def test_pins_valid(self):
p = policy.Policy({}, pinsets={'valid': {}})
with self.assertRaises(util.ConfigError):
p.pin = 'invalid'
with self.assertRaises(util.ConfigError):
policy.Policy({'pin': 'invalid'}, pinsets={'valid': {}})
p.pin = 'valid'
self.assertEqual(p.pin, 'valid')
def test_mode_valid(self):
p = policy.Policy({})
with self.assertRaises(util.ConfigError):
policy.Policy({'mode': 'none'})
with self.assertRaises(util.ConfigError):
p.mode = 'none'
p.mode = 'enforce'
self.assertEqual(p.mode, 'enforce')
def test_tls_version_valid(self):
with self.assertRaises(util.ConfigError):
policy.Policy({'min-tls-version': 'SSLv3'})
p = policy.Policy({})
with self.assertRaises(util.ConfigError):
p.min_tls_version = 'SSLv3'
p.min_tls_version = 'TLSv1.1'
self.assertEqual(p.min_tls_version, 'TLSv1.1')
def test_alias_valid(self):
p = policy.Policy({}, aliases={'valid': self.sample_policy})
with self.assertRaises(util.ConfigError):
p.policy_alias = 'invalid'
with self.assertRaises(util.ConfigError):
policy.Policy({'policy-alias': 'invalid'},
aliases={'valid': self.sample_policy})
p.policy_alias = 'valid'
self.assertEqual(p.policy_alias, 'valid')
def test_mta_sts(self):
p = policy.Policy({})
with self.assertRaises(util.ConfigError):
p.mta_sts = 'yes'
self.assertFalse(p.mta_sts)
p.mta_sts = True
self.assertTrue(p.mta_sts)
def test_mxs(self):
p = policy.Policy({})
with self.assertRaises(util.ConfigError):
p.mxs = [True]
with self.assertRaises(util.ConfigError):
p.mxs = True
self.assertEqual(len(p.mxs), 0)
p.mxs = ['eff.org', '.eff.org']
self.assertEqual(p.mxs, ['eff.org', '.eff.org'])
def test_mode_default(self):
p = policy.Policy({})
self.assertEqual(p.mode, 'testing')
def test_update_drops_old_mxs(self):
p = policy.Policy({'mxs': ['eff.org']})
new_conf = p.update(policy.Policy({'mxs': ['example.com']}))
self.assertFalse('eff.org' in new_conf.mxs)
self.assertTrue('example.com' in new_conf.mxs)
def test_merge_keeps_old_mxs(self):
p = policy.Policy({'mxs': ['eff.org']})
new_conf = p.merge(policy.Policy({'mxs': ['example.com']}))
self.assertTrue('eff.org' in new_conf.mxs)
self.assertTrue('example.com' in new_conf.mxs)
def test_tls_report(self):
p = policy.Policy({})
with self.assertRaises(util.ConfigError):
p.tls_report = False
p.tls_rpt = 'https://fake.reporting.endpoint'
self.assertEqual(p.tls_rpt, 'https://fake.reporting.endpoint')
def test_tls_version_default(self):
p = policy.Policy({})
self.assertEqual(p.min_tls_version, 'TLSv1.2')
