관리-도구
편집 파일: _macos.cpython-38.pyc
U &?�f�D � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZmZm Z m Z m Z m Z m Z d dlmZ ddlmZ e�� d Zeeee�d���Zedk r�eded � ded � ���eeed �d d �Zed d �Z edd�Z eZ e Z e Z e Z!e Z"e Z#e Z$e Z%e Z&e Z'ee&�Z(e Z)e Z*ee%�Z+ee!�Z,ee"�Z-ee#�Z.ee$�Z/e Z0e Z1ee �Z2ee �Z3ee �Z4e Z5e Z6�z<e)e,ge j7_8e2e j7_9e2ge j:_8e,e j:_9e*e ge j;_8e-e j;_9e4e.ge j<_8e*e j<_9e4e ge j=_8e*e j=_9e1ge j>_8e3e j>_9e e-ge j?_8e3e j?_9e(e(ee4�ge j@_8e*e j@_9e4ee5�ge jA_8e*e jA_9e4e _4e5e _5e*e _*dZBdZCe(ge jD_8de jD_9e(ge jE_8e'e jE_9e)ee ge jF_8e-e jF_9e-e ge jG_8ee jG_9e-ee e ge jH_8ee jH_9e)ee ge jI_8e,e jI_9e,ge jJ_8e e jJ_9e,ge jK_8e e jK_9e)ee(�e e0ge jL_8e.e jL_9e)e e0ge jM_8e/e jM_9e/e ge jN_8de jN_9e.ge jO_8e e jO_9e.e ge jP_8e e jP_9e+ge jQ_8e e jQ_9e+ge jR_8e-e jR_9e)�Se d�e _Te �Se d�e _Ue(e _(e.e _.e-e _-e+e _+W n eVk �r� ed�d�Y nX e*ejWejWejWd�dd�ZXeXe j@_YeXe j<_YeXe j=_YeXe jA_YG dd� d�ZZe[e,d�dd �Z\e[e"d�d d �Z]e-edB d �d d!�Z^e_e[ e/d"�d#d$�Z`e jaejbejcd d%�d&d'��Zdd+ejbe_e[ edB dd(�d)d*�ZedS ),� N) �CDLL�POINTER�c_bool�c_char_p�c_int32�c_long�c_uint32�c_ulong�c_void_p)� find_library� )� _set_ssl_context_verify_mode�.)� � z,Only OS X 10.8 and newer are supported, not )�name�macos10_16_path�returnc C sX z,t dkr|}nt| �}|s t�t|dd�W S tk rR td| � d��d�Y nX dS )z:Loads a CDLL by name, falling back to known path on 10.16+)r � T)Z use_errnoz The library z failed to loadN)�_mac_version_infor �OSErrorr � ImportError)r r �path� r �K/opt/hc_python/lib/python3.8/site-packages/pip/_vendor/truststore/_macos.py� _load_cdll s r �Securityz6/System/Library/Frameworks/Security.framework/Security�CoreFoundationzB/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation� r �kCFAllocatorDefault�kCFTypeArrayCallBackszError initializing ctypes)�result�_�argsr c C s� t | �dkr|S d}zht�| d�}t�|t�tj��}t� |t j �}|dkrzt� d�}t� ||dt j �} | sttd��|j}W 5 |dk r�t�|� X |dks�|dkr�d| � �}t�|��dS )z< Raises an error if the OSStatus value is non-zero. r N� �'Error copying C string from CFStringRef� z8SecureTransport operation returned a non-zero OSStatus: )�intr � CFReleaser �SecCopyErrorMessageString�ctypes�castr r �CFStringGetCStringPtr�CFConst�kCFStringEncodingUTF8�create_string_buffer�CFStringGetCStringr �value�ssl�SSLError)r! r" r# Zerror_message_cfstringZ error_message_cfstring_c_void_p�message�bufferr r r �_handle_osstatus� s: � � � r6 c @ s( e Zd ZdZed�ZdZdZdZdZ dS )r- zCoreFoundation constantsi i���i��i���i����N) �__name__� __module__� __qualname__�__doc__�CFStringEncodingr. Z#errSecIncompleteCertRevocationCheck�errSecHostNameMismatch�errSecCertificateExpired�errSecNotTrustedr r r r r- s r- )r1 r c C s t �t j| t| ��S )N)r � CFDataCreater �len)r1 r r r �_bytes_to_cf_data_ref s �rA c C s t �| �}t�tj|tj�}|S )zi Given a Python binary data, create a CFString. The string must be CFReleased by the caller. )r* r r �CFStringCreateWithCStringr r- r. )r1 Zc_strZcf_strr r r �_bytes_to_cf_string s �rC )� cf_string_refr c C sZ t �| tj�}|dkrDt�d�}t �| |dtj�}|s>td��|j}|dk rV|� d�}|S )z� Creates a Unicode string from a CFString object. Used entirely for error reporting. Yes, it