/Jf,d>ddlZddlZddlZddlZddlmZddlmZddlm Z ddl m Z ddl m Z mZmZmZddlmZddlmZdd lmZmZmZdd lmZdd lmZdd lmZdd lm Z m!Z!m"Z"ddl#m$Z$ddl%m&Z&ddl'm(Z(ddl)m*Z*m+Z+ ddlm,Z,m-Z-n #e.$rYnwxYwe(dZ/e/rddl0m1Z1ddl2m3Z3m4Z4m5Z5nddl6m3Z3GddZ1 ddl7m4Z8e8Z9n #e.$rZ:dZ9e;e:Z<[:YdZ:[:ndZ:[:wwxYwdZ=e=Z>GddZ?Gdde+Z@Gdd ejAZBGd!d"ejCZDGd#d$ejEZFGd%d&ejEZGGd'd(ejAZHd?d*ZIGd+d,ZJGd-d.eJZKe e3Gd/d0e1ZLGd1d2ZMGd3d4eJZNGd5d6ZOGd7d8eJeOe+ZPGd9d:eKeOe+ZQGd;deKe+ZSdS)@N)count)skipIf) implementer) ConchError)privateDSA_opensshprivateRSA_opensshpublicDSA_opensshpublicRSA_opensshConchTestRealm)portal)deferprotocolreactor)ProcessExitedAlready) LoopingCall)getProcessValue)filepathlogruntime)FilePath)which) requireModule)SkipTestTestCase)ConchTestServerFactoryconchTestPublicKeyChecker cryptography) ConchUser)ISession SSHSession wrapProtocol)r ceZdZdS)rN)__name__ __module__ __qualname__`/home/alex/cs2snipeproduction/venv/lib/python3.11/site-packages/twisted/conch/test/test_conch.pyrr1s r(r)r!cd}d} tjtj}|dd}n#t$rYnwxYw|r||S)z4Returns True if the system can bind an IPv6 address.NF)::1rT)socketAF_INET6bindOSErrorclose)sockhas_ipv6s r) _has_ipv6r3?sw DH }V_-- *        Os5< A A ceZdZdZdZdZdS) FakeStdioz A fake for testing L{twisted.conch.scripts.conch.SSHSession.eofReceived} and L{twisted.conch.scripts.cftp.SSHSession.eofReceived}. @ivar writeConnLost: A flag which records whether L{loserWriteConnection} has been called. Fcd|_dS)z9 Record the call to loseWriteConnection. TN) writeConnLostselfs r)loseWriteConnectionzFakeStdio.loseWriteConnection^s"r(N)r$r%r&__doc__r7r:r'r(r)r5r5Ss4M"""""r(r5c eZdZdZeeZdZdS)StdioInteractingSessionTestsz> Tests for L{twisted.conch.scripts.conch.SSHSession}. Nct}t}||_|||jdS)z} L{twisted.conch.scripts.conch.SSHSession.eofReceived} loses the write half of its stdio connection. N)r5StdioInteractingSessionstdio eofReceived assertTruer7)r9r@channels r)test_eofReceivedz-StdioInteractingSessionTests.test_eofReceivedmsL  )++  +,,,,,r()r$r%r&r;r?_reasonskiprDr'r(r)r=r=es:& - - - - -r(r=c eZdZdZdZdZdS)Echoc.tjddS)NzECHO CONNECTION MADErmsgr8s r)connectionMadezEcho.connectionMadez &'''''r(c.tjddS)NzECHO CONNECTION DONErJr9reasons r)connectionLostzEcho.connectionLost}rMr(cx|j|d|vr|jdSdS)N ) transportwriteloseConnectionr9datas r) dataReceivedzEcho.dataReceivedsB T""" D== N ) ) + + + + + =r(N)r$r%r&rLrQrYr'r(r)rHrHysA((((((,,,,,r(rHceZdZeZdS) EchoFactoryN)r$r%r&rHrr'r(r)r[r[sHHHr(r[c6eZdZdZdZdZdZdZdZdZ dZ dS)ConchTestOpenSSHProcessa Test protocol for launching an OpenSSH client process. @ivar deferred: Set by whatever uses this object. Accessed using L{_getDeferred}, which destroys the value so the Deferred is not fired twice. Fires when the process is terminated. Nr(c$|jdc}|_|SNdeferredr9ds r) _getDeferredz$ConchTestOpenSSHProcess._getDeferred=$4=r(c&|xj|z c_dSr_)bufrWs r) outReceivedz#ConchTestOpenSSHProcess.outReceiveds Dr(c&|xj|z