dnspython-2.1.0/tests/test_dnssec.py

20 import dns.dnssec
262 @unittest.skipUnless(dns.dnssec._have_pyca,
267         dns.dnssec.validate(rsamd5_ns, rsamd5_ns_rrsig, rsamd5_keys, None,
271         self.assertEqual(dns.dnssec.key_id(rsamd5_keys[abs_example][0]), 30239)
272         self.assertEqual(dns.dnssec.key_id(rsamd5_keys[abs_example][1]), 62992)
275         dns.dnssec.validate(abs_soa, abs_soa_rrsig, abs_keys, None, when)
278         dns.dnssec.validate(abs_soa, abs_soa_rrsig, abs_keys_duplicate_keytag, None, when)
282             dns.dnssec.validate(abs_other_soa, abs_soa_rrsig, abs_keys, None,
284         self.assertRaises(dns.dnssec.ValidationFailure, bad)
287         dns.dnssec.validate(rel_soa, rel_soa_rrsig, rel_keys,
290         dns.dnssec.validate(rel_soa, rel_soa_rrsig, rel_keys,
295             dns.dnssec.validate(rel_other_soa, rel_soa_rrsig, rel_keys,
297         self.assertRaises(dns.dnssec.ValidationFailure, bad)
300         dns.dnssec.validate(abs_dsa_soa, abs_dsa_soa_rrsig, abs_dsa_keys, None,
305             dns.dnssec.validate(abs_other_dsa_soa, abs_dsa_soa_rrsig,
307         self.assertRaises(dns.dnssec.ValidationFailure, bad)
310         dns.dnssec.validate(abs_ecdsa256_soa, abs_ecdsa256_soa_rrsig,
315             dns.dnssec.validate(abs_other_ecdsa256_soa, abs_ecdsa256_soa_rrsig,
317         self.assertRaises(dns.dnssec.ValidationFailure, bad)
320         dns.dnssec.validate(abs_ecdsa384_soa, abs_ecdsa384_soa_rrsig,
325             dns.dnssec.validate(abs_other_ecdsa384_soa, abs_ecdsa384_soa_rrsig,
327         self.assertRaises(dns.dnssec.ValidationFailure, bad)
330         dns.dnssec.validate(abs_ed25519_mx, abs_ed25519_mx_rrsig_1,
332         dns.dnssec.validate(abs_ed25519_mx, abs_ed25519_mx_rrsig_2,
336         with self.assertRaises(dns.dnssec.ValidationFailure):
337             dns.dnssec.validate(abs_other_ed25519_mx, abs_ed25519_mx_rrsig_1,
339         with self.assertRaises(dns.dnssec.ValidationFailure):
340             dns.dnssec.validate(abs_other_ed25519_mx, abs_ed25519_mx_rrsig_2,
344         dns.dnssec.validate(abs_ed448_mx, abs_ed448_mx_rrsig_1,
346         dns.dnssec.validate(abs_ed448_mx, abs_ed448_mx_rrsig_2,
350         with self.assertRaises(dns.dnssec.ValidationFailure):
351             dns.dnssec.validate(abs_other_ed448_mx, abs_ed448_mx_rrsig_1,
353         with self.assertRaises(dns.dnssec.ValidationFailure):
354             dns.dnssec.validate(abs_other_ed448_mx, abs_ed448_mx_rrsig_2,
358         dns.dnssec.validate(rsasha512_ns, rsasha512_ns_rrsig, rsasha512_keys,
362         dns.dnssec.validate(wildcard_txt, wildcard_txt_rrsig,
371         dns.dnssec.validate(a_txt, a_txt_rrsig, wildcard_keys, None,
377         dns.dnssec.validate(abc_txt, abc_txt_rrsig, wildcard_keys, None,
383         with self.assertRaises(dns.dnssec.ValidationFailure):
384             dns.dnssec.validate_rrsig(com_txt, com_txt_rrsig[0], wildcard_keys,
391         dns.dnssec.validate(rrset, rrsigset, abs_keys, None, when)
398         dns.dnssec.validate(abs_soa, abs_soa_rrsig, keys, None, when)
403         with self.assertRaises(dns.dnssec.ValidationFailure):
404             dns.dnssec.validate(abs_soa, abs_soa_rrsig, keys, None, when)
407         dns.dnssec.validate(rel_soa, rel_soa_rrsig, rel_keys,
409         dns.dnssec.validate_rrsig(rel_soa, rel_soa_rrsig[0], rel_keys,
413         with self.assertRaises(dns.dnssec.ValidationFailure):
414             dns.dnssec.validate(abs_ed448_mx, abs_ed448_mx_rrsig_1, {}, None,
419         with self.assertRaises(dns.dnssec.ValidationFailure):
420             dns.dnssec.validate(abs_ed448_mx, abs_ed448_mx_rrsig_1,
423         with self.assertRaises(dns.dnssec.ValidationFailure):
424             dns.dnssec.validate(abs_ed448_mx, abs_ed448_mx_rrsig_1,
428         with self.assertRaises(dns.dnssec.ValidationFailure):
429             dns.dnssec.validate(abs_ed448_mx, abs_ed448_mx_rrsig_1,
434         with self.assertRaises(dns.dnssec.ValidationFailure):
435             dns.dnssec.validate((bogus, abs_ed448_mx), abs_ed448_mx_rrsig_1,
439         with self.assertRaises(dns.dnssec.ValidationFailure):
440             dns.dnssec.validate(rsasha512_ns, fake_gost_ns_rrsig,
444         with self.assertRaises(dns.dnssec.ValidationFailure):
445             dns.dnssec.validate(rsasha512_ns, unknown_alg_ns_rrsig,
452             dns.dnssec.DSDigest.make(256)
456             dns.dnssec.NSEC3Hash.make(256)
459         self.assertTrue(dns.dnssec._is_gost(dns.dnssec.Algorithm.ECCGOST))
462         with self.assertRaises(dns.dnssec.ValidationFailure):
463             dns.dnssec._make_hash(100)
475         for algorithm in ('SHA1', 'sha1', dns.dnssec.DSDigest.SHA1):
476             ds = dns.dnssec.make_ds(abs_example, example_sep_key, algorithm)
478             ds = dns.dnssec.make_ds('example.', example_sep_key, algorithm)
482         for algorithm in ('SHA256', 'sha256', dns.dnssec.DSDigest.SHA256):
483             ds = dns.dnssec.make_ds(abs_example, example_sep_key, algorithm)
487         for algorithm in ('SHA384', 'sha384', dns.dnssec.DSDigest.SHA384):
488             ds = dns.dnssec.make_ds(abs_example, example_sep_key, algorithm)
492         ds = dns.dnssec.make_ds(abs_dnspython_org, sep_key, 'SHA256')
497             with self.assertRaises(dns.dnssec.UnsupportedAlgorithm):
498                 ds = dns.dnssec.make_ds(abs_example, example_sep_key, algorithm)