Your IP : 3.149.249.84
U
i�f5� �
@ s� d dl Z d dlZd dlmZ d dlmZmZm Z
d dl Z d dl m Z m
Z
mZ d dl mZmZmZ d dl mZmZmZmZmZmZmZ d dl mZmZ d dl m Z m Z m Z m Z zd d l m!Z! W n e"k
r� Y nX d d
l m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, d d l m-Z-m.Z. ej/d e0d
d� e d� e
j/de0dd� e d� ej/de0dd� e d� ej/de0dd� e d� e
j/de0dd� e d� ej/de0dd� e d� e1j2 Z3e1_3dd� e1j4�5� D �Z6e7e1d d�Z8G d d � d e�Z9G d d � d e�Z:G d!d"� d"e�Z;G d#d$� d$e�Z<e j=d%k�r d d&l m>Z>m?Z? d d'l@m@Z@mAZAmBZBmCZC d d(l@mDZDmEZE d dl@ZFd dlGZGd dlHZHd dlIZIeJZKd)gZLeMe d*�ZNe-ZOeZPd+d,� ZQd-d.� ZRd/d0� ZSd1d2� ZTed3d4�ZUd5d6� ZVG d7d8� d8ed8d9��ZWG d:d;� d;eWe�ZXG d<d=� d=e�ZYeXjZfdddd>�d?d@�Z[e2fe\dAeXjZddddddB�dCdD�Z]e[Z^e]Z_G dEdF� dF�Z`dGdH� ZaG dIdJ� dJe@�ZbebeY_ce`eY_ddddAe\e2ddKdKdf dLdM�ZedNdO� ZfdPZgdQZhdRdS� ZidTdU� Zje2dfdVdW�ZkdXdY� ZldS )Z� N)�
namedtuple)�Enum�IntEnum�IntFlag)�OPENSSL_VERSION_NUMBER�OPENSSL_VERSION_INFO�OPENSSL_VERSION)� _SSLContext� MemoryBIO�
SSLSession)�SSLError�SSLZeroReturnError�SSLWantReadError�SSLWantWriteError�SSLSyscallError� SSLEOFError�SSLCertVerificationError)�txt2obj�nid2obj)� RAND_status�RAND_add�
RAND_bytes�RAND_pseudo_bytes)�RAND_egd)
�HAS_SNI�HAS_ECDH�HAS_NPN�HAS_ALPN� HAS_SSLv2� HAS_SSLv3� HAS_TLSv1� HAS_TLSv1_1� HAS_TLSv1_2� HAS_TLSv1_3)�_DEFAULT_CIPHERS�_OPENSSL_API_VERSION�
_SSLMethodc C s | � d�o| dkS )NZ PROTOCOL_�PROTOCOL_SSLv23��
startswith��name� r, �(/opt/alt/python38/lib64/python3.8/ssl.py�<lambda>| � r. )�source�Optionsc C s
| � d�S )NZOP_r( r* r, r, r- r. � r/ ZAlertDescriptionc C s
| � d�S )NZALERT_DESCRIPTION_r( r* r, r, r- r. � r/ ZSSLErrorNumberc C s
| � d�S )NZ
SSL_ERROR_r( r* r, r, r- r. � r/ � VerifyFlagsc C s
| � d�S )NZVERIFY_r( r* r, r, r- r. � r/ �
VerifyModec C s
| � d�S )NZCERT_r( r* r, r, r- r. � r/ c C s i | ]\}}||�qS r, r, )�.0r+ �valuer, r, r- �
<dictcomp>� s r6 ZPROTOCOL_SSLv2c @ s6 e Zd ZejZejZejZ ej
Z ej Z
ejZejZdS )�
TLSVersionN)�__name__�
__module__� __qualname__�_sslZPROTO_MINIMUM_SUPPORTEDZMINIMUM_SUPPORTEDZ PROTO_SSLv3�SSLv3Z PROTO_TLSv1ZTLSv1Z
PROTO_TLSv1_1ZTLSv1_1Z
PROTO_TLSv1_2ZTLSv1_2Z
PROTO_TLSv1_3ZTLSv1_3ZPROTO_MAXIMUM_SUPPORTEDZMAXIMUM_SUPPORTEDr, r, r, r- r7 � s r7 c @ s$ e Zd ZdZdZdZdZdZdZdS )�_TLSContentType� � � � � � N) r8 r9 r: �CHANGE_CIPHER_SPEC�ALERTZ HANDSHAKEZAPPLICATION_DATA�HEADERZINNER_CONTENT_TYPEr, r, r, r- r= � s r= c @ s� e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Z!d Z"d!Z#d"Z$d#S )$�
_TLSAlertTyper �
r> r? r@ � �( �) �* �+ �, �- �. �/ �0 �1 �2 �3 �< �F �G �P �V �Z �d �m �n �o �p �q �r �s �t �x N)%r8 r9 r: Z CLOSE_NOTIFYZUNEXPECTED_MESSAGEZBAD_RECORD_MACZDECRYPTION_FAILEDZRECORD_OVERFLOWZDECOMPRESSION_FAILUREZHANDSHAKE_FAILUREZNO_CERTIFICATEZBAD_CERTIFICATEZUNSUPPORTED_CERTIFICATEZCERTIFICATE_REVOKEDZCERTIFICATE_EXPIREDZCERTIFICATE_UNKNOWNZILLEGAL_PARAMETERZ