c_dSr_)problemsrWs r) errReceivedz#ConchTestOpenSSHProcess.errReceiveds  r(c |jjdkrl|t d|jj|jddS|j dd}| |dS)z~ Called when the process has ended. @param reason: a Failure giving the reason for the process' end. rzexit code was not 0: {} ({})charmaps rSN) valueexitCoderderrbackrformatrjdecodergreplacecallback)r9rPrgs r) processEndedz$ConchTestOpenSSHProcess.processEndeds < A % %      ' '299 - ,,Y77     (""7E22C      ( ( - - - - -r() r$r%r&r;rargrjrdrhrkrur'r(r)r]r]skH CH.....r(r]cFeZdZdZdZdZdZdZdZdZ dZ d Z d Z dS) ConchTestForwardingProcessa Manages a third-party process which launches a server. Uses L{ConchTestForwardingPort} to connect to the third-party server. Once L{ConchTestForwardingPort} has disconnected, kill the process and fire a Deferred with the data received by the L{ConchTestForwardingPort}. @ivar deferred: Set by whatever uses this object. Accessed using L{_getDeferred}, which destroys the value so the Deferred is not fired twice. Fires when the process is terminated. Nc0||_d|_||_dS)aF @type port: L{int} @param port: The port on which the third-party server is listening. (it is assumed that the server is running on localhost). @type data: L{str} @param data: This is sent to the third-party server. Must end with ' ' in order to trigger a disconnect. N)portbufferrX)r9ryrXs r)__init__z#ConchTestForwardingProcess.__init__s   r(c$|jdc}|_|Sr_r`rbs r)rdz'ConchTestForwardingProcess._getDeferredrer(c.|dSr_)_connectr8s r)rLz)ConchTestForwardingProcess.connectionMades r(ctjtt||j}|d|j}||j|S)a Connect to the server, which is often a third-party process. Tries to reconnect if it fails because we have no way of determining exactly when the port becomes available for listening -- we can only know when the process starts. 127.0.0.1) r ClientCreatorrConchTestForwardingPortrX connectTCPry addErrback _ebConnect)r9ccrcs r)r~z#ConchTestForwardingProcess._connectsK #G-DdDI V V MM+ty 1 1 T_%%%r(c:tjd|jdS)Ng?)r callLaterr~)r9fs r)rz%ConchTestForwardingProcess._ebConnects#t}-----r(c||_|jd|jt jd|jdS)z The network connection has died; save the buffer of output from the network and attempt to quit the process gracefully, and then (after the reactor has spun) send it a KILL signal. rN)rzrTrUrVrr _reallyDie)r9rzs r)forwardingPortDisconnectedz5ConchTestForwardingProcess.forwardingPortDisconnectedsP   W%%% %%'''!T_-----r(c^ |jddS#t$rYdSwxYw)NKILL)rT signalProcessrr8s r)rz%ConchTestForwardingProcess._reallyDiesE  N ( ( 0 0 0 0 0#    DD s  ,,c^||jdS)z Fire the Deferred at self.deferred with the data collected from the L{ConchTestForwardingPort} connection, if any. N)rdrtrzrOs r)ruz'ConchTestForwardingProcess.processEndeds, $$T[11111r() r$r%r&r;rar{rdrLr~rrrrur'r(r)rwrws  H      ... . . . 