mirror of
https://github.com/pypa/pip
synced 2023-12-13 21:30:23 +01:00
d1a7ea2587
Hash attribute name is a cpython implementation detail and not in the PEP. Use digest_size for some form of validation as that is all we can rely on. TESTED 2.7, 3.3, pypy 1.9
194 lines
8.3 KiB
Python
194 lines
8.3 KiB
Python
import os
|
|
|
|
from nose.tools import assert_raises
|
|
|
|
from pip.download import _get_hash_from_file, _check_hash
|
|
from pip.exceptions import InstallationError
|
|
from pip.index import Link
|
|
|
|
|
|
def test_get_hash_from_file_md5():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#md5=d41d8cd98f00b204e9800998ecf8427e")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash.digest_size == 16
|
|
assert download_hash.hexdigest() == "d41d8cd98f00b204e9800998ecf8427e"
|
|
|
|
|
|
def test_get_hash_from_file_sha1():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha1=da39a3ee5e6b4b0d3255bfef95601890afd80709")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash.digest_size == 20
|
|
assert download_hash.hexdigest() == "da39a3ee5e6b4b0d3255bfef95601890afd80709"
|
|
|
|
|
|
def test_get_hash_from_file_sha224():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha224=d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash.digest_size == 28
|
|
assert download_hash.hexdigest() == "d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f"
|
|
|
|
|
|
def test_get_hash_from_file_sha384():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha384=38b060a751ac96384cd9327eb1b1e36a21fdb71114be07434c0cc7bf63f6e1da274edebfe76f65fbd51ad2f14898b95b")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash.digest_size == 48
|
|
assert download_hash.hexdigest() == "38b060a751ac96384cd9327eb1b1e36a21fdb71114be07434c0cc7bf63f6e1da274edebfe76f65fbd51ad2f14898b95b"
|
|
|
|
|
|
def test_get_hash_from_file_sha256():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash.digest_size == 32
|
|
assert download_hash.hexdigest() == "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
|
|
|
|
|
|
def test_get_hash_from_file_sha512():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha512=cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash.digest_size == 64
|
|
assert download_hash.hexdigest() == "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e"
|
|
|
|
|
|
def test_get_hash_from_file_unknown():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#unknown_hash=d41d8cd98f00b204e9800998ecf8427e")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert download_hash is None
|
|
|
|
|
|
def test_check_hash_md5_valid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#md5=d41d8cd98f00b204e9800998ecf8427e")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
_check_hash(download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_md5_invalid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#md5=deadbeef")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha1_valid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha1=da39a3ee5e6b4b0d3255bfef95601890afd80709")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
_check_hash(download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha1_invalid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha1=deadbeef")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha224_valid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha224=d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f'")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
_check_hash(download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha224_invalid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha224=deadbeef")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha384_valid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha384=38b060a751ac96384cd9327eb1b1e36a21fdb71114be07434c0cc7bf63f6e1da274edebfe76f65fbd51ad2f14898b95b")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
_check_hash(download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha384_invalid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha384=deadbeef")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha256_valid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
_check_hash(download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha256_invalid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha256=deadbeef")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha512_valid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha512=cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
_check_hash(download_hash, file_link)
|
|
|
|
|
|
def test_check_hash_sha512_invalid():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#sha512=deadbeef")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, file_link)
|
|
|
|
|
|
def test_check_hasher_mismsatch():
|
|
file_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "packages", "gmpy-1.15.tar.gz")
|
|
file_link = Link("http://testserver/gmpy-1.15.tar.gz#md5=d41d8cd98f00b204e9800998ecf8427e")
|
|
other_link = Link("http://testserver/gmpy-1.15.tar.gz#sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
|
|
|
|
download_hash = _get_hash_from_file(file_path, file_link)
|
|
|
|
assert_raises(InstallationError, _check_hash, download_hash, other_link)
|