← Back to branch summary

~exarkun/pyopenssl/mem-bio

« back to all changes in this revision

Viewing changes to test/test_crypto.py

  • Committer: Jean-Paul Calderone
  • Date: 2009-04-01 18:49:13 UTC
  • mfrom: (98.1.5 dump_text)
  • Revision ID: exarkun@magnon-20090401184913-s95sb944xxhq1q3d
Add FILETYPE_TEXT for dumping keys and certificates to a text format

Show diffs side-by-side

added added

removed removed

Lines of Context:
test/test_crypto.py
4
4
Unit tests for L{OpenSSL.crypto}.
5
5
"""
6
6
 
7
 
from unittest import TestCase
 
7
from unittest import TestCase, main
 
8
from os import popen2
8
9
 
9
10
from OpenSSL.crypto import TYPE_RSA, TYPE_DSA, Error, PKey, PKeyType
10
11
from OpenSSL.crypto import X509, X509Type, X509Name, X509NameType
11
12
from OpenSSL.crypto import X509Req, X509ReqType
12
13
from OpenSSL.crypto import X509Extension, X509ExtensionType
13
 
from OpenSSL.crypto import FILETYPE_PEM, load_certificate, load_privatekey
14
 
from OpenSSL.crypto import dump_privatekey
 
14
from OpenSSL.crypto import load_certificate, load_privatekey
 
15
from OpenSSL.crypto import FILETYPE_PEM, FILETYPE_ASN1, FILETYPE_TEXT
 
16
from OpenSSL.crypto import dump_certificate, load_certificate_request
 
17
from OpenSSL.crypto import dump_certificate_request, dump_privatekey
15
18
 
16
19
 
17
20
cleartextCertificatePEM = """-----BEGIN CERTIFICATE-----
51
54
-----END RSA PRIVATE KEY-----
52
55
"""
53
56
 
 
57
cleartextCertificateRequestPEM = (
 
58
    "-----BEGIN CERTIFICATE REQUEST-----\n"
 
59
    "MIIBnjCCAQcCAQAwXjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAklMMRAwDgYDVQQH\n"
 
60
    "EwdDaGljYWdvMRcwFQYDVQQKEw5NeSBDb21wYW55IEx0ZDEXMBUGA1UEAxMORnJl\n"
 
61
    "ZGVyaWNrIERlYW4wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANp6Y17WzKSw\n"
 
62
    "BsUWkXdqg6tnXy8H8hA1msCMWpc+/2KJ4mbv5NyD6UD+/SqagQqulPbF/DFea9nA\n"
 
63
    "E0zhmHJELcM8gUTIlXv/cgDWnmK4xj8YkjVUiCdqKRAKeuzLG1pGmwwF5lGeJpXN\n"
 
64
    "xQn5ecR0UYSOWj6TTGXB9VyUMQzCClcBAgMBAAGgADANBgkqhkiG9w0BAQUFAAOB\n"
 
65
    "gQAAJGuF/R/GGbeC7FbFW+aJgr9ee0Xbl6nlhu7pTe67k+iiKT2dsl2ti68MVTnu\n"
 
66
    "Vrb3HUNqOkiwsJf6kCtq5oPn3QVYzTa76Dt2y3Rtzv6boRSlmlfrgS92GNma8JfR\n"
 
67
    "oICQk3nAudi6zl1Dix3BCv1pUp5KMtGn3MeDEi6QFGy2rA==\n"
 
68
    "-----END CERTIFICATE REQUEST-----\n")
 
69
 
54
70
encryptedPrivateKeyPEM = """-----BEGIN RSA PRIVATE KEY-----
55
71
Proc-Type: 4,ENCRYPTED
56
72
DEK-Info: DES-EDE3-CBC,9573604A18579E9E
711
727
        self.assertEqual(loadedKey.bits(), key.bits())
712
728
 
713
729
 
 
730
    def _runopenssl(self, pem, *args):
 
731
        """
 
732
        Run the command line openssl tool with the given arguments and write
 
733
        the given PEM to its stdin.
 
