관리-도구
편집 파일: ssl.cpython-37.opt-2.pyc
B YI~d�� � @ s� d dl Z d dlZd dlmZ d dlmZmZm Z d dl Z d dl m Z m Z mZ d dl mZmZmZ d dl mZmZmZmZmZmZmZ d dl mZmZ d dl m Z m Z m Z m Z yd d l m!Z! W n e"k r� Y nX d d l m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, d d l m-Z-m.Z. ej/d e0d d� e d� e j/de0dd� e d� ej/de0dd� e d� ej/de0dd� e d� e j/de0dd� e d� ej/de0dd� e d� e1j2 Z3e1_3dd� e1j4�5� D �Z6e7e1d d�Z8G d d � d e�Z9e j:d k�r�d d l m;Z;m<Z< d d!l=m=Z=m>Z>m?Z?m@Z@ d d"l=mAZAmBZB d dl=ZCd dlDZDd dlEZEd dlFZFeGZHd#gZIeJe d$�ZKe-ZLeZMd%d&� ZNd'd(� ZOd)d*� ZPd+d,� ZQed-d.�ZRd/d0� ZSG d1d2� d2ed2d3��ZTG d4d5� d5eTe�ZUG d6d7� d7e�ZVeUjWfdddd8�d9d:�ZXe2feYd;eUjWdddddd<�d=d>�ZZeXZ[eZZ\G d?d@� d@�Z]dAdB� Z^G dCdD� dDe=�Z_e_eV_`e]eV_addd;eYe2ddEdEdf dFdG�ZbdHdI� ZcdJZddKZedLdM� ZfdNdO� Zge2dfdPdQ�ZhdRdS� ZidS )T� N)� namedtuple)�Enum�IntEnum�IntFlag)�OPENSSL_VERSION_NUMBER�OPENSSL_VERSION_INFO�OPENSSL_VERSION)� _SSLContext� MemoryBIO� SSLSession)�SSLError�SSLZeroReturnError�SSLWantReadError�SSLWantWriteError�SSLSyscallError� SSLEOFError�SSLCertVerificationError)�txt2obj�nid2obj)� RAND_status�RAND_add� RAND_bytes�RAND_pseudo_bytes)�RAND_egd) �HAS_SNI�HAS_ECDH�HAS_NPN�HAS_ALPN� HAS_SSLv2� HAS_SSLv3� HAS_TLSv1� HAS_TLSv1_1� HAS_TLSv1_2� HAS_TLSv1_3)�_DEFAULT_CIPHERS�_OPENSSL_API_VERSION� _SSLMethodc C s | � d�o| dkS )NZ PROTOCOL_�PROTOCOL_SSLv23)� startswith)�name� r* �(/opt/alt/python37/lib64/python3.7/ssl.py�<lambda>| � r, )�source�Optionsc C s | � d�S )NZOP_)r( )r) r* r* r+ r, � r- ZAlertDescriptionc C s | � d�S )NZALERT_DESCRIPTION_)r( )r) r* r* r+ r, � r- ZSSLErrorNumberc C s | � d�S )NZ SSL_ERROR_)r( )r) r* r* r+ r, � r- � VerifyFlagsc C s | � d�S )NZVERIFY_)r( )r) r* r* r+ r, � r- � VerifyModec C s | � d�S )NZCERT_)r( )r) r* r* r+ r, � r- c C s i | ]\}}||�qS r* r* )�.0r) �valuer* r* r+ � <dictcomp>� s r4 ZPROTOCOL_SSLv2c @ s6 e Zd ZejZejZejZ ej Z ej Z ejZejZdS )� TLSVersionN)�__name__� __module__� __qualname__�_sslZPROTO_MINIMUM_SUPPORTEDZMINIMUM_SUPPORTEDZ PROTO_SSLv3�SSLv3Z PROTO_TLSv1ZTLSv1Z PROTO_TLSv1_1ZTLSv1_1Z PROTO_TLSv1_2ZTLSv1_2Z PROTO_TLSv1_3ZTLSv1_3ZPROTO_MAXIMUM_SUPPORTEDZMAXIMUM_SUPPORTEDr* r* r* r+ r5 � s r5 �win32)�enum_certificates� enum_crls)�socket�AF_INET� SOCK_STREAM�create_connection)� SOL_SOCKET�SO_TYPEz tls-unique� HOSTFLAG_NEVER_CHECK_SUBJECTc C s� | sdS | � d�}|s&| �� |�� kS |dkr<td�| ���| �d�\}}}d|krbtd�| ���|sttd�| ���|dkr�td�| ���|�d�\}}}|r�|s�dS |�� |�� kS ) NF�*� z1too many wildcards in certificate DNS name: {!r}.�.z9wildcard can only be present in the leftmost label: {!r}.z>sole wildcard without additional labels are not support: {!r}.z<partial wildcards in leftmost label are not supported: {!r}.)