UNKNOWN_CAZ
ACCESS_DENIEDZ DECODE_ERRORZ
DECRYPT_ERRORZEXPORT_RESTRICTIONZPROTOCOL_VERSIONZINSUFFICIENT_SECURITYZINTERNAL_ERRORZINAPPROPRIATE_FALLBACKZ
USER_CANCELEDZNO_RENEGOTIATIONZMISSING_EXTENSIONZUNSUPPORTED_EXTENSIONZCERTIFICATE_UNOBTAINABLEZUNRECOGNIZED_NAMEZ BAD_CERTIFICATE_STATUS_RESPONSEZBAD_CERTIFICATE_HASH_VALUEZUNKNOWN_PSK_IDENTITYZCERTIFICATE_REQUIREDZNO_APPLICATION_PROTOCOLr, r, r, r- rG � sD rG c @ sd e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdS )�_TLSMessageTyper � � � � � � � � � �
� � � r> r? r@ rA � �C � rC N)r8 r9 r: Z
HELLO_REQUESTZ CLIENT_HELLOZ SERVER_HELLOZHELLO_VERIFY_REQUESTZNEWSESSION_TICKETZEND_OF_EARLY_DATAZHELLO_RETRY_REQUESTZENCRYPTED_EXTENSIONSZ CERTIFICATEZSERVER_KEY_EXCHANGEZCERTIFICATE_REQUESTZ SERVER_DONEZCERTIFICATE_VERIFYZCLIENT_KEY_EXCHANGEZFINISHEDZCERTIFICATE_URLZCERTIFICATE_STATUSZSUPPLEMENTAL_DATAZ
KEY_UPDATEZ
NEXT_PROTOZ MESSAGE_HASHrD r, r, r, r- rf � s, rf �win32)�enum_certificates� enum_crls)�socket�AF_INET� SOCK_STREAM�create_connection)�
SOL_SOCKET�SO_TYPE�
tls-unique� HOSTFLAG_NEVER_CHECK_SUBJECTc C s� | sdS | � d�}|s&| �� |�� kS |dkr<td�| ���| �d�\}}}d|krbtd�| ���|sttd�| ���|dkr�td�| ���|�d�\}}}|r�|s�dS |�� |�� kS ) NF�*rg z1too many wildcards in certificate DNS name: {!r}.�.z9wildcard can only be present in the leftmost label: {!r}.z>sole wildcard without additional labels are not support: {!r}.z<partial wildcards in leftmost label are not supported: {!r}.)�count�lower�CertificateError�format� partition)Zdn�hostnameZ wildcardsZ dn_leftmost�sepZ dn_remainderZhostname_leftmostZhostname_remainderr, r, r- �_dnsname_match s@
�������r� c C s� zt �| �}W n tk
r" Y n"X t �|�| kr6|S td�| ���zt �t j| �W S tk
rv td�| ���Y n tk
r� Y nX td�| ���d S )Nz'{!r} is not a quad-dotted IPv4 address.z+{!r} is neither an IPv4 nor an IP6 address.z {!r} is not an IPv4 address.) �_socketZ inet_aton�OSErrorZ inet_ntoa�
ValueErrorr� Z inet_ptonZAF_INET6�AttributeError)Zipname�addrr, r, r- � _inet_patonD s$ ��
r� c C s t | �� �}||kS �N)r� �rstrip)Zcert_ipaddress�host_ipZipr, r, r- �_ipaddress_matchg s r� c C sJ | s t d��z t|�}W n t k
r0 d }Y nX g }| �dd�}|D ]^\}}|dkrz|d krnt||�rn d S |�|� qF|dkrF|d k r�t||�r� d S |�|� qF|s�| �dd�D ]6}|D ],\}}|dkr�t||�r� d S |�|� q�q�t|�dk�rtd |d
�t t
|��f ��n,t|�dk�r>td ||d f ��ntd
��d S )Nztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDZsubjectAltNamer, ZDNSz
IP AddressZsubjectZ
commonNamerg z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) r� r� �getr� �appendr� �lenr� �join�map�repr)�certr� r� ZdnsnamesZsan�keyr5 �subr, r, r- �match_hostnames sB
�
