֦i
n d dl Z d dlZd dlmZ d dlmZmZm Z
d dlm Z d dl Z d dl m
Z
mZmZ d dl mZmZmZ d dl mZmZmZmZmZmZmZ d dl mZm Z d d l m Z m Z m Z d d
l m!Z! d d l m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, d d l m-Z-m.Z. ej^ d
e0d e e
j^ de0d e ej^ de0d e ej^ de0d e e
j^ de0d e ej^ de0d e e1jd xZ3e1_3 e1jh jk D ci c] \ } }||
c}} Z6 e7e1dd Z8 e e G d d Z9 e e G d d Z: e e G d d Z; e e G d! d" ZZ>m?Z? d d%l@m@Z@mAZAmBZB d d&l@mCZCmDZDmEZE d dl@ZFd dlGZGd dlHZHd dlIZIeJZKd'gZL eMe d( ZNe-ZOeZPd) ZQd* ZRd+ ZS ed,d- ZTd. ZU G d/ d0 ed0d1 ZV G d2 d3eVe ZW G d4 d5e ZXeWj fdddd6d7ZZdGe[d8eWj dddddd9d:Z\eZZ]e\Z^ G d; d< Z_d= Z` G d> d?e@ ZaeaeX_b e_eX_c d@ ZddAZedBZfdC ZgdD ZheideEfdEZjdF Zky# e"$ r Y Jw xY wc c}} w )H N)
namedtuple)EnumIntEnumIntFlag) _simple_enum)OPENSSL_VERSION_NUMBEROPENSSL_VERSION_INFOOPENSSL_VERSION) _SSLContext MemoryBIO
SSLSession)SSLErrorSSLZeroReturnErrorSSLWantReadErrorSSLWantWriteErrorSSLSyscallError SSLEOFErrorSSLCertVerificationError)txt2objnid2obj) RAND_statusRAND_add
RAND_bytes)RAND_egd)
HAS_SNIHAS_ECDHHAS_NPNHAS_ALPN HAS_SSLv2 HAS_SSLv3 HAS_TLSv1 HAS_TLSv1_1 HAS_TLSv1_2 HAS_TLSv1_3)_DEFAULT_CIPHERS_OPENSSL_API_VERSION
_SSLMethodc 2 | j d xr | dk7 S )N PROTOCOL_PROTOCOL_SSLv23
startswithnames /usr/lib64/python3.12/ssl.pyr0 } s -K$:K2KK )sourceOptionsc $ | j d S )NOP_r+ r- s r/ r0 r0 s
'r1 AlertDescriptionc $ | j d S )NALERT_DESCRIPTION_r+ r- s r/ r0 r0 s !56r1 SSLErrorNumberc $ | j d S )N
SSL_ERROR_r+ r- s r/ r0 r0 s
.r1 VerifyFlagsc $ | j d S )NVERIFY_r+ r- s r/ r0 r0 s
+r1
VerifyModec $ | j d S )NCERT_r+ r- s r/ r0 r0 s
)r1 PROTOCOL_SSLv2c e Zd Zej Zej Zej Z ej Z ej Z
ej Zej Zy)
TLSVersionN)__name__
__module__ __qualname___sslPROTO_MINIMUM_SUPPORTEDMINIMUM_SUPPORTED PROTO_SSLv3SSLv3 PROTO_TLSv1TLSv1
PROTO_TLSv1_1TLSv1_1
PROTO_TLSv1_2TLSv1_2
PROTO_TLSv1_3TLSv1_3PROTO_MAXIMUM_SUPPORTEDMAXIMUM_SUPPORTED r1 r/ rD rD sQ 44 E E G G G 44r1 rD c & e Zd Z dZdZdZdZdZdZy)_TLSContentType N) rE rF rG CHANGE_CIPHER_SPECALERT HANDSHAKEAPPLICATION_DATAHEADERINNER_CONTENT_TYPErW r1 r/ rY rY s* EI
F r1 rY c e Zd Z dZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Z!d Z"d!Z#d"Z$y#)$
_TLSAlertTyper
rZ r[ r\ ( ) * + , - . / 0 1 2 3 < F G P V Z d m n o p q r s t x N)%rE rF rG CLOSE_NOTIFYUNEXPECTED_MESSAGEBAD_RECORD_MACDECRYPTION_FAILEDRECORD_OVERFLOWDECOMPRESSION_FAILUREHANDSHAKE_FAILURENO_CERTIFICATEBAD_CERTIFICATEUNSUPPORTED_CERTIFICATECERTIFICATE_REVOKEDCERTIFICATE_EXPIREDCERTIFICATE_UNKNOWNILLEGAL_PARAMETER
UNKNOWN_CA
