2001-08-20 19:39:42 -03:00
|
|
|
# Test just the SSL support in the socket module, in a moderately bogus way.
|
|
|
|
|
2006-03-31 15:09:56 -04:00
|
|
|
import sys
|
2007-04-03 11:05:08 -03:00
|
|
|
import unittest
|
2002-07-23 16:04:11 -03:00
|
|
|
from test import test_support
|
2002-12-03 23:26:57 -04:00
|
|
|
import socket
|
2006-06-20 14:30:26 -03:00
|
|
|
import errno
|
2007-04-03 11:05:08 -03:00
|
|
|
import threading
|
|
|
|
import subprocess
|
|
|
|
import time
|
2007-04-03 14:29:48 -03:00
|
|
|
import os
|
|
|
|
import urllib
|
2008-03-18 01:29:35 -03:00
|
|
|
import warnings
|
|
|
|
|
|
|
|
warnings.filterwarnings(
|
|
|
|
'ignore',
|
|
|
|
'socket.ssl.. is deprecated. Use ssl.wrap_socket.. instead.',
|
|
|
|
DeprecationWarning)
|
2007-04-03 11:05:08 -03:00
|
|
|
|
|
|
|
# Optionally test SSL support, if we have it in the tested platform
|
|
|
|
skip_expected = not hasattr(socket, "ssl")
|
|
|
|
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
HOST = test_support.HOST
|
2008-01-27 13:10:58 -04:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
class ConnectedTests(unittest.TestCase):
|
|
|
|
|
2008-01-27 13:10:58 -04:00
|
|
|
def urlopen(self, host, *args, **kwargs):
|
|
|
|
# Connecting to remote hosts is flaky. Make it more robust
|
|
|
|
# by retrying the connection several times.
|
|
|
|
for i in range(3):
|
|
|
|
try:
|
|
|
|
return urllib.urlopen(host, *args, **kwargs)
|
|
|
|
except IOError, e:
|
|
|
|
last_exc = e
|
|
|
|
continue
|
|
|
|
except:
|
|
|
|
raise
|
|
|
|
raise last_exc
|
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
def testBasic(self):
|
|
|
|
socket.RAND_status()
|
2003-06-30 00:25:20 -03:00
|
|
|
try:
|
2007-04-03 11:05:08 -03:00
|
|
|
socket.RAND_egd(1)
|
|
|
|
except TypeError:
|
2003-06-30 00:25:20 -03:00
|
|
|
pass
|
|
|
|
else:
|
2007-04-03 11:05:08 -03:00
|
|
|
print "didn't raise TypeError"
|
|
|
|
socket.RAND_add("this is a random string", 75.0)
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
with test_support.transient_internet():
|
2008-01-27 13:10:58 -04:00
|
|
|
f = self.urlopen('https://sf.net')
|
2007-04-03 11:05:08 -03:00
|
|
|
buf = f.read()
|
|
|
|
f.close()
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
def testTimeout(self):
|
|
|
|
def error_msg(extra_msg):
|
|
|
|
print >> sys.stderr, """\
|
|
|
|
WARNING: an attempt to connect to %r %s, in
|
2008-03-23 02:47:20 -03:00
|
|
|
testTimeout. That may be legitimate, but is not the outcome we
|
2008-01-27 13:10:58 -04:00
|
|
|
hoped for. If this message is seen often, testTimeout should be
|
2007-04-03 11:05:08 -03:00
|
|
|
changed to use a more reliable address.""" % (ADDR, extra_msg)
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
# A service which issues a welcome banner (without need to write
|
|
|
|
# anything).
|
2007-10-06 12:47:37 -03:00
|
|
|
ADDR = "pop.gmail.com", 995
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
s = socket.socket()
|
|
|
|
s.settimeout(30.0)
|
|
|
|
try:
|
|
|
|
s.connect(ADDR)
|
|
|
|
except socket.timeout:
|
|
|
|
error_msg('timed out')
|
|
|
|
return
|
|
|
|
except socket.error, exc: # In case connection is refused.
