2.7/test/test_ssl.pyt test_cert_time_to_seconds_locales
	

(+R)R*RrRzR�R�R�R�R�R�Rtcpython_onlyR�R�R�R�R�R�R�R�R
R
R
RHt
skipUnlessRtCHANNEL_BINDING_TYPESR
R
RRFR0
R3
RB
RG
RK
RO
RP
R6RQ
RT
trun_with_localeRZ
(((s)/usr/local/lib/python2.7/test/test_ssl.pyRc�sB			(					
	
								�		
	$$	'				
	#tContextTestscBs�
eZ
ed��
Zed
��
Zd�Zed��
Zd�Zej	e
�d�d��
Zd�Zd�Z
d	�Zd
�Zed��
Zd�Zej	ejd
�d��
Zed��
Zed��
Zd�Zd�Zd�Zejejdkd�ejed�d��
�
Zej	ejdkd�d��
Z d�Z!d�Z"d�Z#d�Z$d�Z%d�Z&RS( c
CsaxtD]}
t
j|
�

qW|jtt
j�
|jtt
jd
�
|jtt
jd�
dS(Ni����i*(t	PROTOCOLSRRDRvRwR�(R&tprotocol((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_constructor-s





c
Cs7x0tD](}
t
j|
�
}|j|j|
�
qWdS(
N(R`
RRDR�Ra
(R&tprotoR
((s)/usr/local/lib/python2.7/test/test_ssl.pyt
test_protocol5s


c
CsYtj
tj�
}
|
jd
�

|
jd�

|jtjd��
|
jd�

WdQXdS(NtALLtDEFAULTsNo cipher can be selecteds^$:,;?*'dorothyx(RRDR�tset_ciphersR�RE(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_ciphers;s







c
Cs�tj
tj�
}
tjtjBtjB}|ttBtBt	Bt
BO}|j||
j�
|
jtj
O_|j|tj
B|
j�
t�r�|
jtj
@|
_|j||
j�
d
|
_|jd
|
jtj@�
n|jt�
�
d
|
_WdQXdS(Ni(RRDR�tOP_ALLRlRmRRRRRR�toptionsRnR,RvR�(R&R
tdefault((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_optionsBs





	


	
c
Cs�tj
tj�
}
|j|
jtj�
tj|
_|j|
jtj�
tj|
_|j|
jtj�
tj|
_|j|
jtj�
|jt	�
�
d|
_WdQX|jt�
�
d
|
_WdQXdS(Ni*(RRDR�R�tverify_modeRdReRfRvRwR�R�(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_verify_modeXs










s!verify_flags need OpenSSL > 0.9.8c
Cs�tj
tj�
}
ttd
d�}|j|
jtj|B�
tj|
_|j|
jtj�
tj|
_|j|
jtj�
tj|
_|j|
jtj�
tjtj	B|
_|j|
jtjtj	B�
|j
t�
�
d|
_WdQXdS(NtVERIFY_X509_TRUSTED_FIRSTi(
RRDR�tgetattrR�tverify_flagstVERIFY_DEFAULTtVERIFY_CRL_CHECK_LEAFtVERIFY_CRL_CHECK_CHAINtVERIFY_X509_STRICTRvRwR�(R&R
ttf((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_verify_flagsgs










c
Cs�tj
tj�
}
|
jtd
d�


|
jtd
t�


|jt|
jd
t�

|jt�
�}|
jt	�

WdQX|j
|jjtj
�
|jtjd��
|
jt�

WdQX|jtjd��
|
jt�

WdQXtj
tj�
}
|
jtt�
|
jdtd
t�
|
jdtd
t�
|jtjd��
|
jt�

WdQX|jtjd��
|
jt�

WdQX|jtjd��
|
jdtd
t�
WdQXtj
tj�
}
|jtjd��
|
jtt�
WdQX|
jtdt�


|
jtdtj��


|
jtdttj��
�


|
jttt�
|
jtttj��
|
jttttj��
�
|jtd��
|
jtdt�


WdQX|jtj�
�
|
jtdd�


WdQX|jtd��
|
jtdd	d
�


WdQXd�}d�}d
�}d�}d�}d�}d�}	ddd��Y}
|
jtd|�


|
jtd|�


|
jtd|�


|
jtd|
��


|
jtd|
�j�


|jtj�
�
|
jtd|�


WdQX|jtd��
|
jtd|�


WdQX|jtd��
|
jtd|�


WdQX|jtd��
|
jtd|	�


WdQX|
jtd|	�


dS(NR�sPEM libR�skey values mismatchtpasswordsshould be a stringtbadpassscannot be longert
ai�
c
SstS(
N(
tKEY_PASSWORD(((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass_unicode�s
c
Ss
tj
�S(
N(R{
R
(((s)/usr/local/lib/python2.7/test/test_ssl.pyt
getpass_bytes�s
cSstt
j��
S(
N(R�R{
R
(((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass_bytearray�s
c
Ssd
S(NRy
((((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass_badpass�s
cSsd
dS(NRz
ii((((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass_huge�s
c
Ssd
S(Ni	((((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass_bad_type�s
cSstd
�
�
dS(Ns
getpass error(
t	Exception(((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass_exception�s
tGetPassCallablec
BseZ
d�Zd
�ZRS(c


SstS(
N(
R{
(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyt__call__�s
c


SstS(
N(
R{
(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pytgetpass�s
(R)R*R�
R�
(((s)/usr/local/lib/python2.7/test/test_ssl.pyR�
�s
	smust return a strings
getpass error(( RRDR�tload_cert_chainR�R�RvRwR#R�R�R�R$R�R�REtBADCERTt	EMPTYCERTtONLYCERTtONLYKEYtBYTES_ONLYCERTt
BYTES_ONLYKEYR�tCERTFILE_PROTECTEDR{
R
R�tONLYKEY_PROTECTEDRjR�R�
R�
(R&R
R�R|
R}
R~
R
R�
R�
R�
R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_load_cert_chain{sz
































							













c
Csj
tj
tj�
}
|
jt�

|
jd
tdd�
|
jt�

|
jd
tdd�
|
jd
tjd�
�

|jt	|
j�
|jt	|
jddd�
|jt
�
�}|
jt�

WdQX|j|j
jtj�
|jt
�
�
|
jd�

WdQX|jtjd��
|
jt�

WdQX|
jtt�
|
jtdt�


|jt	|
jdt�
dS(NR
R
sutf-8usPEM lib(RRDR�tload_verify_locationsR�R�tBYTES_CERTFILER
RvRwR#R�R�R�R$R�R�RER�
R
tBYTES_CAPATHRj(R&R
R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_load_verify_locations�s$


















c

Cstt
�
�}
|
j�jd
�
}WdQXtj|�
}tt�
�}
|
j�jd
�
}WdQXtj|�
}tjtj�
}|j	|j
�dd�
|jd|�

|j	|j
�dd�
|jd|�

|j	|j
�dd�
|jd|�

|j	|j
�dd�
tjtj�
}dj||f�
}|jd|�

|j	|j
�dd�
tjtj�
}d|d	|d
|dg}|jddj|�
�

|j	|j
�dd�
tjtj�
}|jd|�

|jd|�

|j	|j
�dd�
|jd|�

|j	|j
�dd�
tjtj�
}dj||f�
}|jd|�

|j	|j
�dd�
tjtj�
}|j
t|jdt�

|jtjd
��
|jdd�

WdQX|jtjd��
|jdd�

WdQXdS(NR
tx509_caitcadatai
is

theadtothertagainttailRCs
no start lineubrokensnot enough datatbroken(RWR�R�R
RR�tCAFILE_NEURONIORDR�R�tcert_store_statsR�
RRvRwtobjectR�RE(R&RMt
cacert_pemt
cacert_dertneuronio_pemtneuronio_derR
tcombined((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_load_verify_cadata�sN




























c
	Csf
d
}
tj
�}y|
j|�

Wn(tk
rM


|jd|
|f�

n
Xtjtj�
}|jt	�

t
jdkr�|jt�

n|j
t|j�
|j
t|jd�
|j
t�
�}|jt�

WdQX|j|jjtj�
|j
tj�
�}|jt�

WdQXtj��9}t
jj||
�}tjt	|�
|j|�

WdQXdS(Nu
dhpäräm.pems;filename %r cannot be encoded to the filesystem encoding %rtnt(RtgetfilesystemencodingR
tUnicodeEncodeErrorRY
RRDR�tload_dh_paramstDHFILERR
tBYTES_DHFILERvRwR�R#R�R�R�R$R�RER�Rttemp_dirRRtshutiltcopy(R&tfilenametfs_encodingR
R�t
dtfname((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_load_dh_paramss*





















c
Cs�x�tD]x}
t
j|
�
}|j|j�id
d6d
d6d
d6d
d6d
d6d
d6d
d6d
d	6d
d
6d
d6d
d6�
qWdS(
NitnumberR�tconnect_goodtconnect_renegotiatetaccepttaccept_goodtaccept_renegotiatethitstmissesttimeoutst
cache_full(R`
RRDR�t
session_stats(R&Rc
R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_session_stats6s













c
Cs tj
tj�
}
|
j�
dS(
N(RRDR�tset_default_verify_paths(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_set_default_verify_pathsHs
s#ECDH disabled on this OpenSSL buildc
Cs�tj
tj�
}
|
jd
�

|
jd
�

|jt|
j�
|jt|
jd�
|jt|
jd�
|jt|
jd�
dS(Nt
prime256v1Rt(RRDR�tset_ecdh_curveRvRwR�R�(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_set_ecdh_curveNs







c
Cs�tj
tj�
}
|jt|
j�
|jt|
jd
�
|jt|
jd�
|jt|
j|
�
d�}|
jd�

|
j|�

dS(NiRCc
SsdS(
N((R�t
servernameR
((s)/usr/local/lib/python2.7/test/test_ssl.pyt
dummycallbackbs
(RRDR�RvRwtset_servername_callbackR�(R&R
R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_sni_callbackXs


