test under py3.10

.github/workflows/test-suite.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: "${{ matrix.os }}"
     strategy:
       matrix:
-        python-version: ["3.6", "3.7", "3.8", "3.9"]
+        python-version: ["3.6", "3.7", "3.8", "3.9", "3.10.0-beta.2"]
         os: [windows-latest, ubuntu-latest]
     steps:
       - uses: "actions/checkout@v2"

docs/deployment.md

@@ -86,7 +86,7 @@ Options:
   --ssl-certfile TEXT             SSL certificate file
   --ssl-keyfile-password TEXT     SSL keyfile password
   --ssl-version INTEGER           SSL version to use (see stdlib ssl module's)
-                                  [default: 2]
+                                  [default: 17]
   --ssl-cert-reqs INTEGER         Whether client certificate is required (see
                                   stdlib ssl module's)  [default: 0]
   --ssl-ca-certs TEXT             CA certificates file

docs/index.md

@@ -156,7 +156,7 @@ Options:
   --ssl-certfile TEXT             SSL certificate file
   --ssl-keyfile-password TEXT     SSL keyfile password
   --ssl-version INTEGER           SSL version to use (see stdlib ssl module's)
-                                  [default: 2]
+                                  [default: 17]
   --ssl-cert-reqs INTEGER         Whether client certificate is required (see
                                   stdlib ssl module's)  [default: 0]
   --ssl-ca-certs TEXT             CA certificates file

requirements.txt

@@ -18,12 +18,16 @@ mypy
 trustme
 cryptography
 coverage
-httpx==0.16.*
+httpx>=0.16.0
 pytest-asyncio==0.14.*
 async_generator; python_version < '3.7'
 
 
 # Documentation
-mkdocs
+# from git due to https://github.com/mkdocs/mkdocs/pull/2209#issuecomment-855703485
+https://github.com/mkdocs/mkdocs/archive/b221df94fa7f29a2e63edfaeda56e3285b183f91.tar.gz#egg=mkdocs
 mkdocs-material
 
+# py3.10 workarounds
+https://github.com/aaugustin/websockets/archive/cb11516e0ed4fe2b67ab6c1511650bd42115d0b6.tar.gz#egg=websockets; python_version > '3.6'
+https://github.com/encode/httpx/archive/7eb610e606f4b95260c4835de4e9147477dcc6d7.tar.gz#egg=httpx

tests/conftest.py

@@ -13,7 +13,7 @@ def tls_certificate_authority() -> trustme.CA:
 
 @pytest.fixture
 def tls_certificate(tls_certificate_authority: trustme.CA) -> trustme.LeafCert:
-    return tls_certificate_authority.issue_server_cert(
+    return tls_certificate_authority.issue_cert(
         "localhost",
         "127.0.0.1",
         "::1",
@@ -33,9 +33,9 @@ def tls_ca_certificate_private_key_path(tls_certificate_authority: trustme.CA):
 
 
 @pytest.fixture
-def tls_ca_certificate_private_key_encrypted_path(tls_certificate_authority):
+def tls_certificate_private_key_encrypted_path(tls_certificate):
     private_key = serialization.load_pem_private_key(
-        tls_certificate_authority.private_key_pem.bytes(),
+        tls_certificate.private_key_pem.bytes(),
         password=None,
         backend=default_backend(),
     )
@@ -49,13 +49,25 @@ def tls_ca_certificate_private_key_encrypted_path(tls_certificate_authority):
 
 
 @pytest.fixture
-def tls_certificate_pem_path(tls_certificate: trustme.LeafCert):
+def tls_certificate_private_key_path(tls_certificate: trustme.CA):
+    with tls_certificate.private_key_pem.tempfile() as private_key:
+        yield private_key
+
+
+@pytest.fixture
+def tls_certificate_key_and_chain_path(tls_certificate: trustme.LeafCert):
     with tls_certificate.private_key_and_cert_chain_pem.tempfile() as cert_pem:
         yield cert_pem
 
