Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove test condition for tuf.ForbiddenTargetError exception (has been removed)

Browse source
This commit is contained in:
Vladimir Diaz 2016-03-31 17:29:38 -04:00
parent e02f2f54a9
commit b0c86cacb4
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
tests/test_extraneous_dependencies_attack.py
View file

@ -176,10 +176,10 @@ def test_with_tuf(self):
# An attacker tries to trick a client into installing an extraneous target
# file (a valid file on the repository, in this case) by listing it in the
# project's metadata file. For the purposes of test_with_tuf(),
# 'targets/role1.json' is treated as the metadata file that indicates all
# 'role1.json' is treated as the metadata file that indicates all
# the files needed to install/update the 'role1' project. The attacker
# simply adds the extraneous target file to 'role1.json', which the TUF
# client should reject as untrusted.
# client should reject as improperly signed.
role1_filepath = os.path.join(self.repository_directory, 'metadata',
'role1.json')
file1_filepath = os.path.join(self.repository_directory, 'targets',
@ -210,7 +210,7 @@ def test_with_tuf(self):
# Verify that the TUF client rejects the invalid metadata and refuses to
# continue the update process.
self.repository_updater.refresh()
try:
self.repository_updater.targets_of_role('role1')
@ -223,7 +223,7 @@ def test_with_tuf(self):
# Verify that 'role1.json' is the culprit.
self.assertEqual(url_file, mirror_url)
self.assertTrue(isinstance(mirror_error, tuf.ForbiddenTargetError))
self.assertTrue(isinstance(mirror_error, tuf.BadSignatureError))
else:
self.fail('TUF did not prevent an extraneous dependencies attack.')