diff options
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/fips_test_utils.py | 17 | ||||
| -rw-r--r-- | tests/test_cc_heuristics.py | 247 | ||||
| -rw-r--r-- | tests/test_cc_oop.py | 290 | ||||
| -rw-r--r-- | tests/test_cc_txt_processing.py | 18 | ||||
| -rw-r--r-- | tests/test_fips_oop.py | 220 |
5 files changed, 496 insertions, 296 deletions
diff --git a/tests/fips_test_utils.py b/tests/fips_test_utils.py index 94fb406a..2fce325b 100644 --- a/tests/fips_test_utils.py +++ b/tests/fips_test_utils.py @@ -1,17 +1,18 @@ -from typing import List from pathlib import Path +from typing import List + def generate_html(ids: List[str], path: Path): def generate_entry(certificate_id: str) -> str: - return f''' + return f""" <tr id="cert-row-0"> <td class="text-center"> <a href="/projects/cryptographic-module-validation-program/certificate/3898" id="cert-number-link-0">{certificate_id}</a> </td> </tr> - ''' + """ - html_head = ''' + html_head = """ <!DOCTYPE html> <html lang="en-us" xml:lang="en-us"> <head> @@ -25,11 +26,11 @@ def generate_html(ids: List[str], path: Path): <meta name="theme-color" content="#000000" /> <meta name="google-site-verification" content="xbrnrVYDgLD-Bd64xHLCt4XsPXzUhQ-4lGMj4TdUUTA" /> </head> - ''' + """ rows = "" for cert_id in ids: rows += f"\n{generate_entry(cert_id)}\n" - html_body = f''' + html_body = f""" <body> <table class="table table-striped table-condensed publications-table table-bordered" id="searchResultsTable"> <thead> @@ -46,6 +47,6 @@ def generate_html(ids: List[str], path: Path): </tbody> </table> </body> - ''' - with open(path, 'w') as f: + """ + with open(path, "w") as f: f.write(f"{html_head}\n{html_body}\n") diff --git a/tests/test_cc_heuristics.py b/tests/test_cc_heuristics.py index 13cdb465..caa6b1fb 100644 --- a/tests/test_cc_heuristics.py +++ b/tests/test_cc_heuristics.py @@ -1,64 +1,72 @@ -import copy -import datetime +import shutil import tempfile +from pathlib import Path +from typing import ClassVar, Dict, List from unittest import TestCase + +import tests.data.test_cc_heuristics from sec_certs.dataset.common_criteria import CCDataset -from sec_certs.sample.common_criteria import CommonCriteriaCert -from sec_certs.sample.protection_profile import ProtectionProfile from sec_certs.dataset.cpe import CPEDataset -from sec_certs.sample.cpe import CPE from sec_certs.dataset.cve import CVEDataset +from sec_certs.sample.common_criteria import CommonCriteriaCert +from sec_certs.sample.cpe import CPE from sec_certs.sample.cve import CVE -from pathlib import Path -from typing import ClassVar, Dict -import shutil - -import tests.data.test_cc_heuristics +from sec_certs.sample.protection_profile import ProtectionProfile class TestCommonCriteriaHeuristics(TestCase): - dataset_json_path: ClassVar[Path] = Path(tests.data.test_cc_heuristics.__path__[0]) / 'vulnerable_dataset.json' + dataset_json_path: ClassVar[Path] = Path(tests.data.test_cc_heuristics.__path__[0]) / "vulnerable_dataset.json" # type: ignore # mypy issue #1422 data_dir_path: ClassVar[Path] = dataset_json_path.parent + tmp_dir: ClassVar[tempfile.TemporaryDirectory] + cc_dset: CCDataset + cve_dset: CVEDataset + cves: List[CVE] + cpe_dset: CPEDataset + cpes: List[CPE] @classmethod def setUpClass(cls) -> None: - cls.tmp_dir: ClassVar[tempfile.TemporaryDirectory] = tempfile.TemporaryDirectory() + cls.tmp_dir = tempfile.TemporaryDirectory() shutil.copytree(cls.data_dir_path, cls.tmp_dir.name, dirs_exist_ok=True) - cls.cc_dset: CCDataset = CCDataset.from_json(Path(cls.tmp_dir.name) / 'vulnerable_dataset.json') + cls.cc_dset = CCDataset.from_json(Path(cls.tmp_dir.name) / "vulnerable_dataset.json") cls.cc_dset.process_protection_profiles() cls.cc_dset.download_all_pdfs() cls.cc_dset.convert_all_pdfs() cls.cc_dset._extract_data() cls.cc_dset._compute_heuristics(use_nist_cpe_matching_dict=False) - - cpe_single_sign_on = CPE("cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*", - "IBM Security Access Manager For Enterprise Single Sign-On 8.2.2") + cpe_single_sign_on = CPE( + "cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*", + "IBM Security Access Manager For Enterprise Single Sign-On 8.2.2", + ) cls.cpes = [ cpe_single_sign_on, - CPE("cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*", - "IBM Security Key Lifecycle Manager 2.6.0.1"), - CPE("cpe:2.3:a:semperplugins:all_in_one_seo_pack:1.3.6.4:*:*:*:*:wordpress:*:*", - "Semper Plugins All in One SEO Pack 1.3.6.4 for WordPress"), - CPE("cpe:2.3:a:tracker-software:pdf-xchange_lite_printer:6.0.320.0:*:*:*:*:*:*:*", - "Tracker Software PDF-XChange Lite Printer 6.0.320.0") + CPE( + "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*", + "IBM Security Key Lifecycle Manager 2.6.0.1", + ), + CPE( + "cpe:2.3:a:semperplugins:all_in_one_seo_pack:1.3.6.4:*:*:*:*:wordpress:*:*", + "Semper Plugins All in One SEO Pack 1.3.6.4 for WordPress", + ), + CPE( + "cpe:2.3:a:tracker-software:pdf-xchange_lite_printer:6.0.320.0:*:*:*:*:*:*:*", + "Tracker Software PDF-XChange Lite Printer 6.0.320.0", + ), ] - cls.cpe_dset = CPEDataset(True, Path('../'), {x.uri: x for x in cls.cpes}) + cls.cpe_dset = CPEDataset(True, Path("../"), {x.uri: x for x in cls.cpes}) cls.cves = [ - CVE('CVE-2017-1732', - [cpe_single_sign_on], - CVE.Impact(5.3, 'MEDIUM', 3.9, 1.4), - '2021-05-26T04:15Z', - ), - CVE('CVE-2019-4513', + CVE( + "CVE-2017-1732", [cpe_single_sign_on], - CVE.Impact(8.2, 'HIGH', 3.9, 4.2), - '2000-05-26T04:15Z' - ) - ] + CVE.Impact(5.3, "MEDIUM", 3.9, 1.4), + "2021-05-26T04:15Z", + ), + CVE("CVE-2019-4513", [cpe_single_sign_on], CVE.Impact(8.2, "HIGH", 3.9, 4.2), "2000-05-26T04:15Z"), + ] cls.cve_dset = CVEDataset({x.cve_id: x for x in cls.cves}) cls.cve_dset.build_lookup_dict(use_nist_mapping=False) @@ -67,89 +75,172 @@ class TestCommonCriteriaHeuristics(TestCase): cls.tmp_dir.cleanup() def test_load_cpe_dataset(self): - json_cpe_dset = CPEDataset.from_json(self.data_dir_path / 'auxillary_datasets' / 'cpe_dataset.json') - json_cpe_dset.json_path = Path('../') - self.assertEqual(self.cpe_dset, json_cpe_dset, 'CPE template dataset does not match CPE dataset loaded from json.') + json_cpe_dset = CPEDataset.from_json(self.data_dir_path / "auxillary_datasets" / "cpe_dataset.json") + json_cpe_dset.json_path = Path("../") + self.assertEqual( + self.cpe_dset, json_cpe_dset, "CPE template dataset does not match CPE dataset loaded from json." + ) def test_cpe_lookup_dicts(self): - self.assertEqual(self.cpe_dset.vendors, {'ibm', 'tracker-software', 'semperplugins'}, - 'The set of versions in CPE dataset does not match template') - self.assertEqual(self.cpe_dset.vendor_to_versions, {'ibm': {'8.2.2', '2.6.0.1'}, 'semperplugins': {'1.3.6.4'}, 'tracker-software': {'6.0.320.0'}}, - 'The CPE lookup dictionary vendor->version of CPE dataset does not match template.') - self.assertEqual(self.cpe_dset.vendor_version_to_cpe, {('ibm', '8.2.2'): {CPE('cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*', 'IBM Security Access Manager For Enterprise Single Sign-On 8.2.2')}, ('ibm', '2.6.0.1'): {CPE('cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*', 'IBM Security Key Lifecycle Manager 2.6.0.1')}, ('semperplugins', '1.3.6.4'): {CPE('cpe:2.3:a:semperplugins:all_in_one_seo_pack:1.3.6.4:*:*:*:*:wordpress:*:*', 'Semper Plugins All in One SEO Pack 1.3.6.4 for WordPress')}, ('tracker-software', '6.0.320.0'): {CPE('cpe:2.3:a:tracker-software:pdf-xchange_lite_printer:6.0.320.0:*:*:*:*:*:*:*', 'Tracker Software PDF-XChange Lite Printer 6.0.320.0')}}, - 'The CPE lookup dictionary (vendor,version)->cpe does not match the template.') + self.assertEqual( + self.cpe_dset.vendors, + {"ibm", "tracker-software", "semperplugins"}, + "The set of versions in CPE dataset does not match template", + ) + self.assertEqual( + self.cpe_dset.vendor_to_versions, + {"ibm": {"8.2.2", "2.6.0.1"}, "semperplugins": {"1.3.6.4"}, "tracker-software": {"6.0.320.0"}}, + "The CPE lookup dictionary vendor->version of CPE dataset does not match template.", + ) + self.assertEqual( + self.cpe_dset.vendor_version_to_cpe, + { + ("ibm", "8.2.2"): { + CPE( + "cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*", + "IBM Security Access Manager For Enterprise Single Sign-On 8.2.2", + ) + }, + ("ibm", "2.6.0.1"): { + CPE( + "cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*", + "IBM Security Key Lifecycle Manager 2.6.0.1", + ) + }, + ("semperplugins", "1.3.6.4"): { + CPE( + "cpe:2.3:a:semperplugins:all_in_one_seo_pack:1.3.6.4:*:*:*:*:wordpress:*:*", + "Semper Plugins All in One SEO Pack 1.3.6.4 for WordPress", + ) + }, + ("tracker-software", "6.0.320.0"): { + CPE( + "cpe:2.3:a:tracker-software:pdf-xchange_lite_printer:6.0.320.0:*:*:*:*:*:*:*", + "Tracker Software PDF-XChange Lite Printer 6.0.320.0", + ) + }, + }, + "The CPE lookup dictionary (vendor,version)->cpe does not match the template.", + ) def test_cve_lookup_dicts(self): alt_lookup = {x: set(y) for x, y in self.cve_dset.cpe_to_cve_ids_lookup.items()} - self.assertEqual(alt_lookup, {'cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*': {x.cve_id for x in self.cves}}, - 'The CVE lookup dicionary cve-> affected cpes does not match the template') + self.assertEqual( + alt_lookup, + { + "cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*": { + x.cve_id for x in self.cves + } + }, + "The CVE lookup dicionary cve-> affected cpes does not match the template", + ) def test_load_cve_dataset(self): - json_cve_dset = CVEDataset.from_json(self.data_dir_path / 'auxillary_datasets' / 'cve_dataset.json') - self.assertEqual(self.cve_dset, json_cve_dset, 'CVE template dataset does not match CVE dataset loaded from json.') + json_cve_dset = CVEDataset.from_json(self.data_dir_path / "auxillary_datasets" / "cve_dataset.json") + self.assertEqual( + self.cve_dset, json_cve_dset, "CVE template dataset does not match CVE dataset loaded from json." + ) def test_match_cpe(self): - self.assertTrue(self.cpes[0].uri in self.cc_dset['ebd276cca70fd723'].heuristics.cpe_matches, 'The CPE matching algorithm did not find the right CPE.') - self.assertTrue(len(self.cc_dset['ebd276cca70fd723'].heuristics.cpe_matches) == 1, 'Exactly one CPE match should be found.') + self.assertTrue( + self.cpes[0].uri in self.cc_dset["ebd276cca70fd723"].heuristics.cpe_matches, + "The CPE matching algorithm did not find the right CPE.", + ) + self.assertTrue( + len(self.cc_dset["ebd276cca70fd723"].heuristics.cpe_matches) == 1, "Exactly one CPE match should be found." + ) def test_find_related_cves(self): - self.cc_dset['ebd276cca70fd723'].heuristics.cpe_matches = [self.cpes[0].uri] - self.cc_dset.compute_related_cves(use_nist_cpe_matching_dict = False) - self.assertEqual({x.cve_id for x in self.cves}, self.cc_dset['ebd276cca70fd723'].heuristics.related_cves, 'The computed CVEs do not match the excpected CVEs') + self.cc_dset["ebd276cca70fd723"].heuristics.cpe_matches = [self.cpes[0].uri] + self.cc_dset.compute_related_cves(use_nist_cpe_matching_dict=False) + self.assertEqual( + {x.cve_id for x in self.cves}, + self.cc_dset["ebd276cca70fd723"].heuristics.related_cves, + "The computed CVEs do not match the excpected CVEs", + ) def test_version_extraction(self): - self.assertEqual(self.cc_dset['ebd276cca70fd723'].heuristics.extracted_versions, ['8.2'], 'The version extracted from the sample does not match the template') - new_cert = CommonCriteriaCert('', '', 'IDOneClassIC Card : ID-One Cosmo 64 RSA v5.4 and applet IDOneClassIC v1.0 embedded on P5CT072VOP', '', '', - '', None, None, '', '', '', '', set(), set(), None, None, None) + self.assertEqual( + self.cc_dset["ebd276cca70fd723"].heuristics.extracted_versions, + ["8.2"], + "The version extracted from the sample does not match the template", + ) + new_cert = CommonCriteriaCert( + "", + "", + "IDOneClassIC Card : ID-One Cosmo 64 RSA v5.4 and applet IDOneClassIC v1.0 embedded on P5CT072VOP", + "", + "", + "", + None, + None, + "", + "", + "", + "", + set(), + set(), + None, + None, + None, + ) new_cert.compute_heuristics_version() - self.assertEqual(set(new_cert.heuristics.extracted_versions), {'5.4', '1.0'}, 