mirror of
https://github.com/Chia-Network/chia-blockchain.git
synced 2026-08-29 18:14:26 -05:00
* Moved keyring handling into a KeyringWrapper class * Update click to 8.0.x for prompt_required support * Renamed KeyringWrapper to _KeyringWrapper * Expose password management options on Linux * CLI support for setting/removing a password * Global option for specifying the master password * Cache the password instead of setting on the context * Password bootstrapping during chia init * Tidying up _KeyringWraper's interface * Initial pass migrating the legacy keyring contents * Encryption/decryption of keyring.yaml contents * FileKeyring backend encrypts with ChaCha20Poly1305 * Tightened up keyring migration and initialization * Fixed issues identified by linters * Remove root_path from Keychain * Prevent double-migration if setting master passwd * KeyringWrapper tests are mostly complete * FileKeyring will now honor the service param * Tests for get/set/delete password * Formatting/commenting updates * Writer lock support with tests - WIP * keyring.yaml is now watched for modifications * Reader/Writer lock for get/delete password * Fixed linter issues * Reader lock tests * Formatting update * Hook up CHIA_ROOT support for KeychainWrapper * Quick fix to address test failures * Fixed failures when existing legacy keyring exists * Fixed test failures caused by reusing the same temp dir * keyring.yaml now lives in ~/.chia_keys by default. Can be overridden with CHIA_KEYS_ROOT or --keys-root-path * Fixed migration failure when setting a password (not using the default) * KeyringWrapper now uses supports_keyring_password to determine if a FileKeyring should be used. Patched tests to work regardless of whether supports_keyring_password return False * The daemon now takes a --have-gui option that will prevent calling check_keys() during startup. If the keyring is locked, we want the GUI to prompt for the password. * Added is_keyring_locked RPC call * Added 'unlock_keyring' RPC command * Added KeychainProxy and KeychainServer to handle RPC messages related to keyring operations. WalletNode no longer directly accesses the Keychain class. * Turn on macOS support for testing keyring passwords * Fixed get_key_for_fingerprint to use the ocal keychain if the platform doesn't need to remotely access the daemon's keychain. Fixed key reconstruction when sent over RPC. * Farmer now accesses the keychain over RPC * Fixes for linter issues and some restructuring to support tests that use setup_nodes.py * Couple of fixes to unblock the GUI from launching when a keyring password is set * Added a keychain RPC call for add_private_key() * Added remaining keychain proxy RPC calls for delete_key_by_fingerprint and delete_all_keys * Check for None when inspecting request arguments * Run check_keys after unlocking the keyring when the daemon is launched via GUI * Added check_keys RPC method. Fixed deserialization of key entropy in get_all_private_keys. This was preventing the GUI from being able to show key details. * Added get_first_private_key to keychain_server/proxy. create_plots now uses the keychain proxy when launched from the daemon. * Added a comment about KeychainProxy in chia plots check * Workaround import conflict when importing from 'tests.*' due to fasteners name conflict * Simulator now uses KeychainProxy if launched by the daemon. KeychainServer/Proxy now takes keychain user/testing params for testing scenarios. * Added "set_keyring_passphrase" RPC message * Reworking KeychainProxy usage to handle local keychain tests and RPC keychain tests. * Replace my prior usage of asyncio.run() with asyncio.get_event_loop().run_until_complete() * Silencing file_keyring logging for the moment. * Updated tests to use test keychains and appropriate BlockTools construction BlockTools should now be created with create_block_tools(_async) to handle async scenarios. Updated block_tools to be async compatible Updated fasteners to fix installation of top-level 'tests' in site-packages * Added 'remove_keyring_passphrase' RPC message to the daemon Minor tweak to TempKeyring to default to some test params * Fixed