ACCESS_DENIED DECODE_ERROR
DECRYPT_ERROREXPORT_RESTRICTIONPROTOCOL_VERSIONINSUFFICIENT_SECURITYINTERNAL_ERRORINAPPROPRIATE_FALLBACK
USER_CANCELEDNO_RENEGOTIATIONMISSING_EXTENSIONUNSUPPORTED_EXTENSIONCERTIFICATE_UNOBTAINABLEUNRECOGNIZED_NAME BAD_CERTIFICATE_STATUS_RESPONSEBAD_CERTIFICATE_HASH_VALUEUNKNOWN_PSK_IDENTITYCERTIFICATE_REQUIREDNO_APPLICATION_PROTOCOLrW r1 r/ rg rg s LNO NO JMLM N M " &)#!$ !r1 rg c f e Zd Z dZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZy)_TLSMessageTyper
rZ r[ r\ r] C r_ N)rE rF rG
HELLO_REQUEST CLIENT_HELLO SERVER_HELLOHELLO_VERIFY_REQUESTNEWSESSION_TICKETEND_OF_EARLY_DATAHELLO_RETRY_REQUESTENCRYPTED_EXTENSIONS CERTIFICATESERVER_KEY_EXCHANGECERTIFICATE_REQUEST SERVER_DONECERTIFICATE_VERIFYCLIENT_KEY_EXCHANGEFINISHEDCERTIFICATE_URLCERTIFICATE_STATUSSUPPLEMENTAL_DATA
KEY_UPDATE
NEXT_PROTO MESSAGE_HASHr` rW r1 r/ r r s MLL K K HOJJL r1 r win32)enum_certificates enum_crls)socket SOCK_STREAMcreate_connection)
SOL_SOCKETSO_TYPE_GLOBAL_DEFAULT_TIMEOUT
tls-unique HOSTFLAG_NEVER_CHECK_SUBJECTc | sy| j d }|s!| j |j k( S |dkD rt dj | | j d \ }}}d|v rt dj | |st dj | |dk7 rt dj | |j d \ }}}|r|sy|j |j k( S ) NF*r z1too many wildcards in certificate DNS name: {!r}..z9wildcard can only be present in the leftmost label: {!r}.z>sole wildcard without additional labels are not support: {!r}.zfD(*
f(=f4 & $ & &r1 c L e Zd Z dZ fdZe fd Ze fd Z xZS ) _ASN1ObjectrW c : t | | gt |d S )NFr- super__new___txt2obj)clsoid __class__s r/ r z_ASN1Object.__new__ s ws?Xc%>??r1 c 8 t | | gt | S r )r r _nid2obj)r nidr s r/ fromnidz_ASN1Object.fromnid s ws3Xc]33r1 c < t | | gt |d S )NTr- r
)r r. r s r/ fromnamez_ASN1Object.fromname s# ws?Xd%>??r1 ) rE rF rG __slots__r classmethodr r
__classcell__r s @r/ r r s= I@ 4 4
@ @r1 r znid shortname longname oidc e Zd Z dZdZy)Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)rE rF rG SERVER_AUTH CLIENT_AUTHrW r1 r/ r r s %K%Kr1 r c h e Zd Z dZdZdZd dZd Z d dZ d dZ d Z
d Z d Z d
Z
ej fd Z eed r
#
&??6*11': :??7+ +r1 c F | j j |||||| | S )N)sock server_sidedo_handshake_on_connectsuppress_ragged_eofsserver_hostnamecontextsession)sslsocket_class_create)r0 r: r; r< r= r> r@ s r/ wrap_socketzSSLContext.wrap_socket s7 ##++#$;!5 + ,
r1 c b | j j |||| j | || S )N)r; r> r@ r? )sslobject_classrB r8 )r0 incomingoutgoingr; r> r@ s r/ wrap_biozSSLContext.wrap_bio s< ##++ hK 1 1/ BT ,
r1 c < t j dt d t }|D ]` }t |d }t | dk( st | dkD r t
d |j t | |j | b | j | y )N'ssl NPN is deprecated, use ALPN insteadr r( r3 r z(NPN protocols must be 1 to 255 in length)
