tests/testgpg.py

   1 #!/usr/bin/env python
   2 from basetest import BaseTest
   3 import sys, tempfile
   4 import unittest
   5 import warnings
   6
   7 sys.path.insert(0, '..')
   8 from zeroinstall.injector import gpg, model, trust
   9
  10 err_sig = """<?xml version="1.0" ?>
  11 <?xml-stylesheet type='text/xsl' href='interface.xsl'?>
  12 <interface xmlns="http://zero-install.sourceforge.net/2004/injector/interface">
  13   <name>test</name>
  14   <summary>test</summary>
  15 </interface>
  16 <!-- Base64 Signature
  17 iJwEAAECAAYFAk1NVyAACgkQerial32qo5eVCgP/RYEzT43M2Dj3winnkX2HQDO2Fx5dq83pmidd
  18 LDEID3FxbuIpMUP/2rvPmNM3itRo/J4R2xkM65TEol/55uxDC1bbuarKf3wbgwEF60srFEDeeiYM
  19 FmTQtWYPtrzAGtNRTgKfD75xk9lcM2GHmKNlgSQ7G8ZsfL6KaraF4Wa6nqU=
  20
  21 -->
  22 """
  23
  24 bad_xml_main = """<?xml version='1.0'?>
  25 <root/>"""
  26
  27 invalid_xmls_sigs = [
  28 ('last line is not end-of-comment',
  29 """<!-- Base64 Signature
  30 """),
  31 ('No signature block in XML',
  32 """<!-- Base64 Sig
  33 iD8DBQBDtpK9rgeCgFmlPMERAg0gAKCaJhXFnk
  34 -->
  35 """),
  36 ('extra data on comment line',
  37 """<!-- Base64 Signature data
  38 iD8DBQBDtpK9rgeCgFmlPMERAg0gAKCaJhXFnk
  39 -->
  40 """),
  41 ('last line is not end-of-comment',
  42 """<!-- Base64 Signature
  43 iD8DBQBDtpK9rgeCgFmlPMERAg0gAKCaJhXFnk
  44 WZRBLT0an56WYaBODukSsf4=
  45 --> More
  46 """),
  47 ('Invalid base 64 encoded signature:',
  48 """<!-- Base64 Signature
  49 iD8DBQBDtpK9rgeCgFmlPMERAg0gAKCaJhXFnk
  50 WZRBLT0an56WYaBODukSsf4=
  51 =zMc+
  52 -->
  53 """),
  54 ('Invalid characters found',
  55 """<!-- Base64 Signature
  56 iD8DBQBDtpK9rge<CgFmlPMERAg0gAKCaJhXFnk
  57 WZRBLT0an56WYaBODukSsf4=
  58 -->
  59 """)]
  60
  61 good_xml_sig = """<?xml version='1.0'?>
  62 <root/>
  63 <!-- Base64 Signature
  64 iD8DBQBDuChIrgeCgFmlPMERAnGEAJ0ZS1PeyWonx6xS/mgpYTKNgSXa5QCeMSYPHhNcvxu3f84y
  65 Uk7hxHFeQPo=
  66 -->
  67 """
  68
  69 bad_xml_sig = """<?xml version='1.0'?>
  70 <ro0t/>
  71 <!-- Base64 Signature
  72 iD8DBQBDuChIrgeCgFmlPMERAnGEAJ0ZS1PeyWonx6xS/mgpYTKNgSXa5QCeMSYPHhNcvxu3f84y
  73 Uk7hxHFeQPo=
  74 -->
  75 """
  76
  77 from data import thomas_key
  78
  79 THOMAS_FINGERPRINT = '92429807C9853C0744A68B9AAE07828059A53CC1'
  80
  81 class TestGPG(BaseTest):
  82         def setUp(self):
  83                 BaseTest.setUp(self)
  84
  85                 stream = tempfile.TemporaryFile()
  86                 stream.write(thomas_key)
  87                 stream.seek(0)
  88                 gpg.import_key(stream)
  89                 trust.trust_db.trust_key(THOMAS_FINGERPRINT)
  90                 warnings.filterwarnings("ignore", category = DeprecationWarning)
  91
  92         def testImportBad(self):
  93                 stream = tempfile.TemporaryFile()
  94                 stream.write("Bad key")
  95                 stream.seek(0)
  96                 try:
  97                         gpg.import_key(stream)
  98                         assert False
  99                 except model.SafeException:
 100                         pass    # OK
 101
 102         def testErrSig(self):
 103                 stream = tempfile.TemporaryFile()
 104                 stream.write(err_sig)
 105                 stream.seek(0)
 106                 data, sigs = gpg.check_stream(stream)
 107                 self.assertEquals(err_sig, data.read())
 108                 assert len(sigs) == 1
 109                 assert isinstance(sigs[0], gpg.ErrSig)
 110                 assert sigs[0].need_key() == "7AB89A977DAAA397"