�count�lower�CertificateError�format� partition)Zdn�hostnameZ wildcardsZ dn_leftmost�sepZ dn_remainderZhostname_leftmostZhostname_remainderr* r* r+ �_dnsname_match� s2 rO c C s� yt �| �}W n tk r" Y n"X t �|�| kr6|S td�| ���yt �t j| �S tk rt td�| ���Y n tk r� Y nX td�| ���d S )Nz'{!r} is not a quad-dotted IPv4 address.z+{!r} is neither an IPv4 nor an IP6 address.z {!r} is not an IPv4 address.) �_socketZ inet_aton�OSErrorZ inet_ntoa� ValueErrorrK Z inet_ptonZAF_INET6�AttributeError)Zipname�addrr* r* r+ � _inet_paton� s rU c C s t | �� �}||kS )N)rU �rstrip)Zcert_ipaddress�host_ipZipr* r* r+ �_ipaddress_match s rX c C sN | s t d��y t|�}W n t k r0 d }Y nX g }| �dd�}xb|D ]Z\}}|dkrz|d krnt||�rnd S |�|� qH|dkrH|d k r�t||�r�d S |�|� qHW |s�xF| �dd�D ]6}x0|D ](\}}|dkr�t||�r�d S |�|� q�W q�W t|�dk�r td |d �t t |��f ��n,t|�dk�rBtd ||d f ��ntd ��d S )Nztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDZsubjectAltNamer* ZDNSz IP AddressZsubjectZ commonNamerF z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) rR rU �getrO �appendrX �lenrJ �join�map�repr)�certrM rW ZdnsnamesZsan�keyr3 �subr* r* r+ �match_hostname s> rb �DefaultVerifyPathszQcafile capath openssl_cafile_env openssl_cafile openssl_capath_env openssl_capathc C sd t �� } tj�| d | d �}tj�| d | d �}ttj�|�rF|nd tj�|�rX|nd f| �� S )Nr rF � � ) r9 �get_default_verify_paths�os�environrY rc �path�isfile�isdir)�parts�cafile�capathr* r* r+ rf \ s rf c s@ e Zd ZdZ� fdd�Ze� fdd��Ze� fdd��Z� ZS )� _ASN1Objectr* c s t � j| ft|dd��� S )NF)r) )�super�__new__�_txt2obj)�cls�oid)� __class__r* r+ rq o s z_ASN1Object.__new__c s t � j| ft|��� S )N)rp rq �_nid2obj)rs Znid)ru r* r+ �fromnidr s z_ASN1Object.fromnidc s t � j| ft|dd��� S )NT)r) )rp rq rr )rs r) )ru r* r+ �fromnamex s z_ASN1Object.fromname) r6 r7 r8 � __slots__rq � classmethodrw rx � __classcell__r* r* )ru r+ ro j s ro znid shortname longname oidc @ s e Zd ZdZdZdS )�Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)r6 r7 r8 � SERVER_AUTHZ CLIENT_AUTHr* r* r* r+ r| s r| c sj e Zd ZdZdZdZefdd�Zdd� Zd.d d �Z d/d d �Z d d� Z dd� Z dd� Z dd� Zejfdd�Zeed�r�e� fdd��Zej� fdd��Ze� fdd ��Zej� fd d ��Ze� fd d ��Zej� fd d ��Zeed!��red"d#� �Zejd$d#� �Zn ed%d#� �Ze� fd&d'��Ze� fd(d)��Z e j� fd*d)��Z e� fd+d,��Z e j� fd-d,��Z � Z S )0� SSLContext)ZCAZROOTNc O s t �| |�}|S )N)r rq )rs �protocol�args�kwargs�selfr* r* r+ rq � s zSSLContext.__new__c C s4 |d kr d S t |t�r&|�d��d�S |�d�S d S )NZidna�ascii)� isinstance�str�encode�decode)r� rM r* r* r+ �_encode_hostname� s zSSLContext._encode_hostnameFTc C s | j j|||||| |d�S )N)�sock� server_side�do_handshake_on_connect�suppress_ragged_eofs�server_hostname�context�session)�sslsocket_class�_create)r� r� r� r� r� r� r� r* r* r+ � wrap_socket� s zSSLContext.wrap_socketc C s | j j|||| �|�|| d�S )N)r� r� r� r� )�sslobject_classr� r� )r� �incoming�outgoingr� r� r� r* r* r+ �wrap_bio� s zSSLContext.wrap_bioc C sd t � }xN|D ]F}t|d�}t|�dks2t|�dkr:td��|�t|�� |�|� q W | �|� d S )Nr� r � z(NPN protocols must be 1 to 255 in length)� bytearray�bytesr[ r rZ �extendZ_set_npn_protocols)r� Z npn_protocols�protosr �br* r* r+ �set_npn_protocols� s z SSLContext.set_npn_protocolsc s8 �d krd � _ n$t��s td��� �fdd�}|� _ d S )Nznot a callable objectc s � � |�}�| ||�S )N)r� )�sslobjZ servernameZsslctx)r� �server_name_callbackr* r+ �shim_cb� s z3SSLContext.set_servername_callback.<locals>.shim_cb)Z sni_callback�callable� TypeError)r� r� r� r* )r� r� r+ �set_servername_callback� s z"SSLContext.set_servername_callbackc C sd t � }xN|D ]F}t|d�}t|�dks2t|�dkr:td��|�t|�� |�|� q W | �|� d S )Nr� r r� z)ALPN protocols must be 1 to 255 in length)r� r� r[ r rZ r� Z_set_alpn_protocols)r� Zalpn_protocolsr� r r� r* r* r+ �set_alpn_protocols� s z SSLContext.set_alpn_protocolsc C sz t � }y@x:t|�D ].\}}}|dkr|dks6|j|kr|�|� qW W n tk rd t�d� Y nX |rv| j|d� |S )NZx509_asnTz-unable to enumerate Windows certificate store)�cadata)r� r< rt r� �PermissionError�warnings�warn�load_verify_locations)r� � storename�purposeZcertsr_ �encodingZtrustr* r* r+ �_load_windows_store_certs� s z$SSLContext._load_windows_store_certsc C sD t |t�st|��tjdkr8x| jD ]}| �||� q$W | �� d S )Nr; )r� ro r� �sys�platform�_windows_cert_storesr� Zset_default_verify_paths)r� r� r� r* r* r+ �load_default_certs� s z SSLContext.load_default_certs�minimum_versionc s t t� j�S )N)r5 rp r� )r� )ru r* r+ r� � s zSSLContext.minimum_versionc s4 |t jkr | jtj M _ttt�j�| |� d S )N) r5 r: �optionsr/ Z OP_NO_SSLv3rp r~ r� �__set__)r� r3 )ru r* r+ r� � s c s t t� j�S )N)r5 rp �maximum_version)r� )ru r* r+ r� � s zSSLContext.maximum_versionc s t tt�j�| |� d S )N)rp r~ r� r� )r� r3 )ru r* r+ r� � s c s t t� j�S )N)r/ rp r� )r� )ru r* r+ r� s zSSLContext.optionsc s t tt�j�| |� d S )N)rp r~ r� r� )r� r3 )ru r* r+ r� s rD c C s | j tj@ }|tjkS )N)� _host_flagsr9 rD )r� Zncsr* r* r+ �hostname_checks_common_name s z&SSLContext.hostname_checks_common_namec C s, |r| j tj M _ n| j tjO _ d S )N)r� r9 rD )r� r3 r* r* r+ r� s c C s dS )NTr* )r� r* r* r+ r� s c s t t� j�S )N)r& rp r )r� )ru r* r+ r s zSSLContext.protocolc s t t� j�S )N)r0 rp � verify_flags)r� )ru r* r+ r� s zSSLContext.verify_flagsc s t tt�j�| |� d S )N)rp r~ r� r� )r� r3 )ru r* r+ r� ! s c s* t � j}yt|�S tk r$ |S X d S )N)rp � verify_moder1 rR )r� r3 )ru r* r+ r� % s zSSLContext.verify_modec s t tt�j�| |� d S )N)rp r~ r� r� )r� r3 )ru r* r+ r� - s )FTTNN)FNN) r6 r7 r8 r� r� r� � PROTOCOL_TLSrq r� r� r� r� r� r� r� r| r} r� �hasattrr �propertyr� �setterr� r� r9 r� r r� r� r{ r* r* )ru r+ r~ � s@ r~ )rm rn r� c C sd t | t�st| ��tt�}| tjkr0t|_d|_ |s<|s<|rL|� |||� n|jt kr`|� | � |S )NT) r� ro r� r~ r� r| r} � CERT_REQUIREDr� �check_hostnamer� � CERT_NONEr� )r� rm rn r� r� r* r* r+ �create_default_context2 s r� F)� cert_reqsr� r� �certfile�keyfilerm rn r� c C s� t |t�st|��t| �} |s$d| _|d k r2|| _|r<d| _|rL|sLtd��|sT|r`| �||� |sl|sl|r|| �|||� n| jt kr�| � |� | S )NFTzcertfile must be specified) r� ro r� r~ r� r� rR �load_cert_chainr� r� r� ) r r� r� r� r� r� rm rn r� r� r* r* r+ �_create_unverified_contextP s$ r� c @ s� e Zd Zdd� Zed1dd��Zedd� �Zejd d� �Zed d � �Z e jd d � �Z ed d� �Z edd� �Z edd� �Z d2dd�Z dd� Zd3dd�Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd4d+d,�Zd-d.� Zd/d0� ZdS )5� SSLObjectc O s t | jj� d���d S )NzU does not have a public constructor. Instances are returned by SSLContext.wrap_bio().)r� ru r6 )r� r� r� r* r* r+ �__init__� s zSSLObject.__init__FNc C s* | � | �}|j||||||d�}||_|S )N)r� r� �ownerr� )rq Z _wrap_bio�_sslobj) rs r� r� r� r� r� r� r� r� r* r* r+ r� � s zSSLObject._createc C s | j jS )N)r� r� )r� r* r* r+ r� � s zSSLObject.contextc C s || j _d S )N)r� r� )r� �ctxr* r* r+ r� � s c C s | j jS )N)r� r� )r� r* r* r+ r� � s zSSLObject.sessionc C s || j _d S )N)r� r� )r� r� r* r* r+ r� � s c C s | j jS )N)r� �session_reused)r� r* r* r+ r� � s zSSLObject.session_reusedc C s | j jS )N)r� r� )r� r* r* r+ r� � s zSSLObject.server_sidec C s | j jS )N)r� r� )r� r* r* r+ r� � s zSSLObject.server_hostname� c C s( |d k r| j �||�}n | j �|�}|S )N)r� �read)r� r[ �buffer�vr* r* r+ r� � s zSSLObject.readc C s | j �|�S )N)r� �write)r� �datar* r* r+ r� � s zSSLObject.writec C s | j �|�S )N)r� � getpeercert)r� � binary_formr* r* r+ r� � s zSSLObject.getpeercertc C s t jr| j�� S d S )N)r9 r r� �selected_npn_protocol)r� r* r* r+ r� � s z SSLObject.selected_npn_protocolc C s t jr| j�� S d S )N)r9 r r� �selected_alpn_protocol)r� r* r* r+ r� � s z SSLObject.selected_alpn_protocolc C s | j �� S )N)r� �cipher)r� r* r* r+ r� � s zSSLObject.cipherc C s | j �� S )N)r� �shared_ciphers)r� r* r* r+ r� � s zSSLObject.shared_ciphersc C s | j �� S )N)r� � compression)r� r* r* r+ r� � s zSSLObject.compressionc C s | j �� S )N)r� �pending)r� r* r* r+ r� s zSSLObject.pendingc C s | j �� d S )N)r� � do_handshake)r� r* r* r+ r� s zSSLObject.do_handshakec C s | j �� S )N)r� �shutdown)r� r* r* r+ �unwrap s zSSLObject.unwrap� tls-uniquec C s | j �|�S )N)r� �get_channel_binding)r� �cb_typer* r* r+ r� s z SSLObject.get_channel_bindingc C s | j �� S )N)r� �version)r� r* r* r+ r� s zSSLObject.versionc C s | j �� S )N)r� � verify_client_post_handshake)r� r* r* r+ r� s z&SSLObject.verify_client_post_handshake)FNNN)r� N)F)r� )r6 r7 r8 r� rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r* r* r* r+ r� � s2 r� c C s t t| j�j| _| S )N)�getattrr� r6 �__doc__)�funcr* r* r+ � _sslcopydoc s r� c s e Zd Zdd� ZedW� fdd� �Zeedd � ��Zej d d � �Zeed d � ��Z e j d d � �Z eedd� ��Z dd� Z dXdd�Z dd� ZdYdd�Zdd� ZedZdd ��Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zd[� fd(d)� Zd\� fd*d+� Zd,d-� Zd]� fd.d/� Zd^� fd0d1� Zd_� fd2d3� Z d`� fd4d5� Z da� fd6d7� Z db� fd8d9� Z d:d;� Z d<d=� Z!ed>d?