�r� �DefaultVerifyPathszQcafile capath openssl_cafile_env openssl_cafile openssl_capath_env openssl_capathc C sd t �� } tj�| d | d �}tj�| d | d �}ttj�|�rF|nd tj�|�rX|nd f| �� S )Nr rg rh ri ) r; �get_default_verify_paths�os�environr� r� �path�isfile�isdir)�parts�cafile�capathr, r, r- r� � s ��r� c s@ e Zd ZdZ� fdd�Ze� fdd��Ze� fdd��Z� ZS )� _ASN1Objectr, c s t � j| ft|dd��� S )NFr* ��super�__new__�_txt2obj)�cls�oid�� __class__r, r- r� � s z_ASN1Object.__new__c s t � j| ft|��� S r� )r� r� �_nid2obj)r� Znidr� r, r- �fromnid� s z_ASN1Object.fromnidc s t � j| ft|dd��� S )NTr* r� )r� r+ r� r, r- �fromname� s z_ASN1Object.fromname) r8 r9 r: � __slots__r� � classmethodr� r� �
__classcell__r, r, r� r- r� � s r� znid shortname longname oidc @ s e Zd ZdZdZdS )�Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)r8 r9 r: � SERVER_AUTHZ CLIENT_AUTHr, r, r, r- r� � s r� c s� e Zd ZdZdZdZefdd�Zdd� Zd1d d
�Z d2d d �Z
d
d� Z dd� Z dd� Z
dd� Zejfdd�Zeed�r�e� fdd��Zej� fdd��Ze� fdd ��Zej� fd d ��Ze� fd d ��Zej� fd d ��Zeed!��red"d#� �Zejd$d#� �Zn ed%d#� �Ze� fd&d'��Zej� fd(d'��Ze� fd)d*��Z e� fd+d,��Z e j� fd-d,��Z e� fd.d/��Z e j� fd0d/��Z � Z S )3�
SSLContext)ZCAZROOTNc O s t �| |�}|S r� )r r� )r� �protocol�args�kwargs�selfr, r, r- r� � s zSSLContext.__new__c C s4 |d kr d S t |t�r&|�d��d�S |�d�S d S )NZidna�ascii)�
isinstance�str�encode�decode)r� r� r, r, r- �_encode_hostname� s
zSSLContext._encode_hostnameFTc C s | j j|||||| |d�S )N)�sock� server_side�do_handshake_on_connect�suppress_ragged_eofs�server_hostname�context�session)�sslsocket_class�_create)r� r� r� r� r� r� r� r, r, r- � wrap_socket� s �zSSLContext.wrap_socketc C s | j j|||| �|�|| d�S )N)r� r� r� r� )�sslobject_classr� r� )r� �incoming�outgoingr� r� r� r, r, r- �wrap_bio� s �zSSLContext.wrap_bioc C s` t � }|D ]F}t|d�}t|�dks0t|�dkr8td��|�t|�� |�|� q
| �|� d S )Nr� r � z(NPN protocols must be 1 to 255 in length)� bytearray�bytesr� r r� �extendZ_set_npn_protocols)r� Z
npn_protocols�protosr� �br, r, r- �set_npn_protocols s
z SSLContext.set_npn_protocolsc s8 �d krd � _ n$t��s td��� �fdd�}|� _ d S )Nznot a callable objectc s � � |�}�| ||�S r� )r� )�sslobjZ
servernameZsslctx�r� �server_name_callbackr, r- �shim_cb s
z3SSLContext.set_servername_callback.<locals>.shim_cb)Z sni_callback�callable� TypeError)r� r� r� r, r� r- �set_servername_callback s z"SSLContext.set_servername_callbackc C s` t � }|D ]F}t|d�}t|�dks0t|�dkr8td��|�t|�� |�|� q
| �|� d S )Nr� r r� z)ALPN protocols must be 1 to 255 in length)r� r� r� r r� r� Z_set_alpn_protocols)r� Zalpn_protocolsr� r� r� r, r, r- �set_alpn_protocols s
z SSLContext.set_alpn_protocolsc C sv t � }z<t|�D ].\}}}|dkr|dks4|j|kr|�|� qW n tk