r) r* r+ bytearraybyteslenr appendextend_set_npn_protocols)r0
npn_protocolsprotosr- bs r/ set_npn_protocolsz SSLContext.set_npn_protocols s
5
%Hh(A1v{c!fsl IJJ MM#a& ! MM! &
'r1 c b d _ y t s t d fd}| _ y )Nznot a callable objectc : j | } | || S r )r8 )sslobj
servernamesslctxr0 server_name_callbacks r/ shim_cbz3SSLContext.set_servername_callback..shim_cb s" ! 2 2: >
+FJGGr1 ) sni_callbackcallable TypeError)r0 r\ r] s `` r/ set_servername_callbackz"SSLContext.set_servername_callback s6 ' $D 01 788
H !(D r1 c t }|D ]` }t |d }t | dk( st | dkD r t d |j t | |j | b | j
| y )Nr3 r rL z)ALPN protocols must be 1 to 255 in length)rM rN rO r rP rQ _set_alpn_protocols)r0 alpn_protocolsrT r- rU s r/ set_alpn_protocolsz SSLContext.set_alpn_protocols sl &Hh(A1v{c!fsl JKK MM#a& ! MM! '
(r1 c * t | D ]2 \ }}}|dk( s
|du s|j |v s | j | 4 y # t $ r"}t j
d| Y d }~\d }~ww xY w# t $ r t j
d Y y w xY w)Nx509_asnT)cadataz.Bad certificate in Windows certificate store: z-unable to enumerate Windows certificate store)r r load_verify_locationsr r) r* PermissionError)r0 storenamepurposecertencodingtrustexcs r/ _load_windows_store_certsz$SSLContext._load_windows_store_certs s
K):9)E%hz) } u(<d 6 6d 6 C *F ( d $MM,Z[^Za*b c cd K MMI J Ks? A1 A1 A A1 A. A)$A1 )A..A1 1 BBc t |t s t | t j dk( r#| j
D ] }| j
|| | j y )Nr )r4 r r` sysplatform_windows_cert_storesrq set_default_verify_paths)r0 rl rk s r/ load_default_certsz SSLContext.load_default_certs sO ';/G$ $ <<7 " ! 6 6 ..y'B 7 %%'r1 minimum_versionc * t t | S r )rD r rx r0 r s r/ rx zSSLContext.minimum_version eg 56 6r1 c |t j k( r$| xj t j z c_ t
t t j | | y r ) rD rL optionsr3 OP_NO_SSLv3r r# rx __set__r0 valuer s r/ rx zSSLContext.minimum_version s?
((( !4!4 44 *j 9 A A$ Nr1 c * t t | S r )rD r maximum_versionrz s r/ r zSSLContext.maximum_version# r{ r1 c J t t t
j | | y r )r r# r r r s r/ r zSSLContext.maximum_version' s *j 9 A A$ Nr1 c * t t | S r )r3 r r} rz s r/ r} zSSLContext.options+ s uw''r1 c J t t t
j | | y r )r r# r} r r s r/ r} zSSLContext.options/ s
j*-55dEBr1 r c b | j t j z }|t j k7 S r _host_flagsrH r )r0 ncss r/ hostname_checks_common_namez&SSLContext.hostname_checks_common_name4 s) ""T%F%FFC$;;; ;r1 c |r%| xj t j z c_ y | xj t j z c_ y r r )r0 r s r/ r z&SSLContext.hostname_checks_common_name9 s6 T%F%F$FF D$E$EE r1 c yNTrW r0 s r/ r z&SSLContext.hostname_checks_common_name@ s r1 c 8 t | }| |j S y r )r
_msg_callback
user_function)r0 innerr s r/ r zSSLContext._msg_callbackD s) > % && &r1 c #t t t