 
 @pytest.fixture
-def tls_ca_ssl_context(tls_certificate: trustme.LeafCert) -> ssl.SSLContext:
-    ssl_ctx = ssl.SSLContext()
-    tls_certificate.configure_cert(ssl_ctx)
+def tls_certificate_server_cert_path(tls_certificate: trustme.LeafCert):
+    with tls_certificate.cert_chain_pems[0].tempfile() as cert_pem:
+        yield cert_pem
+
+
+@pytest.fixture
+def tls_ca_ssl_context(tls_certificate_authority: trustme.CA) -> ssl.SSLContext:
+    ssl_ctx = ssl.create_default_context(ssl.Purpose.SERVER_AUTH)
+    tls_certificate_authority.configure_trust(ssl_ctx)
     return ssl_ctx

tests/protocols/test_http.py

@@ -1,3 +1,4 @@
+import asyncio
 import contextlib
 import logging
 
@@ -123,12 +124,15 @@ def set_protocol(self, protocol):
         pass
 
 
-class MockLoop:
+class MockLoop(asyncio.AbstractEventLoop):
     def __init__(self, event_loop):
         self.tasks = []
         self.later = []
         self.loop = event_loop
 
+    def is_running(self):
+        return True
+
     def create_task(self, coroutine):
         self.tasks.insert(0, coroutine)
         return MockTask()
@@ -138,7 +142,14 @@ def call_later(self, delay, callback, *args):
 
     def run_one(self):
         coroutine = self.tasks.pop()
-        self.loop.run_until_complete(coroutine)
+        self.run_until_complete(coroutine)
+
+    def run_until_complete(self, coroutine):
+        asyncio._set_running_loop(None)
+        try:
+            return self.loop.run_until_complete(coroutine)
+        finally:
+            asyncio._set_running_loop(self)
 
     def close(self):
         self.loop.close()
@@ -161,13 +172,17 @@ def add_done_callback(self, callback):
 @contextlib.contextmanager
 def get_connected_protocol(app, protocol_cls, event_loop, **kwargs):
     loop = MockLoop(event_loop)
+    asyncio._set_running_loop(loop)
     transport = MockTransport()
     config = Config(app=app, **kwargs)
     server_state = ServerState()
     protocol = protocol_cls(config=config, server_state=server_state, _loop=loop)
     protocol.connection_made(transport)
-    yield protocol
-    protocol.loop.close()
+    try:
+        yield protocol
+    finally:
+        protocol.loop.close()
+        asyncio._set_running_loop(None)
 
 
 @pytest.mark.parametrize("protocol_cls", HTTP_PROTOCOLS)

tests/test_auto_detection.py

@@ -1,5 +1,7 @@
 import asyncio
 
+import pytest
+
 from uvicorn.config import Config
 from uvicorn.loops.auto import auto_loop_setup
 from uvicorn.main import ServerState
@@ -39,15 +41,17 @@ def test_loop_auto():
     assert type(policy).__module__.startswith(expected_loop)
 
 
-def test_http_auto():
+@pytest.mark.asyncio
+async def test_http_auto():
     config = Config(app=app)
     server_state = ServerState()
     protocol = AutoHTTPProtocol(config=config, server_state=server_state)
     expected_http = "H11Protocol" if httptools is None else "HttpToolsProtocol"
     assert type(protocol).__name__ == expected_http
 
 
-def test_websocket_auto():
+@pytest.mark.asyncio
+async def test_websocket_auto():
     config = Config(app=app)
     server_state = ServerState()
     protocol = AutoWebSocketsProtocol(config=config, server_state=server_state)

tests/test_config.py

@@ -156,10 +156,10 @@ def test_ssl_config(tls_ca_certificate_pem_path, tls_ca_certificate_private_key_
     assert config.is_ssl is True
 
 
-def test_ssl_config_combined(tls_certificate_pem_path):
+def test_ssl_config_combined(tls_certificate_key_and_chain_path):
     config = Config(
         app=asgi_app,
-        ssl_certfile=tls_certificate_pem_path,
+        ssl_certfile=tls_certificate_key_and_chain_path,
     )
     config.load()
 

tests/test_ssl.py

@@ -13,14 +13,17 @@ async def app(scope, receive, send):
 
 @pytest.mark.asyncio
 async def test_run(
-    tls_ca_ssl_context, tls_ca_certificate_pem_path, tls_ca_certificate_private_key_path
+    tls_ca_ssl_context,
+    tls_certificate_server_cert_path,
+    tls_certificate_private_key_path,
+    tls_ca_certificate_pem_path,
 ):
     config = Config(
         app=app,
         loop="asyncio",
         limit_max_requests=1,
-        ssl_keyfile=tls_ca_certificate_private_key_path,
-        ssl_certfile=tls_ca_certificate_pem_path,
+        ssl_keyfile=tls_certificate_private_key_path,
+        ssl_certfile=tls_certificate_server_cert_path,
         ssl_ca_certs=tls_ca_certificate_pem_path,
     )
     async with run_server(config):
@@ -31,13 +34,13 @@ async def test_run(
 