22222r(rwc*eZdZdZdZdZdZdZdS)rz Connects to server launched by a third-party process (managed by L{ConchTestForwardingProcess}) sends data, then reports whatever it received back to the L{ConchTestForwardingProcess} once the connection is ended. c"||_||_dS)z @type protocol: L{ConchTestForwardingProcess} @param protocol: The L{ProcessProtocol} which made this connection. @type data: str @param data: The data to be sent to the third-party server. N)rrX)r9rrXs r)r{z ConchTestForwardingPort.__init__ s!  r(cRd|_|j|jdS)Nr()rzrTrUrXr8s r)rLz&ConchTestForwardingPort.connectionMades'  TY'''''r(c&|xj|z c_dSr_)rzrWs r)rYz$ConchTestForwardingPort.dataReceiveds t r(cD|j|jdSr_)rrrzrOs r)rQz&ConchTestForwardingPort.connectionLosts  00=====r(N)r$r%r&r;r{rLrYrQr'r(r)rrsZ   (((>>>>>r(rconchctjd|zg}g}|t|zD]A}t|tr|d}||B|S)Na$-c ### Twisted Preamble import sys, os path = os.path.abspath(sys.argv[0]) while os.path.dirname(path) != path: if os.path.basename(path).startswith('Twisted'): sys.path.insert(0, path) break path = os.path.dirname(path) from twisted.conch.scripts.%s import run run()utf-8)sys executablelist isinstancestrencodeappend)argsmodstartmadeArgsargs r) _makeArgsrs{     E"HtDzz! c3   &**W%%C Or(cJeZdZesdZedZdZdZdZ dZ dZ dS) ConchServerSetupMixinzcan't run without cryptographyc tdS)Nstestuserr r'r(r) realmFactoryz"ConchServerSetupMixin.realmFactory=sk***r(cdD]5}tj|rtj|6t dd5}|t dddn #1swxYwYt dd5}|tdddn #1swxYwYt dd5}|tdddn #1swxYwYt dd5}|tdddn #1swxYwYtj ddtj ddtd }|j js |jjrt!dt d d5}|d tzddddS#1swxYwYdS) N)rsa_test rsa_test.pubdsa_test dsa_test.pubkh_testrwbrrrizgprivate key readable by others despite chmod; possible windows permission issue? see https://tm.tl/9767rs 127.0.0.1 )ospathexistsremoveopenrUrr r rchmodrgetPermissionsgroupreadotherr)r9r permissionss r) _createFilesz"ConchServerSetupMixin._createFilesAsT  Aw~~a    ! *d # # (q GG& ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( .$ ' ' '1 GG% & & & ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' .$ ' ' '1 GG% & & & ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' *d # # (q GG& ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( U### U###z**99;;   ! [%6%; *  )T " " 7a GGM$55 6 6 6 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7sZ A00A47A4 B22B69B6 C44C8;C8D66D:=D:G..G25G2ctj}|d|d}||S)N)r)r,r. getsocknamer0)r9srys r) _getFreePortz"ConchServerSetupMixin._getFreePortYs@ MOO w}}q!   r(c|}tj|}|t t }||_|S)z Make a L{ConchTestServerFactory}, which allows us to start a L{ConchTestServer} -- i.e. an actually listening conch. )rr PortalregisterCheckerrr)r9realmpfactorys r)_makeConchFactoryz'ConchServerSetupMixin._makeConchFactory`sV !!## M%  355666(**r(c|||_d|j_t jd|jd|_t jdt|_|j j |_ trMt jdtd|_ |j j |_dSdS)Nrrr) interfacer+)rr conchFactoryexpectedLoseConnectionr listenTCP conchServerr[ echoServergetHostryechoPortHAS_IPV6 echoServerV6 echoPortV6r8s r)setUpzConchServerSetupMixin.setUpls  2244340", t K   "+A{}}==//116  ? ' 1![]]e T T TD "/7799>DOOO ? ?r(c d|jj_|jjjn#t $rYnwxYwt j|jj t j|j j g}tr1| t j|j j t j|S)Nr)rprotodonerTrVAttributeErrorr maybeDeferredr stopListeningrrrr gatherResults)r9 deferredss r)tearDownzConchServerSetupMixin.tearDownys ?