|
|
|
|
if exc.args[0] == errno.ECONNREFUSED:
|
|
|
|
error_msg('was refused')
|
|
|
|
return
|
|
|
|
else:
|
|
|
|
raise
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
ss = socket.ssl(s)
|
|
|
|
# Read part of return welcome banner twice.
|
|
|
|
ss.read(1)
|
|
|
|
ss.read(1)
|
|
|
|
s.close()
|
|
|
|
|
|
|
|
class BasicTests(unittest.TestCase):
|
|
|
|
|
|
|
|
def testRudeShutdown(self):
|
|
|
|
listener_ready = threading.Event()
|
|
|
|
listener_gone = threading.Event()
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
sock = socket.socket()
|
|
|
|
port = test_support.bind_port(sock)
|
|
|
|
|
|
|
|
# `listener` runs in a thread. It opens a socket and sits in accept()
|
|
|
|
# until the main thread connects. Then it rudely closes the socket,
|
|
|
|
# and sets Event `listener_gone` to let the main thread know the socket
|
|
|
|
# is gone.
|
|
|
|
def listener(s):
|
2007-04-03 11:05:08 -03:00
|
|
|
s.listen(5)
|
|
|
|
listener_ready.set()
|
|
|
|
s.accept()
|
|
|
|
s = None # reclaim the socket object, which also closes it
|
|
|
|
listener_gone.set()
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
def connector():
|
|
|
|
listener_ready.wait()
|
|
|
|
s = socket.socket()
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
s.connect((HOST, port))
|
2007-04-03 11:05:08 -03:00
|
|
|
listener_gone.wait()
|
|
|
|
try:
|
|
|
|
ssl_sock = socket.ssl(s)
|
|
|
|
except socket.sslerror:
|
|
|
|
pass
|
|
|
|
else:
|
|
|
|
raise test_support.TestFailed(
|
2006-01-24 18:44:54 -04:00
|
|
|
'connecting to closed SSL socket should have failed')
|
2007-04-25 03:30:05 -03:00
|
|
|
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
t = threading.Thread(target=listener, args=(sock,))
|
2007-04-03 11:05:08 -03:00
|
|
|
t.start()
|
|
|
|
connector()
|
|
|
|
t.join()
|
2003-06-30 00:25:20 -03:00
|
|
|
|
2008-01-27 13:10:58 -04:00
|
|
|
def connect(self, s, host_port):
|
|
|
|
# Connecting to remote hosts is flaky. Make it more robust
|
|
|
|
# by retrying the connection several times.
|
|
|
|
for i in range(3):
|
|
|
|
try:
|
|
|
|
return s.connect(host_port)
|
|
|
|
except IOError, e:
|
|
|
|
last_exc = e
|
|
|
|
continue
|
|
|
|
except:
|
|
|
|
raise
|
|
|
|
raise last_exc
|
|
|
|
|
2007-07-27 15:28:22 -03:00
|
|
|
def test_978833(self):
|
2008-02-10 22:26:22 -04:00
|
|
|
if not test_support.is_resource_enabled("network"):
|
|
|
|
return
|
2007-07-27 15:28:22 -03:00
|
|
|
if test_support.verbose:
|
|
|
|
print "test_978833 ..."
|
|
|
|
|
2007-08-29 19:35:05 -03:00
|
|
|
import os, httplib, ssl
|
2007-07-27 15:28:22 -03:00
|
|
|
with test_support.transient_internet():
|
|
|
|
s = socket.socket(socket.AF_INET)
|
2008-03-23 02:47:20 -03:00
|
|
|
try:
|
|
|
|
self.connect(s, ("svn.python.org", 443))
|
|
|
|
except IOError:
|
|
|
|
print >> sys.stderr, """\
|
|
|
|
WARNING: an attempt to connect to svn.python.org:443 failed, in
|
|
|
|
test_978833. That may be legitimate, but is not the outcome we
|
|
|
|
hoped for. If this message is seen often, test_978833 should be
|
|
|
|
changed to use a more reliable address."""
