94 lines
3.2 KiB
Python
94 lines
3.2 KiB
Python
# Copyright (c) 2016 VMware Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
import socket
|
|
import ssl
|
|
|
|
import mock
|
|
import testtools
|
|
|
|
from novaproxy import authd
|
|
|
|
|
|
class AuthdRequestHandler(testtools.TestCase):
|
|
|
|
@mock.patch.object(socket, 'socket')
|
|
@mock.patch.object(ssl, 'wrap_socket')
|
|
def test_handshake(self, mock_wrap, mock_socket):
|
|
msgs = ['220 Welcome',
|
|
'331 Need password',
|
|
'230 Login OK',
|
|
'200 e6e4d191c0f9ebc6abc082d6e2eeeb5b7c90214d',
|
|
'200 OK']
|
|
|
|
def fake_recv(len):
|
|
return msgs.pop(0).encode('ascii')
|
|
|
|
def fake_getpeercert(binary_form=True):
|
|
return 'fake-certificate'.encode('ascii')
|
|
|
|
sock = mock.MagicMock()
|
|
sock.recv = fake_recv
|
|
sock.getpeercert = fake_getpeercert
|
|
mock_wrap.return_value = sock
|
|
mock_socket.return_value = sock
|
|
authd.handshake('host', 902, 'ticket', 'cfgFile',
|
|
'e6e4d191c0f9ebc6abc082d6e2eeeb5b7c90214d')
|
|
|
|
@mock.patch.object(socket, 'socket')
|
|
@mock.patch.object(ssl, 'wrap_socket')
|
|
def test_handshake_invalid_thumbprint(self, mock_wrap, mock_socket):
|
|
msgs = ['220 Welcome',
|
|
'331 Need password',
|
|
'230 Login OK',
|
|
'200 e6e4d191c0f9ebc6abc082d6e2eeeb5b7c90214d',
|
|
'200 OK']
|
|
|
|
def fake_recv(len):
|
|
return msgs.pop(0).encode('ascii')
|
|
|
|
def fake_getpeercert(binary_form=True):
|
|
return 'fake-certificate'.encode('ascii')
|
|
|
|
sock = mock.MagicMock()
|
|
sock.recv = fake_recv
|
|
sock.getpeercert = fake_getpeercert
|
|
mock_wrap.return_value = sock
|
|
mock_socket.return_value = sock
|
|
self.assertRaises(Exception, authd.handshake, 'host', 902,
|
|
'ticket', 'cfgFile', 'invalid-thumbprint')
|
|
|
|
@mock.patch.object(socket, 'socket')
|
|
@mock.patch.object(ssl, 'wrap_socket')
|
|
def test_handshake_invalid_2nd_thumbprint(self, mock_wrap, mock_socket):
|
|
msgs = ['220 Welcome',
|
|
'331 Need password',
|
|
'230 Login OK',
|
|
'200 invalid-2nd-thumbprint',
|
|
'200 OK']
|
|
|
|
def fake_recv(len):
|
|
return msgs.pop(0).encode('ascii')
|
|
|
|
def fake_getpeercert(binary_form=True):
|
|
return 'fake-certificate'.encode('ascii')
|
|
|
|
sock = mock.MagicMock()
|
|
sock.recv = fake_recv
|
|
sock.getpeercert = fake_getpeercert
|
|
mock_wrap.return_value = sock
|
|
mock_socket.return_value = sock
|
|
self.assertRaises(Exception, authd.handshake, 'host', 902,
|
|
'ticket', 'cfg', 'e6e4d191c0f9ebc6abc082d6e2eeeb5b7c90214d')
|