+,D  # (   # - < < > > > >    D    0 > ? ?   = > >   S   U01B1PQQ R R R"9---s7 AAN) r$r%r&rrF staticmethodrrrrrrr'r(r)rr9s 0/++\+7770    ? ? ? . . . . .r(rc$eZdZdZdZdZdZdS)ForwardingMixina Template class for tests of the Conch server's ability to forward arbitrary protocols over SSH. These tests are integration tests, not unit tests. They launch a Conch server, a custom TCP server (just an L{EchoProtocol}) and then call L{execute}. L{execute} is implemented by subclasses of L{ForwardingMixin}. It should cause an SSH client to connect to the Conch server, asking it to forward data to the custom TCP server. c||dt}||jdS)z Test that we can use whatever client to send the command "echo goodbye" to the Conch server. Make sure we receive "goodbye" back from the server. echo goodbyegoodbye executer] addCallback assertEqualrbs r) test_execzForwardingMixin.test_execs5 LL)@)B)B C C}}T-|<<.writesW ABww !&22%~7J((*****%,{{7++%%%%%r(g{Gz?N)rProtocolmakeConnectionr"rrr)r9rTrrUrs ` @r) openShellzRekeyAvatar.openShells!## Y'''  e!4!4555 & & & & & &(5%''** 4r(cdS)z2 Ignore the close of the session. Nr'r8s r)closedzRekeyAvatar.closedsr(cdSr_r'r8s r)rAzRekeyAvatar.eofReceived r(cdSr_r')r9rcommands r) execCommandzRekeyAvatar.execCommandr r(cdSr_r')r9term windowSizemodess r)getPtyzRekeyAvatar.getPtyr r(cdSr_r')r9 newWindowSizes r) windowChangedzRekeyAvatar.windowChangedr r(N) r$r%r&r;r{r r rArrrr'r(r)rrs444B                 r(rceZdZdZdZdS) RekeyRealmzS This realm gives out new L{RekeyAvatar} instances for any avatar request. c2|dtdfS)NrcdSr_r'r'r(r)z*RekeyRealm.requestAvatar.. sTr()r)r9avatarIDmind interfacess r) requestAvatarzRekeyRealm.requestAvatar s!}kmm\\99r(N)r$r%r&r;r!r'r(r)rrs-:::::r(rceZdZdZeZdZdS)RekeyTestsMixinzp TestCase mixin which defines tests exercising L{SSHTransportBase}'s handling of rekeying messages. ct}d|d}fd}|||S)z After a client-initiated rekey is completed, application data continues to be passed over the SSH connection. rz-o RekeyLimit=2KcddtdDdz}|d}||dS)N cg|]}d|fz S)z line #%02dr').0rs r) zFRekeyTestsMixin.test_clientRekey..finished..s'O'O'O t(;'O'O'Or(rr)joinrangerr)resultexpectedResultr9s r)finishedz2RekeyTestsMixin.test_clientRekey..finisheds^!YY'O'OU2YY'O'O'OPPSWWN+227;;N   V^ 4 4 4 4 4r()r]rr)r9rrcr.s` r)test_clientRekeyz RekeyTestsMixin.test_clientRekeysX *++ LLW&8 9 9 5 5 5 5 5 hr(N)r$r%r&r;rrr/r'r(r)r#r# s4 Lr(r#c0eZdZedsdZddZdS)OpenSSHClientMixinsshz$no ssh command-line client availablercttddd}fd}||S)a Connects to the SSH server started in L{ConchServerSetupMixin.setUp} by running the 'ssh' command line tool. @type remoteCommand: str @param remoteCommand: The command (with arguments) to run on the remote end. @type process: L{ConchTestOpenSSHProcess} @type sshArgs: str @param sshArgs: Arguments to pass to the 'ssh' process. @return: L{defer.Deferred} r2r)z-ozPubkeyAcceptedKeyTypes=ssh-dssz-Vc|dkrd}nd}tj_d|z zdzz} jj}||z}g}|D]A}t|tr| d}| |Btj tdd|jS)Nrz!