	

c
Csatj
tj�
}
|
d
�
}|
j|�

tj|
�
}~
~tj�
|j|�d�
dS(Nc
SsdS(
N((R�R�
R
tcycle((s)/usr/local/lib/python2.7/test/test_ssl.pyR�
ls
(
RRDR�R�
R�R�tgctcollecttassertIsR�(R&R
R�
R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_sni_callback_refcyclegs






c
Cs�tj
tj�
}
|j|
j�id
d6d
d6d
d6�
|
jt�

|j|
j�id
d6d
d6d
d6�
|
jt�

|j|
j�id
d6d
d6dd6�
|
jt�

|j|
j�idd6d
d6dd6�
dS(NiR�
tcrltx509i
i(	RRDR�R�R�
R�
R�R�
R�(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_cert_store_statsts














c
Cs
tj
tj�
}
|j|
j�g�
|
jt�

|j|
j�g�
|
jt�

|j|
j�iddddfd	6td
�
d6td�
d
6dd6dd6dd!d#d%fd6dd6g
�
t	t�
�}|j
�}WdQXtj|�
}|j|
jt�
|g
�
dS(&NRsRoot CAR�shttp://www.cacert.orgR�sCA Cert Signing AuthorityR�ssupport@cacert.orgR{sMar 29 12:29:49 2033 GMTR�sMar 30 12:29:49 2003 GMTR�t00R�s!https://www.cacert.org/revoke.crlR�R�iR�(RsRoot CA(
(RsRoot CA(R�shttp://www.cacert.org(
(R�shttp://www.cacert.org(R�sCA Cert Signing Authority(
(R�sCA Cert Signing Authority(R�ssupport@cacert.org(
(R�ssupport@cacert.org(
s!https://www.cacert.org/revoke.crl(RsRoot CA(
(RsRoot CA(R�shttp://www.cacert.org(
(R�shttp://www.cacert.org(R�sCA Cert Signing Authority(
(R�sCA Cert Signing Authority(R�ssupport@cacert.org(
(R�ssupport@cacert.org(
RRDR�R�tget_ca_certsR�
R�R�R@RWR�R�Rj(R&R
RMR�tder((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_get_ca_certs�s.

























c
Cs�tj
tj�
}
|
j�
tj
tj�
}
|
jtjj�

|
j�
tj
tj�
}
|
jtjj�

tj
tj�
}
|jt|
jd�
|jt|
jd
�
dS(NRE
(
RRDR�tload_default_certsRD
RE
RF
RvRwR�(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_load_default_certs�s








R
snot-Windows specifics!LibreSSL doesn't support env varsc
	Csttj
tj�
}
tj��P}t|d
<t|d<|
j�
|j|
j	�idd6dd6dd6�
WdQXdS(NR
R
iR�
i
R�
R�
(
RRDR�RR
R
R�R�
R�R�
(R&R
R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_load_default_certs_env�s







sWindows specificc
Cs�tj
tj�
}
|
j�
|
j�}tj
tj�
}
tj��K}t|d
<t|d<|
j�
|dcd7<|j	|
j�|�
WdQXdS(NR
R
R�
i
(
RRDR�R�
R�
RR
R
R�R�(R&R
tstatsR
((s)/usr/local/lib/python2.7/test/test_ssl.pyt#test_load_default_certs_env_windows�s











cCs�|j|
j
tj@tj�
td
krC|j|
j
t@t�
ntd
kri|j|
j
t@t�
ntd
kr�|j|
j
t@t�
ntd
kr�|j|
j
t@t�
ndS(Ni(R�Rj
RRlRRRR(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyt_assert_context_options�s















c
Cs(
tj
�}
|j|
jtj�
|j|
jtj�
|j|
j�

|j	|
�

t
t�
�}|j�j
d
�
}WdQXtj
dtdtd|�}
|j|
jtj�
|j|
jtj�
|j	|
�

tj
tjj�
}
|j|
jtj�
|j|
jtj�
|j	|
�

dS(NR
R
R
R�
(Rtcreate_default_contextR�Ra
R

Rm
RfR�tcheck_hostnameR�
RWt
SIGNING_CAR�R
R
RD
RF
Rd(R&R
RMR�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_create_default_context�s 







	






c
Cs_
tj
�}
|j|
jtj�
|j|
jtj�
|j|
j�

|j	|
�

tj
tj
�
}
|j|
jtj
�
|j|
jtj�
|j	|
�

tj
tj
d
tjdt�
}
|j|
jtj
�
|j|
jtj�
|j
|
j�

|j	|
�

tj
dtjj�
}
|j|
jtj�
|j|
jtj�
|j	|
�

dS(NRH
R�
tpurpose(Rt_create_stdlib_contextR�Ra
R

Rm
RdtassertFalseR�
R�
R�RfRjR�RD
RF
(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest__create_stdlib_context�s(










	
	







c
Cs�tj
d
�
}
|j|
j|
j�
|
jdt�

|j|
j|
j�
|
jdt�

|j|
j|
j�
|
jdt�

|
j�
|j|
j|
j�
dS(NRtenable(	Rtimport_fresh_moduleR�
t_create_default_https_contextR�
t_https_verify_certificatesRkt_create_unverified_contextRj(R&t	local_ssl((s)/usr/local/lib/python2.7/test/test_ssl.pyttest__https_verify_certificatess











c
Csqd
}
d}i}td|
|�
d|t
j<td||�
x+d	D]#}||t
j<td|
|�
qFWdS(
Ns
import ssl, sys;             status = "Error: _create_default_https_context does not verify certs"                        if ssl._create_default_https_context is                           ssl._create_unverified_context                      else None;             sys.exit(status)s
import ssl, sys;             status = "Error: _create_default_https_context verifies certs"                        if ssl._create_default_https_context is                           ssl.create_default_context                      else None;             sys.exit(status)s-cR8RCt
1tenabledRt(RCR�
R�
Rt(R
Rt_https_verify_envvar(R&thttps_is_verifiedthttps_is_not_verifiedt	extra_envtsetting((s)/usr/local/lib/python2.7/test/test_ssl.pyttest__https_verify_envvars






c
Cs�tj
tj�
}
|j|
j�

|jt�
�
t|
_WdQXtj|
_	|j|
j�

t|
_|j
|
j�

tj|
_	t|
_|j
|
j�

|jt�
�
tj|
_	WdQXt
|
_|j|
j�

dS(
N(RRDR�R�
R�
RvR�RjRfRm
R�ReRdRk(R&R
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_check_hostname6s





	

	


	
('R)R*RQRb
Rd
Rh
Rl
Rn
RHR\
R/Rw
R�
R�
R�
R�
R�
R�
RRgR�
t	needs_sniR�
R�
R�
R�
R�
tskipIfRRFR�R�
R�
R�
R�
R�
R�
R�
R�
(((s)/usr/local/lib/python2.7/test/test_ssl.pyR_
+s8		
	S		:		

			
	$					t
SSLErrorTestsc
Bs#eZ
d�Zd
�Zd�ZRS(c
Csztj
d
d�}
|jt|
�
d�
|j|
jd
�
tjd
d�}
|jt|
�
d�
|j|
jd
�
dS(Ni
Rt(RRER�R�R$tSSLZeroReturnError(R&R'((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_strOs



c
Cs�tj
tj�
}
|jtj�
�}|
jt�

WdQX|j|jj	d
�
|j|jj
d�
t|j�
}|j|j
d�
|�
dS(NtPEMt
NO_START_LINEs"[PEM: NO_START_LINE] no start line(RRDR�RvRER�
R�R�R�tlibrarytreasonR�R�R�(R&R
R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_lib_reasonYs





c

Cs
tj
tj�
}
ttj��
��}|jd�

|jd�

tj�}|j|j��

|j	t
�

t|
j|t
dt
�
�
�m}|jtj
�
�}|j�
WdQXt|j�
}|j|jd�
|�
|j|jjtj�
WdQXWdQXdS(Ns	127.0.0.1iitdo_handshake_on_connects%The operation did not complete (read)(s	127.0.0.1i(RRDR�RR!tbindtlistenR�tgetsocknametsetblockingRkR�RvtSSLWantReadErrortdo_handshakeR�R�R�R�R�R$tSSL_ERROR_WANT_READ(R&R
R�t
cR�((s)/usr/local/lib/python2.7/test/test_ssl.pyt
test_subclasscs









!