'The extracted versions do not match the template.') + self.assertEqual( + set(new_cert.heuristics.extracted_versions), + {"5.4", "1.0"}, + "The extracted versions do not match the template.", + ) def test_cert_lab_heuristics(self): - self.assertEqual(self.cc_dset['ebd276cca70fd723'].heuristics.cert_lab, ['BSI']) + self.assertEqual(self.cc_dset["ebd276cca70fd723"].heuristics.cert_lab, ["BSI"]) def test_cert_id_heuristics(self): - self.assertEqual(self.cc_dset['ebd276cca70fd723'].heuristics.cert_id, 'BSI-DSZ-CC-0683-2014') + self.assertEqual(self.cc_dset["ebd276cca70fd723"].heuristics.cert_id, "BSI-DSZ-CC-0683-2014") def test_keywords_heuristics(self): - extracted_keywords: Dict = self.cc_dset['ebd276cca70fd723'].pdf_data.st_keywords + extracted_keywords: Dict = self.cc_dset["ebd276cca70fd723"].pdf_data.st_keywords - self.assertTrue('rules_security_level' in extracted_keywords) - self.assertEqual(extracted_keywords['rules_security_level']['EAL3'], 1) + self.assertTrue("rules_security_level" in extracted_keywords) + self.assertEqual(extracted_keywords["rules_security_level"]["EAL3"], 1) - self.assertTrue('rules_security_assurance_components' in extracted_keywords) - self.assertEqual(extracted_keywords['rules_security_assurance_components']['ADV_ARC.1'], 1) - self.assertEqual(extracted_keywords['rules_security_assurance_components']['ADV_FSP.3'], 1) - self.assertEqual(extracted_keywords['rules_security_assurance_components']['ADV_TDS.2'], 1) + self.assertTrue("rules_security_assurance_components" in extracted_keywords) + self.assertEqual(extracted_keywords["rules_security_assurance_components"]["ADV_ARC.1"], 1) + self.assertEqual(extracted_keywords["rules_security_assurance_components"]["ADV_FSP.3"], 1) + self.assertEqual(extracted_keywords["rules_security_assurance_components"]["ADV_TDS.2"], 1) - self.assertTrue('rules_crypto_algs' in extracted_keywords) - self.assertEqual(extracted_keywords['rules_crypto_algs']['AES'], 2) + self.assertTrue("rules_crypto_algs" in extracted_keywords) + self.assertEqual(extracted_keywords["rules_crypto_algs"]["AES"], 2) - self.assertTrue('rules_block_cipher_modes' in extracted_keywords) - self.assertEqual(extracted_keywords['rules_block_cipher_modes']['CBC'], 2) + self.assertTrue("rules_block_cipher_modes" in extracted_keywords) + self.assertEqual(extracted_keywords["rules_block_cipher_modes"]["CBC"], 2) def test_protection_profiles_matching(self): - artificial_pp: ProtectionProfile = ProtectionProfile('Korean National Protection Profile for Single Sign On V1.0', - 'http://www.commoncriteriaportal.org/files/ppfiles/KECS-PP-0822-2017%20Korean%20National%20PP%20for%20Single%20Sign%20On%20V1.0(eng).pdf') - self.cc_dset['ebd276cca70fd723'].protection_profiles = {artificial_pp} - expected_pp: ProtectionProfile = ProtectionProfile('Korean National Protection Profile for Single Sign On V1.0', - 'http://www.commoncriteriaportal.org/files/ppfiles/KECS-PP-0822-2017%20Korean%20National%20PP%20for%20Single%20Sign%20On%20V1.0(eng).pdf', - frozenset(['KECS-PP-0822-2017 SSO V1.0'])) + artificial_pp: ProtectionProfile = ProtectionProfile( + "Korean National Protection Profile for Single Sign On V1.0", + "http://www.commoncriteriaportal.org/files/ppfiles/KECS-PP-0822-2017%20Korean%20National%20PP%20for%20Single%20Sign%20On%20V1.0(eng).pdf", + ) + self.cc_dset["ebd276cca70fd723"].protection_profiles = {artificial_pp} + expected_pp: ProtectionProfile = ProtectionProfile( + "Korean National Protection Profile for Single Sign On V1.0", + "http://www.commoncriteriaportal.org/files/ppfiles/KECS-PP-0822-2017%20Korean%20National%20PP%20for%20Single%20Sign%20On%20V1.0(eng).pdf", + frozenset(["KECS-PP-0822-2017 SSO V1.0"]), + ) self.cc_dset.process_protection_profiles(to_download=False) - self.assertSetEqual(self.cc_dset['ebd276cca70fd723'].protection_profiles, {expected_pp}) + self.assertSetEqual(self.cc_dset["ebd276cca70fd723"].protection_profiles, {expected_pp}) def test_single_record_dependency_heuristics(self): # Single record in daset is not affecting nor affected by other records - heuristics = self.cc_dset['ebd276cca70fd723'].heuristics + heuristics = self.cc_dset["ebd276cca70fd723"].heuristics self.assertEqual(heuristics.directly_affected_by, None) self.assertEqual(heuristics.indirectly_affected_by, None) self.assertEqual(heuristics.directly_affecting, None) self.assertEqual(heuristics.indirectly_affecting, None) def test_dependency_dataset(self): - dependency_dataset = CCDataset.from_json(self.data_dir_path / 'dependency_dataset.json') + dependency_dataset = CCDataset.from_json(self.data_dir_path / "dependency_dataset.json") dependency_dataset._compute_dependencies() test_cert: CommonCriteriaCert = dependency_dataset["692e91451741ef49"] - + self.assertEqual(test_cert.heuristics.directly_affected_by, ["BSI-DSZ-CC-0370-2006"]) self.assertEqual(test_cert.heuristics.indirectly_affected_by, {"BSI-DSZ-CC-0370-2006", "BSI-DSZ-CC-0517-2009"}) self.assertEqual(test_cert.heuristics.directly_affecting, {"BSI-DSZ-CC-0268-2005"}) diff --git a/tests/test_cc_oop.py b/tests/test_cc_oop.py index 3ca1935e..2426476d 100644 --- a/tests/test_cc_oop.py +++ b/tests/test_cc_oop.py @@ -1,178 +1,226 @@ -import tempfile -from unittest import TestCase -from pathlib import Path -from tempfile import TemporaryDirectory, mkstemp, NamedTemporaryFile -from datetime import date, datetime -import json import filecmp -import shutil import os +import shutil +import tempfile +from datetime import date, datetime +from pathlib import Path +from tempfile import NamedTemporaryFile, TemporaryDirectory +from unittest import TestCase +import sec_certs.constants as constants +import sec_certs.helpers as helpers from sec_certs.dataset.common_criteria import CCDataset from sec_certs.sample.common_criteria import CommonCriteriaCert from sec_certs.sample.protection_profile import ProtectionProfile -import sec_certs.helpers as helpers -import sec_certs.constants as constants class TestCommonCriteriaOOP(TestCase): def setUp(self): - self.test_data_dir = Path(__file__).parent / 'data' / 'test_cc_oop' - self.crt_one = CommonCriteriaCert('active', - 'Access Control Devices and Systems', - 'NetIQ Identity Manager 4.7', - 'NetIQ Corporation', - 'SE', - {'ALC_FLR.2', - 'EAL3+'}, - date(2020, 6, 15), - date(2025, 6, 15), - 'https://www.commoncriteriaportal.org/files/epfiles/Certification%20Report%20-%20NetIQ®%20Identity%20Manager%204.7.pdf', - 'https://www.commoncriteriaportal.org/files/epfiles/ST%20-%20NetIQ%20Identity%20Manager%204.7.pdf', - 'https://www.commoncriteriaportal.org/files/epfiles/Certifikat%20CCRA%20-%20NetIQ%20Identity%20Manager%204.7_signed.pdf', - 'https://www.netiq.com/', - set(), - set(), - None, - None, - None) + self.test_data_dir = Path(__file__).parent / "data" / "test_cc_oop" + self.crt_one = CommonCriteriaCert( + "active", + "Access Control Devices and Systems", + "NetIQ Identity Manager 4.7", + "NetIQ Corporation", + "SE", + {"ALC_FLR.2", "EAL3+"}, + date(2020, 6, 15), + date(2025, 6, 15), + "https://www.commoncriteriaportal.org/files/epfiles/Certification%20Report%20-%20NetIQ®%20Identity%20Manager%204.7.pdf", + "https://www.commoncriteriaportal.org/files/epfiles/ST%20-%20NetIQ%20Identity%20Manager%204.7.pdf", + "https://www.commoncriteriaportal.org/files/epfiles/Certifikat%20CCRA%20-%20NetIQ%20Identity%20Manager%204.7_signed.pdf", + "https://www.netiq.com/", + set(), + set(), + None, + None, + None, + ) - self.crt_two = CommonCriteriaCert('active', - 'Access Control Devices and Systems', - 'Magic SSO V4.0', - 'Dreamsecurity Co., Ltd.', - 'KR', - set(), - date(2019, 11, 15), - date(2024, 11, 15), - 'https://www.commoncriteriaportal.org/files/epfiles/KECS-CR-19-70%20Magic%20SSO%20V4.0(eng)%20V1.0.pdf', - 'https://www.commoncriteriaportal.org/files/epfiles/Magic_SSO_V4.0-ST-v1.4_EN.pdf', - None, - 'https://www.dreamsecurity.com/', - {ProtectionProfile('Korean National Protection Profile for Single Sign On V1.0', - 'https://www.commoncriteriaportal.org/files/ppfiles/KECS-PP-0822-2017%20Korean%20National%20PP%20for%20Single%20Sign%20On%20V1.0(eng).pdf')}, - set(), - None, - None, - None) + self.crt_two = CommonCriteriaCert( + "active", + "Access Control Devices and Systems", + "Magic SSO V4.0", + "Dreamsecurity Co., Ltd.", + "KR", + set(), + date(2019, 11, 15), + date(2024, 11, 15), + "https://www.commoncriteriaportal.org/files/epfiles/KECS-CR-19-70%20Magic%20SSO%20V4.0(eng)%20V1.0.pdf", + "https://www.commoncriteriaportal.org/files/epfiles/Magic_SSO_V4.0-ST-v1.4_EN.pdf", + None, + "https://www.dreamsecurity.com/", + { + ProtectionProfile( + "Korean National Protection Profile for Single Sign On V1.0", + "https://www.commoncriteriaportal.org/files/ppfiles/KECS-PP-0822-2017%20Korean%20National%20PP%20for%20Single%20Sign%20On%20V1.0(eng).pdf", + ) + }, + set(), + None, + None, + None, + ) - pp = ProtectionProfile('sample_pp', 'https://sample.pp') - update = CommonCriteriaCert.MaintenanceReport(date(1900, 1, 1), 'Sample maintenance', 'https://maintenance.up', 'https://maintenance.up') - self.fictional_cert = CommonCriteriaCert('archived', - 'Sample category', - 'Sample certificate name', - 'Sample manufacturer', - 'Sample scheme', - {'Sample security level'}, - date(1900, 1, 2), - date(1900, 1, 3), - 'https://path.to/report/link', - 'https://path.to/st/link', - 'https://path.to/cert/link', - 'https://path.to/manufacturer/web', - {pp}, - {update}, - None, - None, - None) - self.template_dataset = CCDataset({self.crt_one.dgst: self.crt_one, self.crt_two.dgst: self.crt_two}, Path('/fictional/path/to/dataset'), 'toy dataset', 'toy dataset description') + pp = ProtectionProfile("sample_pp", "https://sample.pp") + update = CommonCriteriaCert.MaintenanceReport( + date(1900, 1, 1), "Sample maintenance", "https://maintenance.up", "https://maintenance.up" + ) + self.fictional_cert = CommonCriteriaCert( + "archived", + "Sample category", + "Sample certificate name", + "Sample manufacturer", + "Sample scheme", + {"Sample security level"}, + date(1900, 1, 2), + date(1900, 1, 3), + "https://path.to/report/link", + "https://path.to/st/link", + "https://path.to/cert/link", + "https://path.to/manufacturer/web", + {pp}, + {update}, + None, + None, + None, + ) + self.template_dataset = CCDataset( + {self.crt_one.dgst: self.crt_one, self.crt_two.dgst: self.crt_two}, + Path("/fictional/path/to/dataset"), + "toy dataset", + "toy dataset description", + ) self.template_dataset.timestamp = datetime(2020, 11, 16, hour=17, minute=4, second=14, microsecond=770153) self.template_dataset.state.meta_sources_parsed = True - self.template_report_pdf_hashes = {'309ac2fd7f2dcf17': '774c41fbba980191ca40ae610b2f61484c5997417b3325b6fd68b345173bde52', - '8cf86948f02f047d': '533a5995ef8b736cc48cfda30e8aafec77d285511471e0e5a9e8007c8750203a'} - self.template_target_pdf_hashes = {'309ac2fd7f2dcf17': 'b9a45995d9e40b2515506bbf5945e806ef021861820426c6d0a6a074090b47a9', - '8cf86948f02f047d': '3c8614338899d956e9e56f1aa88d90e37df86f3310b875d9d14ec0f71e4759be'} + self.template_report_pdf_hashes = { + "309ac2fd7f2dcf17": "774c41fbba980191ca40ae610b2f61484c5997417b3325b6fd68b345173bde52", + "8cf86948f02f047d": "533a5995ef8b736cc48cfda30e8aafec77d285511471e0e5a9e8007c8750203a", + } + self.template_target_pdf_hashes = { + "309ac2fd7f2dcf17": "b9a45995d9e40b2515506bbf5945e806ef021861820426c6d0a6a074090b47a9", + "8cf86948f02f047d": "3c8614338899d956e9e56f1aa88d90e37df86f3310b875d9d14ec0f71e4759be", + } - self.template_report_txt_path = self.test_data_dir / 'report_869415cc4b91282e.txt' - self.template_target_txt_path = self.test_data_dir / 'target_869415cc4b91282e.txt' + self.template_report_txt_path = self.test_data_dir / "report_869415cc4b91282e.txt" + self.template_target_txt_path = self.test_data_dir / "target_869415cc4b91282e.txt" def test_certificate_input_sanity(self): - self.assertEqual(self.crt_one.report_link, - 