# Copyright (C) 2011, 2012, 2013, 2016 Canonical Ltd
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA

"""Tests for the SSL support in the urllib HTTP transport."""

import os

from .. import config, tests, trace
from ..transport.http import opt_ssl_ca_certs, ssl


class CaCertsConfigTests(tests.TestCaseInTempDir):
    def get_stack(self, content):
        return config.MemoryStack(content.encode("utf-8"))

    def test_default_exists(self):
        """Check that the default we provide exists for the tested platform."""
        stack = self.get_stack("")
        self.assertPathExists(stack.get("ssl.ca_certs"))

    def test_specified(self):
        self.build_tree(["cacerts.pem"])
        path = os.path.join(self.test_dir, "cacerts.pem")
        stack = self.get_stack("ssl.ca_certs = {}\n".format(path))
        self.assertEqual(path, stack.get("ssl.ca_certs"))

    def test_specified_doesnt_exist(self):
        stack = self.get_stack("")
        # Disable the default value mechanism to force the behavior we want
        self.overrideAttr(
            opt_ssl_ca_certs, "default", os.path.join(self.test_dir, "nonexisting.pem")
        )
        self.warnings = []

        def warning(*args):
            self.warnings.append(args[0] % args[1:])

        self.overrideAttr(trace, "warning", warning)
        self.assertEqual(None, stack.get("ssl.ca_certs"))
        self.assertLength(1, self.warnings)
        self.assertContainsRe(self.warnings[0], 'is not valid for "ssl.ca_certs"')


class CertReqsConfigTests(tests.TestCaseInTempDir):
    def test_default(self):
        stack = config.MemoryStack(b"")
        self.assertEqual(ssl.CERT_REQUIRED, stack.get("ssl.cert_reqs"))

    def test_from_string(self):
        stack = config.MemoryStack(b"ssl.cert_reqs = none\n")
        self.assertEqual(ssl.CERT_NONE, stack.get("ssl.cert_reqs"))
        stack = config.MemoryStack(b"ssl.cert_reqs = required\n")
        self.assertEqual(ssl.CERT_REQUIRED, stack.get("ssl.cert_reqs"))
        stack = config.MemoryStack(b"ssl.cert_reqs = invalid\n")
        self.assertRaises(config.ConfigOptionValueError, stack.get, "ssl.cert_reqs")
