caba47dd3f
* Add support for GSSAPI/Kerberos to urls.py * Test out changes with the latest test container * Get remote hosts working * Fix up httptester_krb5_password reader * Fix tests for opensuse and macOS * Hopefully last lot of testing changes * Dont do CBT on macOS * Fixes from review
74 lines
3.6 KiB
Python
74 lines
3.6 KiB
Python
# -*- coding: utf-8 -*-
|
|
# (c) 2020 Ansible Project
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
__metaclass__ = type
|
|
|
|
import base64
|
|
import os.path
|
|
import pytest
|
|
|
|
import ansible.module_utils.urls as urls
|
|
|
|
|
|
@pytest.mark.skipif(not urls.HAS_CRYPTOGRAPHY, reason='Requires cryptography to be installed')
|
|
@pytest.mark.parametrize('certificate, expected', [
|
|
('rsa_md5.pem', b'\x23\x34\xB8\x47\x6C\xBF\x4E\x6D'
|
|
b'\xFC\x76\x6A\x5D\x5A\x30\xD6\x64'
|
|
b'\x9C\x01\xBA\xE1\x66\x2A\x5C\x3A'
|
|
b'\x13\x02\xA9\x68\xD7\xC6\xB0\xF6'),
|
|
('rsa_sha1.pem', b'\x14\xCF\xE8\xE4\xB3\x32\xB2\x0A'
|
|
b'\x34\x3F\xC8\x40\xB1\x8F\x9F\x6F'
|
|
b'\x78\x92\x6A\xFE\x7E\xC3\xE7\xB8'
|
|
b'\xE2\x89\x69\x61\x9B\x1E\x8F\x3E'),
|
|
('rsa_sha256.pem', b'\x99\x6F\x3E\xEA\x81\x2C\x18\x70'
|
|
b'\xE3\x05\x49\xFF\x9B\x86\xCD\x87'
|
|
b'\xA8\x90\xB6\xD8\xDF\xDF\x4A\x81'
|
|
b'\xBE\xF9\x67\x59\x70\xDA\xDB\x26'),
|
|
('rsa_sha384.pem', b'\x34\xF3\x03\xC9\x95\x28\x6F\x4B'
|
|
b'\x21\x4A\x9B\xA6\x43\x5B\x69\xB5'
|
|
b'\x1E\xCF\x37\x58\xEA\xBC\x2A\x14'
|
|
b'\xD7\xA4\x3F\xD2\x37\xDC\x2B\x1A'
|
|
b'\x1A\xD9\x11\x1C\x5C\x96\x5E\x10'
|
|
b'\x75\x07\xCB\x41\x98\xC0\x9F\xEC'),
|
|
('rsa_sha512.pem', b'\x55\x6E\x1C\x17\x84\xE3\xB9\x57'
|
|
b'\x37\x0B\x7F\x54\x4F\x62\xC5\x33'
|
|
b'\xCB\x2C\xA5\xC1\xDA\xE0\x70\x6F'
|
|
b'\xAE\xF0\x05\x44\xE1\xAD\x2B\x76'
|
|
b'\xFF\x25\xCF\xBE\x69\xB1\xC4\xE6'
|
|
b'\x30\xC3\xBB\x02\x07\xDF\x11\x31'
|
|
b'\x4C\x67\x38\xBC\xAE\xD7\xE0\x71'
|
|
b'\xD7\xBF\xBF\x2C\x9D\xFA\xB8\x5D'),
|
|
('rsa-pss_sha256.pem', b'\xF2\x31\xE6\xFF\x3F\x9E\x16\x1B'
|
|
b'\xC2\xDC\xBB\x89\x8D\x84\x47\x4E'
|
|
b'\x58\x9C\xD7\xC2\x7A\xDB\xEF\x8B'
|
|
b'\xD9\xC0\xC0\x68\xAF\x9C\x36\x6D'),
|
|
('rsa-pss_sha512.pem', b'\x85\x85\x19\xB9\xE1\x0F\x23\xE2'
|
|
b'\x1D\x2C\xE9\xD5\x47\x2A\xAB\xCE'
|
|
b'\x42\x0F\xD1\x00\x75\x9C\x53\xA1'
|
|
b'\x7B\xB9\x79\x86\xB2\x59\x61\x27'),
|
|
('ecdsa_sha256.pem', b'\xFE\xCF\x1B\x25\x85\x44\x99\x90'
|
|
b'\xD9\xE3\xB2\xC9\x2D\x3F\x59\x7E'
|
|
b'\xC8\x35\x4E\x12\x4E\xDA\x75\x1D'
|
|
b'\x94\x83\x7C\x2C\x89\xA2\xC1\x55'),
|
|
('ecdsa_sha512.pem', b'\xE5\xCB\x68\xB2\xF8\x43\xD6\x3B'
|
|
b'\xF4\x0B\xCB\x20\x07\x60\x8F\x81'
|
|
b'\x97\x61\x83\x92\x78\x3F\x23\x30'
|
|
b'\xE5\xEF\x19\xA5\xBD\x8F\x0B\x2F'
|
|
b'\xAA\xC8\x61\x85\x5F\xBB\x63\xA2'
|
|
b'\x21\xCC\x46\xFC\x1E\x22\x6A\x07'
|
|
b'\x24\x11\xAF\x17\x5D\xDE\x47\x92'
|
|
b'\x81\xE0\x06\x87\x8B\x34\x80\x59'),
|
|
])
|
|
def test_cbt_with_cert(certificate, expected):
|
|
with open(os.path.join(os.path.dirname(__file__), 'fixtures', 'cbt', certificate)) as fd:
|
|
cert_der = base64.b64decode("".join([l.strip() for l in fd.readlines()[1:-1]]))
|
|
|
|
actual = urls.get_channel_binding_cert_hash(cert_der)
|
|
assert actual == expected
|
|
|
|
|
|
def test_cbt_no_cryptography(monkeypatch):
|
|
monkeypatch.setattr(urls, 'HAS_CRYPTOGRAPHY', False)
|
|
assert urls.get_channel_binding_cert_hash(None) is None
|