-oPubkeyAcceptedKeyTypes=ssh-dss rzssh -2 -l testuser -p %i -F /dev/null -oUserKnownHostsFile=kh_test -oPasswordAuthentication=no -oHostKeyAlgorithms=ssh-rsa -a -i dsa_test 127.0.0.1 rr2)rDeferredrarrrysplitrrrrr spawnProcessr) statusoptscmdlinerycmds encodedCmdscmdr remoteCommandr9rs r)hasPAKTz+OpenSSHClientMixin.execute..hasPAKTBs{{:$~//G  #          #++--2DdN))++DK ( (c3''.**W--C""3''''  %,,q/; G G G# #r()rrr)r9r?rrrcr@s```` r)rzOpenSSHClientMixin.execute*sd(  %LLOK  " $" $" $" $" $" $" $" $H}}W%%%r(N)r)r$r%r&rrFrr'r(r)r1r1&s= 5<<65<&<&<&<&<&<&r(r1cBeZdZdZdZdZdZdZdZdZ dZ d Z d S) OpenSSHKeyExchangeTestsz\ Tests L{SSHTransportBase}'s key exchange algorithm compatibility with OpenSSH. cg} tjtddddgtj}t |t s|d}|}n#t$rYnwxYw||vrt|d| dtd |z}| |j d S) aI Call execute() method of L{OpenSSHClientMixin} with an ssh option that forces the exclusive use of the key exchange algorithm specified by keyExchangeAlgo @type keyExchangeAlgo: L{str} @param keyExchangeAlgo: The key exchange algorithm to use @return: L{defer.Deferred} r2rz-Qkex)stderrrz not supported by ssh clientz echo helloz-oKexAlgorithms=shello ) subprocess check_outputrSTDOUTrrrrr7 BaseExceptionrrr]rr)r9keyExchangeAlgo kexAlgorithmsoutputrcs r)assertExecuteWithKexAlgorithmz5OpenSSHKeyExchangeTests.assertExecuteWithKexAlgorithmos  ,ua$.z7HFfc** 0w//"LLNNMM    D  - / /oKKKLL L LL  # % %  0   }}T-z:::sA4A99 BBc,|dS)zb The ecdh-sha2-nistp256 key exchange algorithm is compatible with OpenSSH zecdh-sha2-nistp256rMr8s r)test_ECDHSHA256z'OpenSSHKeyExchangeTests.test_ECDHSHA256 112FGGGr(c,|dS)zb The ecdh-sha2-nistp384 key exchange algorithm is compatible with OpenSSH zecdh-sha2-nistp384rOr8s r)test_ECDHSHA384z'OpenSSHKeyExchangeTests.test_ECDHSHA384rQr(c,|dS)zb The ecdh-sha2-nistp521 key exchange algorithm is compatible with OpenSSH zecdh-sha2-nistp521rOr8s r)test_ECDHSHA521z'OpenSSHKeyExchangeTests.test_ECDHSHA521rQr(c,|dS)zl The diffie-hellman-group14-sha1 key exchange algorithm is compatible with OpenSSH. zdiffie-hellman-group14-sha1rOr8s r)test_DH_GROUP14z'OpenSSHKeyExchangeTests.test_DH_GROUP14s 112OPPPr(c,|dS)zs The diffie-hellman-group-exchange-sha1 key exchange algorithm is compatible with OpenSSH. z"diffie-hellman-group-exchange-sha1rOr8s r)test_DH_GROUP_EXCHANGE_SHA1z3OpenSSHKeyExchangeTests.test_DH_GROUP_EXCHANGE_SHA1s 112VWWWr(c,|dS)zu The diffie-hellman-group-exchange-sha256 key exchange algorithm is compatible with OpenSSH. z$diffie-hellman-group-exchange-sha256rOr8s r)test_DH_GROUP_EXCHANGE_SHA256z5OpenSSHKeyExchangeTests.test_DH_GROUP_EXCHANGE_SHA256s 11 2   r(cH|t|jddS)zy The list of key exchange algorithms supported by OpenSSH client is