w(Zގ
d dl Z d dlZd dlmZ d dlmZmZm Z
d dlm Z d dl Z d dl m
Z
mZmZ d dl mZmZmZ d dl mZmZmZmZmZmZmZ d dl mZm Z d d l m Z m Z m Z m!Z! d d
l m"Z" n # e#$ r Y nw xY wd d l m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z- d d l m.Z.m/Z/ ej0 d
e1d e e
j0 de1d e ej0 de1d e ej0 de1d e e
j0 de1d e ej0 de1d e e2j3 xZ4e2_4 d e2j5 6 D Z7 e8e2dd Z9 e e G d d Z: e e G d d Z; e e G d d! Z< e e G d" d# Z=e j> d$k rd d%l m?Z?m@Z@ d d&lAmAZAmBZBmCZC d d'lAmDZDmEZEmFZF d dlAZGd dlHZHd dlIZId dlJZJeKZLd(gZM eNe d) ZOe.ZPeZQd* ZRd+ ZSd, ZTd- ZU ed.d/ ZVd0 ZW G d1 d2 ed2d3 ZX G d4 d5eXe ZY G d6 d7e ZZeYj[ fdddd8d9Z\dKe]d:eYj[ dddddd;d<Z^e\Z_e^Z` G d= d> Zad? Zb G d@ dAeA ZceceZ_d eaeZ_e ddd:e]e3ddBdBdf dCZfdD ZgdEZhdFZidG ZjdH ZkeldeFfdIZmdJ ZndS )L N)
namedtuple)EnumIntEnumIntFlag) _simple_enum)OPENSSL_VERSION_NUMBEROPENSSL_VERSION_INFOOPENSSL_VERSION) _SSLContext MemoryBIO
SSLSession)SSLErrorSSLZeroReturnErrorSSLWantReadErrorSSLWantWriteErrorSSLSyscallError SSLEOFErrorSSLCertVerificationError)txt2objnid2obj) RAND_statusRAND_add
RAND_bytesRAND_pseudo_bytes)RAND_egd)
HAS_SNIHAS_ECDHHAS_NPNHAS_ALPN HAS_SSLv2 HAS_SSLv3 HAS_TLSv1 HAS_TLSv1_1 HAS_TLSv1_2 HAS_TLSv1_3)_DEFAULT_CIPHERS_OPENSSL_API_VERSION
_SSLMethodc 8 | d o| dk S )N PROTOCOL_PROTOCOL_SSLv23
startswithnames 0/opt/alt/python-internal/lib64/python3.11/ssl.pyr1 } s --K$:K2K )sourceOptionsc , | d S )NOP_r, r. s r0 r1 r1 s '' r2 AlertDescriptionc , | d S )NALERT_DESCRIPTION_r, r. s r0 r1 r1 s !566 r2 SSLErrorNumberc , | d S )N
SSL_ERROR_r, r. s r0 r1 r1 s .. r2 VerifyFlagsc , | d S )NVERIFY_r, r. s r0 r1 r1 s ++ r2
VerifyModec , | d S )NCERT_r, r. s r0 r1 r1 s )) r2 c i | ]\ }}|| S rD ).0r/ values r0
rG s QQQ;45$QQQr2 PROTOCOL_SSLv2c p e Zd Zej Zej Zej Z ej
Z ej Z
ej Zej ZdS )
TLSVersionN)__name__
__module__ __qualname___sslPROTO_MINIMUM_SUPPORTEDMINIMUM_SUPPORTED PROTO_SSLv3SSLv3 PROTO_TLSv1TLSv1
PROTO_TLSv1_1TLSv1_1
PROTO_TLSv1_2TLSv1_2