r` t�d� Y nX |rr| j|d� |S )NZx509_asnTz-unable to enumerate Windows certificate store)�cadata)r� rx r� r� �PermissionError�warnings�warn�load_verify_locations)r� � storename�purposeZcertsr� �encodingZtrustr, r, r- �_load_windows_store_certs+ s z$SSLContext._load_windows_store_certsc C s@ t |t�st|��tjdkr4| jD ]}| �||� q"| �� d S )Nrw )r� r� r� �sys�platform�_windows_cert_storesr� Zset_default_verify_paths)r� r� r� r, r, r- �load_default_certs9 s
z SSLContext.load_default_certs�minimum_versionc s t t� j�S r� )r7 r� r� �r� r� r, r- r� B s zSSLContext.minimum_versionc s4 |t jkr | jtj M _ttt�j�| |� d S r� ) r7 r< �optionsr1 Z OP_NO_SSLv3r� r� r� �__set__�r� r5 r� r, r- r� F s
c s t t� j�S r� )r7 r� �maximum_versionr� r� r, r- r� L s zSSLContext.maximum_versionc s t tt�j�| |� d S r� )r� r� r� r� r� r� r, r- r� P s c s t t� j�S r� )r1 r� r� r� r� r, r- r� T s zSSLContext.optionsc s t tt�j�| |� d S r� )r� r� r� r� r� r� r, r- r� X s r� c C s | j tj@ }|tjkS r� �Z _host_flagsr; r� )r� Zncsr, r, r- �hostname_checks_common_name] s z&SSLContext.hostname_checks_common_namec C s, |r| j tj M _ n| j tjO _ d S r� r� r� r, r, r- r� b s c C s dS �NTr, r� r, r, r- r� i s c s t � j}|d k r|jS d S d S r� )r� �
_msg_callback�
user_function)r� �innerr� r, r- r� m s !zSSLContext._msg_callbackc sb � d kr t tt�j�| d � d S t� d�s8t� � d���� fdd�}� |_t tt�j�| |� d S )N�__call__z is not callable.c s� z t |�}W n tk
r Y nX z t|�}W n tk
rB Y nX |tjkrTt}n|tjkrdt}nt}z ||�}W n tk
r� Y nX � | |||||�S r� )r7 r� r= rF rE rG rf )Zconn� direction�versionZ content_typeZmsg_type�dataZmsg_enum��callbackr, r- r� � s,
�z'SSLContext._msg_callback.<locals>.inner)r� r� r� r� �hasattrr� r� )r� r r� r� r r- r� � s
c s t t� j�S r� )r& r� r� r� r� r, r- r� � s zSSLContext.protocolc s t t� j�S r� )r2 r� � verify_flagsr� r� r, r- r � s zSSLContext.verify_flagsc s t tt�j�| |� d S r� )r� r� r r� r� r� r, r- r � s c s0 t � j}z
t|�W S tk
r* | Y S X d S r� )r� � verify_moder3 r� r� r� r, r- r � s
zSSLContext.verify_modec s t tt�j�| |� d S r� )r� r� r r� r� r� r, r- r � s )FTTNN)FNN) r8 r9 r: r� r� r� � PROTOCOL_TLSr� r� r� r� r� r� r� r� r� r� r� r r �propertyr� �setterr� r� r; r� r� r� r r r� r, r, r� r- r� � sl �
�
&%r� )r� r� r� c C s� t | t�st| ��tt�}| tjkr0t|_d|_ |s<|s<|rL|�
|||� n|jt kr`|� | � t
|d�r�tj�d�}|r�tjjs�||_|S )NT�keylog_filename�
SSLKEYLOGFILE)r� r� r� r� r r� r� �
CERT_REQUIREDr �check_hostnamer� � CERT_NONEr� r r� r� r� r� �flags�ignore_environmentr )r� r� r� r� r� �
keylogfiler, r, r- �create_default_context� s
r F)� cert_reqsr r� �certfile�keyfiler� r� r� c C s� t |t�st|��t| �} |s$d| _|d k r2|| _|r<d| _|rL|sLtd��|sT|r`| �||� |sl|sl|r|| �|||� n| jt kr�| �
|� t | d�r�t j
�d�}
|
r�tjjs�|
| _| S )NFT�certfile must be specifiedr r )r� r� r� r� r r r� �load_cert_chainr� r r� r r� r� r� r� r
r r ) r� r r r� r r r� r� r� r� r r, r, r- �_create_unverified_context� s,
r c @ s� e Zd Zdd� Zed1dd��Zedd� �Zejd d� �Zed
d � �Z e jd d � �Z ed