(R)R*R�
R�
R(((s)/usr/local/lib/python2.7/test/test_ssl.pyR�
Ms	
	
tNetworkedTestscBs�eZ
d�Zd
�Zd�Zd�Zd�Zd�Zd�Zd�Z	e
jej
dkd	�d
��
Zd�Zd�Zd
�Zd�Zed��
ZRS(c

Cs+
tj
t�
�

tjtjtj�
d
tj�

}
z-|
jtdf�

|j	i|
j
��
Wd|
j�
Xtjtjtj�
d
tj�

}
|j
tjd|
jtdf�
|
j�
tjtjtj�
d
tjdt�
}
z*|
jtdf�

|j|
j
��

Wd|
j�
XWdQXdS(NRH
i�
scertificate verify failedtca_certs(Rttransient_internettREMOTE_HOSTRR�R!R"RdR�R�tgetpeercertR�RfR�REtREMOTE_ROOT_CERTR�(R&R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_connectxs&











	
	


c

Cs�tj
t�
�s
tjtjtj�
d
tjdt�
}
z6|j	d|
j
tdf�
�
|j|
j��

Wd|
j
�
XWdQXdS(NRH
Rii�
(RRR	RR�R!R"RfRR�t
connect_exR�R
R�(R&R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_connect_ex�s

	
	


c
CsA
tj
t�
�,

tjtjtj�
d
tjdtdt	�
}
z�|
j
t	�

|
jtdf�
}|j|dt
jt
jf�
tjg|
g
gd�
xutr
y|
j�
PWq�tjk
r�


tj|
g
ggd�
q�tjk
r



tjg|
g
gd�
q�Xq�W|j|
j��

Wd|
j�
XWdQXdS(NRH
RR�
i�
ig@(RRR	RR�R!R"RfRRkRR
RhR$tEINPROGRESStEWOULDBLOCKtselectRjRR
tSSLWantWriteErrorR�R
R�(R&R�trc((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_non_blocking_connect_ex�s(

	

	



	







!c
Cs�tj
t�
��
tjtjtj�
d
tjdtdt	�
}
z^|
j
d�

|
jtdf�
}|dkr�|jd�

n|j
|tjtjf�
Wd|
j�
XWdQXdS(NRH
RR�
gH�����z>i�
is!REMOTE_HOST responded too quickly(RRR	RR�R!R"RfRRkR�R
RY
RhR$tEAGAINRR�(R&R�R((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_timeout_connect_ex�s

	

	






 c

Cs�tj
t�
��
tjtjtj�
d
tjdt�
}
zG|
j	tdf�
}t
jt
jt
j
t
jf}|j||�
Wd|
j�
XWdQXdS(NRH
Ri�
(RRR	RR�R!R"RfRR
R$tECONNREFUSEDtEHOSTUNREACHt	ETIMEDOUTRRhR�(R&R�Rterrors((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_connect_ex_error�s


	
	


c

Csy
tj
t�
�d

tjtj�
}
|
jtjtj�
�
}|j	td
f�

z|j
i|j��
Wd|j�
X|
jtjtj�
dt�

}|j	td
f�

|j�
tj
|
_|
jtjtj�
�
}|jtjd|j	td
f�
|j�
|
jt�

|
jtjtj�
�
}|j	td
f�

z|j�}|j|�

Wd|j�
XWdQXdS(Ni�
R	
scertificate verify failed(RRR	RRDR

R�R!R"R�R�R
R�RfRm
R�RER�
RR�(R&R
R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_connect_with_context�s.





	













c
Cs(
tj
t�
�

tjtj�
}
tj|
_|
jd
t	�

|
j
tjtj�
�
}|j
tdf�

z|j�}|j|�

Wd|j�
Xtjtj�
}
tj|
_|
jd
t�

|
j
tjtj�
�
}|j
tdf�

z|j�}|j|�

Wd|j�
XWdQXdS(NR
i�
(RRR	RRDR

RfRm
R�
R
R�R!R"R�R
R�R�R�
(R&R
R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_connect_capath�s&














c

Cs[
tt
�
�}
|
j�jd
�
}WdQXtj|�
}tjt�
�


tj	tj
�
}tj|_|j
d|�

t|jtjtj�
�
�
�3}|jtdf�

|j�}|j|�

WdQXtj	tj
�
}tj|_|j
d|�

t|jtjtj�
�
�
�3}|jtdf�

|j�}|j|�

WdQXWdQXdS(NR
R�
i�
(RWRR�R
RR�RRR	RDR

RfRm
R�
RR�R!R"R�R
R�(R&RMR�R�
R
R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_connect_cadatas$







$





$


R�
s*Can't use a socket as a file under Windowsc
Cs�tj
t�
��
tjtjtj�
�
}
|
jtd
f�

|
j�}|
j	�}|j
�
tj|d�
|
j
�
t
j�
|jt�
�}tj|d�
WdQX|j|jjtj�
WdQXdS(Ni�
i(RRR	RR�R!R"R�tfilenotmakefileR�RR�R�
R�
RvtOSErrorR�R�R$tEBADF(R&R�tfdRMR'((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_makefile_close0s











c

Cs
tj
t�
�


tjtj�
}
|
jtd
f�

|
jt�

tj	|
dtj
dt�
}
d}xytr�y|d7}|
j�
PWqitj
k
r�


tj|
g
gg�
qitjk
r�


tjg|
g
g�
qiXqiW|
j�
tjr
tjjd|�

nWdQXdS(Ni�
RH
R�
ii
s9
Needed %d calls to do_handshake() to establish session.
(RRR	R!R"R�RRkRR�RdRjRR
RRR�RRRR(R&R�tcount((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_non_blocking_handshakeDs(






	
	

	












	
c
s?d�f
d
�
}
|
t
dt�
tjr;|
dd�
ndS(Nc	s%
tj
|�
�

tj||
f�
}|sE�jd
||
f�

nytj||
fdt�

}Wn6tjk
r�
}
tjr�tj	j
d|�

q�nX�jd|||
f�

tj||
fd|�

}|s��jd
||
f�

ntjr
tj	j
d||
|f�

nWdQXdS(NsNo server certificate on %s:%s!Rs%s
s$Got server certificate %s for %s:%s!s&
Verified certificate for %s:%s is
%s
(RRRtget_server_certificateR�R�RERRRR(thosttportR�R�R�(
R&(s)/usr/local/lib/python2.7/test/test_ssl.pyt_test_get_server_certificate[s"







	


	


	
i�
sipv6.google.com(R�R	RRtIPV6_ENABLED(R&R*((
R&s)/usr/local/lib/python2.7/test/test_ssl.pyttest_get_server_certificateZs

	
c
Cs
td
f}
t
j|
d�
��
ttjtjtj�
dtjdd�
�
�}|j	|
�

WdQXttjtjtj�
dtjdd�
�
�}|j	|
�

WdQX|j
tjd��Q
ttjtj�
�
�2}tj|dtjdd�
}|j	|
�

WdQXWdQXWdQXdS(	Ni�
iRH
tciphersRe
Rf
sNo cipher can be selecteds^$:,;?*'dorothyx(R	RRRRR�R!R"RdR�R�RE(R&tremoteR�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyRh
us











c
Cs�tj
t�
��
tjtj�
}
tj|
_|
jd
t	�

|j
|
j�g�
|
jt
j
t
j�
�
}|jtdf�

z|j�}|j|�

Wd|j�
X|j
t|
j��
d�
WdQXdS(NR
i�
i
(RRR	RRDR

RfRm
R�
R
R�R�
R�R!R"R�R
R�R�R
(R&R
R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_get_ca_certs_capath�s









c
Cs�tj
t�
��
tjtj�
}
tjtj�
}tjtj�
}t	|
j
|�
�
�u}|jtd
f�

|j|j
|
�
|j|jj
|
�
||_
|j|j
|�
|j|jj
|�
WdQXWdQXdS(Ni�
(RRR	RRDR�R

R!R"RR�R�R�
tcontextt_sslobj(R&tctx1tctx2R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_context_setget�s







	

(R)R*RRRRRRRRRHR�
RR
R$R&R,Rh
R/R�
R4(((s)/usr/local/lib/python2.7/test/test_ssl.pyRvs								$				(
tmake_https_servertThreadedEchoServercBs{eZ
dejf
d
��YZddddeeeddddd�Zd�Z	d�Z
dd�
Zd�Zd�Z
RS(	tConnectionHandlerc
BsDeZ
dZd
�Zd�Zd�Zd�Zd�Zd�ZRS(s�A mildly complicated class, because we want it to work both
            with and without the SSL wrapper around the socket connection, so
            that we can test the STARTTLS functionality.cCsZ|
|_t
|_||_||_|jjd
�

d|_tj	j
|�

t|_dS(Ni
(
tserverRktrunningR�taddrRR�tsslconnt	threadingtThreadt__init__Rjtdaemon(R&R8tconnsockR:((s)/usr/local/lib/python2.7/test/test_ssl.pyR>�s
	
