tfb(ddlZddlZddlZddlZddlmZddlmZddlm Z ddl m Z m Z m Z mZddlmZddlmZddlmZmZmZdd lmZdd lmZdd lmZdd lmZmZm Z dd l!m"Z"ddl#m$Z$ddl%m&Z&ddl'm(Z(m)Z)ddl*m+Z+m,Z, ddlm-Z-m.Z.n #e/$rYnwxYwe&dZ0e0rddl1m2Z2ddl3m4Z4m5Z5m6Z6nddl7m4Z4GddZ2 ddl8m5Z9e9Z:n #e/$rZ;dZ:eGdde,Z?Gddej@ZAGd d!ejBZCGd"d#ejDZEGd$d%ejDZFGd&d'ej@ZGd>d)ZHGd*d+ZIGd,d-eIZJee4Gd.d/e2ZKGd0d1ZLGd2d3eIZMGd4d5ZNGd6d7eIeNe,ZOGd8d9eJeNe,ZPGd:d;eMeNe,ZQGd<d=eJe,ZRdS)?N)count) implementer) ConchError)privateDSA_opensshprivateRSA_opensshpublicDSA_opensshpublicRSA_opensshConchTestRealm)portal)deferprotocolreactor)ProcessExitedAlready) LoopingCall)getProcessValue)filepathlogruntime)FilePath)which) requireModule)HAS_IPV6skipWithoutIPv6)SkipTestTestCase)ConchTestServerFactoryconchTestPublicKeyChecker cryptography) ConchUser)ISession SSHSession wrapProtocol)r!ceZdZdS)r N)__name__ __module__ __qualname__\/var/www/surfInsights/venv3-11/lib/python3.11/site-packages/twisted/conch/test/test_conch.pyr r 1s r)r )r"ceZdZdZdZdZdS) FakeStdioz A fake for testing L{twisted.conch.scripts.conch.SSHSession.eofReceived} and L{twisted.conch.scripts.cftp.SSHSession.eofReceived}. @ivar writeConnLost: A flag which records whether L{loserWriteConnection} has been called. Fcd|_dS)z9 Record the call to loseWriteConnection. TN) writeConnLostselfs r*loseWriteConnectionzFakeStdio.loseWriteConnectionJs"r)N)r%r&r'__doc__r.r1r(r)r*r,r,?s4M"""""r)r,c eZdZdZeeZdZdS)StdioInteractingSessionTestsz> Tests for L{twisted.conch.scripts.conch.SSHSession}. Nct}t}||_|||jdS)z} L{twisted.conch.scripts.conch.SSHSession.eofReceived} loses the write half of its stdio connection. N)r,StdioInteractingSessionstdio eofReceived assertTruer.)r0r7channels r*test_eofReceivedz-StdioInteractingSessionTests.test_eofReceivedYsL  )++  +,,,,,r))r%r&r'r2r6_reasonskipr;r(r)r*r4r4Qs:& - - - - -r)r4c eZdZdZdZdZdS)Echoc.tjddS)NzECHO CONNECTION MADErmsgr/s r*connectionMadezEcho.connectionMadef &'''''r)c.tjddS)NzECHO CONNECTION DONErAr0reasons r*connectionLostzEcho.connectionLostirDr)cx|j|d|vr|jdSdS)N ) transportwriteloseConnectionr0datas r* dataReceivedzEcho.dataReceivedlsB T""" D== N ) ) + + + + + =r)N)r%r&r'rCrHrPr(r)r*r?r?esA((((((,,,,,r)r?ceZdZeZdS) EchoFactoryN)r%r&r'r?rr(r)r*rRrRrsHHHr)rRc6eZdZdZdZdZdZdZdZdZ dZ dS)ConchTestOpenSSHProcessa Test protocol for launching an OpenSSH client process. @ivar deferred: Set by whatever uses this object. Accessed using L{_getDeferred}, which destroys the value so the Deferred is not fired twice. Fires when the process is terminated. Nr)c$|jdc}|_|SNdeferredr0ds r* _getDeferredz$ConchTestOpenSSHProcess._getDeferred=$4=r)c&|xj|z c_dSrV)bufrNs r* outReceivedz#ConchTestOpenSSHProcess.outReceiveds Dr)c&|xj|z c_dSrV)problemsrNs r* errReceivedz#ConchTestOpenSSHProcess.errReceiveds  r)c |jjdkrl|t d|jj|jddS|j dd}| |dS)z~ Called when the process has ended. @param reason: a Failure giving the reason for the process' end. rzexit code was not 0: {} ({})charmaps rJN) valueexitCoder[errbackrformatradecoder^replacecallback)r0rGr^s r* processEndedz$ConchTestOpenSSHProcess.processEndeds < A % %      ' '299 - ,,Y77     (""7E22C      ( ( - - - - -r)) r%r&r'r2rXr^rar[r_rbrlr(r)r*rTrTvskH CH.....r)rTcFeZdZdZdZdZdZdZdZdZ dZ d Z d Z dS) ConchTestForwardingProcessa Manages a third-party process which launches a server. Uses L{ConchTestForwardingPort} to connect to the third-party server. Once L{ConchTestForwardingPort} has disconnected, kill the process and fire a Deferred with the data received by the L{ConchTestForwardingPort}. @ivar deferred: Set by whatever uses this object. Accessed using L{_getDeferred}, which destroys the value so the Deferred is not fired twice. Fires when the process is terminated. Nc0||_d|_||_dS)aF @type port: L{int} @param port: The port on which the third-party server is listening. (it is assumed that the server is running on localhost). @type data: L{str} @param data: This is sent to the third-party server. Must end with ' ' in order to trigger a disconnect. N)portbufferrO)r0rprOs r*__init__z#ConchTestForwardingProcess.__init__s   r)c$|jdc}|_|SrVrWrYs r*r[z'ConchTestForwardingProcess._getDeferredr\r)c.|dSrV)_connectr/s r*rCz)ConchTestForwardingProcess.connectionMades r)ctjtt||j}|d|j}||j|S)a Connect to the server, which is often a third-party process. Tries to reconnect if it fails because we have no way of determining exactly when the port becomes available for listening -- we can only know when the process starts. 127.0.0.1) r ClientCreatorrConchTestForwardingPortrO connectTCPrp addErrback _ebConnect)r0ccrZs r*ruz#ConchTestForwardingProcess._connectsK #G-DdDI V V MM+ty 1 1 T_%%%r)c:tjd|jdS)Ng?)r callLaterru)r0fs r*r|z%ConchTestForwardingProcess._ebConnects#t}-----r)c||_|jd|jt jd|jdS)z The network connection has died; save the buffer of output from the network and attempt to quit the process gracefully, and then (after the reactor has spun) send it a KILL signal. rN)rqrKrLrMrr _reallyDie)r0rqs r*forwardingPortDisconnectedz5ConchTestForwardingProcess.forwardingPortDisconnectedsP   W%%% %%'''!T_-----r)c^ |jddS#t$rYdSwxYw)NKILL)rK signalProcessrr/s r*rz%ConchTestForwardingProcess._reallyDiesE  N ( ( 0 0 0 0 0#    DD s  ,,c^||jdS)z Fire the Deferred at self.deferred with the data collected from the L{ConchTestForwardingPort} connection, if any. N)r[rkrqrFs r*rlz'ConchTestForwardingProcess.processEndeds, $$T[11111r)) r%r&r'r2rXrrr[rCrur|rrrlr(r)r*rnrns  H      ... . . . 22222r)rnc*eZdZdZdZdZdZdZdS)ryz Connects to server launched by a third-party process (managed by L{ConchTestForwardingProcess}) sends data, then reports whatever it received back to the L{ConchTestForwardingProcess} once the connection is ended. c"||_||_dS)z @type protocol: L{ConchTestForwardingProcess} @param protocol: The L{ProcessProtocol} which made this connection. @type data: str @param data: The data to be sent to the third-party server. N)rrO)r0rrOs r*rrz ConchTestForwardingPort.