d� �Z
edd� �Z edd� �Z d2dd�Z
dd� Zd3dd�Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd4d+d,�Zd-d.� Zd/d0� ZdS )5� SSLObjectc O s t | jj� d���d S )NzU does not have a public constructor. Instances are returned by SSLContext.wrap_bio().�r� r� r8 �r� r� r� r, r, r- �__init__; s �zSSLObject.__init__FNc C s* | � | �}|j||||||d�}||_|S )N)r� r� �ownerr� )r� Z _wrap_bio�_sslobj) r� r� r� r� r� r� r� r� r� r, r, r- r� A s
�zSSLObject._createc C s | j jS r� �r r� r� r, r, r- r� M s zSSLObject.contextc C s || j _d S r� r �r� Zctxr, r, r- r� R s c C s | j jS r� �r r� r� r, r, r- r� V s zSSLObject.sessionc C s || j _d S r� r �r� r� r, r, r- r� [ s c C s | j jS r� �r �session_reusedr� r, r, r- r" _ s zSSLObject.session_reusedc C s | j jS r� )r r� r� r, r, r- r� d s zSSLObject.server_sidec C s | j jS r� )r r� r� r, r, r- r� i s zSSLObject.server_hostname� c C s( |d k r| j �||�}n | j �|�}|S r� )r �read)r� r� �buffer�vr, r, r- r$ o s zSSLObject.readc C s | j �|�S r� )r �write�r� r� r, r, r- r' { s zSSLObject.writec C s | j �|�S r� )r � getpeercert�r� Z binary_formr, r, r- r) � s zSSLObject.getpeercertc C s t jr| j�� S d S r� )r; r r �selected_npn_protocolr� r, r, r- r+ � s z SSLObject.selected_npn_protocolc C s t jr| j�� S d S r� )r; r r �selected_alpn_protocolr� r, r, r- r, � s z SSLObject.selected_alpn_protocolc C s
| j �� S r� )r �cipherr� r, r, r- r- � s zSSLObject.cipherc C s
| j �� S r� )r �shared_ciphersr� r, r, r- r. � s zSSLObject.shared_ciphersc C s
| j �� S r� )r � compressionr� r, r, r- r/ � s zSSLObject.compressionc C s
| j �� S r� )r �pendingr� r, r, r- r0 � s zSSLObject.pendingc C s | j �� d S r� )r � do_handshaker� r, r, r- r1 � s zSSLObject.do_handshakec C s
| j �� S r� )r �shutdownr� r, r, r- �unwrap� s zSSLObject.unwrapr� c C s | j �|�S r� )r �get_channel_binding�r� Zcb_typer, r, r- r4 � s z SSLObject.get_channel_bindingc C s
| j �� S r� �r r� r� r, r, r- r� � s zSSLObject.versionc C s
| j �� S r� )r � verify_client_post_handshaker� r, r, r- r7 � s z&SSLObject.verify_client_post_handshake)FNNN)r# N)F)r� )r8 r9 r: r r� r� r r� r r� r" r� r� r$ r' r) r+ r, r- r. r/ r0 r1 r3 r4 r� r7 r, r, r, r- r , sF �
r c C s t t| j�j| _| S r� )�getattrr r8 �__doc__)�funcr, r, r- � _sslcopydoc� s r; c s e Zd Zdd� ZedW� fdd� �Zeedd � ��Zej d
d � �Zeed d � ��Z
e
j d
d � �Z
eedd� ��Z dd� Z dXdd�Z
dd� ZdYdd�Zdd� ZedZdd ��Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zd[� fd(d)� Zd\� fd*d+� Zd,d-� Zd]� fd.d/� Zd^� fd0d1� Zd_� fd2d3� Z d`� fd4d5� Z da� fd6d7� Z db� fd8d9� Z d:d;� Z d<d=� Z!ed>d?� �Z"� fd@dA�Z#edBdC� �Z$edDdE� �Z%� fdFdG�Z&edcdHdI��Z'� fdJdK�Z(dLdM� Z)dNdO� Z*� fdPdQ�Z+edddSdT��Z,edUdV� �Z-� Z.S )e� SSLSocketc O s t | jj� d���d S )NzX does not have a public constructor. Instances are returned by SSLContext.wrap_socket().r r r, r, r- r � s �zSSLSocket.__init__FTNc