PROTO_TLSv1_3TLSv1_3PROTO_MAXIMUM_SUPPORTEDMAXIMUM_SUPPORTEDrD r2 r0 rJ rJ sJ 4 E E G G G 4r2 rJ c ( e Zd Z dZdZdZdZdZdZdS )_TLSContentType N) rK rL rM CHANGE_CIPHER_SPECALERT HANDSHAKEAPPLICATION_DATAHEADERINNER_CONTENT_TYPErD r2 r0 r^ r^ s8 EI
F r2 r^ c e Zd Z dZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Z!d Z"d!Z#d"Z$d#S )$
_TLSAlertTyper
r_ r` ra ( ) * + , - . / 0 1 2 3 < F G P V Z d m n o p q r s t x N)%rK rL rM CLOSE_NOTIFYUNEXPECTED_MESSAGEBAD_RECORD_MACDECRYPTION_FAILEDRECORD_OVERFLOWDECOMPRESSION_FAILUREHANDSHAKE_FAILURENO_CERTIFICATEBAD_CERTIFICATEUNSUPPORTED_CERTIFICATECERTIFICATE_REVOKEDCERTIFICATE_EXPIREDCERTIFICATE_UNKNOWNILLEGAL_PARAMETER
UNKNOWN_CA
ACCESS_DENIED DECODE_ERROR
DECRYPT_ERROREXPORT_RESTRICTIONPROTOCOL_VERSIONINSUFFICIENT_SECURITYINTERNAL_ERRORINAPPROPRIATE_FALLBACK
USER_CANCELEDNO_RENEGOTIATIONMISSING_EXTENSIONUNSUPPORTED_EXTENSIONCERTIFICATE_UNOBTAINABLEUNRECOGNIZED_NAME BAD_CERTIFICATE_STATUS_RESPONSEBAD_CERTIFICATE_HASH_VALUEUNKNOWN_PSK_IDENTITYCERTIFICATE_REQUIREDNO_APPLICATION_PROTOCOLrD r2 r0 rl rl s LNO NO JMLM N M " &)#!$ !r2 rl c h e Zd Z dZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdS )_TLSMessageTyper
r_ r` ra rb C rd N)rK rL rM
HELLO_REQUEST CLIENT_HELLO SERVER_HELLOHELLO_VERIFY_REQUESTNEWSESSION_TICKETEND_OF_EARLY_DATAHELLO_RETRY_REQUESTENCRYPTED_EXTENSIONS CERTIFICATESERVER_KEY_EXCHANGECERTIFICATE_REQUEST SERVER_DONECERTIFICATE_VERIFYCLIENT_KEY_EXCHANGEFINISHEDCERTIFICATE_URLCERTIFICATE_STATUSSUPPLEMENTAL_DATA
KEY_UPDATE
NEXT_PROTO MESSAGE_HASHre rD r2 r0 r r s MLL K K HOJJL r2 r win32)enum_certificates enum_crls)socket SOCK_STREAMcreate_connection)
SOL_SOCKETSO_TYPE_GLOBAL_DEFAULT_TIMEOUT
tls-unique HOSTFLAG_NEVER_CHECK_SUBJECTc | sdS | d }|s*| | k S |dk r"t d | | d \ }}}d|v r"t d | |s"t d | |dk r"t d | | d \ }}}|r|sdS | | k S ) NF*r z1too many wildcards in certificate DNS name: {!r}..z9wildcard can only be present in the leftmost label: {!r}.z>sole wildcard without additional labels are not support: {!r}.z%#B#B OOE " " " "
L
"'7w'G'G" OOE " " "
+ 88Ir** + +C !