	
	
	

	

c
Cs�y]|jj
j|jd
t�

|_|jjj|jj��

|jj	j|jj
��

Wn)
tjt
jtfk
r�

}

|
jtjtjtjfkr�|jjjt|
�
�

|jjr�tdt|j�
d�

nt|_|j�
tSt|
tj�r$
|
jtjkr$
�n|jjj|
�

|jjra
tdt|j�
d�

nt|_|jj�
|j�
tSn"
X|jj
jtj kr:|jj!�}t"j#r�
|jjr�
t$j%j&dt'j(|�
d�

n|jj!t�
}t"j#r:|jjr:t$j%j&dtt)|�
�
d�

q:n|jj*�}t"j#r�|jjr�t$j%j&dt|�
d�

t$j%j&d	t|jj��
d�

ntSdS(
NR�s'
 server:  bad connection attempt from s:
s client cert is s

s cert binary is s bytes
s" server: connection cipher is now s" server: selected protocol is now (+R8R0R�R�RjR;tselected_npn_protocolstappendtselected_npn_protocoltselected_alpn_protocolstselected_alpn_protocolRRER!R�R!R$t
ECONNRESETtEPIPEt	ESHUTDOWNtconn_errorsR�tchattyRtreprR:RkR9R�R'
tstopRm
RfR
RRRRRR�R�R
tcipher(R&R'R�tcert_binaryRM((s)/usr/local/lib/python2.7/test/test_ssl.pyt	wrap_conn�sH




 

!


	


%




	







$


*



	
!
c

Cs*|jr|jj
�S|jjd
�
SdS(Ni(R;R�R�R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyR��s
	

cCs-|jr|jj
|
�
S|jj|
�
SdS(
N(R;RR�R�(R&R%
((s)/usr/local/lib/python2.7/test/test_ssl.pyR�s
	
c


Cs*|jr|jj
�
n
|jj
�
dS(
N(R;R�R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyR�s
	
c
Cs�t|_
|jjs(|j�s(dSnx�|j
r�yE|j�}
|
j�}|skt|_
|j�
n
|d
kr�t	j
r�|jjr�tj
jd�

n|j�
dS|jjr

|dkr

t	j
r�|jjr�tj
jd�

n|jd�

|j�sxdSnk
|jjr�
|jr�
|dkr�
t	j
rV
|jjrV
tj
jd�

n|jd�

|jj�|_d|_t	j
rx|jjrxtj
jd�

qxn�|d	krt	j
r�
|jjr�
tj
jd
�

n|jjd�
}|jt|�
jd�
d
�

nft	j
re|jjre|jr6dp9d}tj
jd|
||
j�|f�

n|j|
j��

Wq+tjk
r�


|jjr�td�

n|j�
t|_
|jj�
q+Xq+WdS(Ntovers" server: client closed connection
tSTARTTLSs2 server: read STARTTLS from client, sending OK...
sOK
tENDTLSs0 server: read ENDTLS from client, sending OK...
s* server: connection is now unencrypted...
s
CB tls-uniques@ server: read CB tls-unique from client, sending our CB data...
s
tls-uniquesus-asciis

t	encryptedtunencrypteds/ server: read %r (%s), sending back %r (%s)...
sTest server failure:
(RjR9R8tstarttls_serverROR�tstripRkR�RRtconnectionchattyRRRR;tunwrapR�R�R

RKR
RX
RRERJRRL(R&tmsgtstrippedtdatatctype((s)/usr/local/lib/python2.7/test/test_ssl.pytrunsb
	







	























	






#	











	(	R)R*t__doc__R>ROR�RR�R](((s)/usr/local/lib/python2.7/test/test_ssl.pyR7�s	
	:			cCs`
|r||_n�t
j|dk	r*|nt
j�
|_|dk	rK|nt
j|j_|rs|jj|�

n|
r�|jj|
�

n|r�|jj	|�

n|	r�|jj
|	�

n|
r�|jj|
�

n||_||_
||_tj�|_tj|j�
|_d|_t|_g|_g|_g|_tjj|�

t|_dS(
N(R0RRDR�tPROTOCOL_TLSRdRm
R�
R�
tset_npn_protocolstset_alpn_protocolsRg
RJRWRUR!R�Rt	bind_portR)tflagRktactiveRARDRIR<R=R>RjR?(R&tcertificateR�tcertreqstcacertsRJRWRUt
npn_protocolstalpn_protocolsR-R0((s)/usr/local/lib/python2.7/test/test_ssl.pyR>Bs:















	
	
	


	
	
	
	
	

c

Cs$|jt
j��

|jj�
|S(
N(tstartR<tEventRctwait(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyt	__enter__fs



c

Gs|j�
|j
�
dS(
N(RLR(R&RJ((s)/usr/local/lib/python2.7/test/test_ssl.pyt__exit__ks


cCs|
|_t
jj|�

dS(
N(RcR<R=Rj(R&Rc((s)/usr/local/lib/python2.7/test/test_ssl.pyRjos
	
c
Cs	
|jj
d
�

|jjd�

t|_|jrB|jj�
nx�|jr�yu|jj�\}
}tj	r�|j
r�tjj
dt|�
d�

n|j||
|�}|j�
|j�
WqEtjk
r�


qEtk
r�


|j�
qEXqEW|jj�
dS(Ng�������?is server:  new connection from s

(R�R�R�
RjRdRcR#
R�
RRRJRRRRKR7RjRR!R�tKeyboardInterruptRLR�(R&tnewconntconnaddrthandler((s)/usr/local/lib/python2.7/test/test_ssl.pyR]ss&


	
	




	










c

Cs
t|_
dS(
N(RkRd(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyRL�s
N(R)R*R<R=R7R�RjRkR>RmRnRjR]RL(((s)/usr/local/lib/python2.7/test/test_ssl.pyR6�s�

	

 			tAsyncoreEchoServercBsceZ
dejf
d
��YZd�Zd�Zd�Zd�Zd	d�
Z
d�Zd�ZRS(
t
EchoServercBs<eZ
dejf
d
��YZd�Zd�Zd�ZRS(R7c
Bs>eZ
d�Zd
�Zd�Zd�Zd�Zd�ZRS(cCsQtj
|
d
td|dt�
|_tjj||j�
t|_|j	�
dS(NR�R�R�
(
RR�RjRkR!tasyncoretdispatcher_with_sendR>t_ssl_acceptingt_do_ssl_handshake(R&tconnR�((s)/usr/local/lib/python2.7/test/test_ssl.pyR>�s




	
c

CsBt|j
tj�r>x&|j
j�d
kr:|j�
qWntS(Ni(R'
R!Rt	SSLSockettpendingthandle_read_eventRj(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pytreadable�s



c
Cs�y|jj
�
Wn�tjtjfk
r1


dStjk
rK


|j�Stjk
ra


�n?tjk
r�
}

|
j	d
t
jkr�|j�Sn
Xt|_
dS(Ni(R!RRR
RtSSLEOFErrorthandle_closeRER�RJR$tECONNABORTEDRkRw(R&Ra((s)/usr/local/lib/python2.7/test/test_ssl.pyRx�s











c
Csu|jr|j
�
n[|jd
�
}
tjrKtjjdt|
�
�

n|
s^|j	�
n|j
|
j��

dS(Nis server:  read %s from client
(RwRxR�RRRRRRKR�R�RX
(R&R[((s)/usr/local/lib/python2.7/test/test_ssl.pythandle_read�s
	


	



c

Cs1|j�
t
jr-tjjd
|j�

ndS(Ns server:  closed connection %s
(R�RRRRRR!(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyR�s


	
c


Cs�dS(
N((
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyR�s
(R)R*R>R}RxR�RR(((s)/usr/local/lib/python2.7/test/test_ssl.pyR7�s					cCsZ|
|_t
j
t
jt
j�}tj|d
�|_tjj	||�
|j
d�

dS(NRCi(R�R!R"tSOCK_STREAMRRbR)Rut
dispatcherR>R�
(R&R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyR>�s

	



c
CsI|j�\}
}t
jr2tjjd
|�

n|j|
|j�
dS(Ns$ server:  new connection from %s:%s
(R�
RRRRRR7R�(R&tsock_objR:((s)/usr/local/lib/python2.7/test/test_ssl.pyt
handle_accept�s

	

c


Cs�dS(
N((
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyR�s
(R)R*RuRvR7R>R�R(((s)/usr/local/lib/python2.7/test/test_ssl.pyRt�s3		cCsPd|_
t|_|j|
�
|_|jj|_tjj	|�

t
|_dS(
N(R�RcRkRdRtR8R)R<R=R>RjR?(R&R�((s)/usr/local/lib/python2.7/test/test_ssl.pyR>�s
	