'https://www.commoncriteriaportal.org/files/epfiles/Certification%20Report%20-%20NetIQ®%20Identity%20Manager%204.7.pdf', - 'Report link contains some improperly escaped characters.') + self.assertEqual( + self.crt_one.report_link, + "https://www.commoncriteriaportal.org/files/epfiles/Certification%20Report%20-%20NetIQ®%20Identity%20Manager%204.7.pdf", + "Report link contains some improperly escaped characters.", + ) def test_download_and_convert_pdfs(self): - dset = CCDataset.from_json(self.test_data_dir / 'toy_dataset.json') + dset = CCDataset.from_json(self.test_data_dir / "toy_dataset.json") with TemporaryDirectory() as td: dset.root_dir = Path(td) dset.download_all_pdfs() dset.convert_all_pdfs() - actual_report_pdf_hashes = {key: helpers.get_sha256_filepath(val.state.report_pdf_path) for key, val in dset.certs.items()} - actual_target_pdf_hashes = {key: helpers.get_sha256_filepath(val.state.st_pdf_path) for key, val in dset.certs.items()} + actual_report_pdf_hashes = { + key: helpers.get_sha256_filepath(val.state.report_pdf_path) for key, val in dset.certs.items() + } + actual_target_pdf_hashes = { + key: helpers.get_sha256_filepath(val.state.st_pdf_path) for key, val in dset.certs.items() + } - self.assertEqual(actual_report_pdf_hashes, self.template_report_pdf_hashes, 'Hashes of downloaded pdfs (sample report) do not the template') - self.assertEqual(actual_target_pdf_hashes, self.template_target_pdf_hashes, 'Hashes of downloaded pdfs (security target) do not match the template') + self.assertEqual( + actual_report_pdf_hashes, + self.template_report_pdf_hashes, + "Hashes of downloaded pdfs (sample report) do not the template", + ) + self.assertEqual( + actual_target_pdf_hashes, + self.template_target_pdf_hashes, + "Hashes of downloaded pdfs (security target) do not match the template", + ) - self.assertTrue(dset['309ac2fd7f2dcf17'].state.report_txt_path.exists()) - self.assertTrue(dset['309ac2fd7f2dcf17'].state.st_txt_path.exists()) + self.assertTrue(dset["309ac2fd7f2dcf17"].state.report_txt_path.exists()) + self.assertTrue(dset["309ac2fd7f2dcf17"].state.st_txt_path.exists()) - self.assertAlmostEqual(dset['309ac2fd7f2dcf17'].state.st_txt_path.stat().st_size, - self.template_target_txt_path.stat().st_size, - delta=1000) + self.assertAlmostEqual( + dset["309ac2fd7f2dcf17"].state.st_txt_path.stat().st_size, + self.template_target_txt_path.stat().st_size, + delta=1000, + ) - self.assertAlmostEqual(dset['309ac2fd7f2dcf17'].state.report_txt_path.stat().st_size, - self.template_report_txt_path.stat().st_size, - delta=1000) + self.assertAlmostEqual( + dset["309ac2fd7f2dcf17"].state.report_txt_path.stat().st_size, + self.template_report_txt_path.stat().st_size, + delta=1000, + ) def test_cert_to_json(self): - with NamedTemporaryFile('w') as tmp: + with NamedTemporaryFile("w") as tmp: self.fictional_cert.to_json(tmp.name) - self.assertTrue(filecmp.cmp(self.test_data_dir / 'fictional_cert.json', - tmp.name), - 'The sample serialized to json differs from a template.') + self.assertTrue( + filecmp.cmp(self.test_data_dir / "fictional_cert.json", tmp.name), + "The sample serialized to json differs from a template.", + ) def test_dataset_to_json(self): - with NamedTemporaryFile('w') as tmp: + with NamedTemporaryFile("w") as tmp: self.template_dataset.to_json(tmp.name) - self.assertTrue(filecmp.cmp(self.test_data_dir / 'toy_dataset.json', - tmp.name), - 'The dataset serialized to json differs from a template.') + self.assertTrue( + filecmp.cmp(self.test_data_dir / "toy_dataset.json", tmp.name), + "The dataset serialized to json differs from a template.", + ) def test_cert_from_json(self): - self.assertEqual(self.fictional_cert, - CommonCriteriaCert.from_json(self.test_data_dir / 'fictional_cert.json'), - 'The sample serialized from json differs from a template.') + self.assertEqual( + self.fictional_cert, + CommonCriteriaCert.from_json(self.test_data_dir / "fictional_cert.json"), + "The sample serialized from json differs from a template.", + ) def test_dataset_from_json(self): - self.assertEqual(self.template_dataset, - CCDataset.from_json(self.test_data_dir / 'toy_dataset.json'), - 'The dataset serialized from json differs from a template.') + self.assertEqual( + self.template_dataset, + CCDataset.from_json(self.test_data_dir / "toy_dataset.json"), + "The dataset serialized from json differs from a template.", + ) def test_build_empty_dataset(self): with TemporaryDirectory() as tmp_dir: - dset = CCDataset({}, Path(tmp_dir), 'sample_dataset', 'sample dataset description') + dset = CCDataset({}, Path(tmp_dir), "sample_dataset", "sample dataset description") dset.get_certs_from_web(to_download=False, get_archived=False, get_active=False) - self.assertEqual(len(dset), 0, 'The dataset should contain 0 files.') + self.assertEqual(len(dset), 0, "The dataset should contain 0 files.") def test_build_dataset(self): with TemporaryDirectory() as tmp_dir: dataset_path = Path(tmp_dir) - os.mkdir(dataset_path / 'web') - shutil.copyfile(self.test_data_dir / 'cc_products_active.csv', dataset_path / 'web' / 'cc_products_active.csv') - shutil.copyfile(self.test_data_dir / 'cc_products_active.html', dataset_path / 'web' / 'cc_products_active.html') + os.mkdir(dataset_path / "web") + shutil.copyfile( + self.test_data_dir / "cc_products_active.csv", dataset_path / "web" / "cc_products_active.csv" + ) + shutil.copyfile( + self.test_data_dir / "cc_products_active.html", dataset_path / "web" / "cc_products_active.html" + ) - dset = CCDataset({}, dataset_path, 'sample_dataset', 'sample dataset description') - dset.get_certs_from_web(keep_metadata=False, - to_download=False, - get_archived=False, - get_active=True, - update_json=False) + dset = CCDataset({}, dataset_path, "sample_dataset", "sample dataset description") + dset.get_certs_from_web( + keep_metadata=False, to_download=False, get_archived=False, get_active=True, update_json=False + ) - self.assertEqual(len(os.listdir(dataset_path)), 0, - 'Meta files (csv, html) were not deleted properly albeit