+
+
U ,&&%eX66 OOE***
+ 8}}q xx3tX#6#6777 9 : : :
X ! xx! & ' ' ' / 0 0 0s A AADefaultVerifyPathszQcafile capath openssl_cafile_env openssl_cafile openssl_capath_env openssl_capathc z t j } t j | d | d }t j | d | d }t t j | r|nd t j | r|nd g| R S )Nr r r r ) rN get_default_verify_pathsosenvironr r pathisfileisdir)partscafilecapaths r0 r r s ) + +E Z^^E!HeAh
/
/F
Z^^E!HeAh
/
/F v(>(> HffD(*
f(=(= Gff4 & $ & & & &r2 c X e Zd Z dZ fdZe fd Ze fd Z xZS ) _ASN1ObjectrD c V t j | gt |d R S )NFr. super__new___txt2obj)clsoid __class__s r0 r* z_ASN1Object.__new__ s. uwws?Xc%>%>%>????r2 c T t j | gt | R S r )r) r* _nid2obj)r, nidr. s r0 fromnidz_ASN1Object.fromnid s, uwws3Xc]]3333r2 c X t j | gt |d R S )NTr. r( )r, r/ r. s r0 fromnamez_ASN1Object.fromname s3 uwws?Xd%>%>%>????r2 ) rK rL rM __slots__r* classmethodr2 r4
__classcell__r. s @r0 r& r& s I@ @ @ @ @ 4 4 4 4 [4
@ @ @ @ [@ @ @ @ @r2 r& znid shortname longname oidc e Zd Z dZdZdS )Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)rK rL rM SERVER_AUTH CLIENT_AUTHrD r2 r0 r: r: s %K%KKKr2 r: c e Zd Z dZdZdZd dZd Z d!dZ d"dZ d Z
d
Z d Z d Z
ej fd
Z eed r>e fd Zej fd Ze fd Zej fd Ze fd Zej fd Z eed r ed Zej d Zn ed Ze fd Zej fd Ze fd Ze fd Z e j fd Z e fd Z e j fd Z xZ S )#
SSLContext)CAROOTNc z |#t j dt d t }t j | | }|S )Nz9ssl.SSLContext() without protocol argument is deprecated.r r )r r r
PROTOCOL_TLSr r* )r, protocolargskwargsselfs r0 r* zSSLContext.__new__ sH MK+
$H"311 r2 c |d S t |t r(| d d S | d S )Nidnaascii)
isinstancestrencodedecode)rF r s r0 _encode_hostnamezSSLContext._encode_hostname sQ 4
#
&
& ,??6**11':: :??7++ +r2 FTc D | j |||||| | S )N)sock server_sidedo_handshake_on_connectsuppress_ragged_eofsserver_hostnamecontextsession)sslsocket_class_create)rF rP rQ rR rS rT rV s r0 wrap_socketzSSLContext.wrap_socket s9 #++#$;!5 + ,
r2 c h | j |||| | || S )N)rQ rT rV rU )sslobject_classrX rN )rF incomingoutgoingrQ rT rV s r0 wrap_biozSSLContext.wrap_bio sA #++ hK 1 1/ B BT ,
r2 c t j dt d t }|D ]~}t |d }t | dk st | dk rt
d | t | | | | | d S )N'ssl NPN is deprecated, use ALPN insteadr r rI r z(NPN protocols must be 1 to 255 in length)
r r r
bytearraybytesr r r extend_set_npn_protocols)rF
npn_protocolsprotosrC bs r0 set_npn_protocolsz SSLContext.set_npn_protocols s
5
% Hh((A1vv{{c!ffsll IJJJ MM#a&& ! ! ! MM! '''''r2 c v d _ d S t st d fd}| _ d S )Nznot a callable objectc H | } | || S r )rN )sslobj
servernamesslctxrF server_name_callbacks r0 shim_cbz3SSLContext.set_servername_callback..shim_cb0 s+ ! 2 2: > >
++FJGGGr2 ) sni_callbackcallable TypeError)rF rp rq s `` r0 set_servername_callbackz"SSLContext.set_servername_callback) sl ' $D 011
9 7888
H
H
H
H
H
H !(D r2 c N t }|D ]~}t |d }t | dk st | dk rt d | t | | | | | d S )NrI r rb z)ALPN protocols must be 1 to 255 in length)rc rd r r r re _set_alpn_protocols)rF alpn_protocolsrh rC ri s r0 set_alpn_protocolsz SSLContext.set_alpn_protocols6 s & Hh((A1vv{{c!ffsll JKKK MM#a&& ! ! ! MM! (((((r2 c t } t | D ].\ }}}|dk r"|du s |j |v r| | /n$# t $ r t j d Y nw xY w|r| | |S )Nx509_asnTz-unable to enumerate Windows certificate store)cadata)rc r r- re PermissionErrorr r load_verify_locations)rF storenamepurposecertsr encodingtrusts r0 _load_windows_store_certsz$SSLContext._load_windows_store_certsA s K):9)E)E