__init__s!  r)cRd|_|j|jdS)Nr))rqrKrLrOr/s r*rCz&ConchTestForwardingPort.connectionMades'  TY'''''r)c&|xj|z c_dSrV)rqrNs r*rPz$ConchTestForwardingPort.dataReceiveds t r)cD|j|jdSrV)rrrqrFs r*rHz&ConchTestForwardingPort.connectionLosts  00=====r)N)r%r&r'r2rrrCrPrHr(r)r*ryrysZ   (((>>>>>r)ryconchctjd|zg}g}|t|zD]A}t|tr|d}||B|S)Na$-c ### Twisted Preamble import sys, os path = os.path.abspath(sys.argv[0]) while os.path.dirname(path) != path: if os.path.basename(path).startswith('Twisted'): sys.path.insert(0, path) break path = os.path.dirname(path) from twisted.conch.scripts.%s import run run()utf-8)sys executablelist isinstancestrencodeappend)argsmodstartmadeArgsargs r* _makeArgsr s{     E"HtDzz! c3   &**W%%C Or)cJeZdZesdZedZdZdZdZ dZ dZ dS) ConchServerSetupMixinzcan't run without cryptographyc tdS)Nstestuserr r(r)r* realmFactoryz"ConchServerSetupMixin.realmFactory)sk***r)cdD]5}tj|rtj|6t dd5}|t dddn #1swxYwYt dd5}|tdddn #1swxYwYt dd5}|tdddn #1swxYwYt dd5}|tdddn #1swxYwYtj ddtj ddtd }|j js |jjrt!dt d d5}|d tzddddS#1swxYwYdS) N)rsa_test rsa_test.pubdsa_test dsa_test.pubkh_testrwbrrrizgprivate key readable by others despite chmod; possible windows permission issue? see https://tm.tl/9767rs 127.0.0.1 )ospathexistsremoveopenrLrr rrchmodrgetPermissionsgroupreadotherr)r0r permissionss r* _createFilesz"ConchServerSetupMixin._createFiles-sT  Aw~~a    ! *d # # (q GG& ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( .$ ' ' '1 GG% & & & ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' .$ ' ' '1 GG% & & & ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' *d # # (q GG& ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( U### U###z**99;;   ! [%6%; *  )T " " 7a GGM$55 6 6 6 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7sZ A00A47A4 B22B69B6 C44C8;C8D66D:=D:G..G25G2ctj}|d|d}||S)N)r)socketbind getsocknameclose)r0srps r* _getFreePortz"ConchServerSetupMixin._getFreePortEs@ MOO w}}q!   r)c|}tj|}|t t }||_|S)z Make a L{ConchTestServerFactory}, which allows us to start a L{ConchTestServer} -- i.e. an actually listening conch. )rr PortalregisterCheckerrr)r0realmpfactorys r*_makeConchFactoryz'ConchServerSetupMixin._makeConchFactoryLsV !!## M%  355666(**r)c|||_d|j_t jd|jd|_t jdt|_|j j |_ trMt jdtd|_ |j j |_dSdS)Nrrrw) interfacez::1)rr conchFactoryexpectedLoseConnectionr listenTCP conchServerrR echoServergetHostrpechoPortr echoServerV6 echoPortV6r/s r*setUpzConchServerSetupMixin.setUpXs  2244340", t K   "+A{}}==//116  ? ' 1![]]e T T TD "/7799>DOOO ? ?r)c d|jj_|jjjn#t $rYnwxYwt j|jj t j|j j g}tr1| t j|j j t j|S)Nr)rprotodonerKrMAttributeErrorr maybeDeferredr stopListeningrrrr gatherResults)r0 deferredss r*tearDownzConchServerSetupMixin.tearDownes ?