734
        """
 
735
        write, read = popen2(" ".join(("openssl",) + args))
 
736
        write.write(pem)
 
737
        write.close()
 
738
        return read.read()
 
739
 
 
740
 
 
741
    def test_dump_certificate(self):
 
742
        """
 
743
        L{dump_certificate} writes PEM, DER, and text.
 
744
        """
 
745
        pemData = cleartextCertificatePEM + cleartextPrivateKeyPEM
 
746
        cert = load_certificate(FILETYPE_PEM, pemData)
 
747
        dumped_pem = dump_certificate(FILETYPE_PEM, cert)
 
748
        self.assertEqual(dumped_pem, cleartextCertificatePEM)
 
749
        dumped_der = dump_certificate(FILETYPE_ASN1, cert)
 
750
        good_der = self._runopenssl(dumped_pem, "x509", "-outform", "DER")
 
751
        self.assertEqual(dumped_der, good_der)
 
752
        cert2 = load_certificate(FILETYPE_ASN1, dumped_der)
 
753
        dumped_pem2 = dump_certificate(FILETYPE_PEM, cert2)
 
754
        self.assertEqual(dumped_pem2, cleartextCertificatePEM)
 
755
        dumped_text = dump_certificate(FILETYPE_TEXT, cert)
 
756
        good_text = self._runopenssl(dumped_pem, "x509", "-noout", "-text")
 
757
        self.assertEqual(dumped_text, good_text)
 
758
 
 
759
 
 
760
    def test_dump_privatekey(self):
 
761
        """
 
762
        L{dump_privatekey} writes a PEM, DER, and text.
 
763
        """
 
764
        key = load_privatekey(FILETYPE_PEM, cleartextPrivateKeyPEM)
 
765
        dumped_pem = dump_privatekey(FILETYPE_PEM, key)
 
766
        self.assertEqual(dumped_pem, cleartextPrivateKeyPEM)
 
767
        dumped_der = dump_privatekey(FILETYPE_ASN1, key)
 
768
        # XXX This OpenSSL call writes "writing RSA key" to standard out.  Sad.
 
769
        good_der = self._runopenssl(dumped_pem, "rsa", "-outform", "DER")
 
770
        self.assertEqual(dumped_der, good_der)
 
771
        key2 = load_privatekey(FILETYPE_ASN1, dumped_der)
 
772
        dumped_pem2 = dump_privatekey(FILETYPE_PEM, key2)
 
773
        self.assertEqual(dumped_pem2, cleartextPrivateKeyPEM)
 
774
        dumped_text = dump_privatekey(FILETYPE_TEXT, key)
 
775
        good_text = self._runopenssl(dumped_pem, "rsa", "-noout", "-text")
 
776
        self.assertEqual(dumped_text, good_text)
 
777
 
 
778
 
 
779
    def test_dump_certificate_request(self):
 
780
        """
 
781
        L{dump_certificate_request} writes a PEM, DER, and text.
 
782
        """
 
783
        req = load_certificate_request(FILETYPE_PEM, cleartextCertificateRequestPEM)
 
784
        dumped_pem = dump_certificate_request(FILETYPE_PEM, req)
 
785
        self.assertEqual(dumped_pem, cleartextCertificateRequestPEM)
 
786
        dumped_der = dump_certificate_request(FILETYPE_ASN1, req)
 
787
        good_der = self._runopenssl(dumped_pem, "req", "-outform", "DER")
 
788
        self.assertEqual(dumped_der, good_der)
 
789
        req2 = load_certificate_request(FILETYPE_ASN1, dumped_der)
 
790
        dumped_pem2 = dump_certificate_request(FILETYPE_PEM, req2)
 
791
        self.assertEqual(dumped_pem2, cleartextCertificateRequestPEM)
 
792
        dumped_text = dump_certificate_request(FILETYPE_TEXT, req)
 
793
        good_text = self._runopenssl(dumped_pem, "req", "-noout", "-text")
 
794
        self.assertEqual(dumped_text, good_text)
 
795
 
 
796
 
714
797
    def test_dump_privatekey_passphraseCallback(self):
715
798
        """
716
799
        L{dump_privatekey} writes an encrypted PEM when given a callback which
729
812
        self.assertTrue(isinstance(loadedKey, PKeyType))
730
813
        self.assertEqual(loadedKey.type(), key.type())
731
814
        self.assertEqual(loadedKey.bits(), key.bits())
 
815
 
 
816
 
 
817
if __name__ == '__main__':
 
818
    main()