 111                 self.assertEquals("1", sigs[0].status[gpg.ErrSig.ALG])
 112                 assert sigs[0].is_trusted() is False
 113                 assert str(sigs[0]).startswith('ERROR')
 114
 115         def testBadXMLSig(self):
 116                 self.assertEquals(bad_xml_sig, self.check_bad(bad_xml_sig))
 117
 118         def testInvalidXMLSig(self):
 119                 for error, sig in invalid_xmls_sigs:
 120                         try:
 121                                 self.check_bad(bad_xml_main + '\n' + sig)
 122                         except model.SafeException as ex:
 123                                 if error not in str(ex):
 124                                         raise model.SafeException(str(ex) + '\nSig:\n' + sig)
 125
 126         def check_bad(self, sig):
 127                 stream = tempfile.TemporaryFile()
 128                 stream.write(sig)
 129                 stream.seek(0)
 130                 data, sigs = gpg.check_stream(stream)
 131                 assert len(sigs) == 1
 132                 assert isinstance(sigs[0], gpg.BadSig)
 133                 self.assertEquals("AE07828059A53CC1",
 134                                   sigs[0].status[gpg.BadSig.KEYID])
 135                 assert sigs[0].is_trusted() is False
 136                 assert sigs[0].need_key() is None
 137                 assert str(sigs[0]).startswith('BAD')
 138                 return data.read()
 139
 140         def testGoodXMLSig(self):
 141                 self.assertEquals(good_xml_sig, self.check_good(good_xml_sig))
 142
 143         def check_good(self, sig):
 144                 stream = tempfile.TemporaryFile()
 145                 stream.write(sig)
 146                 stream.seek(0)
 147                 data, sigs = gpg.check_stream(stream)
 148                 assert len(sigs) == 1
 149                 assert isinstance(sigs[0], gpg.ValidSig)
 150                 self.assertEquals("92429807C9853C0744A68B9AAE07828059A53CC1",
 151                                   sigs[0].fingerprint)
 152                 assert sigs[0].is_trusted() is True
 153                 assert sigs[0].need_key() is None
 154                 assert str(sigs[0]).startswith('Valid')
 155                 for item in sigs[0].get_details():
 156                         if item[0] == 'uid' and len(item) > 9:
 157                                 assert item[9] in ["Thomas Leonard <tal197@users.sourceforge.net>"], str(item)
 158                                 break
 159                 else:
 160                         self.fail("Missing name")
 161                 return data.read()
 162
 163         def testNoSig(self):
 164                 stream = tempfile.TemporaryFile()
 165                 stream.write("Hello")
 166                 stream.seek(0)
 167                 try:
 168                         gpg.check_stream(stream)
 169                         assert False
 170                 except model.SafeException:
 171                         pass    # OK
 172
 173         def testLoadKeys(self):
 174
 175                 self.assertEquals({}, gpg.load_keys([]))
 176                 keys = gpg.load_keys([THOMAS_FINGERPRINT])
 177                 self.assertEquals(1, len(keys))
 178                 key = keys[THOMAS_FINGERPRINT]
 179                 self.assertEquals(THOMAS_FINGERPRINT, key.fingerprint)
 180                 self.assertEquals('Thomas Leonard <tal197@users.sourceforge.net>',
 181                                 key.name)
 182
 183 if __name__ == '__main__':
 184         unittest.main()