+,D  # (   # - < < > > > >    D    0 > ? ?   = > >   S   U01B1PQQ R R R"9---s7 AAN) r%r&r'rr= staticmethodrrrrrrr(r)r*rr%s 0/++\+7770    ? ? ? . . . . .r)rc$eZdZdZdZdZdZdS)ForwardingMixina Template class for tests of the Conch server's ability to forward arbitrary protocols over SSH. These tests are integration tests, not unit tests. They launch a Conch server, a custom TCP server (just an L{EchoProtocol}) and then call L{execute}. L{execute} is implemented by subclasses of L{ForwardingMixin}. It should cause an SSH client to connect to the Conch server, asking it to forward data to the custom TCP server. c||dt}||jdS)z Test that we can use whatever client to send the command "echo goodbye" to the Conch server. Make sure we receive "goodbye" back from the server. echo goodbyegoodbye executerT addCallback assertEqualrYs r* test_execzForwardingMixin.test_execs5 LL)@)B)B C C}}T-|<<.writesW ABww !&22%~7J((*****%,{{7++%%%%%r)g{Gz?N)rProtocolmakeConnectionr#rrr)r0rKrrLrs ` @r* openShellzRekeyAvatar.openShells!## Y'''  e!4!4555 & & & & & &(5%''** 4r)cdS)z2 Ignore the close of the session. Nr(r/s r*closedzRekeyAvatar.closedsr)cdSrVr(r/s r*r8zRekeyAvatar.eofReceived r)cdSrVr()r0rcommands r* execCommandzRekeyAvatar.execCommandrr)cdSrVr()r0term windowSizemodess r*getPtyzRekeyAvatar.getPtyrr)cdSrVr()r0 newWindowSizes r* windowChangedzRekeyAvatar.windowChangedrr)N) r%r&r'r2rrrrr8r rrr(r)r*rrs444B                 r)rceZdZdZdZdS) RekeyRealmzS This realm gives out new L{RekeyAvatar} instances for any avatar request. c2|dtdfS)NrcdSrVr(r(r)r*z*RekeyRealm.requestAvatar..sTr))r)r0avatarIDmind interfacess r* requestAvatarzRekeyRealm.requestAvatars!}kmm\\99r)N)r%r&r'r2rr(r)r*rrs-:::::r)rceZdZdZeZdZdS)RekeyTestsMixinzp TestCase mixin which defines tests exercising L{SSHTransportBase}'s handling of rekeying messages. ct}d|d}fd}|||S)z After a client-initiated rekey is completed, application data continues to be passed over the SSH connection. rz-o RekeyLimit=2KcddtdDdz}|d}||dS)N cg|]}d|fz S)z line #%02dr().0rs r* zFRekeyTestsMixin.test_clientRekey..finished.. s'O'O'O t(;'O'O'Or)rr)joinrangerr)resultexpectedResultr0s r*finishedz2RekeyTestsMixin.test_clientRekey..finished s^!YY'O'OU2YY'O'O'OPPSWWN+227;;N   V^ 4 4 4 4 4r))rTrr)r0rrZr's` r*test_clientRekeyz RekeyTestsMixin.test_clientRekeysX *++ LLW&8 9 9 5 5 5 5 5 hr)N)r%r&r'r2rrr(r(r)r*rrs4 Lr)rc0eZdZedsdZddZdS)OpenSSHClientMixinsshz$no ssh command-line client availablercttddd}fd}||S)a Connects to the SSH server started in L{ConchServerSetupMixin.setUp} by running the 'ssh' command line tool. @type remoteCommand: str @param remoteCommand: The command (with arguments) to run on the remote end. @type process: L{ConchTestOpenSSHProcess} @type sshArgs: str @param sshArgs: Arguments to pass to the 'ssh' process. @return: L{defer.Deferred} r+r)z-ozPubkeyAcceptedKeyTypes=ssh-dssz-Vc|dkrd}nd}tj_d|z zdzz} jj}||z}g}|D]A}t|tr| d}| |Btj tdd|jS)Nrz!