1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
# pylint: disable=missing-docstring
import os
import threading
from http.server import HTTPServer, SimpleHTTPRequestHandler
from ssl import PROTOCOL_TLS_SERVER, SSLContext
import pytest
from requests.exceptions import SSLError
from ibm_cloud_sdk_core.base_service import BaseService
from ibm_cloud_sdk_core.authenticators import NoAuthAuthenticator
# The certificate files that are used in this tests are generated by this command:
# openssl req \
# -new \
# -newkey rsa:4096 \
# -days 36500 \
# -nodes \
# -x509 \
# -subj "/C=US/CN=localhost" \
# -keyout test_ssl.key \
# -out test_ssl.cert
def test_ssl_verification():
# Load the certificate and the key files.
cert = os.path.join(os.path.dirname(__file__), '../resources/test_ssl.cert')
key = os.path.join(os.path.dirname(__file__), '../resources/test_ssl.key')
# Build the SSL context for the server.
ssl_context = SSLContext(PROTOCOL_TLS_SERVER)
ssl_context.load_cert_chain(certfile=cert, keyfile=key)
# Create and start the server on a separate thread.
server = HTTPServer(('127.0.0.1', 3333), SimpleHTTPRequestHandler)
server.socket = ssl_context.wrap_socket(server.socket, server_side=True)
t = threading.Thread(target=server.serve_forever)
t.start()
# We run everything in a big try-except-finally block to make sure we always
# shutdown the HTTP server gracefully.
try:
service = BaseService(service_url='https://127.0.0.1:3333', authenticator=NoAuthAuthenticator())
#
# First call the server with the default configuration.
# It should fail due to the invalid SSL cert.
assert service.disable_ssl_verification is False
prepped = service.prepare_request('GET', url='/')
with pytest.raises(SSLError):
res = service.send(prepped)
# Now disable the SSL verification. The request shouldn't raise any issue.
service.set_disable_ssl_verification(True)
assert service.disable_ssl_verification is True
prepped = service.prepare_request('GET', url='/')
res = service.send(prepped)
assert res is not None
except Exception: # pylint: disable=try-except-raise
raise
finally:
server.shutdown()
|