	



c

Csd
|jj
|jfS(Ns<%s %s>(t	__class__R)R8(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyt__str__�s
c

Cs$|jt
j��

|jj�
|S(
N(RjR<RkRcRl(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyRm�s



c
Gs|tj
rtjjd
�

n|j�
tj
rBtjjd�

n|j�
tj
rhtjjd�

ntjdt	�

dS(Ns cleanup: stopping server.
s! cleanup: joining server thread.
s cleanup: successfully joined.
t
ignore_all(
RRRRRRLRRut	close_allRj(R&RJ((s)/usr/local/lib/python2.7/test/test_ssl.pyRn�s
	



	



	
cCs|
|_t
jj|�

dS(
N(RcR<R=Rj(R&Rc((s)/usr/local/lib/python2.7/test/test_ssl.pyRj�s
	
c

CsQt|_
|jr"|jj�
nx(|j
rLytjd
�

Wq%


q%Xq%WdS(Ni
(RjRdRcR#
Rutloop(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyR]�s
	
	





c

Cst|_
|jj�
dS(
N(RkRdR8R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyRL�s
	
N(
R)R*RuR�RtR>R�RmRnR�RjR]RL(((s)/usr/local/lib/python2.7/test/test_ssl.pyRs�sE					
sFOO
cCs�
i}td
|
d|dt
�}|��

t|jtj�d|�

�
��
}|jt|jf�

x�|t|�
t	|�
gD]�}	|r�t
jr�tj
jd|�

q�n|j|	�

|j�}
|r�t
jr�tj
jd|
�

q�n|
|j�kr~td|
d t|
�
|d j�t|�
f�
�
q~q~W|jd	�

|rp
t
jrp
tj
jd
�

qp
n|ji|j�d6|j�d6|j�d
6|j�d6|j�d6|j�d6�

|j�
WdQX|j|d<|j|d<WdQX|S(sc
        Launch a server, connect a client to it and try various reads
        and writes.
        R0RJRWR	
s client:  sending %r...
s client:  read %r
s4bad data <<%r>> (%d) received; expected <<%r>> (%d)
isover
s client:  closing connection.
tcompressionRMtpeercerttclient_alpn_protocoltclient_npn_protocolR�Ntserver_alpn_protocolstserver_npn_protocols(R6RkRR�R!R�R�R)R�t
memoryviewRRRRRR�RX
tAssertionErrorR
R(
R�RMR
RERCR�R�RDRA(tclient_contexttserver_contexttindataRJRWtsni_nameR�
R8R�targtoutdata((s)/usr/local/lib/python2.7/test/test_ssl.pytserver_params_test
sL


	




"

	
	





	





'



	

	














c
Cs|dkrt
j}nid
t
j6dt
j6dt
j6|}tjr�|rUdpXd}tjj	|t
j
|
�
t
j
|�
|f�

nt
j|
�
}|j|O_t
j|�
}	|	j|O_|j
t
jkr�|jd�

nx7||	fD])}
||
_|
jt�

|
jt�

q�Wyt||	dtdt�}WnSt
jk
rf



|r�qn�tjk
r�

}
|s�
|jtjkr�qnkX|s�
td	t
j
|
�
t
j
|�
f�
�
n9|tk	r||d
krtd||d
f�
�
ndS(
sT

        Try to SSL-connect using *client_protocol* to *server_protocol*.
        If *expect_success* is true, assert that the connection succeeds,
        if it's false, assert that the connection fails.
        Also, if *expect_success* is a string, assert that it is the protocol
        version actually used by the connection.
        RdReRfs %s->%s %s
s
 {%s->%s} %s
Re
RJRWs5Client protocol %s succeeded with server protocol %s!R�s%version mismatch: expected %r, got %rN(R�RRdReRfRRRRRtget_protocol_nameRDRj
Ra
R

Rg
Rm
R�
R�R�
R�RkRER!R�R$RFR�Rj(
tserver_protocoltclient_protocoltexpect_successt	certsreqstserver_optionstclient_optionstcerttypet	formatstrR�R�R
R�
R'((s)/usr/local/lib/python2.7/test/test_ssl.pyttry_protocol_combo/sR	









	










	







	











t
ThreadedTestscBs�eZ
ed��
Zd
�Zeje�d�d��
Zd�Z	d�Z
d�Zeejee
d�d�d	��
�
Zeed
��
�
Zeejee
d�d�d
��
�
Zed��
Zeejee
d�d�ed��
�
�
Zeejee
d�d�d��
�
Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zeje
j d �d!��
Z!eje
j"d"�d#��
Z#ejd$e
j$kd%�d&��
Z%d'�Z&ejee
d(�d)�d*��
Z'd+�Z(d,�Z)eje
j*d-�d.��
Z+eje
j*d/�d0��
Z,d1�Z-eje
j.d2�d3��
Z/d4�Z0d5�Z1e2d6��
Z3e2d7��
Z4e2d8��
Z5e2d9��
Z6d:�Z7RS(;c
Csftj
rtjjd
�

nxCtD];}
tj|
�
}|jt	�

t
||dtdt�
q#WdS(s2Basic test of an SSL client connecting to a servers

RJRWN(RRRRRR`
RRDR�
R�R�Rj(R&Ra
R0((s)/usr/local/lib/python2.7/test/test_ssl.pyt	test_echoms	







c
	Cs�
tj
rtjjd
�

ntjtj�
}
tj|
_	|
j
t�

|
jt�

t
d|
dt�}|�x

|
jtj�dt�

}|jt|jf�

|jt�
�
|j�
WdQX|j�
|j�}|j|d�
|j�}tj
r:
tjjtj|�
d
�

tjjdt|�
d�

nd|krc
|jd	tj|�
�

nd|dkr�
|jd�

n|jd
|�
|jd|�
tj|d
�
}tj|d�
}|j ||�
|j!�
WdQXdS(Ns

R0RJR�
sCan't get peer certificate.sConnection cipher is s.
R�s$No subject field in certificate: %s.RsPython Software FoundationskMissing or invalid 'organizationName' field in certificate subject; should be 'Python Software Foundation'.R�R�(RsPython Software Foundation(
(RsPython Software Foundation("RRRRRRRDR

RfRm
R�
R�R�
R6RkR�R!R�R�R)RvR�R
RR�RMR�R�R�R�RhRL
R�R�(R&R0R8R�R�RMtbeforetafter((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_getpeercertxsB
	










	







	

!

	











s!verify_flags need OpenSSL > 0.9.8c
Cstj
rtjjd
�

ntjtj�
}
|
jt	�

tjtj�
}tj
|_|jt
�

ttdd�}|j|jtj|B�
td|
dt�}|�[
t|jtj��
�
�9}|jt|jf�

|j�}|j|d�
WdQXWdQX|jtjO_td|
dt�}|�[
t|jtj��
�
�9}|jtjd��
|jt|jf�

WdQXWdQXWdQX|jt�

td|
dt�}|�[
t|jtj��
�
�9}|jt|jf�

|j�}|j|d�
WdQXWdQXdS(Ns

Ro
iR0RJsCan't get peer certificate.scertificate verify failed( RRRRRRRDR�R�
tSIGNED_CERTFILERfRm
R�
R�
Rp
R�Rq
Rr
R6RjRR�R!R�R�R)R
R�Rs
R�REtCRLFILE(R&R�R0Rv
R8R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_crl_check�s:	


















(





c
Cs�
tj
rtjjd
�

ntjtj�
}
|
jt	�

tjtj�
}tj
|_t|_
|jt�

td|
dt�}|�a
t|jtj�dd�

�
�9}|jt|jf�

|j�}|j|d�
WdQXWdQXtd|
dt�}|�a
t|jtj�dd�

�
�9}|jtjd��
|jt|jf�

WdQXWdQXWdQXtd|
dt�}|�F
ttj��
�-}|jtd	��
|j|�

WdQXWdQXWdQXdS(
Ns

R0RJR	
R�sCan't get peer certificate.tinvalids.hostname 'invalid' doesn't match u?'localhost's'check_hostname requires server_hostname(RRRRRRRDR�R�
R�RfRm
RjR�
R�
R�
R6RR�R!R�R�R)R
R�R�R
R�(R&R�R0R8R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyR�
�s8
	




	














(


	


c
CsW
tj
jtj
jt�
p!tjd
�}
ttdtj	dt
dtdt�
}|��
tt
j
��
��}ttj|d|
dtj�
�
��}y|jt|jf�

Wn�tjk
r�
}
tjrA
tjjd|�

qA
n[t
jk
r3

}
|jtjkr
�ntjrA
tjjd	|�

qA
nX|jd
�

WdQXWdQXWdQXdS(s�Connecting when the server rejects the client's certificate

            Launch a server with CERT_REQUIRED, and check that trying to
            connect to it with a wrong client certificate fails.
            skeycert.pemRfRgRJRWR�R�s
SSLError is %r
s
socket.error is %r
s'Use of invalid cert should have failed!N(RRRRR	R�R6R�RRfR�
RkRR!R�R�R�R�R)RERRRRRR�R$RFR�(R&R�R8R�R�R'((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_wrong_cert�s,!
	