+
+%hz)) }} u(<(< T***
+
K K K MI J J J J J K 5 & &e & 4 4 4 s >A A0/A0c t |t st | t j dk r | j D ]}| || | d S )Nr )rJ r& rt sysplatform_windows_cert_storesr set_default_verify_paths)rF r r s r0 load_default_certsz SSLContext.load_default_certsO st ';// %G$$ $ <7 " " ! 6
C
C ..y'BBBB %%'''''r2 minimum_versionc D t t j S r )rJ r) r rF r. s r0 r zSSLContext.minimum_versionX egg 566 6r2 c |t j k r| xj t j z c_ t t t j | | d S r ) rJ rR optionsr4 OP_NO_SSLv3r) r> r __set__rF rF r. s r0 r zSSLContext.minimum_version\ sP
((( !4 44 *j ) ) 9 A A$ N N N N Nr2 c D t t j S r )rJ r) maximum_versionr s r0 r zSSLContext.maximum_versionb r r2 c n t t t j | | d S r )r) r> r r r s r0 r zSSLContext.maximum_versionf s, *j ) ) 9 A A$ N N N N Nr2 c D t t j S r )r4 r) r r s r0 r zSSLContext.optionsj s uww'''r2 c n t t t j | | d S r )r) r> r r r s r0 r zSSLContext.optionsn s,
j*%%-55dEBBBBBr2 r c J | j t j z }|t j k S r _host_flagsrN r )rF ncss r0 hostname_checks_common_namez&SSLContext.hostname_checks_common_names s "T%FFC$;; ;r2 c x |r | xj t j z c_ d S | xj t j z c_ d S r r )rF rF s r0 r z&SSLContext.hostname_checks_common_namex sH
F T%F$FF D$EE r2 c dS NTrD rF s r0 r z&SSLContext.hostname_checks_common_name s 4r2 c B t j }||j S d S r )r)
_msg_callback
user_function)rF innerr. s r0 r zSSLContext._msg_callback s* > % & &4r2 c : 5t t t j | d d S t d st d fd}|_ t t t j | | d S )N__call__z is not callable.c P t | }n# t $ r Y nw xY w t | }n# t $ r Y nw xY w|t j k rt }n |t j k rt
}nt } || }n# t $ r Y nw xY w | ||||| S r )rJ r r^ ri rf rl r )conn directionversion content_typemsg_typedatamsg_enumcallbacks r0 r z'SSLContext._msg_callback..inner s
$W--
.| < <
555* !666(*
#8H--
8D)W ((D: :
:s-
4
A A< B
BB)r) r> r r hasattrrt r )rF r r r. s ` r0 r zSSLContext._msg_callback s *j ) ) 7 ? ?d K K K Fx,, <x : : :;; ; : : : : :2 '
j*%%3;;D%HHHHHr2 c D t t j S r )r( r) rC r s r0 rC zSSLContext.protocol s %''*+++r2 c D t t j S r )r= r) verify_flagsr s r0 r zSSLContext.verify_flags s 577/000r2 c n t t t j | | d S r )r) r> r r r s r0 r zSSLContext.verify_flags s,
j*%%2::4GGGGGr2 c n t j } t | S # t $ r |cY S w xY wr )r) verify_moder@ r r s r0 r zSSLContext.verify_mode sF # e$$ $ LLL s % 44c n t t t j | | d S r )r) r> r r r s r0 r zSSLContext.verify_mode s,
j*%%199$FFFFFr2 r )FTTNN)FNN) rK rL rM r rW r[ r* rN rY r^ rj ru ry r r: r; r r r propertyr setterr r rN r r rC r r r7 r8 s @r0 r> r> s >)OO , , , -2,0)-26
8=/3
( ( ( ( ( ( ) ) ) *1)< ( ( ( ( w{ -.. O 7 7 7 7
7
O O O O
O
7 7 7 7
7
O O O O
O ( ( ( ( X(
^C C C C ^C wt344 < <
<
% + F F
, + F F
$ $ $ $ X$L #I #I #I #I #IJ , , , , X, 1 1 1 1 X1 H H H H H X G G G G G G G G Gr2 r> )r# r$ r| c @ t | t st | | t j k r(t t }t |_ d|_ n4| t j
k rt t }nt | |s|s|r|
||| n%|j t k r| | t! |d r9t" j d }|rt( j j s||_ |S )NTkeylog_filename
SSLKEYLOGFILE)rJ r& rt r: r; r> PROTOCOL_TLS_CLIENT
CERT_REQUIREDr check_hostnamer< PROTOCOL_TLS_SERVERr r~ CERT_NONEr r r r r r flagsignore_environmentr )r r# r$ r| rU
keylogfiles r0 create_default_contextr s" g{ + + !