|
|
|
|
return
|
2007-07-27 15:28:22 -03:00
|
|
|
fd = s._sock.fileno()
|
2007-09-10 18:51:02 -03:00
|
|
|
sock = ssl.wrap_socket(s)
|
2007-07-27 15:28:22 -03:00
|
|
|
s = None
|
|
|
|
sock.close()
|
|
|
|
try:
|
|
|
|
os.fstat(fd)
|
|
|
|
except OSError:
|
|
|
|
pass
|
|
|
|
else:
|
|
|
|
raise test_support.TestFailed("Failed to close socket")
|
|
|
|
|
2007-04-03 14:29:48 -03:00
|
|
|
class OpenSSLTests(unittest.TestCase):
|
|
|
|
|
|
|
|
def testBasic(self):
|
|
|
|
s = socket.socket()
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
s.connect((HOST, OpenSSLServer.PORT))
|
2007-04-03 14:29:48 -03:00
|
|
|
ss = socket.ssl(s)
|
|
|
|
ss.write("Foo\n")
|
|
|
|
i = ss.read(4)
|
|
|
|
self.assertEqual(i, "Foo\n")
|
2007-04-03 18:15:34 -03:00
|
|
|
s.close()
|
2007-04-03 14:29:48 -03:00
|
|
|
|
2007-04-21 22:18:56 -03:00
|
|
|
def testMethods(self):
|
|
|
|
# read & write is already tried in the Basic test
|
|
|
|
# now we'll try to get the server info about certificates
|
|
|
|
# this came from the certificate I used, one I found in /usr/share/openssl
|
|
|
|
info = "/C=PT/ST=Queensland/L=Lisboa/O=Neuronio, Lda./OU=Desenvolvimento/CN=brutus.neuronio.pt/emailAddress=sampo@iki.fi"
|
|
|
|
|
|
|
|
s = socket.socket()
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
s.connect((HOST, OpenSSLServer.PORT))
|
2007-04-21 22:18:56 -03:00
|
|
|
ss = socket.ssl(s)
|
|
|
|
cert = ss.server()
|
|
|
|
self.assertEqual(cert, info)
|
|
|
|
cert = ss.issuer()
|
|
|
|
self.assertEqual(cert, info)
|
|
|
|
s.close()
|
|
|
|
|
2007-04-03 14:29:48 -03:00
|
|
|
|
|
|
|
class OpenSSLServer(threading.Thread):
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
PORT = None
|
2007-04-03 14:29:48 -03:00
|
|
|
def __init__(self):
|
|
|
|
self.s = None
|
|
|
|
self.keepServing = True
|
2007-04-03 18:15:34 -03:00
|
|
|
self._external()
|
|
|
|
if self.haveServer:
|
|
|
|
threading.Thread.__init__(self)
|
2003-06-30 00:25:20 -03:00
|
|
|
|
2007-04-03 18:15:34 -03:00
|
|
|
def _external(self):
|
2007-04-04 11:10:40 -03:00
|
|
|
# let's find the .pem files
|
|
|
|
curdir = os.path.dirname(__file__) or os.curdir
|
|
|
|
cert_file = os.path.join(curdir, "ssl_cert.pem")
|
|
|
|
if not os.access(cert_file, os.F_OK):
|
|
|
|
raise ValueError("No cert file found! (tried %r)" % cert_file)
|
|
|
|
key_file = os.path.join(curdir, "ssl_key.pem")
|
|
|
|
if not os.access(key_file, os.F_OK):
|
|
|
|
raise ValueError("No key file found! (tried %r)" % key_file)
|
2007-04-03 14:29:48 -03:00
|
|
|
|
2007-04-03 18:15:34 -03:00
|
|
|
try:
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
# XXX TODO: on Windows, this should make more effort to use the
|
|
|
|
# openssl.exe that would have been built by the pcbuild.sln.
|
|
|
|
self.PORT = test_support.find_unused_port()
|
|
|
|
args = (self.PORT, cert_file, key_file)
|
|
|
|
cmd = "openssl s_server -accept %d -cert %s -key %s -quiet" % args
|
2007-04-25 03:30:05 -03:00
|
|
|
self.s = subprocess.Popen(cmd.split(), stdin=subprocess.PIPE,
|
|
|
|
stdout=subprocess.PIPE,
|
2007-04-03 14:29:48 -03:00
|
|
|
stderr=subprocess.STDOUT)
|
2007-04-03 18:15:34 -03:00
|
|
|
time.sleep(1)
|
|
|
|
except:
|
|
|
|
self.haveServer = False
|
|
|
|
else:
|
|
|
|
# let's try if it is actually up
|
|
|
|
try:
|
|
|
|
s = socket.socket()
|
- Issue #2550: The approach used by client/server code for obtaining ports
to listen on in network-oriented tests has been refined in an effort to
facilitate running multiple instances of the entire regression test suite
in parallel without issue. test_support.bind_port() has been fixed such
that it will always return a unique port -- which wasn't always the case
with the previous implementation, especially if socket options had been
set that affected address reuse (i.e. SO_REUSEADDR, SO_REUSEPORT). The
new implementation of bind_port() will actually raise an exception if it
is passed an AF_INET/SOCK_STREAM socket with either the SO_REUSEADDR or
SO_REUSEPORT socket option set. Furthermore, if available, bind_port()
will set the SO_EXCLUSIVEADDRUSE option on the socket it's been passed.