this was explicitly required.') + self.assertEqual( + len(os.listdir(dataset_path)), + 0, + "Meta files (csv, html) were not deleted properly albeit this was explicitly required.", + ) - self.assertEqual(len(dset), 2, 'The dataset should contain 2 files.') + self.assertEqual(len(dset), 2, "The dataset should contain 2 files.") - self.assertTrue(self.crt_one in dset, 'The dataset does not contain the template sample.') - self.assertEqual(dset, self.template_dataset, 'The loaded dataset does not match the template dataset.') + self.assertTrue(self.crt_one in dset, "The dataset does not contain the template sample.") + self.assertEqual(dset, self.template_dataset, "The loaded dataset does not match the template dataset.") def test_download_csv_html_files(self): with TemporaryDirectory() as tmp_dir: dataset_path = Path(tmp_dir) - dset = CCDataset({}, dataset_path, 'sample_dataset', 'sample dataset description') + dset = CCDataset({}, dataset_path, "sample_dataset", "sample dataset description") dset.download_csv_html_resources(get_active=True, get_archived=False) for x in dset.active_html_tuples: @@ -187,4 +235,6 @@ class TestCommonCriteriaOOP(TestCase): self.template_dataset.root_dir = tmp_dir self.template_dataset.process_protection_profiles() self.assertTrue(self.template_dataset.pp_dataset_path.exists()) - self.assertGreaterEqual(self.template_dataset.pp_dataset_path.stat().st_size, constants.MIN_CC_PP_DATASET_SIZE)
\ No newline at end of file + self.assertGreaterEqual( + self.template_dataset.pp_dataset_path.stat().st_size, constants.MIN_CC_PP_DATASET_SIZE + ) diff --git a/tests/test_cc_txt_processing.py b/tests/test_cc_txt_processing.py index 01b2212b..cc1cb23c 100644 --- a/tests/test_cc_txt_processing.py +++ b/tests/test_cc_txt_processing.py @@ -1,24 +1,26 @@ -import tests.data.test_cc_heuristics -from unittest import TestCase +import shutil +import tempfile from pathlib import Path from typing import ClassVar -import tempfile -import shutil +from unittest import TestCase +import tests.data.test_cc_heuristics from sec_certs.dataset.common_criteria import CCDataset from sec_certs.sample.common_criteria import CommonCriteriaCert -class TestCommonCriteriaHeuristics(TestCase): - dataset_json_path: ClassVar[Path] = Path(tests.data.test_cc_heuristics.__path__[0]) / 'vulnerable_dataset.json' +class TestCommonCriteriaTextProcessing(TestCase): + dataset_json_path: ClassVar[Path] = Path(tests.data.test_cc_heuristics.__path__[0]) / "vulnerable_dataset.json" # type: ignore # mypy issue #1422 data_dir_path: ClassVar[Path] = dataset_json_path.parent + tmp_dir: ClassVar[tempfile.TemporaryDirectory] + cc_dset: CCDataset @classmethod def setUpClass(cls) -> None: - cls.tmp_dir: ClassVar[tempfile.TemporaryDirectory] = tempfile.TemporaryDirectory() + cls.tmp_dir = tempfile.TemporaryDirectory() shutil.copytree(cls.data_dir_path, cls.tmp_dir.name, dirs_exist_ok=True) - cls.cc_dset: CCDataset = CCDataset.from_json(Path(cls.tmp_dir.name) / 'vulnerable_dataset.json') + cls.cc_dset = CCDataset.from_json(Path(cls.tmp_dir.name) / "vulnerable_dataset.json") cls.cc_dset.download_all_pdfs() cls.cc_dset.convert_all_pdfs() diff --git a/tests/test_fips_oop.py b/tests/test_fips_oop.py index 4d858edb..17b3325a 100644 --- a/tests/test_fips_oop.py +++ b/tests/test_fips_oop.py @@ -1,25 +1,24 @@ -from unittest import TestCase +import shutil from pathlib import Path from tempfile import TemporaryDirectory -from typing import Optional, Union, ClassVar, Final, List, Dict -import shutil +from typing import Dict, Final, List +from unittest import TestCase +import tests.data.test_fips_oop +from sec_certs.config.configuration import config from sec_certs.dataset.fips import FIPSDataset from sec_certs.dataset.fips_algorithm import FIPSAlgorithmDataset -from sec_certs.config.configuration import config from tests.fips_test_utils import generate_html -import tests.data.test_fips_oop - def _set_up_dataset(td, certs): - dataset = FIPSDataset({}, Path(td), 'test_dataset', 'fips_test_dataset') - generate_html(certs, td + '/test_search.html') - dataset.get_certs_from_web(test=td + '/test_search.html', no_download_algorithms=True) + dataset = FIPSDataset({}, Path(td), "test_dataset", "fips_test_dataset") + generate_html(certs, td + "/test_search.html") + dataset.get_certs_from_web(test=td + "/test_search.html", no_download_algorithms=True) return dataset -def _set_up_dataset_for_full(td, certs, cpe_dset_path: Union[str, Path] = None, cve_dset_path: Union[str, Path] = None): +def _set_up_dataset_for_full(td, certs, cpe_dset_path: Path, cve_dset_path: Path): dataset = _set_up_dataset(td, certs) dataset.auxillary_datasets_dir.mkdir(exist_ok=True) @@ -31,25 +30,76 @@ def _set_up_dataset_for_full(td, certs, cpe_dset_path: Union[str, Path] = None, dataset.convert_all_pdfs() dataset.pdf_scan() dataset.extract_certs_from_tables(high_precision=True) - dataset.algorithms = FIPSAlgorithmDataset.from_json(Path(__file__).parent / 'data/test_fips_oop/algorithms.json') + dataset.algorithms = FIPSAlgorithmDataset.from_json(Path(__file__).parent / "data/test_fips_oop/algorithms.json") dataset.finalize_results(use_nist_cpe_matching_dict=False, perform_cpe_heuristics=False) return dataset class TestFipsOOP(TestCase): data_dir: Final[Path] = Path(tests.data.test_fips_oop.