	
	

	







	




	
c
s�tj
��
tj
��tj��tj�t����
�fd
�}
��
��fd�}tjd|
�
}|j�
z|�
Wd|j�
XdS(s|A brutal shutdown of an SSL server should raise an OSError
            in the client when attempting handshake.
            csK�jd
�

�
j
�
�j�\}}
|j�
�j�
�j
�
dS(Ni(R�
R#
R�
R�(tnewsockR:(t
listener_gonetlistener_readyR�(s)/usr/local/lib/python2.7/test/test_ssl.pytlistener	s









c	s}�
j�
t
tj��
�[}|jt�f�

�j�
ytj|�
}
Wntjk
re


nX�jd
�

WdQXdS(Ns2connecting to closed SSL socket should have failed(	RlRR!R�R�RR�R�R�(Rtssl_sock(R�R�R)R&(s)/usr/local/lib/python2.7/test/test_ssl.pyt	connector&	s









ttargetN(	R<RkR!RRbR�R=RjR(R&R�R�R�((R�R�R)R�R&s)/usr/local/lib/python2.7/test/test_ssl.pyttest_rude_shutdown	s





RAs)OpenSSL is compiled without SSLv2 supportc

Cs
tj
rtjjd
�

nttjtjt�
ttjtjttj	�
ttjtjttj
�
ttjtjt�
ttjtj
t�
ttjtjt�
t�r�ttjtjtdtj�

nttjtjtdtj�

ttjtjtdtj�

dS(s9Connecting to an SSLv2 server with various client optionss

R�N(RRRRRR�RRARjReRfR

RktPROTOCOL_SSLv3R�R.RlRmRn(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_protocol_sslv29	s	






	






c
Cs!tj
rtjjd
�

nttd�r�yttjtj	t
�
Wq�tjk
r�
}

tj
r�tjjdt
|
�
�

q�q�Xnttd�r�ttjtjt�
nttjtjt
�
ttjtjd�
ttd�r	
ttjtjttj�
nttjtjt
tj�
ttjtjdtj�
ttd�ro
ttjtjttj�
nttjtjt
tj�
ttjtjdtj�
ttd�r�
ttjtjtdtj�

nttjtjt
dtjtjB�

ttjtjtdtj�

dS(s:Connecting to an SSLv23 server with various client optionss

RAs; SSL2 client to SSL23 server test unexpectedly failed:
 %s
R�RTR�N(RRRRRRNRR�R

RARjR!R�R�R�RkR�ReRfRmRlRn(R&R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_protocol_sslv23P	s:	




	
	

















R�s)OpenSSL is compiled without SSLv3 supportc

Cs�tj
rtjjd
�

nttjtjd�
ttjtjdtj�
ttjtjdtj	�
t
td�r�ttjtjt�
nttjtj
tdtj�

ttjtjt�
t�r�ttjtj
tdtj�

ndS(s9Connecting to an SSLv3 server with various client optionss

tSSLv3RAR�N(RRRRRR�RR�ReRfRNRARkR

RmR�R.Rl(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_protocol_sslv3y	s	










	
c

Cs�tj
rtjjd
�

nttjtjd�
ttjtjdtj�
ttjtjdtj	�
t
td�r�ttjtjt�
nt
td�r�ttjtj
t�
nttjtjtdtj�

dS(s8Connecting to a TLSv1 server with various client optionss

RTRAR�R�N(RRRRRR�RR�ReRfRNRARkR�R

Rn(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_protocol_tlsv1�	s	









tPROTOCOL_TLSv1_1sTLS version 1.1 not supported.c

Cs�tj
rtjjd
�

nttjtjd�
ttd�rZttjtj	t
�
nttd�r�ttjtjt
�
nttjtjt
dtj
�

ttjtjd�
ttjtjt
�
ttjtjt
�
dS(snConnecting to a TLSv1.1 server with various client options.
               Testing against older TLS versions.s

sTLSv1.1RAR�R�N(RRRRRR�RR�RNRARkR�R

RpR�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_protocol_tlsv1_1�	s	










tPROTOCOL_TLSv1_2sTLS version 1.2 not supported.c

	Cs3
tj
rtjjd
�

nttjtjddtjtj	Bdtjtj	B�
t
td�rzttjtjt�
nt
td�r�ttjtj
t�
nttjtjtdtj�

ttjtjd�
ttjtjt�
ttjtjt�
ttjtjt�
ttjtjt�
dS(snConnecting to a TLSv1.2 server with various client options.
               Testing against older TLS versions.s

sTLSv1.2R�R�RAR�N(RRRRRR�RR�RmRlRNRARkR�R

RqR�R�(
R&((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_protocol_tlsv1_2�	s 	














c
	
Cs8d}
tt
d	tjd
tdtdt�
}t}|��

tj�}|jd
�

|jt	|j
f�

tjr�t
jjd�

nxJ
|
D]B
}tjr�t
jjd|�

n|r�|j|�

|j�}n|j|�

|jd�
}|j�j�}|dkr^
|jd�
r^
tjr=
t
jjd|�

ntj|d	tj�

}t}q�|dkr�
|jd�
r�
tjr�
t
jjd|�

n|j�}t}q�tjr�t
jjd|�

q�q�Wtjr�
t
jjd�

n|r|jd�

n
|jd�

|r$|j�
n
|j�
WdQXdS(s6Switching from clear text to encrypted and back again.smsg 1sMSG 2RQsMSG 3smsg 4RRsmsg 5smsg 6R�RURJRWi
s

s client:  sending %r...
iR�s/ client:  read %r from server, starting TLS...
s- client:  read %r from server, ending TLS...
s client:  read %r from server
s client:  closing connection.
sover
N(smsg 1sMSG 2RQsMSG 3smsg 4RRsmsg 5smsg 6(R6R�RR�RjRkR!RR�R�R)RRRRRR�R�R�RVRX
R�R�RXR�(	R&tmsgsR8twrappedR�R�RyR�RY((s)/usr/local/lib/python2.7/test/test_ssl.pyt
test_starttls�	s`	
	


	






	



	
	








	
	



	
	
	



		
	

	






c
Cs9
t|d
t
�

}
tjr.tjjd�

ntt
d��}|j�}WdQXd}d|
j	t
jjt
�
df}t
jdt
�
}tj|d	|�

}zu|j�jd
�
}|r
t|�
dkr
|jt|�
�
}tjr
tjjdt|�
|
f�

q
nWd|j�
X|j||�
dS(
s:Using a SocketServer to create and manage SSL connections.R�s

trbNRCshttps://localhost:%d/%si
R
R0scontent-lengthis/ client: read %d bytes from remote server '%s'
(R5R�RRRRRRWR�R)RRtsplitRR�
turllib2turlopentinfot	getheaderR�R
R�R�(R&R8RMR�R�turlR0tdlen((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_socketserver
s(	




 






	
	


c
Cs^
tj
rtjjd
�

nd}
tt�
}|�$

tjt	j	��
}|j
d|jf�

tj
r�tjjd|
�

n|j|
�

|j�}tj
r�tjjd|�

n||
j
�kr
|jd|d t|�
|
d j
�t|
�
f�

n|jd�

tj
r.
tjjd	�

n|j�
tj
rT
tjjd
�

nWdQXdS(s'Check the example asyncore integration.s

sFOO
s	127.0.0.1s client:  sending %r...
s client:  read %r
s4bad data <<%r>> (%d) received; expected <<%r>> (%d)
isover
s client:  closing connection.
s client:  connection closed.
N(RRRRRRsR�RR�R!R�R)R�RX
R�R
R�(R&R�R8R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_asyncore_server
s2	





	
	




	





!


