cve-2024-38477/httpd-2.4.59/test/modules/md/test_740_acme_errors.py
2025-06-05 15:09:30 +02:00

73 lines
2.9 KiB
Python

# test ACME error responses and their processing
import pytest
from .md_conf import MDConf
from .md_env import MDTestEnv
@pytest.mark.skipif(condition=not MDTestEnv.has_acme_server(),
reason="no ACME test server configured")
class TestAcmeErrors:
@pytest.fixture(autouse=True, scope='class')
def _class_scope(self, env, acme):
env.APACHE_CONF_SRC = "data/test_auto"
acme.start(config='default')
env.check_acme()
env.clear_store()
MDConf(env).install()
assert env.apache_restart() == 0
@pytest.fixture(autouse=True, scope='function')
def _method_scope(self, env, request):
env.clear_store()
self.test_domain = env.get_request_domain(request)
# -----------------------------------------------------------------------------------------------
# test case: MD with 2 names, one invalid
#
def test_md_740_000(self, env):
domain = self.test_domain
domains = [domain, "invalid!." + domain]
conf = MDConf(env)
conf.add_md(domains)
conf.add_vhost(domains)
conf.install()
assert env.apache_restart() == 0
md = env.await_error(domain)
assert md
assert md['renewal']['errors'] > 0
if env.acme_server == 'pebble':
assert md['renewal']['last']['problem'] == 'urn:ietf:params:acme:error:malformed'
assert md['renewal']['last']['detail'] == \
"Order included DNS identifier with a value containing an illegal character: '!'"
else:
assert md['renewal']['last']['problem'] == 'urn:ietf:params:acme:error:rejectedIdentifier'
assert md['renewal']['last']['detail'] == (
"Error creating new order :: Cannot issue for "
"\"%s\": Domain name contains an invalid character" % domains[1])
# test case: MD with 3 names, 2 invalid
#
def test_md_740_001(self, env):
domain = self.test_domain
domains = [domain, "invalid1!." + domain, "invalid2!." + domain]
conf = MDConf(env)
conf.add_md(domains)
conf.add_vhost(domains)
conf.install()
assert env.apache_restart() == 0
md = env.await_error(domain)
assert md
assert md['renewal']['errors'] > 0
if env.acme_server == 'pebble':
assert md['renewal']['last']['problem'] == 'urn:ietf:params:acme:error:malformed'
assert md['renewal']['last']['detail'].startswith(
"Order included DNS identifier with a value containing an illegal character")
else:
assert md['renewal']['last']['problem'] == 'urn:ietf:params:acme:error:rejectedIdentifier'
assert md['renewal']['last']['detail'].startswith(
"Error creating new order :: Cannot issue for")
assert md['renewal']['last']['subproblems']
assert len(md['renewal']['last']['subproblems']) == 2