linter issues * Remove flake8 ignore statement now that the fasteners module has been updated * Some initial renaming changes: password -> passphrase * Fixed wallet RPC issue where get_key_for_fingerprint wasn't awaited-upon. Fixed legacy keyring initialization (for migration scenarios) * Fixed improperly merged file * Fixed linter issues. More renaming. * Updated spots that were still using an incorrect keychain call * Renamed use_password_cache, obtain_current_password * Renamed supports_keyring_password * Renamed has_master_password * Renamed has_cached_password, get_cached_master_password * Linter fixes * Renamed master_password_is_valid * Renamed set_cached_master_password * Renamed set_master_password * Renamed remove_master_password * Renamed has_cached_master_password * Renaming in file_keyring and keyring_wrapper Updated default keyring payload used for tests * Renamed get_password Other renaming updates * Renamed set_password Other renaming updates * Renamed remaining password occurrences (where appropriate) * password -> passphrase * Added tests for setting an emoji and Japanese master passphrase * Attempt to notify the daemon when a keyring passphrase is set/updated/removed * Missed one password -> passphrase replacement. * Fixed some file synchronization issues found when running tests on macOS * Adjusted timeout values for test_writer_lock_reacquisition_failure for macOS. * Removed logging statements previously added for debugging * Prompt for keyring passphrase up-front when launching a service. Changed --have-gui flag to --wait-for-unlock * Updated set_keyring_passphrase RPC message to fix optional current_passphrase param when the keyring is using the default passphrase. * Minor test cleanup to deduplicate some code. * Fixed regression when setting a new master passphrase * Minor refactoring and docs/commenting updates * Renaming password -> passphrase went too far. Keyring backends use password terminology for compatibility with third party backends. * Disabling macOS support (previously added for testing only) * Disabling passphrase support in preparation for sending out the PR * Fixed improper merge (vscode didn't save changes during rebase) * Update chia/cmds/init_funcs.py Co-authored-by: Adam Kelly <338792+aqk@users.noreply.github.com> * skip_check_keys -> should_check_keys * Shuffling some imports around to break cycles reported by LGTM * Handle unlocking the daemon if it's already launched and waiting for unlock. * Replaced uses_keychain_proxy decorator in farmer.py. Fixed async usage of get_reward_targets. Linter/reformatting fixes * Replaced uses_keychain_proxy decorator with a clearer method. * Cleanup the temp keyring dir using shutil.rmtree() * Restored self._root_path (had been changed to self.root_path) * Minor cleanup * ensure_keychain_proxy() now throws if connect_to_keychain_and_validate() fails * Plot key resolution now yields a PlotKeys object which can be passed into create_plots. De-indented test_invalid_icc_sub_slot_vdf to keep git blame tidy. * Added 'keyring_status' daemon RPC message to support the GUI * Minor changes relating to PR feedback * Addressed more PR feedback (mostly type annotations) * Commented-out macOS file keyring usage. This can be re-enabled for testing purposes. * Addressed test failures that require multiple keyrings in the same process. Each TempKeyring will now set a custom KeyringWrapper instance. * Fixed logic for communicating user_passphrase_is_set in the keyring_status RPC response. * Updated type annotations and method signature for set_passphrase to expect a string instead of bytes. * Fixed Wallet RPC tests * Fixed full_node_store tests. BlockTools should be created using the create_block_tools(_async) function(s) * Fixed test failures in test_pool_rpc * Fixed test_daemon. After BlockTools.setup_plots is run, the config file needs to be re-read to refresh stale plot_directories. * Suppressing LGTM false positives regarding passphrase leakage in CLI error output. Seems that LGTM sees MIN_PASSPHRASE_LEN as sensitive data. * Second attempt at suppressing LGTM false positives * Third attempt at addressing LGTM false positives * Removed test_keyring_wrapper param from Keychain ctor. Test setup now sets the keyring_wrapper property directly. * Reformatting * More targeted update of the test config to refresh just the "plot_directories" value * More LGTM suppressions Co-authored-by: Adam Kelly <338792+aqk@users.noreply.github.com> Co-authored-by: wjblanke <wjb98672@gmail.com>