	



	
c
s=tj
rtjjd
�

nttdtjdtj	dtdt
dt�
}
|
��
tjt
j
�dtdtd	td
tjdtj	�
��jt|
jf�

�f
d�}�f
d�}d
�jt
gfd�jtdg
fd�jt
gfg}d�jt
gfd�jtdg
fd|t
gfd|tgfg}d}x
|D]
\}}}	}
||jd�
}yw|||
�

�j�}||j�kr�
|jdjd|d|d dt|�
d|d dt|�
��

nWqW
tk
ra
}

|	r'|jdjd|�
�

nt|
�
j|�
sb|jdjd|d |
��

qbqW
XqW
Wx
|D]
\}}}	}
||jd�
}yw�j|�

||
�}||j�kr|jd!jd|d|d dt|�
d|d dt|�
��

nWqmtk
r�
}

|	r=|jd"jd|�
�

nt|
�
j|�
st|jdjd|d |
��

n�j�
qmXqmWd#}�j|�

tt|�
�
}|j �jd$|�t|�
�
|j ||�
|j!t"�j#�
�jd%�

|j!t�jd$�
|j!t�jd$�
�j$�
Wd&QXd&S('s Test recv(), send() and friends.s

RfR�RgRJRWR�R�RRH
cs'td
d�
}�j
|�
}
||
 S(Ns
id(R�R�(t
bR%(
R�(s)/usr/local/lib/python2.7/test/test_ssl.pyt
_recv_intoO
s


cs-td
d�
}�j
|�
\}
}||
 S(Ns
id(R�R�(R�R%R:(
R�(s)/usr/local/lib/python2.7/test/test_ssl.pyt_recvfrom_intoT
s


R�R�ssome.addresstsendallR�R�R�R�uPREFIX_R
spWhile sending with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
R
R�itnoutR�tnins>Failed to send with method <<{name:s}>>; expected to succeed.
sFMethod <<{name:s}>> failed with unexpected exception message: {exp:s}
texpsrWhile receiving with <<{name:s}>> bad data <<{outdata:r}>> ({nout:d}) received; expected <<{indata:r}>> ({nin:d})
sAFailed to receive with method <<{name:s}>>; expected to succeed.
R[i����sover
N(%RRRRRR6R�RRdR�RjRkR�R!R�R�R)R�R�R�R�R�R
R�RX
R�R�R
R�R�R�R�R�RvR�R�R�(R&R8R�R�tsend_methodstrecv_methodstdata_prefixt	meth_namet	send_methR�RJR�R�R't	recv_methR[tbuffer((
R�s)/usr/local/lib/python2.7/test/test_ssl.pyttest_recv_send;
s�	
	
	
	


	





	














	

!


	



	







	

!


	



	



"



c
Cs
tt
�
}
|
j�
|j|
jdd�
tjt|
j	f�
}|j|j
�

tj|d
t
�

}|j|j
�

|jd�

|j|jd�
d�
|j|jd�
d�
|j|j�d�
|jt
�

|j|jd�
d�
|j|jt��
d�
dS(Ntsuppress_ragged_eofsR[iRC(R6R�RmR�RnR�R!tcreate_connectionR�R)R�RR�RkR�R�R�R�RR�R�(R&R8R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_recv_zero�
s














c
s\
tjtj
�
�
d
}
tj�
�
}tj��t���
�fd�}tjd|�
}|j�
�j	�
z�zRtjtj
�
}|j
d�

|j|
|f�

|jt
jdt
j|�
Wd|j�
XzTtjtj
�
}t
j|�
}|j
d�

|jt
jd|j|
|f�
Wd|j�
XWdt�|j�
�
j�
XdS(Ns	127.0.0.1cs��
jd
�

�j
�
g}xT�sstj�
g
ggd�\}
}}�
|
kr |j�
j�d�

q q Wx|D]}|j�
q{WdS(Nig�������?i(R�
R#
RRBR�
R�(tconnsRSt
wR'R�(tfinishR8tstarted(s)/usr/local/lib/python2.7/test/test_ssl.pytserve�
s





	
$



R�g�������?s	timed out(R!R"RRbR<RkRkR=RjRlR�R�R�RRER�R�RjR(R&R(R)R�R�R((R�R8R�s)/usr/local/lib/python2.7/test/test_ssl.pyttest_handshake_timeout�
s6























c
sv
tj
tj�
}
tj|
_|
jt�

|
jt�

tjtj	�
�d
}t
j��
}|
j�dt
�

�tj��dg
�dg
�
��
��fd�}tjd|�
}|j�
�j�
|
jtj��
}|j||f�

|jd�

|j�
|j�}|j�
|j�
�dj�
�j�
|j�dtj�
|j�
d|�
dS(Ns	127.0.0.1R�csS�jd
�

�j
�
�j�\�d<�
d<�dj�djd�
�

dS(Niii(R�
R#
R�
R�R�((tevttpeerR.R8(s)/usr/local/lib/python2.7/test/test_ssl.pyR�s




R�R[i(RRDR

RfRm
R�
R�R�
R!R"RRbR�RjR<RkR�R=RjRlR�R�R�R�
R�RR�RzR�(R&R0R(R)R�R�tclienttclient_addr((R�R�R.R8s)/usr/local/lib/python2.7/test/test_ssl.pyttest_server_accept�
s4









	
	


















c
	Csxtj
tj�
}
t|
jtj��
�
�E}|jtj�
�}|j�
WdQX|j	|j
jtj�
WdQXdS(
N(
RRDR

RR�R!RvR�R
R�R�R$tENOTCONN(R&R0R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_getpeercert_enotconns





c
	Csxtj
tj�
}
t|
jtj��
�
�E}|jtj�
�}|j�
WdQX|j	|j
jtj�
WdQXdS(
N(
RRDR

RR�R!RvR�RR�R�R$R�(R&R0R�R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_do_handshake_enotconn%s





c
Cs�tj
tj�
}
|
jt�

tj
tj�
}tj|_t|_|j	tj
O_	|jd
�

|
jd�

td|
�
�Q}|j
tj�dd�

}|jtj�
�
|jt|jf�

WdQXWdQX|jdt|jd�
�
dS(NtAES128tAES256R0R	
R�sno shared cipheri(RRDR

R�
R�RfRm
RjR�
Rj
RoRg
R6R�R!RvRER�R�R)RhR�RI(R&R�R�R8R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_no_shared_ciphers,s





	






	

"
c
Cs�tj
tj�
}
ttd
tjdt�
��}t|
jtj��
�
�I}|j	|j
�d�
|jt
|jf�

|j|j
�d�
WdQX|j	|j
�d�
WdQXdS(s�
            Basic tests for SSLSocket.version().
            More tests are done in the test_protocol_*() methods.
            R�RJRTN(RRDR�R6R�RkRR�R!R�
R�R�R�R�R)R�(R&R0R8R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_version_basic@s
	
	





s%test requires TLSv1.3 enabled OpenSSLc

Cs�tj
tj�
}
|
jt�

|
jtjtjBtjBO_t	d
|
�
�h}|
j
tj��
}t|�
�>
|j
t|jf�

|j|j�ddddg�
WdQXWdQXdS(NR0itTLS_AES_256_GCM_SHA384tTLS_CHACHA20_POLY1305_SHA256tTLS_AES_128_GCM_SHA256(RRDR_R�
R�Rj
RnRpRqR6R�R!RR�R�R)RhRM(R&R0R8R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_tls1_3Os










s"test requires ECDH-enabled OpenSSLc
Cs�tj
tj�
}
|
jt�

|
jtjO_tjdkrP|
jd�

nt	d|
�
�[}t
|
jtj��
�
�7}|j
t|jf�

|jd|j�d�
WdQXWdQXdS(Ni
is
ECCdraft:ECDHR0tECDH(i
ii(RRDR

R�
R�Rj
RoR-Rg
R6RR�R!R�R�R)RhRM(R&R0R8R�((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_default_ecdh_curvebs






s
tls-uniques*'tls-unique' channel binding not availablec
CsItj
rtjjd
�

nttdtjdtj	dtdt
dt�
}
|
��

tjt
j
�dtdtd	td
tjdtj	�
}|jt|
jf�

|jd�
}tj
r�tjjdj|�
�

n|j|�

|jt|�
d
�
|jd�

|j�j�}|j|t|�
jd�
�
|j�
tjt
j
�dtdtd	td
tjdtj	�
}|jt|
jf�

|jd�
}tj
r�
tjjdj|�
�

n|j||�
|j|�

|jt|�
d
�
|jd�

|j�j�}|j|t|�
jd�
�
|j�
WdQXdS(s Test tls-unique channel binding.s

RfR�RgRJRWR�R�RRH
s
tls-uniques! got channel binding data: {0!r}
isCB tls-unique
sus-asciis) got another channel binding data: {0!r}
N(RRRRRR6R�RRdR�RjRkR�R!R�R�R)R

R�tassertIsNotNoneR�R
R�RVRKR
R�tassertNotEqual(R&R8R�tcb_datatpeer_data_reprtnew_cb_data((s)/usr/local/lib/python2.7/test/test_ssl.pyR
vs\	
	
	
	


	





	


	







	






	



	









	

c
Cs�tj
tj�
}
|
jt�

t|
|
d
tdt�}tjrct	j
jdj|d�
�

n|j
|ddddh�
dS(NRJRWs got compression: {!r}
R�tZLIBtRLE(RRDR�R�
R�R�RjRRRRRR�RhR�(R&R0R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_compression�s





	
 
Rs*ssl.OP_NO_COMPRESSION needed for this testc
Csdtj
tj�
}
|
jt�

|
jtjO_t|
|
d
tdt�}|j	|dd�
dS(NRJRWR�(RRDR�R�
R�Rj
RR�RjR�
R�(R&R0R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_compression_disabled�s





c
Cs�tj
tj�
}
|
jt�

|
jt�

|
jd
�

t|
|
dt	dt	�}|dd}|j
d�
}d|kr�d|kr�d	|kr�|jd
|d�

ndS(NtkEDHRJRWRMit
-tADHtEDHtDHEsNon-DH cipher: (RRDR�R�
R�R�
R�
Rg
R�RjR�R�(R&R0R�
RMtparts((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_dh_params�s










