def test_ssl_wrap_socket_loads_certificate_directories(self):
     socket = object()
     mock_context = Mock()
     ssl_wrap_socket(ssl_context=mock_context, ca_cert_dir='/path/to/pems',
                     sock=socket)
     mock_context.load_verify_locations.assert_called_once_with(
         None, '/path/to/pems')

 def test_ssl_wrap_socket_loads_verify_locations(self):
     socket = object()
     mock_context = Mock()
     ssl_wrap_socket(ssl_context=mock_context, ca_certs='/path/to/pem',
                     sock=socket)
     mock_context.load_verify_locations.assert_called_once_with(
         '/path/to/pem', None)

    def test_ssl_wrap_socket_creates_new_context(self,
                                                 create_urllib3_context):
        socket = object()
        ssl_wrap_socket(sock=socket, cert_reqs='CERT_REQUIRED')

        create_urllib3_context.assert_called_once_with(
            None, 'CERT_REQUIRED', ciphers=None
        )

    def test_ssl_wrap_socket_loads_the_cert_chain(self):
        socket = object()
        mock_context = Mock()
        ssl_wrap_socket(ssl_context=mock_context, sock=socket,
                        certfile='/path/to/certfile')

        mock_context.load_cert_chain.assert_called_once_with(
            '/path/to/certfile', None)

 def test_ssl_wrap_socket_with_no_sni(self):
     socket = object()
     mock_context = Mock()
     # Ugly preservation of original value
     HAS_SNI = ssl_.HAS_SNI
     ssl_.HAS_SNI = False
     ssl_wrap_socket(ssl_context=mock_context, sock=socket)
     mock_context.wrap_socket.assert_called_once_with(socket)
     ssl_.HAS_SNI = HAS_SNI

def test_context_sni_with_ip_address(monkeypatch, has_sni, server_hostname, uses_sni):
    monkeypatch.setattr(ssl_, 'HAS_SNI', has_sni)

    sock = mock.Mock()
    context = mock.create_autospec(ssl_.SSLContext)

    ssl_.ssl_wrap_socket(sock, server_hostname=server_hostname, ssl_context=context)

    if uses_sni:
        context.wrap_socket.assert_called_with(sock, server_hostname=server_hostname)
    else:
        context.wrap_socket.assert_called_with(sock)

 def test_ssl_wrap_socket_with_no_sni_warns(self):
     socket = object()
     mock_context = Mock()
     # Ugly preservation of original value
     HAS_SNI = ssl_.HAS_SNI
     ssl_.HAS_SNI = False
     with patch('warnings.warn') as warn:
         ssl_wrap_socket(ssl_context=mock_context, sock=socket)
     mock_context.wrap_socket.assert_called_once_with(socket)
     ssl_.HAS_SNI = HAS_SNI
     self.assertTrue(warn.call_count >= 1)
     warnings = [call[0][1] for call in warn.call_args_list]
     self.assertTrue(SNIMissingWarning in warnings)

def test_sni_missing_warning_with_ip_addresses(monkeypatch, has_sni, server_hostname, should_warn):
    monkeypatch.setattr(ssl_, 'HAS_SNI', has_sni)

    sock = mock.Mock()
    context = mock.create_autospec(ssl_.SSLContext)

    with mock.patch('warnings.warn') as warn:
        ssl_.ssl_wrap_socket(sock, server_hostname=server_hostname, ssl_context=context)

    if should_warn:
        assert warn.call_count >= 1
        warnings = [call[0][1] for call in warn.call_args_list]
        assert SNIMissingWarning in warnings
    else:
        assert warn.call_count == 0

 def test_ssl_wrap_socket_with_no_sni_warns(self):
     socket = object()
     mock_context = Mock()
     # Ugly preservation of original value
     HAS_SNI = ssl_.HAS_SNI
     ssl_.HAS_SNI = False
     try:
         with patch('warnings.warn') as warn:
             ssl_wrap_socket(ssl_context=mock_context, sock=socket,
                             server_hostname='www.google.com')
         mock_context.wrap_socket.assert_called_once_with(socket)
         assert warn.call_count >= 1
         warnings = [call[0][1] for call in warn.call_args_list]
         assert SNIMissingWarning in warnings
     finally:
         ssl_.HAS_SNI = HAS_SNI