1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
# SPDX-License-Identifier: Apache-2.0
import os
import pytest
from global_flags import set_flag, S2N_PROVIDER_VERSION, S2N_FIPS_MODE
from providers import S2N, JavaSSL
PATH_CONFIGURATION_KEY = pytest.StashKey()
def available_providers():
"""
1. determine available providers
2. modify PATH to make the providers available
Currently only supports s2nc/s2nd and the Java SSL client.
"""
providers = set()
# s2n-tls MUST be available, and we expect it to be in
# <git_root>/build/bin
expected_location = os.path.abspath("../../build/bin")
for binary in ["s2nd", "s2nc"]:
bin_path = f"{expected_location}/{binary}"
if not os.path.exists(bin_path):
pytest.fail(f"unable to locate {binary}")
os.environ['PATH'] += os.pathsep + expected_location
providers.add(S2N)
if os.path.exists("./bin/SSLSocketClient.class"):
providers.add(JavaSSL)
return providers
def pytest_addoption(parser: pytest.Parser):
parser.addoption("--provider-version", action="store", dest="provider-version",
default=None, type=str, help="Set the version of the TLS provider")
parser.addoption(
"--best-effort-NOT-FOR-CI",
action="store_true",
default=False,
help="""If enabled, run as many tests are possible
for the discovered providers, and skip any providers
that aren't available""",
)
def pytest_configure(config: pytest.Config):
"""
pytest hook that adds the function to deselect tests if the parameters
don't makes sense.
This is executed once per pytest session on process startup.
"""
config.addinivalue_line(
"markers", "uncollect_if(*, func): function to unselect tests from parametrization"
)
if config.getoption("--best-effort-NOT-FOR-CI"):
config.stash[PATH_CONFIGURATION_KEY] = available_providers()
provider_version = config.getoption('provider-version', None)
# By default, any libcrypto with "fips" in its name should be in fips mode.
# However, s2n-tls no longer supports fips mode with openssl-1.0.2-fips.
if "fips" in provider_version and "openssl-1.0.2-fips" not in provider_version:
set_flag(S2N_FIPS_MODE, True)
set_flag(S2N_PROVIDER_VERSION, provider_version)
def pytest_collection_modifyitems(config, items):
"""
pytest hook to modify the test arguments to call the uncollect function.
"""
removed = []
kept = []
for item in items:
m = item.get_closest_marker('uncollect_if')
if m:
func = m.kwargs['func']
if func(**item.callspec.params):
removed.append(item)
continue
kept.append(item)
if removed:
config.hook.pytest_deselected(items=removed)
items[:] = kept
|