� �Z"� fd@dA�Z#edBdC� �Z$edDdE� �Z%� fdFdG�Z&edcdHdI��Z'� fdJdK�Z(dLdM� Z)dNdO� Z*� fdPdQ�Z+edddSdT��Z,edUdV� �Z-� Z.S )e� SSLSocketc O s t | jj� d���d S )NzX does not have a public constructor. Instances are returned by SSLContext.wrap_socket().)r� ru r6 )r� r� r� r* r* r+ r� & s zSSLSocket.__init__FTNc s� |� tt�tkrtd��|r8|r(td��|d k r8td��|jrJ|sJtd��t|j|j |j |� � d�}| j | f|�} t t| �jf |� | �|�� � |�� || _|| _d| _d | _|| _|�|�| _|| _|| _y | � � W n6 t k �r } z| j t j kr�� d} W d d } ~ X Y nX d} | | _ | �r�yH| jj!| || j| | jd�| _|�rj| �� } | d k�rbtd ��| �"� W n$ t tfk �r� | �#� � Y nX | S ) Nz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostname)�family�type�proto�filenoFT)r� r� g zHdo_handshake_on_connect should not be specified for non-blocking sockets)$Z getsockoptrB rC r@ �NotImplementedErrorrR r� �dictr� r� r� r� rq rp r� r� � settimeout� gettimeout�detach�_context�_sessionZ_closedr� r� r� r� r� r� � getpeernamerQ �errnoZENOTCONN� _connected� _wrap_socketr� �close) rs r� r� r� r� r� r� r� r� r� �eZ connected�timeout)ru r* r+ r� - s\ zSSLSocket._createc C s | j S )N)r� )r� r* r* r+ r� l s zSSLSocket.contextc C s || _ || j_d S )N)r� r� r� )r� r� r* r* r+ r� q s c C s | j d k r| j jS d S )N)r� r� )r� r* r* r+ r� v s zSSLSocket.sessionc C s || _ | jd k r|| j_d S )N)r� r� r� )r� r� r* r* r+ r� | s c C s | j d k r| j jS d S )N)r� r� )r� r* r* r+ r� � s zSSLSocket.session_reusedc C s t d| jj ��d S )NzCan't dup() %s instances)r� ru r6 )r� r* r* r+ �dup� s z SSLSocket.dupc C s d S )Nr* )r� �msgr* r* r+ � _checkClosed� s zSSLSocket._checkClosedc C s | j s| �� d S )N)r� r� )r� r* r* r+ �_check_connected� s zSSLSocket._check_connected� c C s� | � � | jd krtd��y&|d k r2| j�||�S | j�|�S W nJ tk r� } z,|jd tkrx| jrx|d k rrdS dS n� W d d }~X Y nX d S )Nz'Read on closed or unwrapped SSL socket.r r- )r� r� rR r� r r� Z SSL_ERROR_EOFr� )r� r[ r� �xr* r* r+ r� � s zSSLSocket.readc C s& | � � | jd krtd��| j�|�S )Nz(Write on closed or unwrapped SSL socket.)r� r� rR r� )r� r� r* r* r+ r� � s zSSLSocket.writec C s | � � | �� | j�|�S )N)r� r� r� r� )r� r� r* r* r+ r� � s zSSLSocket.getpeercertc C s* | � � | jd kstjs d S | j�� S d S )N)r� r� r9 r r� )r� r* r* r+ r� � s z SSLSocket.selected_npn_protocolc C s* | � � | jd kstjs d S | j�� S d S )N)r� r� r9 r r� )r� r* r* r+ r� � s z SSLSocket.selected_alpn_protocolc C s$ | � � | jd krd S | j�� S d S )N)r� r� r� )r� r* r* r+ r� � s zSSLSocket.cipherc C s$ | � � | jd krd S | j�� S d S )N)r� r� r� )r� r* r* r+ r� � s zSSLSocket.shared_ciphersc C s$ | � � | jd krd S | j�� S d S )N)r� r� r� )r� r* r* r+ r� � s zSSLSocket.compressionr c sF | � � | jd k r4|dkr(td| j ��| j�|�S t� �||�S d S )Nr z3non-zero flags not allowed in calls to send() on %s)r� r� rR ru r� rp �send)r� r� �flags)ru r* r+ r � s zSSLSocket.sendc sL | � � | jd k r"td| j ��n&|d kr8t� �||�S t� �|||�S d S )Nz%sendto not allowed on instances of %s)r� r� rR ru rp �sendto)r� r� Z flags_or_addrrT )ru r* r+ r � s zSSLSocket.sendtoc O s t d| j ��d S )Nz&sendmsg not allowed on instances of %s)r� ru )r� r� r� r* r* r+ �sendmsg� s zSSLSocket.sendmsgc s� | � � | jd k r�|dkr(td| j ��d}t|��L}|�d��6}t|�}x&||k rp| �||d � �}||7 }qLW W d Q R X W d Q R X nt� � ||�S d S )Nr z6non-zero flags not allowed in calls to sendall() on %s�B) r� r� rR ru � memoryview�castr[ r rp �sendall)r� r� r rH ZviewZ byte_view�amountr� )ru r* r+ r � s "zSSLSocket.sendallc s, | j d k r| �|||�S t� �|||�S d S )N)r� Z_sendfile_use_sendrp �sendfile)r� �file�offsetrH )ru r* r+ r s zSSLSocket.sendfilec sD | � � | jd k r2|dkr(td| j ��| �|�S t� �||�S d S )Nr z3non-zero flags not allowed in calls to recv() on %s)r� r� rR ru r� rp �recv)r� �buflenr )ru r* r+ r s zSSLSocket.recvc sj | � � |r |d kr t|�}n |d kr*d}| jd k rV|dkrJtd| j ��| �||�S t� �|||�S d S )Ni r z8non-zero flags not allowed in calls to recv_into() on %s)r� r[ r� rR ru r� rp � recv_into)r� r� �nbytesr )ru r* r+ r $ s zSSLSocket.recv_intoc s4 | � � | jd k r"td| j ��nt� �||�S d S )Nz'recvfrom not allowed on instances of %s)r� r� rR ru rp �recvfrom)r� r r )ru r* r+ r 3 s zSSLSocket.recvfromc s6 | � � | jd k r"td| j ��nt� �|||�S d S )Nz,recvfrom_into not allowed on instances of %s)r� r� rR ru rp � recvfrom_into)r� r� r r )ru r* r+ r ; s zSSLSocket.recvfrom_intoc O s t d| j ��d S )Nz&recvmsg not allowed on instances of %s)r� ru )r� r� r� r* r* r+ �recvmsgC s zSSLSocket.recvmsgc O s t d| j ��d S )Nz+recvmsg_into not allowed on instances of %s)r� ru )r� r� r� r* r* r+ � recvmsg_intoG s zSSLSocket.recvmsg_intoc C s$ | � � | jd k r | j�� S dS d S )Nr )r� r� r� )r� r* r* r+ r� K s zSSLSocket.pendingc s | � � d | _t� �|� d S )N)r� r� rp r� )r� Zhow)ru r* r+ r� S s zSSLSocket.shutdownc C s. | j r| j �� }d | _ |S tdt| � ��d S )NzNo SSL wrapper around )r� r� rR r� )r� �sr* r* r+ r� X s zSSLSocket.unwrapc C s$ | j r| j �� S tdt| � ��d S )NzNo SSL wrapper around )r� r� rR r� )r� r* r* r+ r� a s z&SSLSocket.verify_client_post_handshakec s d | _ t� �� d S )N)r� rp � _real_close)r� )ru r* r+ r h s zSSLSocket._real_closec C sF | � � | �� }z$|dkr(|r(| �d � | j�� W d | �|� X d S )Ng )r� r� r� r� r� )r� �blockr� r* r* r+ r� l s zSSLSocket.do_handshakec s� | j rtd��| js | jd k r&td��| jj| d| j| | jd�| _y>|rVt� � |�}nd }t� � |� |s~d| _| j r~| � � |S t tfk r� d | _� Y nX d S )Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!F)r� r� T)r� rR r� r� r� r� r� r� rp � connect_ex�connectr� r� rQ )r� rT r Zrc)ru r* r+ � _real_connectw s( zSSLSocket._real_connectc C s | � |d� d S )NF)r )r� rT r* r* r+ r � s zSSLSocket.connectc C s | � |d�S )NT)r )r� rT r* r* r+ r � s zSSLSocket.connect_exc s. t � �� \}}| jj|| j| jdd�}||fS )NT)r� r� r� )rp �acceptr� r� r� r� )r� ZnewsockrT )ru r* r+ r � s zSSLSocket.accept� tls-uniquec C s4 | j d k r| j �|�S |tkr,td�|���d S d S )Nz({0} channel binding type not implemented)r� r� �CHANNEL_BINDING_TYPESrR rK )r� r� r* r* r+ r� � s z SSLSocket.get_channel_bindingc C s | j d k r| j �� S d S d S )N)r� r� )r� r* r* r+ r� � s zSSLSocket.version)FTTNNN)N)r� N)F)r )N)r )r N)r� r )Nr )r� r )Nr )F)r )/r6 r7 r8 r� rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r r r r r� r� r� r� r r� r r r r r� r� r{ r* r* )ru r+ r� ! sd < r� Tc C sl |r|st d��|r |s t d��t|�} || _|r<| �|� |rL| �||� | rZ| �| � | j| |||d�S )Nz5certfile must be specified for server-side operationszcertfile must be specified)r� r� r� r� )rR r~ r� r� r� Z set_ciphersr� ) r� r� r� r� r� � ssl_version�ca_certsr� r� Zciphersr� r* r* r+ r� � s r� c C s� ddl m} ddlm} d}d}y |�| d d� �� �d }W n$ tk rb td| |f ��Y n0X || dd � |�}||d |f|d d � �S d S ) Nr )�strptime)�timegm) ZJanZFebZMarZAprZMayZJunZJulZAugZSepZOctZNovZDecz %d %H:%M:%S %Y GMTre rF z*time data %r does not match format "%%b%s"rd � )Ztimer Zcalendarr �index�titlerR )Z cert_timer r ZmonthsZ time_formatZ month_number�ttr* r* r+ �cert_time_to_seconds� s r% z-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----c sR t t�| �dd�� tg}|� fdd�tdt� �d�D �7 }|�td � d�|�S )N�ASCII�strictc s g | ]}� ||d � �qS )�@ r* )r2 �i)�fr* r+ � <listcomp> s z(DER_cert_to_PEM_cert.<locals>.<listcomp>r r( � ) r� �base64Zstandard_b64encode� PEM_HEADER�ranger[ rZ � PEM_FOOTERr\ )Zder_cert_bytes�ssr* )r* r+ �DER_cert_to_PEM_cert� s "r2 c C s\ | � t�stdt ��| �� �t�s0tdt ��| �� tt�tt� � }t�|� dd��S )Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr& r' ) r( r. rR �strip�endswithr0 r[ r- Z decodebytesr� )Zpem_cert_string�dr* r* r+ �PEM_cert_to_DER_cert s r6 c C sd | \}}|d k rt }nt}t|||d�}t| ��&}|�|��}|�d�} W d Q R X W d Q R X t| �S )N)r� rm T)r� r� �_create_stdlib_contextrA r� r� r2 ) rT r r ZhostZportr� r� r� ZsslsockZdercertr* r* r+ �get_server_certificate s r8 c C s t �| d�S )Nz <unknown>)�_PROTOCOL_NAMESrY )Z protocol_coder* r* r+ �get_protocol_name& s r: )jr� rg � collectionsr �enumr Z_Enumr Z_IntEnumr Z_IntFlagr9 r r r r r r r r r r r r r r rr r rv r r r r r � ImportErrorr r r r r r r r! r" r# r$ r% �_convertr6 r& r� r' � __members__�itemsr9 r� Z_SSLv2_IF_EXISTSr5 r� r< r= r> r? r@ rA rB rC rP r- r� r� rQ Z socket_errorr r� ZHAS_NEVER_CHECK_COMMON_NAMEZ_RESTRICTED_SERVER_CIPHERSrJ rO rU rX rb rc rf ro r| r~ r} r� r� r� Z _create_default_https_contextr7 r� r� r� r� r� r� r% r. r0 r2 r6 r8 r: r* r* r* r+ �<module>] s� $0 1# 9 - (