summaryrefslogtreecommitdiffstats
path: root/tests/unit/test_sslutils.py
blob: ce9176f3459342011d4e7a56a831761f42c383a3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# vim: tabstop=4 shiftwidth=4 softtabstop=4

# Copyright 2013 IBM Corp.
#
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.

import ssl

from openstack.common import sslutils
from openstack.common import test


class SSLUtilsTest(test.BaseTestCase):
    def test_valid_versions(self):
        self.assertEquals(sslutils.validate_ssl_version("SSLv3"),
                          ssl.PROTOCOL_SSLv3)
        self.assertEquals(sslutils.validate_ssl_version("SSLv23"),
                          ssl.PROTOCOL_SSLv23)
        self.assertEquals(sslutils.validate_ssl_version("TLSv1"),
                          ssl.PROTOCOL_TLSv1)
        try:
            protocol = ssl.PROTOCOL_SSLv2
        except AttributeError:
            pass
        else:
            self.assertEquals(sslutils.validate_ssl_version("SSLv2"),
                              protocol)

    def test_lowercase_valid_versions(self):
        self.assertEquals(sslutils.validate_ssl_version("sslv3"),
                          ssl.PROTOCOL_SSLv3)
        self.assertEquals(sslutils.validate_ssl_version("sslv23"),
                          ssl.PROTOCOL_SSLv23)
        self.assertEquals(sslutils.validate_ssl_version("tlsv1"),
                          ssl.PROTOCOL_TLSv1)
        try:
            protocol = ssl.PROTOCOL_SSLv2
        except AttributeError:
            pass
        else:
            self.assertEquals(sslutils.validate_ssl_version("sslv2"),
                              protocol)

    def test_invalid_version(self):
        self.assertRaises(RuntimeError,
                          sslutils.validate_ssl_version,
                          "v3")

        # Some distributions do not have SSLv2 enabled, make sure
        # we throw a runtime error
        try:
            ssl.PROTOCOL_SSLv2
        except AttributeError:
            self.assertRaises(RuntimeError,
                              sslutils.validate_ssl_version,
                              "SSLv2")