annoys me quite a lot that this function is this complex. Nr$ r% zutf-8) r r, r- r. r* r/ r0 r r1 �decode)rD �stringr5 r! r r r �_cf_string_ref_to_str& s$ � � rG )�certsr c C s� t �t jdt�t j��}|s$td��| D ]R}d}d}z&t|�}t � t j|�}t � ||� W 5 |rjt �|� |rxt �|� X q(|S )z�Builds a CFArray of SecCertificateRefs from a list of DER-encoded certificates. Responsibility of the caller to call CoreFoundation.CFRelease on the CFArray. r zUnable to allocate memory!N) r �CFArrayCreateMutabler r* �byrefr � MemoryErrorr( rA r � SecCertificateCreateWithData�CFArrayAppendValue)rH Zcf_arrayZ cert_dataZcf_dataZ sec_cert_refr r r �_der_certs_to_cf_cert_array= s, � � rN )�ctxr c c s@ | j }| j}d| _ t| tj� z d V W 5 || _ t| |� X d S )NF)�check_hostname� verify_moder r2 � CERT_NONE)rO rP rQ r r r �_configure_context[ s rS )� ssl_context� cert_chain�server_hostnamer c C s� d }d }d }d }�zd|d k rRd }z t|�d��}t�d|�}W 5 |rNt �|� X n t�dd �}|}| jtj@ r�t � t j dt � t j ��}t �||� t �|� t�ttB �} t �|| � t �| � n| jtj@ r�td��d }z(t|�}t�� }t�||t � |�� W 5 |�rt �|� X | jdd�} | �rXd } zt| �} t�|| � W 5 | �rVt �| � X t�|d� t �� }t�|t � |��} | dk�r�d} n | dk�r�d} nt� d| ����d}| �st � |�}| j tj k�r�|t j!k�s�|t j"k�r�d} n| j#�s|t j$k�rd} | �std }zPt �%|�}t&|��p(d }t�'� }t�(|t � |�� t�)|�}||_*||_+|�W 5 |�rrt �|� X W 5 |�r�t �|� |�r�t �|� X d S ) N�asciiTr z/VERIFY_CRL_CHECK_LEAF not implemented for macOS)� binary_formFr z8Unknown result from Security.SecTrustEvaluateWithError: z Certificate verification failed),r r( rC �encoder �SecPolicyCreateSSL� verify_flagsr2 �VERIFY_CRL_CHECK_CHAINrI r r* rJ r rM �SecPolicyCreateRevocation�#kSecRevocationUseAnyAvailableMethod�%kSecRevocationRequirePositiveResponse�VERIFY_CRL_CHECK_LEAF�NotImplementedErrorrN � SecTrustRef� SecTrustCreateWithCertificates� get_ca_certs� SecTrustSetAnchorCertificates�!SecTrustSetAnchorCertificatesOnly� CFErrorRefZSecTrustEvaluateWithErrorr3 �CFErrorGetCoderQ � CERT_REQUIREDr- r> r= rP r< �CFErrorCopyDescriptionrG �SecTrustResultType�SecTrustGetTrustResult�SSLCertVerificationErrorZverify_messageZ verify_code)rT rU rV rH Zpolicies�trustZcf_errorZcf_str_hostnameZ ssl_policyZrevocation_policyZctx_ca_certs_derZ ctx_ca_certsZsec_trust_eval_resultZ is_trustedZ cf_error_codeZcf_error_string_refZcf_error_messageZsec_trust_result_type�errr r r �_verify_peercerts_implh s� � �� � � � � ���� � � rp )N)f� contextlibr* �platformr2 �typingr r r r r r r r r � ctypes.utilr Z_ssl_constantsr �mac_verZ _mac_version�tuple�mapr' �splitr r �strr r r �BooleanZCFIndexr; ZCFDataZCFStringZCFArrayZCFMutableArrayZCFErrorZCFTypeZCFTypeIDZ CFTypeRefZCFAllocatorRefZOSStatusrg Z CFDataRefZ CFStringRefZ CFArrayRefZCFMutableArrayRefZCFArrayCallBacksZ CFOptionFlagsZSecCertificateRefZ SecPolicyRefrb rk ZSecTrustOptionFlagsrL Zargtypes�restypeZSecCertificateCopyDatar) re rf r] rZ rc rl r^ r_ r( Z CFGetTypeIDrB r, r0 r? ZCFDataGetLengthZCFDataGetBytePtrZ CFArrayCreaterI rM ZCFArrayGetCountZCFArrayGetValueAtIndexrh rj Zin_dllr r �AttributeError�Anyr6 Zerrcheckr- �bytesrA rC rG �listrN �contextmanager� SSLContext�IteratorrS rp r r r r �<module> s2 , � �� �� � � �� � � 5 ��