1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
from __future__ import annotations
import datetime
from collections.abc import Generator
from importlib import resources
from pathlib import Path
import pytest
import tests.data.fips.mip
from sec_certs.configuration import config
from sec_certs.dataset.fips import FIPSDataset
from sec_certs.dataset.fips_mip import MIPDataset
from sec_certs.model.fips_matching import FIPSProcessMatcher
from sec_certs.sample.fips_mip import MIPEntry, MIPSnapshot, MIPStatus
@pytest.fixture(scope="module")
def data_dir() -> Generator[Path, None, None]:
with resources.path(tests.data.fips.mip, "") as path:
yield path
@pytest.fixture(scope="module")
def data_dump_path(data_dir) -> Path:
return data_dir / "fips_mip_2021-02-19T06+01:00.html"
def test_mip_dataset_from_dumps(data_dir: Path):
dset = MIPDataset.from_dumps(data_dir)
assert dset
assert len(dset) == 3
@pytest.mark.remote
def test_mip_flows():
dset = MIPDataset.from_web()
assert dset.compute_flows()
def test_mip_snapshot_from_dump(data_dump_path: Path):
assert MIPSnapshot.from_dump(data_dump_path)
@pytest.mark.parametrize("preferred_source", ["sec-certs", "origin"])
@pytest.mark.remote
def test_from_web(preferred_source):
config.preferred_source_remote_datasets = preferred_source
assert MIPSnapshot.from_web()
@pytest.mark.remote
def test_from_nist():
assert MIPSnapshot.from_nist_web()
def test_mip_matching(processed_dataset: FIPSDataset):
entry = MIPEntry(
module_name="Red Hat Enterprise Linux 7.1 OpenSSL Module",
vendor_name="Red Hat(R), Inc.",
standard="FIPS 140-2",
status=MIPStatus.IN_REVIEW,
status_since=datetime.date(2014, 1, 1),
)
matcher = FIPSProcessMatcher(entry)
scores = [matcher.match(cert) for cert in processed_dataset]
assert len(list(filter(lambda x: x > 90, scores))) == 1
def test_mip_snapshot_match(processed_dataset: FIPSDataset, data_dump_path: Path):
snapshot = MIPSnapshot.from_dump(data_dump_path)
# Move snapshot date back so that there are matches
snapshot.timestamp = datetime.datetime(2014, 1, 2)
matches = FIPSProcessMatcher.match_snapshot(snapshot, processed_dataset)
assert matches
|