sZ |� tt�tkrtd��|r8|r(td��|d k r8td��|jrJ|sJtd��t|j|j |j
|� � d�}| j | f|�} t
t| �jf |� |�� }
|�� || _|| _d| _d | _|| _|�|�| _|| _|| _z | �� W n� t k
�r� } z�| j t j kr�� d} | � � }
| � d� z| �!d�}W n> t k
�rZ } z | j t j t j"fk�rF� d}W 5 d } ~ X Y nX | � |
� |�r�d }t#| j |�}||_$d |_%z | �&� W n t k
�r� Y nX z|�W 5 d }X W 5 d } ~ X Y nX d
} | �'|
� | | _(| �rVzH| jj)| || j| | jd �| _|�r.| �� }|d k�r&td
��| �*� W n$ t tfk
�rT | �&� � Y nX | S )Nz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostname)�family�type�proto�filenoFrg r/ z5Closed before TLS handshake with data in recv buffer.T�r r� � zHdo_handshake_on_connect should not be specified for non-blocking sockets)+Z
getsockoptr~ r r| �NotImplementedErrorr� r �dictr= r> r? r@ r� r� r< r �
gettimeout�detach�_context�_sessionZ_closedr r� r� r� r� r� � getpeernamer� �errnoZENOTCONNZ getblockingZ setblocking�recvZEINVALr �reasonZlibrary�close�
settimeout�
_connected� _wrap_socketr1 )r� r� r� r� r� r� r� r� r� r� Z sock_timeout�eZ connectedZblockingZnotconn_pre_handshake_datarL Z notconn_pre_handshake_data_error�timeoutr� r, r- r� � s�
�
�
zSSLSocket._createc C s | j S r� )rG r� r, r, r- r� 7 s zSSLSocket.contextc C s || _ || j_d S r� )rG r r� r r, r, r- r� < s c C s | j d k r| j jS d S r� r r� r, r, r- r� A s
zSSLSocket.sessionc C s || _ | jd k r|| j_d S r� )rH r r� r r, r, r- r� G s
c C s | j d k r| j jS d S r� r! r� r, r, r- r" M s
zSSLSocket.session_reusedc C s t d| jj ��d S )NzCan't dup() %s instances)rC r� r8 r� r, r, r- �dupS s �z
SSLSocket.dupc C s d S r� r, )r� �msgr, r, r- � _checkClosedW s zSSLSocket._checkClosedc C s | j s| �� d S r� )rO rI r� r, r, r- �_check_connected[ s zSSLSocket._check_connectedr# c
C s� | � � | jd krtd��z*|d k r4| j�||�W S | j�|�W S W nV tk
r� } z8|jd tkr�| jr�|d k r|W Y �dS W Y � dS n� W 5 d }~X Y nX d S )Nz'Read on closed or unwrapped SSL socket.r r/ )rU r r� r$ r r� Z
SSL_ERROR_EOFr� )r� r� r% �xr, r, r- r$ c s
zSSLSocket.readc C s& | � � | jd krtd��| j�|�S )Nz(Write on closed or unwrapped SSL socket.)rU r r� r' r( r, r, r- r' x s
zSSLSocket.writec C s | � � | �� | j�|�S r� )rU rV r r) r* r, r, r- r) � s zSSLSocket.getpeercertc C s* | � � | jd kstjs d S | j�� S d S r� )rU r r; r r+ r� r, r, r- r+ � s z SSLSocket.selected_npn_protocolc C s* | � � | jd kstjs d S | j�� S d S r� )rU r r; r r, r� r, r, r- r, � s z SSLSocket.selected_alpn_protocolc C s$ | � � | jd krd S | j�� S d S r� )rU r r- r� r, r, r- r- � s
zSSLSocket.cipherc C s$ | � � | jd krd S | j�� S d S r� )rU r r. r� r, r, r- r. � s
zSSLSocket.shared_ciphersc C s$ | � � | jd krd S | j�� S d S r� )rU r r/ r� r, r, r- r/ � s