__path__[0]) - cpe_dset_path: Final[Path] = data_dir.parent / 'test_cc_heuristics/auxillary_datasets/cpe_dataset.json' - cve_dset_path: Final[Path] = data_dir.parent / 'test_cc_heuristics/auxillary_datasets/cve_dataset.json' + cpe_dset_path: Final[Path] = data_dir.parent / "test_cc_heuristics/auxillary_datasets/cpe_dataset.json" + cve_dset_path: Final[Path] = data_dir.parent / "test_cc_heuristics/auxillary_datasets/cve_dataset.json" certs_to_parse: Final[Dict[str, List[str]]] = { - 'microsoft': ['3095', '3651', '3093', '3090', '3197', '3196', '3089', '3195', '3480', '3615', '3194', '3091', '3690', '3644', '3527', '3094', '3544', '3096', '3092'], - 'redhat': ['2630', '2721', '2997', '2441', '2711', '2633', '2798', '3613', '3733', '2908', '2446', '2742', '2447'], - 'docusign': ['3850', '2779', '2860', '2665', '1883', '3518', '3141', '2590'], - 'referencing_openssl': ['3493', '3495', '3711', '3176', '3488', '3126', '3269', '3524', '3220', '2398', '3543', '2676', '3313', '3363', '3608', '3158'] + "microsoft": [ + "3095", + "3651", + "3093", + "3090", + "3197", + "3196", + "3089", + "3195", + "3480", + "3615", + "3194", + "3091", + "3690", + "3644", + "3527", + "3094", + "3544", + "3096", + "3092", + ], + "redhat": [ + "2630", + "2721", + "2997", + "2441", + "2711", + "2633", + "2798", + "3613", + "3733", + "2908", + "2446", + "2742", + "2447", + ], + "docusign": ["3850", "2779", "2860", "2665", "1883", "3518", "3141", "2590"], + "referencing_openssl": [ + "3493", + "3495", + "3711", + "3176", + "3488", + "3126", + "3269", + "3524", + "3220", + "2398", + "3543", + "2676", + "3313", + "3363", + "3608", + "3158", + ], } @classmethod def setUpClass(cls) -> None: - config.load(cls.data_dir.parent / 'settings_test.yaml') + config.load(cls.data_dir.parent / "settings_test.yaml") def test_size(self): for certs in self.certs_to_parse.values(): @@ -58,82 +108,88 @@ class TestFipsOOP(TestCase): self.assertEqual(len(dataset.certs), len(certs), "Wrong number of parsed certs") def test_connections_microsoft(self): - certs = self.certs_to_parse['microsoft'] + certs = self.certs_to_parse["microsoft"] with TemporaryDirectory() as tmp_dir: dataset = _set_up_dataset_for_full(tmp_dir, certs, self.cpe_dset_path, self.cve_dset_path) - self.assertEqual(set(dataset.certs['3095'].heuristics.connections), {'3093', '3096', '3094'}) - self.assertEqual(set(dataset.certs['3651'].heuristics.connections), {'3615'}) - self.assertEqual(set(dataset.certs['3093'].heuristics.connections), {'3090', '3091'}) - self.assertEqual(set(dataset.certs['3090'].heuristics.connections), {'3089'}) - self.assertEqual(set(dataset.certs['3197'].heuristics.connections), {x for x in ['3195', '3096', '3196', '3644', '3651']}) - self.assertEqual(set(dataset.certs['3196'].heuristics.connections), {x for x in ['3194', '3091', '3480', '3615']}) - self.assertEqual(set(dataset.certs['3089'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['3195'].heuristics.connections), {'3194', '3091', '3480'}) - self.assertEqual(set(dataset.certs['3480'].heuristics.connections), {'3089'}) - self.assertEqual(set(dataset.certs['3615'].heuristics.connections), {'3089'}) - self.assertEqual(set(dataset.certs['3194'].heuristics.connections), {'3089'}) - self.assertEqual(set(dataset.certs['3091'].heuristics.connections), {'3089'}) - self.assertEqual(set(dataset.certs['3690'].heuristics.connections), {'3644', '3196', '3651'}) - self.assertEqual(set(dataset.certs['3644'].heuristics.connections), {'3615'}) - self.assertEqual(set(dataset.certs['3527'].heuristics.connections), {'3090', '3091'}) - self.assertEqual(set(dataset.certs['3094'].heuristics.connections), {'3090', '3091'}) - self.assertEqual(set(dataset.certs['3544'].heuristics.connections), {'3093', '3096', '3527'}) - self.assertEqual(set(dataset.certs['3096'].heuristics.connections), {'3090', '3194', '3091', '3480'}) - self.assertEqual(set(dataset.certs['3092'].heuristics.connections), {'3093', '3195', '3096', '3644', '3651'}) + self.assertEqual(set(dataset.certs["3095"].heuristics.connections), {"3093", "3096", "3094"}) + self.assertEqual(set(dataset.certs["3651"].heuristics.connections), {"3615"}) + self.assertEqual(set(dataset.certs["3093"].heuristics.connections), {"3090", "3091"}) + self.assertEqual(set(dataset.certs["3090"].heuristics.connections), {"3089"}) + self.assertEqual( + set(dataset.certs["3197"].heuristics.connections), {x for x in ["3195", "3096", "3196", "3644", "3651"]} + ) + self.assertEqual( + set(dataset.certs["3196"].heuristics.connections), {x for x in ["3194", "3091", "3480", "3615"]} + ) + self.assertEqual(set(dataset.certs["3089"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["3195"].heuristics.connections), {"3194", "3091", "3480"}) + self.assertEqual(set(dataset.certs["3480"].heuristics.connections), {"3089"}) + self.assertEqual(set(dataset.certs["3615"].heuristics.connections), {"3089"}) + self.assertEqual(set(dataset.certs["3194"].heuristics.connections), {"3089"}) + self.assertEqual(set(dataset.certs["3091"].heuristics.connections), {"3089"}) + self.assertEqual(set(dataset.certs["3690"].heuristics.connections), {"3644", "3196", "3651"}) + self.assertEqual(set(dataset.certs["3644"].heuristics.connections), {"3615"}) + self.assertEqual(set(dataset.certs["3527"].heuristics.connections), {"3090", "3091"}) + self.assertEqual(set(dataset.certs["3094"].heuristics.connections), {"3090", "3091"}) + self.assertEqual(set(dataset.certs["3544"].heuristics.connections), {"3093", "3096", "3527"}) + self.assertEqual(set(dataset.certs["3096"].heuristics.connections), {"3090", "3194", "3091", "3480"}) + self.assertEqual( + set(dataset.certs["3092"].heuristics.connections), {"3093", "3195", "3096", "3644", "3651"} + ) def test_connections_redhat(self): - certs = self.certs_to_parse['redhat'] + certs = self.certs_to_parse["redhat"] with TemporaryDirectory() as tmp_dir: dataset = _set_up_dataset_for_full(tmp_dir, certs, self.cpe_dset_path, self.cve_dset_path) - self.assertEqual(set(dataset.certs['2630'].heuristics.connections), {'2441'}) - self.assertEqual(set(dataset.certs['2633'].heuristics.connections), {'2441'}) - self.assertEqual(set(dataset.certs['2441'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['2997'].heuristics.connections), {'2711'}) - self.assertEqual(set(dataset.certs['2446'].heuristics.connections), {'2441'}) - self.assertEqual(set(dataset.certs['2447'].heuristics.connections), {'2441'}) - self.assertEqual(set(dataset.certs['3733'].heuristics.connections), {'2441'}) - self.assertEqual(set(dataset.certs['2441'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['2711'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['2908'].heuristics.connections), {'2711'}) - self.assertEqual(set(dataset.certs['3613'].heuristics.connections), {'2997'}) - self.assertEqual(set(dataset.certs['2721'].heuristics.connections), {'2441', '2711'}) - self.assertEqual(set(dataset.certs['2798'].heuristics.connections), {'2721', '2711'}) - self.assertEqual(set(dataset.certs['2711'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['2997'].heuristics.connections), {'2711'}) - self.assertEqual(set(dataset.certs['2742'].heuristics.connections), {'2721', '2711'}) - self.assertEqual(set(dataset.certs['2721'].heuristics.connections), {'2441', '2711'}) + self.assertEqual(set(dataset.certs["2630"].heuristics.connections), {"2441"}) + self.assertEqual(set(dataset.certs["2633"].heuristics.connections), {"2441"}) + self.assertEqual(set(dataset.certs["2441"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["2997"].heuristics.connections), {"2711"}) + self.assertEqual(set(dataset.certs["2446"].heuristics.connections), {"2441"}) + self.assertEqual(set(dataset.certs["2447"].heuristics.connections), {"2441"}) + self.assertEqual(set(dataset.certs["3733"].heuristics.connections), {"2441"}) + self.assertEqual(set(dataset.certs["2441"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["2711"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["2908"].heuristics.connections), {"2711"}) + self.assertEqual(set(dataset.certs["3613"].heuristics.connections), {"2997"}) + self.assertEqual(set(dataset.certs["2721"].heuristics.connections), {"2441", "2711"}) + self.assertEqual(set(dataset.certs["2798"].heuristics.connections), {"2721", "2711"}) + self.assertEqual(set(dataset.certs["2711"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["2997"].heuristics.connections), {"2711"}) + self.assertEqual(set(dataset.certs["2742"].heuristics.connections), {"2721", "2711"}) + self.assertEqual(set(dataset.certs["2721"].heuristics.connections), {"2441", "2711"}) def test_docusign_chunk(self): - certs = self.certs_to_parse['docusign'] + certs = self.certs_to_parse["docusign"] with TemporaryDirectory() as tmp_dir: dataset = _set_up_dataset_for_full(tmp_dir, certs, self.cpe_dset_path, self.cve_dset_path) - self.assertEqual(set(dataset.certs['3850'].heuristics.connections), {'3518', '1883'}) - self.assertEqual(set(dataset.certs['2779'].heuristics.connections), {'1883'}) - self.assertEqual(set(dataset.certs['2860'].heuristics.connections), {'1883'}) - self.assertEqual(set(dataset.certs['2665'].heuristics.connections), {'1883'}) - self.assertEqual(set(dataset.certs['1883'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['3518'].heuristics.connections), {'1883'}) - self.assertEqual(set(dataset.certs['3141'].heuristics.connections), {'1883'}) - self.assertEqual(set(dataset.certs['2590'].heuristics.connections), {'1883'}) + self.assertEqual(set(dataset.certs["3850"].heuristics.connections), {"3518", "1883"}) + self.assertEqual(set(dataset.certs["2779"].heuristics.connections), {"1883"}) + self.assertEqual(set(dataset.certs["2860"].heuristics.connections), {"1883"}) + self.assertEqual(set(dataset.certs["2665"].heuristics.connections), {"1883"}) + self.assertEqual(set(dataset.certs["1883"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["3518"].heuristics.connections), {"1883"}) + self.assertEqual(set(dataset.certs["3141"].heuristics.connections), {"1883"}) + self.assertEqual(set(dataset.certs["2590"].heuristics.connections), {"1883"}) def test_openssl_chunk(self): - certs = self.certs_to_parse['referencing_openssl'] + certs = self.certs_to_parse["referencing_openssl"] with TemporaryDirectory() as tmp_dir: dataset = _set_up_dataset_for_full(tmp_dir, certs, self.cpe_dset_path, self.cve_dset_path) - self.assertEqual(set(dataset.certs['3493'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['3495'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['3711'].heuristics.connections), {'3220'}) - self.assertEqual(set(dataset.certs['3176'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['3488'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['3126'].heuristics.connections), {'3126', '2398'}) - self.assertEqual(set(dataset.certs['3269'].heuristics.connections), {'3269', '3220'}) - self.assertEqual(set(dataset.certs['3524'].heuristics.connections), {'3220'}) - self.assertEqual(set(dataset.certs['3220'].heuristics.connections), {'3220', '2398'}) - self.assertEqual(set(dataset.certs['2398'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['3543'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['2676'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['3313'].heuristics.connections), {'3313', '3220'}) - self.assertEqual(set(dataset.certs['3363'].heuristics.connections), set()) - self.assertEqual(set(dataset.certs['3608'].heuristics.connections), {'2398'}) - self.assertEqual(set(dataset.certs['3158'].heuristics.connections), {'2398'}) + self.assertEqual(set(dataset.certs["3493"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["3495"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["3711"].heuristics.connections), {"3220"}) + self.assertEqual(set(dataset.certs["3176"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["3488"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["3126"].heuristics.connections), {"3126", "2398"}) + self.assertEqual(set(dataset.certs["3269"].heuristics.connections), {"3269", "3220"}) + self.assertEqual(set(dataset.certs["3524"].heuristics.connections), {"3220"}) + self.assertEqual(set(dataset.certs["3220"].heuristics.connections), {"3220", "2398"}) + self.assertEqual(set(dataset.certs["2398"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["3543"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["2676"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["3313"].heuristics.connections), {"3313", "3220"}) + self.assertEqual(set(dataset.certs["3363"].heuristics.connections), set()) + self.assertEqual(set(dataset.certs["3608"].heuristics.connections), {"2398"}) + self.assertEqual(set(dataset.certs["3158"].heuristics.connections), {"2398"}) |