示例#1
0
    def testPreloadedCertificates(self):
        self.loadParcel("osaf.framework.certstore.data")

        view = self.view
        rootCerts = FilteredCollection(
            'rootCertsQuery',
            itsView=view,
            source=utils.getExtent(certificate.Certificate, view, exact=True),
            filterExpression=u"view.findValue(uuid, 'purpose') & %d" %
            constants.PURPOSE_CA,
            filterAttributes=['purpose'])

        now = time.gmtime()
        format = '%b %d %H:%M:%S %Y %Z'

        self.assert_(not rootCerts.isEmpty())

        for cert in rootCerts:
            x509 = cert.asX509()
            self.assertTrue(x509.verify())

            # verify() should have caught bad times, but just in case:
            before = x509.get_not_before()
            after = x509.get_not_after()
            try:
                self.assert_(
                    time.strptime(str(before), format) < now,
                    '%s not yet valid:%s' % (cert.displayName, before))
                self.assert_(now < time.strptime(str(after), format),
                             '%s expired:%s' % (cert.displayName, after))
            except ValueError:
                raise ValueError('bad time value in ' +
                                 cert.displayName.encode('utf8'))

            self.assertTrue(len(cert.displayName) > 0)
            self.assertTrue(cert.purpose & constants.PURPOSE_CA,
                            cert.getAsTextAsString())
            self.assertTrue(cert.trust == constants.TRUST_AUTHENTICITY
                            | constants.TRUST_SERVER)
            self.assertTrue(cert.fingerprintAlgorithm == 'sha1')
            self.assertTrue(len(cert.fingerprint) > 3)
            self.assertTrue(cert.asTextAsString[:12] == 'Certificate:')

            self.assertTrue(
                certificate.certificatePurpose(x509) & constants.PURPOSE_CA,
                cert.getAsTextAsString())
示例#2
0
def installParcel(parcel, oldVersion=None):
    # load our subparcels
    from application import schema
    schema.synchronize(parcel.itsView, "osaf.framework.certstore.data")
    schema.synchronize(parcel.itsView, "osaf.framework.certstore.blocks")

    from osaf.pim.collections import FilteredCollection
    import certificate, utils

    FilteredCollection.update(parcel, 'sslCertificateQuery',
        source=utils.getExtent(certificate.Certificate, parcel.itsView),
        filterMethod=(TrustedCACertsFilter(None, parcel), 'isTrustedCACert'),
        filterAttributes=['purpose', 'trust']
    )
    
    FilteredCollection.update(parcel, 'sslTrustedServerCertificatesQuery',
        source=utils.getExtent(certificate.Certificate, parcel.itsView),
        filterMethod=(TrustedServerCertsFilter(None, parcel),
                      'isTrustedServerCert'),
        filterAttributes=['purpose', 'trust']
    )
def installParcel(parcel, oldVersion=None):
    # load our subparcels
    from application import schema
    schema.synchronize(parcel.itsView, "osaf.framework.certstore.data")
    schema.synchronize(parcel.itsView, "osaf.framework.certstore.blocks")

    from osaf.pim.collections import FilteredCollection
    import certificate, utils

    FilteredCollection.update(parcel,
                              'sslCertificateQuery',
                              source=utils.getExtent(certificate.Certificate,
                                                     parcel.itsView),
                              filterMethod=(TrustedCACertsFilter(None, parcel),
                                            'isTrustedCACert'),
                              filterAttributes=['purpose', 'trust'])

    FilteredCollection.update(parcel,
                              'sslTrustedServerCertificatesQuery',
                              source=utils.getExtent(certificate.Certificate,
                                                     parcel.itsView),
                              filterMethod=(TrustedServerCertsFilter(
                                  None, parcel), 'isTrustedServerCert'),
                              filterAttributes=['purpose', 'trust'])
示例#4
0
    def testPreloadedCertificates(self):
        self.loadParcel("osaf.framework.certstore.data")
        
        view = self.view
        rootCerts = FilteredCollection('rootCertsQuery',
                                       itsView=view,
                                       source=utils.getExtent(certificate.Certificate, view, exact=True),
                                       filterExpression=u"view.findValue(uuid, 'purpose') & %d" % constants.PURPOSE_CA,
                                       filterAttributes=['purpose'])
            
        now = time.gmtime()
        format = '%b %d %H:%M:%S %Y %Z'

        self.assert_(not rootCerts.isEmpty())

        for cert in rootCerts:
            x509 = cert.asX509()
            self.assertTrue(x509.verify())
                