j | d y t d st d fd}|_ t t t
j | | y )N__call__z is not callable.c . t | } t | }|t j k( rt }n |t j k( rt
}nt } || } | ||||| S # t $ r Y gw xY w# t $ r Y jw xY w# t $ r Y 6w xY wr )rD r rY rd ra rg r )conn directionversion content_typemsg_typedatamsg_enumcallbacks r/ r z'SSLContext._msg_callback..innert s
$W-
.| < 5 55* !6!66(*
#H- D)W ((D:
:'
s4 A* A9 B * A65A69 BB BB)r r# r r hasattrr` r )r0 r r r s ` r/ r zSSLContext._msg_callbackk sf *j 7 ? ?d K x,xj(9 :; ; :2 '
j*3;;D%Hr1 c * t t | S r )r' r r- rz s r/ r- zSSLContext.protocol s %'*++r1 c * t t | S r )r< r verify_flagsrz s r/ r zSSLContext.verify_flags s 57/00r1 c J t t t
j | | y r )r r# r r r s r/ r zSSLContext.verify_flags s
j*2::4Gr1 c R t | } t | S # t $ r |cY S w xY wr )r verify_moder? r r s r/ r zSSLContext.verify_mode s1 # e$ $ L s
&&c J t t t
j | | y r )r r# r r r s r/ r zSSLContext.verify_mode s
j*199$Fr1 r )FTTNN)FNN) rE rF rG ru rA rE r r8 rC rH rV ra re rq r r rw r r propertyrx setterr r} rH r r r- r r r r s @r/ r# r# s >)OO , -2,0)-26
8=/3
( ( ) K *1)<)< ( { -. 7
7
O
O
7
7
O
O ( (
^^C C t34 <
<
% + + F
, F
$ $L #I #IJ , , 1 1 H H G Gr1 r# )r r rh c t | t s t | | t j k( r"t t }t |_ d|_ n.| t j k( rt t }n t | |s|s|r|j ||| n$|j t k7 r|j | t! |d rBt" j$ j' d }|r!t( j* j, s||_ |S )NTkeylog_filename
SSLKEYLOGFILE)r4 r r` r r r# PROTOCOL_TLS_CLIENT
CERT_REQUIREDr check_hostnamer! PROTOCOL_TLS_SERVERr ri CERT_NONErw r r r r rs flagsignore_environmentr )rl r r rh r?
keylogfiles r/ create_default_contextr s g{ +
'%%% 01 +!% G'' ' 01!!
6%%fff= ) ""7+w)*ZZ^^O4
cii : :&0G # Nr1 F) cert_reqsr rl certfilekeyfiler r rh c n t |t s t | |t j k( r | .t
} n'|t j k( r | t } n t | t | } || _
||| _ |rd| _
|r
|s t d |s|r| j || |s|s|r| j ||| n$| j t k7 r| j | t! | d rBt" j$ j' d }
|
r!t( j* j, s|
| _ | S )NTzcertfile must be specifiedr r )r4 r r` r r r r! r r r# r r load_cert_chainri r rw r r r r rs r r r ) r- r r rl r r r r rh r? r s r/ _create_unverified_contextr s g{ +
'%%% *H G'' ' *H!!"G +G '!% x5667 '2 6%%fff= ) ""7+w)*ZZ^^O4
cii : :&0G # Nr1 c e Zd Z d Ze dd Zed Zej d Zed Z e j d Z ed Z
ed Z ed
Z dd Z
d Zdd
Zd Zd Zd Zd Zd Zd Zd Zd Zd dZd Zd Zy) SSLObjectc F t | j j d )NzU does not have a public constructor. Instances are returned by SSLContext.wrap_bio().r` r rE r0 r. r/ s r/ __init__zSSLObject.__init__ s+ ~~&&' (L
M
r1 Nc d | j | }|j |||||| }||_ |S )N)r; r> ownerr@ )r _wrap_bio_sslobj) r rF rG r; r> r@ r? r0 rY s r/ rB zSSLObject._create# sD {{3 "" hK + #