'%%% 011 +!% G' ' ' 011!!!
, ,6 ,%%fff==== ) ) ""7+++w)** 1Z^^O44
1ci : 1&0G # Nr2 F) cert_reqsr r certfilekeyfiler# r$ r| c t |t st | |t j k r
| t
} n)|t j k r
| t } nt | t | } || _
||| _ |rd| _
|r|st d |s|r| || |s|s|r|
||| n%| j t k r| | t! | d r9t" j d }
|
rt( j j s|
| _ | S )NTcertfile must be specifiedr r )rJ r& rt r: r; r r< r r r> r r load_cert_chainr~ r r r r r r r r r r ) rC r r r r r r# r$ r| rU r s r0 _create_unverified_contextr s g{ + + !
'%%% *H G' ' ' *H!!!""G +G ' &!% 7x 75666 37 3 '222 , ,6 ,%%fff==== ) ) ""7+++w)** 1Z^^O44
1ci : 1&0G # Nr2 c : e Zd Z d Ze d d Zed Zej d Zed Z e j d Z ed Z
ed
Z ed Z d d
Z
d Zd dZd Zd Zd Zd Zd Zd Zd Zd Zd dZd Zd ZdS ) SSLObjectc : t | j j d )NzU does not have a public constructor. Instances are returned by SSLContext.wrap_bio().rt r. rK rF rD rE s r0 __init__zSSLObject.__init__\ s. ~&
M
M
M
r2 FNc t | | }| |||||| }||_ |S )N)rQ rT ownerrV )r* _wrap_bio_sslobj) r, r\ r] rQ rT rV rU rF rm s r0 rX zSSLObject._createb sL {{3 "" hK + #
r2 c | j j S r r rU r s r0 rU zSSLObject.contextn s 6|##r2 c || j _ d S r r rF ctxs r0 rU zSSLObject.contexts s " r2 c | j j S r r rV r s r0 rV zSSLObject.sessionw s /|##r2 c || j _ d S r r rF rV s r0 rV zSSLObject.session| s & r2 c | j j S r r session_reusedr s r0 r zSSLObject.session_reused s <|**r2 c | j j S r )r rQ r s r0 rQ zSSLObject.server_side s 3|''r2 c | j j S r )r rT r s r0 rT zSSLObject.server_hostname s #|++r2 c x | | j || }n| j | }|S r )r read)rF r buffervs r0 r zSSLObject.read sB
!!#v..AA !!#&&Ar2 c 8 | j | S r )r writerF r s r0 r zSSLObject.write s
|!!$'''r2 c 8 | j | S r )r getpeercertrF binary_forms r0 r zSSLObject.getpeercert s |'' 444r2 c @ t j dt d d S Nr` r ra )r r r
r s r0 selected_npn_protocolz SSLObject.selected_npn_protocol s5
5
r2 c 6 | j S r )r selected_alpn_protocolr s r0 r z SSLObject.selected_alpn_protocol s |22444r2 c 6 | j S r )r cipherr s r0 r zSSLObject.cipher s (|""$$$r2 c 6 | j S r )r shared_ciphersr s r0 r zSSLObject.shared_ciphers s |**,,,r2 c 6 | j S r )r compressionr s r0 r zSSLObject.compression s P|'')))r2 c 6 | j S r )r pendingr s r0 r zSSLObject.pending s F|##%%%r2 c : | j d S r )r do_handshaker s r0 r zSSLObject.do_handshake s * !!#####r2 c 6 | j S r )r shutdownr s r0 unwrapzSSLObject.unwrap s /|$$&&&r2 r c 8 | j | S r )r get_channel_bindingrF cb_types r0 r z SSLObject.get_channel_binding s M |//888r2 c 6 | j S r r r r s r0 r zSSLObject.version s !|##%%%r2 c 4 | j S r )r verify_client_post_handshaker s r0 r z&SSLObject.verify_client_post_handshake s |88:::r2 )FNNNr NFr )rK rL rM r r6 rX r rU r rV r rQ rT r r r r r r r r r r r r r r rD r2 r0 r r M s
5:=A [ $ $ X$
^# # ^# $ $ X$
^' ' ^' + + X+ ( ( X( , , X,
( ( (5 5 5 5
5 5 5 % % %
- - - * * *
& & &$ $ $' ' '9 9 9 9 & & &
; ; ; ; ;r2 r c P t t | j j | _ | S r )getattrr rK __doc__)funcs r0 _sslcopydocr s 49dm44 >%&IJJ J 0
3 "2 3 3 3" "/ 0 0 0 ! H/ H FGG G(( ;TYdj;;==
s{3))&))'i '11&111
C #DM #DM DL DL *D #*#;#;O#L#LD +BD ((D4;?C4<@ >> <@8????