            # verify() should have caught bad times, but just in case:
            before = x509.get_not_before()
            after = x509.get_not_after()
            try:
                self.assert_(time.strptime(str(before), format) < now, '%s not yet valid:%s' % (cert.displayName, before))
                self.assert_(now < time.strptime(str(after), format), '%s expired:%s' % (cert.displayName, after))
            except ValueError:
                raise ValueError('bad time value in ' + cert.displayName.encode('utf8'))
        
            self.assertTrue(len(cert.displayName) > 0)
            self.assertTrue(cert.purpose & constants.PURPOSE_CA, cert.getAsTextAsString())
            self.assertTrue(cert.trust == constants.TRUST_AUTHENTICITY | constants.TRUST_SERVER)
            self.assertTrue(cert.fingerprintAlgorithm == 'sha1')
            self.assertTrue(len(cert.fingerprint) > 3)
            self.assertTrue(cert.asTextAsString[:12] == 'Certificate:')            
    
            self.assertTrue(certificate.certificatePurpose(x509) & constants.PURPOSE_CA, cert.getAsTextAsString())
示例#5
0
    def _importAndFind(self, pem, trust):
        x509 = X509.load_cert_string(pem)
        fingerprint = utils.fingerprint(x509)
        certificate.importCertificate(x509, fingerprint, trust, self.view)

        view = self.view

        matchingCerts = FilteredCollection(
            'fpCertQuery' + fingerprint,
            itsView=view,
            source=utils.getExtent(certificate.Certificate, view, exact=True),
            filterExpression=u"view.findValue(uuid, 'fingerprint') == '%s'" %
            fingerprint,
            filterAttributes=['fingerprint'])

        self.assert_(len(matchingCerts) == 1)

        return iter(matchingCerts).next()
示例#6
0
def installParcel(parcel, oldVersion=None):

    rv = parcel.itsView

    SharingPreferences.update(parcel, "prefs")

    # Even though we're not using this at the moment, I'm leaving it here
    # because people's personal parcels refer to this and we'll probably
    # resurrect this someday:
    Reference.update(parcel, "currentSharingAccount")

    SyncPeriodicTask.update(
        parcel,
        "sharingTask",
        invoke="osaf.sharing.BackgroundSyncHandler",
        run_at_startup=False,
        active=True,
        interval=datetime.timedelta(minutes=15),
    )

    # Make a collection of all Notes with an icalUID, so that
    # we can index it.
    filterAttribute = pim.Note.icalUID.name
    iCalendarItems = FilteredCollection.update(
        parcel,
        "iCalendarItems",
        source=schema.ns("osaf.pim", rv).noteCollection,
        filterExpression="view.hasTrueValues(uuid, '%s')" % (filterAttribute,),
        filterAttributes=[filterAttribute],
    )
    iCalendarItems.addIndex("icalUID", "value", attribute=filterAttribute)

    # Make a collection used to let the main ui view know what new shared
    # inbound occurrences have come in so that OnIdle can check for duplicate
    # recurrenceIDs (via the processSharingQueue function below):
    pim.ListCollection.update(parcel, "newItems")

    if not Globals.options.reload:
        prepareAccounts(rv)
示例#7
0
def installParcel(parcel, oldVersion=None):

    rv = parcel.itsView

    SharingPreferences.update(parcel, "prefs")

    # Even though we're not using this at the moment, I'm leaving it here
    # because people's personal parcels refer to this and we'll probably
    # resurrect this someday:
    Reference.update(parcel, 'currentSharingAccount')

    SyncPeriodicTask.update(parcel,
                            "sharingTask",
                            invoke="osaf.sharing.BackgroundSyncHandler",
                            run_at_startup=False,
                            active=True,
                            interval=datetime.timedelta(minutes=15))

    # Make a collection of all Notes with an icalUID, so that
    # we can index it.
    filterAttribute = pim.Note.icalUID.name
    iCalendarItems = FilteredCollection.update(
        parcel,
        'iCalendarItems',
        source=schema.ns('osaf.pim', rv).noteCollection,
        filterExpression="view.hasTrueValues(uuid, '%s')" %
        (filterAttribute, ),
        filterAttributes=[filterAttribute])
    iCalendarItems.addIndex('icalUID', 'value', attribute=filterAttribute)

    # Make a collection used to let the main ui view know what new shared
    # inbound occurrences have come in so that OnIdle can check for duplicate
    # recurrenceIDs (via the processSharingQueue function below):
    pim.ListCollection.update(parcel, 'newItems')

    if not Globals.options.reload:
        prepareAccounts(rv)