r1 c 0 | j j S r r r? r s r/ r? zSSLObject.context/ s 6||###r1 c & || j _ y r r r0 ctxs r/ r? zSSLObject.context4 s " r1 c 0 | j j S r r r@ r s r/ r@ zSSLObject.session8 s /||###r1 c & || j _ y r r r0 r@ s r/ r@ zSSLObject.session= s & r1 c 0 | j j S r r session_reusedr s r/ r zSSLObject.session_reusedA s <||***r1 c 0 | j j S r )r r; r s r/ r; zSSLObject.server_sideF s 3||'''r1 c 0 | j j S r )r r> r s r/ r> zSSLObject.server_hostnameK s #||+++r1 c ~ | | j j || }|S | j j | }|S r )r read)r0 rO buffervs r/ r zSSLObject.readQ sG
!!#v.A !!#&Ar1 c : | j j | S r )r writer0 r s r/ r zSSLObject.write] s
||!!$''r1 c : | j j | S r )r getpeercertr0 binary_forms r/ r zSSLObject.getpeercerte s ||'' 44r1 c > t j dt d y NrJ r rK )r) r* r+ r s r/ selected_npn_protocolz SSLObject.selected_npn_protocoln s
5
r1 c 8 | j j S r )r selected_alpn_protocolr s r/ r z SSLObject.selected_alpn_protocolx s ||2244r1 c 8 | j j S r )r cipherr s r/ r zSSLObject.cipher~ s (||""$$r1 c 8 | j j S r )r shared_ciphersr s r/ r zSSLObject.shared_ciphers s ||**,,r1 c 8 | j j S r )r compressionr s r/ r zSSLObject.compression s P||''))r1 c 8 | j j S r )r pendingr s r/ r zSSLObject.pending s F||##%%r1 c : | j j y r )r do_handshaker s r/ r zSSLObject.do_handshake s * !!#r1 c 8 | j j S r )r shutdownr s r/ unwrapzSSLObject.unwrap s /||$$&&r1 c : | j j | S r )r get_channel_bindingr0 cb_types r/ r z SSLObject.get_channel_binding s M ||//88r1 c 8 | j j S r r r r s r/ r zSSLObject.version s !||##%%r1 c 6 | j j S r )r verify_client_post_handshaker s r/ r z&SSLObject.verify_client_post_handshake s ||88::r1 )FNNN NFr )rE rF rG r r rB r r? r r@ r r; r> r r r r r r r r r r r r r r rW r1 r/ r r s
5:=A $ $
^^# # $ $
^^' ' + + ( ( , ,
(5
5 %
- *
&$'9 &
;r1 r c Z t t | j j | _ | S r )getattrr rE __doc__)funcs r/ _sslcopydocr s" 49dmm4< r< r= getpeernamer errnoENOTCONN getblocking setblockingrecvEINVALr reasonlibrary
settimeout
_connected _wrap_socketr close)r r: r; r< r= r> r? r@ sock_timeoutr/ r0 connectedeblockingnotconn_pre_handshake_datar notconn_pre_handshake_data_errortimeoutr s r/ rB zSSLSocket._create s ??:w /; >%&IJ J "2 3 3" "/ 0 0 ! !/ FG G( ;;TYYdjj;;=
s{{3)&)
i'1&1
C #DM #DM DL DL *D #*#;#;O#LD +BD ((D4;?C4<@ >> <@8 .%
@b
s %AJ9 -G =BJ9 J6AJ1H#"J1# I%,/I J1 I%% | j s| j y y r )r r r s r/ _check_connectedzSSLSocket._check_connected> s
r1 c F | j | j t d | | j j || S | j j | S # t $ r4}|j
d t k( r| j r |Y d }~yY d }~y d }~ww xY w)Nz'Read on closed or unwrapped SSL socket.r r1 )r0 r r r r r.