@
@
@
@
@%
@F
OOL ) ) ) 'DO
( #} 9 9+t';
: + ( "oo / /G #~~ ()s t tt%%'''
s A K
E$ !K $
I.AI
0GI
G<"G72I
7G<>II
K
IBK L!K65L6
L LLLc | j S r )r# r s r0 rU zSSLSocket.contextY s } r2 c , || _ || j _ d S r )r# r rU r s r0 rU zSSLSocket.context^ s
" r2 c , | j | j j S d S r r r s r0 rV zSSLSocket.sessionc s < #<' ' $ #r2 c > || _ | j || j _ d S d S r )r$ r rV r s r0 rV zSSLSocket.sessioni s)
< ##*DL $ #r2 c , | j | j j S d S r r r s r0 r zSSLSocket.session_reusedo s < #<. . $ #r2 c : t d| j j z )NzCan't dup() %s instances)r r. rK r s r0 dupz
SSLSocket.dupu s$ !"<"&."9#: ; ; ;r2 c d S r rD )rF msgs r0 _checkClosedzSSLSocket._checkClosedy s r2 c @ | j s| d S d S r )r0 r& r s r0 _check_connectedzSSLSocket._check_connected} s0
r2 r c D | | j t d || j || S | j | S # t $ r1}|j d t k r| j r|Y d }~dS Y d }~dS d }~ww xY w)Nz'Read on closed or unwrapped SSL socket.r r2 )rC r r r r rD
SSL_ERROR_EOFrS )rF r r xs r0 r zSSLSocket.read s -
< FGG G !|((f555|((--- vayM))d.G)% 11111 33333 s# A$
A$ $
B . BBB c | | j t d | j | S )Nz(Write on closed or unwrapped SSL socket.)rC r r r r s r0 r zSSLSocket.write sH 9
< GHH H|!!$'''r2 c | | | j | S r )rC rE r r r s r0 r zSSLSocket.getpeercert s< |'' 444r2 c f | t j dt d d S r )rC r r r
r s r0 r z SSLSocket.selected_npn_protocol s=
5
tr2 c | | j t j sd S | j S r )rC r rN r r r s r0 r z SSLSocket.selected_alpn_protocol s< < t} 4<6688 8r2 c n | | j d S | j S r )rC r r r s r0 r zSSLSocket.cipher s5 < 4<&&(( (r2 c n | | j d S | j S r )rC r r r s r0 r zSSLSocket.shared_ciphers s5 < 4<..00 0r2 c n | | j d S | j S r )rC r r r s r0 r zSSLSocket.compression s5 < 4<++-- -r2 r c | | j 7|dk rt d| j z | j | S t || S )Nr z3non-zero flags not allowed in calls to send() on %s)rC r r r. r r) send)rF r r r. s r0 rQ zSSLSocket.send su < #zz IN#$ $ $ <%%d++ +77<<e,, ,r2 c | | j t d| j z |"t || S t ||| S )Nz%sendto not allowed on instances of %s)rC r r r. r) sendto)rF r
flags_or_addrr r. s r0 rS zSSLSocket.sendto ss < # D !^ , - -
-
\77>>$
66 677>>$
t<< >
Y Y fnn )EFF"344AQJE fnn
77??4// /s6 C!>B+ C+B/ /C2B/ 3CC