$
c
CsRtj
tj�
}
|
jt�

t|
|
d
tdt�}|j|dd�
dS(NRJRWR�(	RRDR�R�
R�R�RjR�
R�(R&R0R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_selected_alpn_protocol�s





sALPN support requiredc
Cs�tj
tj�
}
|
jt�

tj
tj�
}|jt�

|jd
dg�

t|
|dtdt�}|j	|dd�
dS(NRttbarRJRWR�(RRDR�R�
R�R�
RaR�RjR�
R�(R&R�R�R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyt/test_selected_alpn_protocol_if_server_uses_alpn�s








s!ALPN support needed for this testc
Cs�
d
ddg}
d
dgd
fdd
gd
fdg
dfddgdfg}xn
|D]f
\}}t
jt
j�
}|jt�

|j|
�

t
jt
j�
}|jt�

|j|�

yt||dtdt�}Wnt
j	k
r�
}
|}n
X|dkr.
t
r.
t
jdkr.
|j|t
j	�
qUdt
|
�
t
|�
t
|�
f}	|d}
|j|
||	|
d
f�
t|d�
r�
|ddnd}|j|||	|df�
qUWdS(NRtRt	milkshakeshttp/3.0shttp/4.0RJRWi
iisKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sR�R�R�i����tnothingR8(i
i
ii(R�RRDR�R�
R�RaR�RjREtIS_OPENSSL_1_1R-R�R�R�R
(R&tserver_protocolstprotocol_teststclient_protocolsR>
R�R�R�
R'RYt
client_resultt
server_result((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_alpn_protocols�s>


























$

c
CsRtj
tj�
}
|
jt�

t|
|
d
tdt�}|j|dd�
dS(NRJRWR�(	RRDR�R�
R�R�RjR�
R�(R&R0R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_selected_npn_protocols





s NPN support needed for this testc
Csi
d
dg}
d
dgd
fdd
gd
fddgdfddgdfg}x
|D]
\}}tj
tj�
}|jt�

|j|
�

tj
tj�
}|jt�

|j|�

t||dtdt�}dt|
�
t|�
t|�
f}|d	}	|j	|	|||	d
f�
t
|d�
r>
|ddnd
}
|j	|
|||
df�
qUWdS(Nshttp/1.1sspdy/2ttesttabctdefRJRWsKfailed trying %s (s) and %s (c).
was expecting %s, but got %%s from the %%sR�R�R�i����RR8(RRDR�R�
R�R`R�RjR�R�R
(R&R
RRR>
R�R�R�
RYRR((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_npn_protocolss*


















$
c
Csvtj
tj�
}
|
jt�

tj
tj�
}|jt�

tj
tj�
}tj|_|jt	�

|
||fS(
N(
RRDR�R�
R�tSIGNED_CERTFILE2RfRm
R�
R�
(R&R�t
other_contextR�((s)/usr/local/lib/python2.7/test/test_ssl.pytsni_contexts5s










cCs+|
d
}|jd|ff
|d�
dS(NR�R�R�(
Rh(R&R�
R
R�((s)/usr/local/lib/python2.7/test/test_ssl.pytcheck_common_name?s


c
s
g�|j�\}
�
}��
fd
�}|
j
|�

t||
dtdd�}|j�d|
fg
�
|j|d�
g�t||
dtdd�}|j�d|
fg
�
|j|d�
g�|
j
d�

t||
dtdd�}|j|d�
|j�g�
dS(Ncs/�j|
|f�

|
dk	r+�
|_ndS(
N(RBR�R0(R�tserver_nametinitial_context(tcallsR(s)/usr/local/lib/python2.7/test/test_ssl.pyt
servername_cbHs


RJR�tsupermessagetfakehostnameR�tnotfunny(RR�
R�RjR�RR�(R&R�R�RR�
((RRs)/usr/local/lib/python2.7/test/test_ssl.pyR�
Cs,



	

	





	
c
Cs{|j�\}
}}d
�}|
j
|�

|jtj�
�"}t||
dtdd�}WdQX|j|jj	d�
dS(Nc
Sstj
S(
N(RtALERT_DESCRIPTION_ACCESS_DENIED(R�RR((s)/usr/local/lib/python2.7/test/test_ssl.pytcb_returning_alertos
RJR�R tTLSV1_ALERT_ACCESS_DENIED(
RR�
RvRRER�RkR�R�R�
(R&R�RR�R$R�R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_sni_callback_alertjs	




c
Cs�|j�\}
}}d
�}|
j
|�

|jtj�
�7}tj��"}t||
dtdd�}WdQXWdQX|j	|j
jd�
|jd|j
��
dS(NcSsd
d
dS(Ng�?g((R�RR((s)/usr/local/lib/python2.7/test/test_ssl.pyt
cb_raising~s
RJR�R tSSLV3_ALERT_HANDSHAKE_FAILUREtZeroDivisionError(RR�
RvRRERtcaptured_stderrR�RkR�R�R�
Rhtgetvalue(R&R�RR�R'R�tstderrR�
((s)/usr/local/lib/python2.7/test/test_ssl.pyttest_sni_callback_raisingys	






c
Cs�|j�\}
}}d
�}|
j
|�

|jtj�
�7}tj��"}t||
dtdd�}WdQXWdQX|j	|j
jd�
|jd|j
��
dS(Nc
Ssd
S(NRt((R�RR((s)/usr/local/lib/python2.7/test/test_ssl.pytcb_wrong_return_type�s
RJR�R tTLSV1_ALERT_INTERNAL_ERRORRw(RR�
RvRRERR*R�RkR�R�R�
RhR+(R&R�RR�R.R�R,R�
((s)/usr/local/lib/python2.7/test/test_ssl.pyt#test_sni_callback_wrong_return_type�s	






c
Cs�tj
tj�
}
tj|
_|
jt�

|
jt�

td
|
dt	�}|�f
|
j
tj��
}|jt
|jf�

|j�
|jt|jd�
|jt|jd�
WdQXdS(NR0RJithello(RRDR

RfRm
R�
R�R�
R6RkR�R!R�R�R)R�RvR�R�R(R&R0R8R�((s)/usr/local/lib/python2.7/test/test_ssl.pyt,test_read_write_after_close_raises_valuerror�s











(8R)R*RQR�R�RHR\
R/R�R�
R�R�RNRR�RbR�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�tHAS_TLSv1_3R�RgR�R]
R
R�R�RRtHAS_ALPNR	RRtHAS_NPNRRRR�
R�
R&R-R0R2(((s)/usr/local/lib/python2.7/test/test_ssl.pyR�ksn	&
*	&	!	)


(






	:			w		1	'				

;		
		
	*		
	'c

Cs�
tj
r�itjd
6tjd6tjd6}
xY|
j�D]9\}}|�}|r:|dr:d||f}Pq:q:Wttj��
}dtj	tj
fGHd|GHdtjGHd	tjGHyd
tj
GHWq�tk
r�


q�Xnx]tttttttttttttg
D].}tjj|�
s
tjd|�
�
q
q
Wt t!t"t#g}tj$d�
rw
|j%t&�

nt'r�
tj(�}|r�
|j%t)�

q�
nztj*|�
Wdt'r�
tj+|�
nXdS(
NtLinuxtMactWindowsis%s %rstest_ssl: testing with %r %rs          under %ss          HAS_SNI = %rs          OP_ALL = 0x%8xs          OP_NO_TLSv1_1 = 0x%8xsCan't read certificate file %rtnetwork(,RRRFRGtmac_vert	win32_vertitemsRKRR�R-RiRi
RptAttributeErrorR�RR�
R�
R�
R�
R�
R�RR�
R�
tBADKEYR�
RRtexistst
TestFailedR_
RRcR�
tis_resource_enabledRBRt
_have_threadstthreading_setupR�trun_unittesttthreading_cleanup(RtplatsR
RLtplatR�
tteststthread_info((s)/usr/local/lib/python2.7/test/test_ssl.pyt	test_main�sL
	







	





	







	

	








t__main__(kRRHRRRttest.script_helperR
RuR!RR0R9R�
RR$R�R�
R�RR�RFRXROt
contextlibRt
import_moduleRtsortedt_PROTOCOL_NAMESR`
R�R�R�R�R-RRR�R
R�
R�
R�
R�
R�
R�
R�
R�
R{
R
R�
R�
R�R�R�RR�
R�R	RR�
R�
R�R>R�R�R�R�
R�
Rp
RRRRRRtTestCaseRR,R.R/R6R@RQRbR\
RiR�
RcR_
R�
RR<tImportErrorRkRBRjttest.ssl_serversR5R=R6RsR�R�R�R�RJR)(((s)/usr/local/lib/python2.7/test/test_ssl.pyt<module>s�




















	

	

























								��i��$)�/




�u
.;����E0