SSL_ERROR_EOFr= )r0 rO r xs r/ r zSSLSocket.readF s -
<< FG G !||((f55||((-- vvayM)d.G.G% s# A# A# # B ,$BBB c | j | j t d | j j | S )Nz(Write on closed or unwrapped SSL socket.)r0 r r r r s r/ r zSSLSocket.write[ s@ 9
<< GH H||!!$''r1 c x | j | j | j j | S r )r0 r2 r r r s r/ r zSSLSocket.getpeercertd s/ ||'' 44r1 c \ | j t j dt d y r )r0 r) r* r+ r s r/ r z SSLSocket.selected_npn_protocolj s(
5
r1 c | j | j t j sy | j j S r )r0 r rH r r r s r/ r z SSLSocket.selected_alpn_protocolt s4 << t}}<<668 8r1 c p | j | j y | j j S r )r0 r r r s r/ r zSSLSocket.cipher| s. << <<&&( (r1 c p | j | j y | j j S r )r0 r r r s r/ r zSSLSocket.shared_ciphers s. << <<..0 0r1 c p | j | j y | j j S r )r0 r r r s r/ r zSSLSocket.compression s. << <<++- -r1 c | j | j 8|dk7 rt d| j z | j j | S t
| || S )Nr z3non-zero flags not allowed in calls to send() on %s)r0 r r r r r send)r0 r r r s r/ r> zSSLSocket.send sd << #z INN#$ $ <<%%d+ +7<e, ,r1 c | j | j t d| j z |t | || S t | ||| S )Nz%sendto not allowed on instances of %s)r0 r r r r sendto)r0 r
flags_or_addrr r s r/ r@ zSSLSocket.sendto s^ << # D !^^ , -
-
\7>$
6 67>$
t< r sendall) r0 r r r view byte_viewamountr r s r/ rI zSSLSocket.sendall s << #z LNN#$ $ ED!T499S>Y Y fn )EF"34AQJE fn ,:!! 7?4/ /
,:>!!s$ B7/B+
B7+B4 0B77C c f | j | j ||| S t |
||| S r )r _sendfile_use_sendr sendfile)r0 fileoffsetr r s r/ rO zSSLSocket.sendfile s? << #**4? ? 7#D&%8 8r1 c | j | j .|dk7 rt d| j z | j | S t
| || S )Nr z3non-zero flags not allowed in calls to recv() on %s)r0 r r r r r r r0 buflenr r s r/ r zSSLSocket.recv s^ << #z INN#$ $ 99V$ $7<. .r1 c * | j |)|%t | 5 }|j }d d d |sd}nd}| j /|dk7 rt d| j
z | j
|| S t | ! ||| S # 1 sw Y \xY w)Nr r z8non-zero flags not allowed in calls to recv_into() on %s) r0 rG nbytesr r r r r recv_into)r0 r rV r rJ r s r/ rW zSSLSocket.recv_into s >! '4 ![[F ( !F << #z L..!" " 99VV, ,7$VVU; ; ('s
B Bc | j | j t d| j z t | || S )Nz'recvfrom not allowed on instances of %s)r0 r r r r recvfromrS s r/ rY zSSLSocket.recvfrom sI << # F !^^ , -
- 7#FE2 2r1 c | j | j t d| j z t | ||| S )Nz,recvfrom_into not allowed on instances of %s)r0 r r r r
recvfrom_into)r0 r rV r r s r/ r[ zSSLSocket.recvfrom_into sK << # K !^^ , -
- 7(? ?r1 c 2 t d| j z )Nz&recvmsg not allowed on instances of %srC r s r/ recvmsgzSSLSocket.recvmsg s !"J"&..#1 2 2r1 c 2 t d| j z )Nz+recvmsg_into not allowed on instances of %srC r s r/ recvmsg_intozSSLSocket.recvmsg_into s ! #')- #8 9 9r1 c p | j | j | j j S yNr )r0 r r r s r/ r zSSLSocket.pending s. << #<<'') )r1 c R | j d | _ t |
| y r )r0 r r r )r0 howr s r/ r zSSLSocket.shutdown s#
r1 c | j r#| j j }d | _ |S t dt | z NzNo SSL wrapper around )r r r r5 )r0 ss r/ r zSSLSocket.unwrap s< << %%'A DLH 5D AB Br1 c | | j r| j j S t dt | z re )r r r r5 r s r/ r z&SSLSocket.verify_client_post_handshake s1 <<<<<<> > 5D AB Br1 c 0 d | _ t | y r )r r _real_closerz s r/ ri zSSLSocket._real_close s
r1 c | j | j } |dk( r|r| j d | j j | j | y # | j | w xY w)Nr
)r2 r
r r r )r0 blockr& s r/ r zSSLSocket.do_handshake s] //# %#~%% LL % % ' OOG $DOOG $s 2A& &A9c | j r t d | j s | j t d | j j | d| j | | j | _ |rt | % | }nd }t | ) | |s#d| _ | j r| j |S # t t f$ r d | _ w xY w)Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!Fr T)r; r r r r? r r> r r
connect_exconnectr< r r )r0 r rm rcr s r/
_real_connectzSSLSocket._real_connect+ s @A A ??dll 6 NO O||00 %--
1
W'-%"&//%%'I$ DL s
6A C Cc * | j |d y )NFrp r0 r s r/ rn zSSLSocket.connectE s 4'r1 c ( | j |d S r rr rs s r/ rm zSSLSocket.connect_exJ s !!$--r1 c t | \ }}| j j || j | j
d }||fS )NT)r< r= r; )r acceptr? rC r< r= )r0 newsockr r s r/ rv zSSLSocket.acceptO sV > (
,,**7,0,H,H)-)B)B $ + & } r1 c | j | j j | S |t vrt dj | y )Nz({0} channel binding type not implemented)r r CHANNEL_BINDING_TYPESr r r s r/ r z SSLSocket.get_channel_binding[ sJ << #<<33G< < 33 >EEgN r1 c P | j | j j S y r r r s r/ r zSSLSocket.versionf s" << #<<'') )r1 )FTTNNNr r r )r )r N)r r ra r )/rE rF rG r r rB r r r? r r@ r r- r0 r2 r r r r r r r r r> r@ rD rI rO r rW rY r[ r] r_ r r r r ri r rp rn rm rv r r r r s @r/ r r s ;
FJ;?&*\ \|
^^# # ( (
^^+ +
/ /;
*( 5 5
9 9 ) ) 1 1 . . -=2 0 9 /<&3@29
C C C C % %4(
.