obtained with C{ssh -Q kex}. zunsupported-algorithmN) assertRaisesrrMr8s r)test_unsupported_algorithmz2OpenSSHKeyExchangeTests.test_unsupported_algorithms1  d8:Q     r(N) r$r%r&r;rMrPrSrUrWrYr[r^r'r(r)rBrBis ;;;@HHHHHHHHHQQQXXX        r(rBc>eZdZdZee ddZdS)OpenSSHClientForwardingTestszR Connection forwarding tests run against the OpenSSL command line client. zRequires IPv6 supportc|}t|d}|d|d||jfz}||jd|S)zG Forwarding of arbitrary IPv6 TCP connections via SSH. rrz-N -L%i:[::1]:%ir)rrwrrrrrs r)test_localToRemoteForwardingV6z;OpenSSHClientForwardingTests.test_localToRemoteForwardingV6sn %%'' ,Y BB LL !3y$/6R!R    d& 222r(N)r$r%r&r;rrrbr'r(r)r`r`sI VL122  32   r(r`ceZdZdZdS)OpenSSHClientRekeyTestszE Rekeying tests run against the OpenSSL command line client. N)r$r%r&r;r'r(r)rdrdsr(rdc@eZdZdZejdkrdZd dZdZdZ dS) CmdLineClientTestszP Connection forwarding tests run against the Conch command line client. win32z!can't run cmdline client on win32rNc<|g}tj|_|jj}d||zdz|z}t||z}tj }tj tj|d<g} i} |D]A}t!|t"r|d}| |B|D]c} || } t!| t"r| d} t!| t"r| d} | | | <dt)j|tj| | |jS)z{ As for L{OpenSSHClientTestCase.execute}, except it runs the 'conch' command line tool, not 'ssh'. Nz[-p {} -l testuser --known-hosts kh_test --user-authentications publickey -a -i dsa_test -v r5 PYTHONPATHr)env)rr6rarrryrqrr7renvironcopypathsepr*rrrrrrrr8r) r9r?rr conchArgsryr>r<rjr= encodedEnvvarvals r)rzCmdLineClientTests.executes  I >++'')).  &,,  ) ,9  9 .cb_check_logs. ++--J MM.* 5 5 5 5 5r(rz--logz --logfilez--host-key-algorithmszssh-rsa)r?rrnr)rrmktemprr]rrr)r9rxrcrws` @r)test_runWithLogFilez&CmdLineClientTests.test_runWithLogFile s  6 6 6 6 6 6#DKKMM22 LL(+-- '    d& 555 l###r(c|dt}||jd|S)zH Do not use --host-key-algorithms flag on command line. r)r?rrrrbs r)%test_runWithNoHostAlgorithmsSpecifiedz8CmdLineClientTests.test_runWithNoHostAlgorithmsSpecified&sF LL(2I2K2K    d& 555r()rN) r$r%r&r;r platformTyperFrrzr|r'r(r)rfrfsfw&&2# # # # J6     r(rf)r)Trr,rFr itertoolsrunittestrzope.interfacertwisted.conch.errorrtwisted.conch.test.keydatarrr r twisted.conch.test.test_sshr twisted.credr twisted.internetrrrtwisted.internet.errorrtwisted.internet.taskrtwisted.internet.utilsrtwisted.pythonrrrtwisted.python.filepathrtwisted.python.procutilsrtwisted.python.reflectrtwisted.trial.unittestrrrr ImportErrorrtwisted.conch.avatarrtwisted.conch.ssh.sessionr r!r"twisted.conch.interfacestwisted.conch.scripts.conch_StdioInteractingSessionr?errEr3rr5r=rrHFactoryr[ProcessProtocolr]rwrrrrrrr#r1rBr`rdrfr'r(r)rsD   &&&&&&****** 7666665555555555777777------2222221111111111,,,,,,******00000055555555    D }^,,  ......LLLLLLLLLLL111111        7RRRRRR 7    "c!ffG  " 9;;""""""""$-----8---( , , , , ,8  , , ,("(.(.(.(.(.h6(.(.(.VI2I2I2I2I2!9I2I2I2X>>>>>h/>>><4M.M.M.M.M.M.M.M.`/////+///l XA A A A A )A A A H::::::::+2@&@&@&@&@&@&@&@&FY Y Y Y Y 35GY Y Y x?4F&o/A8 QQQQQ(QQQQQs*B BBCC.C))C.