zSSLSocket.compressionr c sF | � � | jd k r4|dkr(td| j ��| j�|�S t� �||�S d S )Nr z3non-zero flags not allowed in calls to send() on %s)rU r r� r� r' r� �send)r� r� r
r� r, r- rX � s
�� zSSLSocket.sendc sL | � � | jd k r"td| j ��n&|d kr8t� �||�S t� �|||�S d S )Nz%sendto not allowed on instances of %s)rU r r� r� r� �sendto)r� r� Z
flags_or_addrr� r� r, r- rY � s
�zSSLSocket.sendtoc O s t d| j ��d S )Nz&sendmsg not allowed on instances of %s�rC r� r r, r, r- �sendmsg� s �zSSLSocket.sendmsgc
s� | � � | jd k r�|dkr(td| j ��d}t|��H}|�d��2}t|�}||k rn| �||d � �}||7 }qJW 5 Q R X W 5 Q R X nt� � ||�S d S )Nr z6non-zero flags not allowed in calls to sendall() on %s�B)
rU r r� r� �
memoryview�castr� rX r� �sendall)r� r� r
r� ZviewZ byte_viewZamountr& r� r, r- r_ � s
�� zSSLSocket.sendallc s, | j d k r| �|||�S t� �|||�S d S r� )r Z_sendfile_use_sendr� �sendfile)r� �file�offsetr� r� r, r- r` � s
zSSLSocket.sendfilec sD | � � | jd k r2|dkr(td| j ��| �|�S t� �||�S d S )Nr z3non-zero flags not allowed in calls to recv() on %s)rU r r� r� r$ r� rK �r� Zbuflenr
r� r, r- rK � s
��
zSSLSocket.recvc sj | � � |r |d kr t|�}n |d kr*d}| jd k rV|dkrJtd| j ��| �||�S t� �|||�S d S )Nr# r z8non-zero flags not allowed in calls to recv_into() on %s)rU r� r r� r� r$ r� � recv_into�r� r% �nbytesr
r� r, r- rd � s
�� zSSLSocket.recv_intoc s4 | � � | jd k r"td| j ��nt� �||�S d S )Nz'recvfrom not allowed on instances of %s)rU r r� r� r� �recvfromrc r� r, r- rg � s
�zSSLSocket.recvfromc s6 | � � | jd k r"td| j ��nt� �|||�S d S )Nz,recvfrom_into not allowed on instances of %s)rU r r� r� r� �
recvfrom_intore r� r, r- rh s
�zSSLSocket.recvfrom_intoc O s t d| j ��d S )Nz&recvmsg not allowed on instances of %srZ r r, r, r- �recvmsg s �zSSLSocket.recvmsgc O s t d| j ��d S )Nz+recvmsg_into not allowed on instances of %srZ r r, r, r- � recvmsg_into s �zSSLSocket.recvmsg_intoc C s$ | � � | jd k r | j�� S dS d S )Nr )rU r r0 r� r, r, r- r0 s
zSSLSocket.pendingc s | � � d | _t� �|� d S r� )rU r r� r2 )r� Zhowr� r, r- r2 s zSSLSocket.shutdownc C s. | j r| j �� }d | _ |S tdt| � ��d S �NzNo SSL wrapper around )r r2 r� r� )r� �sr, r, r- r3 # s
zSSLSocket.unwrapc C s$ | j r| j �� S tdt| � ��d S rk )r r7 r� r� r� r, r, r- r7 , s
z&SSLSocket.verify_client_post_handshakec s d | _ t� �� d S r� )r r� � _real_closer� r� r, r- rm 3 s zSSLSocket._real_closec C sF | � � | �� }z$|dkr(|r(| �d � | j�� W 5 | �|� X d S )NrB )rV rE rN r r1 )r� �blockrR r, r, r- r1 7 s
zSSLSocket.do_handshakec s� | j rtd��| js | jd k r&td��| jj| d| j| | jd�| _z@|rVt� � |�}nd }t� �
|� |s~d| _| j r~| � � |W S t
tfk
r� d | _� Y nX d S )Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!FrA T)r� r� rO r r� rP r� rH r� �
connect_ex�connectr� r1 r� )r� r� ro Zrcr� r, r- �
_real_connectB s0 � zSSLSocket._real_connectc C s | � |d� d S )NF�rq �r� r� r, r, r- rp \ s zSSLSocket.connectc C s | � |d�S r� rr rs r, r, r- ro a s zSSLSocket.connect_exc s. t � �� \}}| jj|| j| jdd�}||fS )NT)r� r� r� )r� �acceptr� r� r� r� )r� Znewsockr� r� r, r- rt f s �zSSLSocket.acceptr� c C s4 | j d k r| j �|�S |tkr,td�|���d S d S )Nz({0} channel binding type not implemented)r r4 �CHANNEL_BINDING_TYPESr� r� r5 r, r, r- r4 r s
�z SSLSocket.get_channel_bindingc C s | j d k r| j �� S d S d S r� r6 r� r, r, r- r� } s
zSSLSocket.version)FTTNNN)N)r# N)F)r )N)r )r N)r# r )Nr )r# r )Nr )F)r� )/r8 r9 r: r r� r� r r; r� r r� r" rS rU rV r$ r' r) r+ r, r- r. r/ rX rY r[ r_ r` rK rd rg rh ri rj r0 r2 r3 r7 rm r1 rq rp ro rt r4 r� r� r, r, r� r- r< � s� �_
r< Tc
C sl |r|st d��|r |s t d��t|�}
||
_|r<|
�|� |rL|
�||� | rZ|
�| � |
j| |||d�S )Nz5certfile must be specified for server-side operationsr )r� r� r� r� )r� r� r r� r Z set_ciphersr� ) r� r r r� r � ssl_version�ca_certsr� r� Zciphersr� r, r, r- r� � s$
�r� c C s� ddl m} ddlm} d}d}z |�| d d� �� �d }W n$ tk
rb td| |f ��Y n0X || dd � |�}||d |f|d d
� �S d S ) Nr )�strptime)�timegm) ZJanZFebZMarZAprZMayZJunZJulZAugZSepZOctZNovZDecz %d %H:%M:%S %Y GMTri rg z*time data %r does not match format "%%b%s"rh rl )�timerx Zcalendarry �index�titler� )Z cert_timerx ry ZmonthsZ time_formatZ month_numberZttr, r, r- �cert_time_to_seconds� s
� r} z-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----c sR t t�| �dd�� tg}|� fdd�tdt� �d�D �7 }|�td � d�|�S )N�ASCII�strictc s g | ]}� ||d � �qS )�@ r, )r4 �i��fr, r- �
<listcomp>� s z(DER_cert_to_PEM_cert.<locals>.<listcomp>r r� �
) r� �base64Zstandard_b64encode�
PEM_HEADER�ranger� r� �
PEM_FOOTERr� )Zder_cert_bytesZssr, r� r- �DER_cert_to_PEM_cert� s
"r� c C s\ | � t�stdt ��| �� �t�s0tdt ��| �� tt�tt� � }t�|� dd��S )Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr~ r )
r) r� r� �strip�endswithr� r� r� Z decodebytesr� )Zpem_cert_string�dr, r, r- �PEM_cert_to_DER_cert� s
��r� c
C sd | \}}|d k rt }nt}t|||d�}t| ��&}|�|��}|�d�} W 5 Q R X W 5 Q R X t| �S )N)r r� T)r
r �_create_stdlib_contextr} r� r) r� )
r� rv rw ZhostZportr r� r� ZsslsockZdercertr, r, r- �get_server_certificate� s �
r� c C s t �| d�S )Nz <unknown>)�_PROTOCOL_NAMESr� )Z
protocol_coder, r, r- �get_protocol_name� s r� )mr� r� � collectionsr �enumr Z_Enumr Z_IntEnumr Z_IntFlagr; r r r r r
r r r
r r r r r r r� r r� r r r r r � ImportErrorr r r r r r r r! r" r# r$ r% � _convert_r8 r& r r' � __members__�itemsr� r8 Z_SSLv2_IF_EXISTSr7 r= rG rf r� rx ry rz r{ r| r} r~ r r� r� rJ r� r� Z socket_errorru r ZHAS_NEVER_CHECK_COMMON_NAMEZ_RESTRICTED_SERVER_CIPHERSr� r� r� r� r� r� r� r� r� r� r� r r r Z _create_default_https_contextr� r r; r< r� r� r� r} r� r� r� r� r� r� r, r, r, r- �<module>] s� $0 � � � � � �
)
1# 9� z � # � / > �