 @pytest.mark.asyncio
 async def test_run_chain(
-    tls_ca_ssl_context, tls_certificate_pem_path, tls_ca_certificate_pem_path
+    tls_ca_ssl_context, tls_certificate_key_and_chain_path, tls_ca_certificate_pem_path
 ):
     config = Config(
         app=app,
         loop="asyncio",
         limit_max_requests=1,
-        ssl_certfile=tls_certificate_pem_path,
+        ssl_certfile=tls_certificate_key_and_chain_path,
         ssl_ca_certs=tls_ca_certificate_pem_path,
     )
     async with run_server(config):
@@ -46,18 +49,33 @@ async def test_run_chain(
     assert response.status_code == 204
 
 
+@pytest.mark.asyncio
+async def test_run_chain_only(tls_ca_ssl_context, tls_certificate_key_and_chain_path):
+    config = Config(
+        app=app,
+        loop="asyncio",
+        limit_max_requests=1,
+        ssl_certfile=tls_certificate_key_and_chain_path,
+    )
+    async with run_server(config):
+        async with httpx.AsyncClient(verify=tls_ca_ssl_context) as client:
+            response = await client.get("https://127.0.0.1:8000")
+    assert response.status_code == 204
+
+
 @pytest.mark.asyncio
 async def test_run_password(
     tls_ca_ssl_context,
+    tls_certificate_server_cert_path,
     tls_ca_certificate_pem_path,
-    tls_ca_certificate_private_key_encrypted_path,
+    tls_certificate_private_key_encrypted_path,
 ):
     config = Config(
         app=app,
         loop="asyncio",
         limit_max_requests=1,
-        ssl_keyfile=tls_ca_certificate_private_key_encrypted_path,
-        ssl_certfile=tls_ca_certificate_pem_path,
+        ssl_keyfile=tls_certificate_private_key_encrypted_path,
+        ssl_certfile=tls_certificate_server_cert_path,
         ssl_keyfile_password="uvicorn password for the win",
         ssl_ca_certs=tls_ca_certificate_pem_path,
     )

uvicorn/config.py

@@ -66,8 +66,7 @@
 INTERFACES = ["auto", "asgi3", "asgi2", "wsgi"]
 
 
-# Fallback to 'ssl.PROTOCOL_SSLv23' in order to support Python < 3.5.3.
-SSL_PROTOCOL_VERSION = getattr(ssl, "PROTOCOL_TLS", ssl.PROTOCOL_SSLv23)
+SSL_PROTOCOL_VERSION = ssl.PROTOCOL_TLS_SERVER
 
 
 LOGGING_CONFIG = {

uvicorn/loops/asyncio.py

@@ -1,19 +1,7 @@
 import asyncio
-import platform
-import selectors
 import sys
 
 
 def asyncio_setup() -> None:  # pragma: no cover
-    loop: asyncio.AbstractEventLoop
-    if (
-        sys.version_info.major >= 3
-        and sys.version_info.minor >= 8
-        and platform.system() == "Windows"
-    ):
-        selector = selectors.SelectSelector()
-        loop = asyncio.SelectorEventLoop(selector)
-        asyncio.set_event_loop(loop)
-    else:
-        loop = asyncio.new_event_loop()
-        asyncio.set_event_loop(loop)
+    if sys.version_info >= (3, 8) and sys.platform == "win32":
+        asyncio.set_event_loop_policy(asyncio.WindowsSelectorEventLoopPolicy())

uvicorn/protocols/websockets/websockets_impl.py

@@ -4,7 +4,8 @@
 from typing import Callable
 from urllib.parse import unquote
 
-import websockets
+# work around https://github.com/aaugustin/websockets/issues/989
+import websockets.exceptions
 from websockets.extensions.permessage_deflate import ServerPerMessageDeflateFactory
 
 from uvicorn.protocols.utils import get_local_addr, get_remote_addr, is_ssl

uvicorn/server.py

@@ -46,8 +46,9 @@ def __init__(self, config):
 
     def run(self, sockets=None):
         self.config.setup_event_loop()
-        loop = asyncio.get_event_loop()
-        loop.run_until_complete(self.serve(sockets=sockets))
+        if sys.version_info >= (3, 7):
+            return asyncio.run(self.serve(sockets=sockets))
+        return asyncio.get_event_loop().run_until_complete(self.serve(sockets=sockets))
 
     async def serve(self, sockets=None):
         process_id = os.getpid()