-oPubkeyAcceptedKeyTypes=ssh-dss rzssh -2 -l testuser -p %i -F /dev/null -oUserKnownHostsFile=kh_test -oPasswordAuthentication=no -oHostKeyAlgorithms=ssh-rsa -a -i dsa_test 127.0.0.1 rr+)r DeferredrXrrrpsplitrrrrr spawnProcessr) statusoptscmdlinerpcmds encodedCmdscmdr remoteCommandr0rs r*hasPAKTz+OpenSSHClientMixin.execute..hasPAKT.s{{:$~//G  #          #++--2DdN))++DK ( (c3''.**W--C""3''''  %,,q/; G G G# #r))rrr)r0r8rrrZr9s```` r*rzOpenSSHClientMixin.executesd(  %LLOK  " $" $" $" $" $" $" $" $H}}W%%%r)N)r)r%r&r'rr=rr(r)r*r*r*s= 5<<65<&<&<&<&<&<&r)r*cBeZdZdZdZdZdZdZdZdZ dZ d Z d S) OpenSSHKeyExchangeTestsz\ Tests L{SSHTransportBase}'s key exchange algorithm compatibility with OpenSSH. cg} tjtddddgtj}t |t s|d}|}n#t$rYnwxYw||vrt|d| dtd |z}| |j d S) aI Call execute() method of L{OpenSSHClientMixin} with an ssh option that forces the exclusive use of the key exchange algorithm specified by keyExchangeAlgo @type keyExchangeAlgo: L{str} @param keyExchangeAlgo: The key exchange algorithm to use @return: L{defer.Deferred} r+rz-Qkex)stderrrz not supported by ssh clientz echo helloz-oKexAlgorithms=shello ) subprocess check_outputrSTDOUTrrrir0 BaseExceptionrrrTrr)r0keyExchangeAlgo kexAlgorithmsoutputrZs r*assertExecuteWithKexAlgorithmz5OpenSSHKeyExchangeTests.assertExecuteWithKexAlgorithm[s  ,ua$.z7HFfc** 0w//"LLNNMM    D  - / /oKKKLL L LL  # % %  0   }}T-z:::sA4A99 BBc,|dS)zb The ecdh-sha2-nistp256 key exchange algorithm is compatible with OpenSSH zecdh-sha2-nistp256rFr/s r*test_ECDHSHA256z'OpenSSHKeyExchangeTests.test_ECDHSHA256{ 112FGGGr)c,|dS)zb The ecdh-sha2-nistp384 key exchange algorithm is compatible with OpenSSH zecdh-sha2-nistp384rHr/s r*test_ECDHSHA384z'OpenSSHKeyExchangeTests.test_ECDHSHA384rJr)c,|dS)zb The ecdh-sha2-nistp521 key exchange algorithm is compatible with OpenSSH zecdh-sha2-nistp521rHr/s r*test_ECDHSHA521z'OpenSSHKeyExchangeTests.test_ECDHSHA521rJr)c,|dS)zl The diffie-hellman-group14-sha1 key exchange algorithm is compatible with OpenSSH. zdiffie-hellman-group14-sha1rHr/s r*test_DH_GROUP14z'OpenSSHKeyExchangeTests.test_DH_GROUP14s 112OPPPr)c,|dS)zs The diffie-hellman-group-exchange-sha1 key exchange algorithm is compatible with OpenSSH. z"diffie-hellman-group-exchange-sha1rHr/s r*test_DH_GROUP_EXCHANGE_SHA1z3OpenSSHKeyExchangeTests.test_DH_GROUP_EXCHANGE_SHA1s 112VWWWr)c,|dS)zu The diffie-hellman-group-exchange-sha256 key exchange algorithm is compatible with OpenSSH. z$diffie-hellman-group-exchange-sha256rHr/s r*test_DH_GROUP_EXCHANGE_SHA256z5OpenSSHKeyExchangeTests.test_DH_GROUP_EXCHANGE_SHA256s 11 2   r)cH|t|jddS)zy The list of key exchange algorithms supported by OpenSSH client is obtained with C{ssh -Q kex}. zunsupported-algorithmN) assertRaisesrrFr/s r*test_unsupported_algorithmz2OpenSSHKeyExchangeTests.test_unsupported_algorithms1  d8:Q     r)N) r%r&r'r2rFrIrLrNrPrRrTrWr(r)r*r;r;Us ;;;@HHHHHHHHHQQQXXX        r)r;c(eZdZdZedZdS)OpenSSHClientForwardingTestszR Connection forwarding tests run against the OpenSSL command line client. c|}t|d}|d|d||jfz}||jd|S)zG Forwarding of arbitrary IPv6 TCP connections via SSH. rrz-N -L%i:[::1]:%ir)rrnrrrrrs r*test_localToRemoteForwardingV6z;OpenSSHClientForwardingTests.test_localToRemoteForwardingV6sn %%'' ,Y BB LL !3y$/6R!R    d& 222r)N)r%r&r'r2rr[r(r)r*rYrYs9  _   r)rYceZdZdZdS)OpenSSHClientRekeyTestszE Rekeying tests run against the OpenSSL command line client. N)r%r&r'r2r(r)r*r]r]sr)r]c@eZdZdZejdkrdZd dZdZdZ dS) CmdLineClientTestszP Connection forwarding tests run against the Conch command line client. win32z!can't run cmdline client on win32rNc<|g}tj|_|jj}d||zdz|z}t||z}tj }tj tj|d<g} i} |D]A}t!|t"r|d}| |B|D]c} || } t!| t"r| d} t!| t"r| d} | | | <dt)j|tj| | |jS)z{ As for L{OpenSSHClientTestCase.execute}, except it runs the 'conch' command line tool, not 'ssh'. Nz[-p {} -l testuser --known-hosts kh_test --user-authentications publickey -a -i dsa_test -v r. PYTHONPATHr)env)r r/rXrrrprhrr0renvironcopypathsepr#rrrrrrrr1r) r0r8rr conchArgsrpr7r5rcr6 encodedEnvvarvals r*rzCmdLineClientTests.executes  I >++'')).  &,,  ) ,9  9 .cb_check_logs. ++--J MM.* 5 5 5 5 5r)rz--logz --logfilez--host-key-algorithmszssh-rsa)r8rrgr)rrmktemprrTrrr)r0rqrZrps` @r*test_runWithLogFilez&CmdLineClientTests.test_runWithLogFiles  6 6 6 6 6 6#DKKMM22 LL(+-- '    d& 555 l###r)c|dt}||jd|S)zH Do not use --host-key-algorithms flag on command line. r)r8rrrrYs r*%test_runWithNoHostAlgorithmsSpecifiedz8CmdLineClientTests.test_runWithNoHostAlgorithmsSpecifiedsF LL(2I2K2K    d& 555r))rN) r%r&r'r2r platformTyper=rrsrur(r)r*r_r_sfw&&2# # # # J6     r)r_)r)Srrr?r itertoolsrzope.interfacertwisted.conch.errorrtwisted.conch.test.keydatarrrr twisted.conch.test.test_sshr twisted.credr twisted.internetr rrtwisted.internet.errorrtwisted.internet.taskrtwisted.internet.utilsrtwisted.pythonrrrtwisted.python.filepathrtwisted.python.procutilsrtwisted.python.reflectrtwisted.test.testutilsrrtwisted.trial.unittestrrrr ImportErrorrtwisted.conch.avatarr twisted.conch.ssh.sessionr!r"r#twisted.conch.interfacestwisted.conch.scripts.conch_StdioInteractingSessionr6err<r,r4rr?FactoryrRProcessProtocolrTrnryrrrrrrr*r;rYr]r_r(r)r*rs.   &&&&&&****** 7666665555555555777777------2222221111111111,,,,,,******000000<<<<<<<<55555555    D }^,,  ......LLLLLLLLLLL111111        7RRRRRR 7    "c!ffG  """"""""$-----8---( , , , , ,8  , , ,("(.(.(.(.(.h6(.(.(.VI2I2I2I2I2!9I2I2I2X>>>>>h/>>><4M.M.M.M.M.M.M.M.`/////+///l XA A A A A )A A A H::::::::+2@&@&@&@&@&@&@&@&FY Y Y Y Y 35GY Y Y x?4F&o/A8 QQQQQ(QQQQQs*B BB CC0C++C0