mirror of
https://github.com/certbot/certbot.git
synced 2026-01-26 07:41:33 +03:00
2cf1775864
* Update assertTrue/False to Python 3 precise asserts * Fix test failures * Fix test failures * More replacements * Update to Python 3 asserts in acme-module * Fix Windows test failure * Fix failures * Fix test failure * More replacements * Don't include the semgrep rules * Fix test failure
67 lines
2.0 KiB
Python
67 lines
2.0 KiB
Python
"""Tests for acme.jws."""
|
|
import unittest
|
|
|
|
import josepy as jose
|
|
|
|
import test_util
|
|
|
|
KEY = jose.JWKRSA.load(test_util.load_vector('rsa512_key.pem'))
|
|
|
|
|
|
class HeaderTest(unittest.TestCase):
|
|
"""Tests for acme.jws.Header."""
|
|
|
|
good_nonce = jose.encode_b64jose(b'foo')
|
|
wrong_nonce = u'F'
|
|
# Following just makes sure wrong_nonce is wrong
|
|
try:
|
|
jose.b64decode(wrong_nonce)
|
|
except (ValueError, TypeError):
|
|
assert True
|
|
else:
|
|
assert False # pragma: no cover
|
|
|
|
def test_nonce_decoder(self):
|
|
from acme.jws import Header
|
|
nonce_field = Header._fields['nonce']
|
|
|
|
self.assertRaises(
|
|
jose.DeserializationError, nonce_field.decode, self.wrong_nonce)
|
|
self.assertEqual(b'foo', nonce_field.decode(self.good_nonce))
|
|
|
|
|
|
class JWSTest(unittest.TestCase):
|
|
"""Tests for acme.jws.JWS."""
|
|
|
|
def setUp(self):
|
|
self.privkey = KEY
|
|
self.pubkey = self.privkey.public_key()
|
|
self.nonce = jose.b64encode(b'Nonce')
|
|
self.url = 'hi'
|
|
self.kid = 'baaaaa'
|
|
|
|
def test_kid_serialize(self):
|
|
from acme.jws import JWS
|
|
jws = JWS.sign(payload=b'foo', key=self.privkey,
|
|
alg=jose.RS256, nonce=self.nonce,
|
|
url=self.url, kid=self.kid)
|
|
self.assertEqual(jws.signature.combined.nonce, self.nonce)
|
|
self.assertEqual(jws.signature.combined.url, self.url)
|
|
self.assertEqual(jws.signature.combined.kid, self.kid)
|
|
self.assertIsNone(jws.signature.combined.jwk)
|
|
# TODO: check that nonce is in protected header
|
|
|
|
self.assertEqual(jws, JWS.from_json(jws.to_json()))
|
|
|
|
def test_jwk_serialize(self):
|
|
from acme.jws import JWS
|
|
jws = JWS.sign(payload=b'foo', key=self.privkey,
|
|
alg=jose.RS256, nonce=self.nonce,
|
|
url=self.url)
|
|
self.assertIsNone(jws.signature.combined.kid)
|
|
self.assertEqual(jws.signature.combined.jwk, self.pubkey)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main() # pragma: no cover
|