92 lines
4.2 KiB
Python
92 lines
4.2 KiB
Python
import pytest
|
|
|
|
from chia.types.peer_info import PeerInfo
|
|
from tests.block_tools import create_block_tools_async
|
|
from chia.util.ints import uint16
|
|
from tests.core.node_height import node_height_at_least
|
|
from tests.setup_nodes import self_hostname, setup_full_node, setup_full_system, test_constants
|
|
from tests.time_out_assert import time_out_assert
|
|
from tests.util.keyring import TempKeyring
|
|
|
|
test_constants_modified = test_constants.replace(
|
|
**{
|
|
"DIFFICULTY_STARTING": 2 ** 8,
|
|
"DISCRIMINANT_SIZE_BITS": 1024,
|
|
"SUB_EPOCH_BLOCKS": 140,
|
|
"WEIGHT_PROOF_THRESHOLD": 2,
|
|
"WEIGHT_PROOF_RECENT_BLOCKS": 350,
|
|
"MAX_SUB_SLOT_BLOCKS": 50,
|
|
"NUM_SPS_SUB_SLOT": 32, # Must be a power of 2
|
|
"EPOCH_BLOCKS": 280,
|
|
"SUB_SLOT_ITERS_STARTING": 2 ** 20,
|
|
"NUMBER_ZERO_BITS_PLOT_FILTER": 5,
|
|
}
|
|
)
|
|
|
|
|
|
class TestSimulation:
|
|
@pytest.fixture(scope="function")
|
|
async def extra_node(self):
|
|
with TempKeyring() as keychain:
|
|
b_tools = await create_block_tools_async(constants=test_constants_modified, keychain=keychain)
|
|
async for _ in setup_full_node(test_constants_modified, "blockchain_test_3.db", 21240, b_tools):
|
|
yield _
|
|
|
|
@pytest.fixture(scope="function")
|
|
async def simulation(self):
|
|
async for _ in setup_full_system(test_constants_modified):
|
|
yield _
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_simulation_1(self, simulation, extra_node):
|
|
node1, node2, _, _, _, _, _, _, _, server1 = simulation
|
|
await server1.start_client(PeerInfo(self_hostname, uint16(21238)))
|
|
# Use node2 to test node communication, since only node1 extends the chain.
|
|
await time_out_assert(1500, node_height_at_least, True, node2, 7)
|
|
|
|
async def has_compact(node1, node2):
|
|
peak_height_1 = node1.full_node.blockchain.get_peak_height()
|
|
headers_1 = await node1.full_node.blockchain.get_header_blocks_in_range(0, peak_height_1)
|
|
peak_height_2 = node2.full_node.blockchain.get_peak_height()
|
|
headers_2 = await node2.full_node.blockchain.get_header_blocks_in_range(0, peak_height_2)
|
|
# Commented to speed up.
|
|
# cc_eos = [False, False]
|
|
# icc_eos = [False, False]
|
|
# cc_sp = [False, False]
|
|
# cc_ip = [False, False]
|
|
has_compact = [False, False]
|
|
for index, headers in enumerate([headers_1, headers_2]):
|
|
for header in headers.values():
|
|
for sub_slot in header.finished_sub_slots:
|
|
if sub_slot.proofs.challenge_chain_slot_proof.normalized_to_identity:
|
|
# cc_eos[index] = True
|
|
has_compact[index] = True
|
|
if (
|
|
sub_slot.proofs.infused_challenge_chain_slot_proof is not None
|
|
and sub_slot.proofs.infused_challenge_chain_slot_proof.normalized_to_identity
|
|
):
|
|
# icc_eos[index] = True
|
|
has_compact[index] = True
|
|
if (
|
|
header.challenge_chain_sp_proof is not None
|
|
and header.challenge_chain_sp_proof.normalized_to_identity
|
|
):
|
|
# cc_sp[index] = True
|
|
has_compact[index] = True
|
|
if header.challenge_chain_ip_proof.normalized_to_identity:
|
|
# cc_ip[index] = True
|
|
has_compact[index] = True
|
|
|
|
# return (
|
|
# cc_eos == [True, True] and icc_eos == [True, True] and cc_sp == [True, True] and cc_ip == [True, True]
|
|
# )
|
|
return has_compact == [True, True]
|
|
|
|
await time_out_assert(1500, has_compact, True, node1, node2)
|
|
node3 = extra_node
|
|
server3 = node3.full_node.server
|
|
peak_height = max(node1.full_node.blockchain.get_peak_height(), node2.full_node.blockchain.get_peak_height())
|
|
await server3.start_client(PeerInfo(self_hostname, uint16(21237)))
|
|
await server3.start_client(PeerInfo(self_hostname, uint16(21238)))
|
|
await time_out_assert(600, node_height_at_least, True, node3, peak_height)
|