Cc | j | ||| S t ||| S r )r _sendfile_use_sendr) sendfile)rF fileoffsetr r. s r0 rb zSSLSocket.sendfile sH < #**4?? ? 77##D&%88 8r2 c | | j 2|dk rt d| j z | | S t || S )Nr z3non-zero flags not allowed in calls to recv() on %s)rC r r r. r r) r+ rF buflenr r. s r0 r+ zSSLSocket.recv sq < #zz IN#$ $ $ 99V$$ $77<<.. .r2 c X | |7|3t | 5 }|j }d d d n # 1 swxY w Y |sd}nd}| j 3|dk rt d| j z | || S t ||| S )Nr r z8non-zero flags not allowed in calls to recv_into() on %s) rC rZ nbytesr r r. r r) recv_into)rF r ri r r] r. s r0 rj zSSLSocket.recv_into s >! '' )4 ![F) ) ) ) ) ) ) ) ) ) ) ) ) ) ) " !F < #zz L.!" " " 99VV,, ,77$$VVU;; ;s =AAc | | j t d| j z t || S )Nz'recvfrom not allowed on instances of %s)rC r r r. r) recvfromrf s r0 rl zSSLSocket.recvfrom& sX < # F !^ , - -
- 77##FE22 2r2 c | | j t d| j z t ||| S )Nz,recvfrom_into not allowed on instances of %s)rC r r r. r)
recvfrom_into)rF r ri r r. s r0 rn zSSLSocket.recvfrom_into. sZ < # K !^ , - -
- 77((?? ?r2 c 0 t d| j z )Nz&recvmsg not allowed on instances of %srV r s r0 recvmsgzSSLSocket.recvmsg6 s! !"J"&.#1 2 2 2r2 c 0 t d| j z )Nz+recvmsg_into not allowed on instances of %srV r s r0 recvmsg_intozSSLSocket.recvmsg_into: s# ! #')- #8 9 9 9r2 c n | | j | j S dS Nr )rC r r r s r0 r zSSLSocket.pending> s5 < #<'')) )1r2 c | d | _ t | d S r )rC r r) r )rF howr. s r0 r zSSLSocket.shutdownF s:
r2 c | j r"| j }d | _ |S t dt | z NzNo SSL wrapper around )r r r rK )rF ss r0 r zSSLSocket.unwrapK sF < C %%''A DLH 5D ABB Br2 c | j r| j S t dt | z rx )r r r rK r s r0 r z&SSLSocket.verify_client_post_handshakeT s; < C<<<>> > 5D ABB Br2 c V d | _ t d S r )r r) _real_closer s r0 r| zSSLSocket._real_close[ s&
r2 c " | | } |dk r|r| d | j | | d S # | | w xY w)Nr )rE r r/ r r )rF blockr9 s r0 r zSSLSocket.do_handshake_ s //## %#~~%~%%% L % % ' ' ' OOG $ $ $ $ $DOOG $ $ $ $s 6A7 7Bc | j rt d | j s| j t d | j | d| j | | j | _ |r"t | }n#d }t
| |s"d| _ | j r| |S # t t f$ r d | _ w xY w)Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!Fr T)rQ r r0 r rU r1 rT r$ r)
connect_exconnectrR r r )rF r r rcr. s r0
_real_connectzSSLSocket._real_connectj s B @AA A ? Pdl 6 NOO O|00 %-
1
&WW''--%%%
("&/ (%%'''I$ DL s
$A,C C+c 4 | |d d S )NFr rF r s r0 r zSSLSocket.connect s# 4'''''r2 c 0 | |d S r r r s r0 r zSSLSocket.connect_ex s !!$---r2 c t \ }}| j || j | j d }||fS )NT)rR rS rQ )r) acceptrU rY rR rS )rF newsockr r. s r0 r zSSLSocket.accept sZ > ((
,**7,0,H)-)B $ + & & } r2 r c | j | j | S |t vr"t d | d S )Nz({0} channel binding type not implemented)r r CHANNEL_BINDING_TYPESr r r s r0 r z SSLSocket.get_channel_binding sV < #<33G<< < 333 >EEgNN 4r2 c F | j | j S d S r r r s r0 r zSSLSocket.version s# < #<'')) )4r2 )FTTNNNr r r