This currently only applies to Windows. This option prevents any other
sockets from binding to the host/port we've bound to, thus removing the
possibility of the 'non-deterministic' behaviour, as Microsoft puts it,
that occurs when a second SOCK_STREAM socket binds and accepts to a
host/port that's already been bound by another socket. The optional
preferred port parameter to bind_port() has been removed. Under no
circumstances should tests be hard coding ports!
test_support.find_unused_port() has also been introduced, which will pass
a temporary socket object to bind_port() in order to obtain an unused port.
The temporary socket object is then closed and deleted, and the port is
returned. This method should only be used for obtaining an unused port
in order to pass to an external program (i.e. the -accept [port] argument
to openssl's s_server mode) or as a parameter to a server-oriented class
that doesn't give you direct access to the underlying socket used.
Finally, test_support.HOST has been introduced, which should be used for
the host argument of any relevant socket calls (i.e. bind and connect).
The following tests were updated to following the new conventions:
test_socket, test_smtplib, test_asyncore, test_ssl, test_httplib,
test_poplib, test_ftplib, test_telnetlib, test_socketserver,
test_asynchat and test_socket_ssl.
It is now possible for multiple instances of the regression test suite to
run in parallel without issue.
2008-04-08 20:47:30 -03:00
|
|
|
s.connect((HOST, self.PORT))
|
2007-04-03 18:15:34 -03:00
|
|
|
s.close()
|
2007-04-10 00:00:37 -03:00
|
|
|
if self.s.stdout.readline() != "ERROR\n":
|
2007-04-10 01:44:49 -03:00
|
|
|
raise ValueError
|
2007-04-03 18:15:34 -03:00
|
|
|
except:
|
|
|
|
self.haveServer = False
|
|
|
|
else:
|
|
|
|
self.haveServer = True
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2007-04-03 18:15:34 -03:00
|
|
|
def run(self):
|
2007-04-03 14:29:48 -03:00
|
|
|
while self.keepServing:
|
|
|
|
time.sleep(.5)
|
|
|
|
l = self.s.stdout.readline()
|
|
|
|
self.s.stdin.write(l)
|
|
|
|
|
|
|
|
def shutdown(self):
|
|
|
|
self.keepServing = False
|
|
|
|
if not self.s:
|
|
|
|
return
|
|
|
|
if sys.platform == "win32":
|
2007-04-04 11:10:40 -03:00
|
|
|
subprocess.TerminateProcess(int(self.s._handle), -1)
|
2007-04-03 14:29:48 -03:00
|
|
|
else:
|
|
|
|
os.kill(self.s.pid, 15)
|
2007-04-25 03:30:05 -03:00
|
|
|
|
2003-06-30 00:25:20 -03:00
|
|
|
def test_main():
|
2003-07-01 10:44:28 -03:00
|
|
|
if not hasattr(socket, "ssl"):
|
|
|
|
raise test_support.TestSkipped("socket module has no ssl support")
|
2007-04-03 11:05:08 -03:00
|
|
|
|
|
|
|
tests = [BasicTests]
|
|
|
|
|
|
|
|
if test_support.is_resource_enabled('network'):
|
|
|
|
tests.append(ConnectedTests)
|
|
|
|
|
2007-04-03 14:29:48 -03:00
|
|
|
# in these platforms we can kill the openssl process
|
|
|
|
if sys.platform in ("sunos5", "darwin", "linux1",
|
|
|
|
"linux2", "win32", "hp-ux11"):
|
|
|
|
|
|
|
|
server = OpenSSLServer()
|
2007-04-03 18:15:34 -03:00
|
|
|
if server.haveServer:
|
|
|
|
tests.append(OpenSSLTests)
|
|
|
|
server.start()
|
|
|
|
else:
|
|
|
|
server = None
|
2007-04-03 14:29:48 -03:00
|
|
|
|
2007-04-03 11:05:08 -03:00
|
|
|
thread_info = test_support.threading_setup()
|
2003-06-30 00:25:20 -03:00
|
|
|
|
2007-04-03 18:15:34 -03:00
|
|
|
try:
|
|
|
|
test_support.run_unittest(*tests)
|
|
|
|
finally:
|
|
|
|
if server is not None and server.haveServer:
|
|
|
|
server.shutdown()
|
|
|
|
|
|
|
|
test_support.threading_cleanup(*thread_info)
|
2007-04-03 14:29:48 -03:00
|
|
|
|
2002-12-03 23:26:57 -04:00
|
|
|
if __name__ == "__main__":
|
|
|
|
test_main()
|