Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20 System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64 User : apache ( 48) PHP Version : 7.4.20 Disable Function : NONE Directory : /usr/share/doc/pygpgme-0.3/tests/ |
# pygpgme - a Python wrapper for the gpgme library
# Copyright (C) 2006 James Henstridge
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with this library; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
import unittest
try:
from io import BytesIO
except ImportError:
from StringIO import StringIO as BytesIO
import gpgme
from tests.util import GpgHomeTestCase
# See /usr/share/doc/gnupg/DETAILS.gz
# XXX we are using a passwordless key because the passphrase_cb
# backend seems to be currently broken.
signing_only_param = """
<GnupgKeyParms format="internal">
Key-Type: RSA
Key-Usage: sign
Key-Length: 1024
Name-Real: Testing
Name-Comment: comment
Name-Email: [email protected]
Expire-Date: 0
</GnupgKeyParms>
"""
class GenerateKeyTestCase(GpgHomeTestCase):
def assertCanSign(self, key):
"""Check that the given key can be used to create signatures."""
ctx = gpgme.Context()
ctx.signers = [key]
plaintext = BytesIO(b'Hello World\n')
signature = BytesIO()
ctx.armor = True
new_sigs = ctx.sign(
plaintext, signature, gpgme.SIG_MODE_DETACH)
signature.seek(0)
plaintext.seek(0)
sigs = ctx.verify(signature, plaintext, None)
self.assertEqual(len(sigs), 1)
self.assertEqual(sigs[0].fpr, key.subkeys[0].fpr)
def _test_generate_signing_only_keys(self):
ctx = gpgme.Context()
result = ctx.genkey(signing_only_param)
self.assertEqual(result.primary, True)
self.assertEqual(result.sub, False)
self.assertEqual(len(result.fpr), 40)
# The generated key is part of the current keyring.
key = ctx.get_key(result.fpr, True)
self.assertEqual(key.revoked, False)
self.assertEqual(key.expired, False)
self.assertEqual(key.secret, True)
self.assertEqual(key.protocol, gpgme.PROTOCOL_OpenPGP)
# Single signing-only RSA key.
self.assertEqual(len(key.subkeys), 1)
subkey = key.subkeys[0]
self.assertEqual(subkey.secret, True)
self.assertEqual(subkey.pubkey_algo, gpgme.PK_RSA)
self.assertEqual(subkey.length, 1024)
self.assertEqual(key.can_sign, True)
self.assertEqual(key.can_encrypt, False)
# The only UID available matches the given parameters.
[uid] = key.uids
self.assertEqual(uid.name, 'Testing')
self.assertEqual(uid.comment, 'comment')
self.assertEqual(uid.email, '[email protected]')
# Finally check if the generated key can perform signatures.
self.assertCanSign(key)
def test_invalid_parameters(self):
ctx = gpgme.Context()
try:
ctx.genkey('garbage parameters')
except gpgme.GpgmeError as exc:
self.assertTrue(hasattr(exc, "result"))
result = exc.result
self.assertEqual(result.primary, False)
self.assertEqual(result.sub, False)
self.assertEqual(result.fpr, None)
else:
self.fail("GpgmeError not raised")
def test_suite():
loader = unittest.TestLoader()
return loader.loadTestsFromName(__name__)
if __name__ == '__main__':
unittest.main()