r1 r c ddl m} ddlm} d}d} |j | d d j dz } || dd | } ||d |f|dd z S # t $ r t
d
| d |d w xY w)
Nr )strptime)timegm) JanFebMarAprMayJunJulAugSepOctNovDecz %d %H:%M:%S %Y GMTr r r r z
time data z does not match format "%b")timer| calendarr} indextitler ) cert_timer| r} months time_format month_numbertts r/ cert_time_to_secondsr u s F (K
7 ||IbqM$7$7$9:Q> im[
1 r!ul+b1g566 F-6 E F FFs %A A3z-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----c t t j | dd }t g}|t dt | d D cg c]
}|||dz c}z
}|j
t dz dj | S c c}w )NASCIIstrictr @
) r5 base64standard_b64encode
PEM_HEADERrangerO rP
PEM_FOOTERjoin)der_cert_bytesfssis r/ DER_cert_to_PEM_certr s & F % %n 5wIA
BeAs1vr 2
3 21Qqt9 2
33BIIj4 99R= 4s A?c b | j t st dt z | j j t
st dt
z | j t
t t
t
}t j |j dd S )Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr r )
r, r r stripendswithr rO r decodebytesr6 )pem_cert_stringds r/ PEM_cert_to_DER_certr s 4 % %j 1C%& ' ' " + +J 7A%& ' ' JZ 0@AA ahhw 9 ::r1 c ( | \ }}|t }nt }t ||| }t | | 5 }|j || 5 } | j d }
d d d d d d t
S # 1 sw Y xY w# 1 sw Y t
S xY w)N)r r )r& )r> T)r r _create_stdlib_contextr rC r r ) r ssl_versionca_certsr& hostportr r? r: sslsockdercerts r/ get_server_certificater s JD$! $[/8,46G
4 1T
t
< ))$/G =
2 (( =
<
2 ((s# A>A2A>2A; 7A>>Bc . t j | d S )Nz )_PROTOCOL_NAMESr )
protocol_codes r/ get_protocol_namer s }k ::r1 r )lrs r collectionsr enumr _Enumr _IntEnumr _IntFlagr rH r r r
r r r
r r r r r r r r r r r r r r r ImportErrorr r r r r r r! r" r# r$ r% r& _convert_rE r' r, r* __members__itemsr r _SSLv2_IF_EXISTSrD rY rg r rt r r r r r r r r r r r r) r socket_errorry r HAS_NEVER_CHECK_COMMON_NAME_RESTRICTED_SERVER_CIPHERSr r r r r r r r r# r r r r _create_default_https_contextr r r r rA rE r r r r r r r r )r. r s 00r/ r sa Xt " H H N N 3 3 : 2 2 8 (K
x'
6
h.
8+
()
0:/F/F F*,2<2H2H2N2N2PQ2P;45$;2PQ:'7> h5 5 5 h h&" &" &"R h : <<71 9 9 ? ?
% %d,J K . + .>b DF 4 & @*],HI @*&k5 &AG AGH $+#6#6 $$"&t$L49*/9L9L$($"&tD4n !7 4 X; X;v | |@ '
&
7< +
(
; .A$(2I),;g* T Rs J% =
J1%J.-J.