)r )r N)r r rt r )/rK rL rM r r6 rX r r rU r rV r r@ rC rE r r r r r r r r rQ rS rW r\ rb r+ rj rl rn rp rr r r r r r| r r r r r r r r7 r8 s @r0 r r si ;
FJ;?&*\ \ \ \ \ [\| [ X
^# # ^# ( ( [ X(
^+ + ^+
/ / [ X/; ; ;
*( ( ( 5 5 5 [5
[ 9 9 [9 ) ) [) 1 1 [1 . . [. - - - - - -= = = = = =2 2 2 0 0 0 0 0 0 9 9 9 9 9 9 / / / / / /< < < < < <&3 3 3 3 3 3@ @ @ @ @ @2 2 29 9 9 [
C C [C C C [C % % % [% 4( ( (
. . .
[ [ r2 r Tc
p t j dt d |r|st d |r|st d t | }
||
_ |r|
| |r|
|| | r|
| |
| ||| S )Nz=ssl.wrap_socket() is deprecated, use SSLContext.wrap_socket()r r z5certfile must be specified for server-side operationsr )rP rQ rR rS )
r r r
r r> r r~ r set_ciphersrY ) rP r r rQ r ssl_versionca_certsrR rS ciphersrU s r0 rY rY s
MG#
'8 ' & ' ' ' 7x 75666%%G#G 0%%h/// 3 '222 %G$$$
{ 7 1 r2 c 6 ddl m} ddlm} d}d} | | d d dz } || dd | } ||d |f|dd z S # t $ r t
d
| d |d w xY w)
Nr )strptime)timegm) JanFebMarAprMayJunJulAugSepOctNovDecz %d %H:%M:%S %Y GMTr r r r z
time data z does not match format "%b")timer calendarr indextitler ) cert_timer r months time_format month_numbertts r0 cert_time_to_secondsr s F (K
7 ||IbqbM$7$7$9$9::Q> Xim[
1
1 vr!ul+b1g5666 F F Fj-6YY E F F FFs 2A7 7!Bz-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----c t t j | dd t g}|fdt dt d D z
}| t dz d | S )NASCIIstrictc * g | ]}||d z S )@ rD )rE ifs r0
z(DER_cert_to_PEM_cert.. s%
3
3
31QqtV9
3
3
3r2 r r
) rK base64standard_b64encode
PEM_HEADERranger r
PEM_FOOTERr )der_cert_bytesssr s @r0 DER_cert_to_PEM_certr s & F %n 5 5wIIA
B
3
3
3
3eAs1vvr 2 2
3
3
33BIIj4 99R==r2 c | t st dt z | t
st dt
z | t
t t
t
}t j | dd S )Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr r )
r- r r stripendswithr r r decodebytesrL )pem_cert_stringds r0 PEM_cert_to_DER_certr s 4 % %j 1 1 'C%& ' ' ' " " + +J 7 7 'A%& ' ' ' JZ 0@ @AA ahhw 9 9 : ::r2 c L | \ }}|t }nt }t ||| }t | | 5 }| || 5 } | d }
d d d n # 1 swxY w Y d d d n # 1 swxY w Y t
|
S )N)r r# )r9 )rT T)r r _create_stdlib_contextr rY r r ) r r r r9 hostportr rU rP sslsockdercerts r0 get_server_certificater
s5 JD$! $[/8,46 6 6G
4 1 1 1 0T
t
<
< 0 ))$//G 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ( ((s5 B A5) B 5A9 9B <A9 =B BBc 8 t | d S )Nz )_PROTOCOL_NAMESr )
protocol_codes r0 get_protocol_namer s }k : ::r2 r )or r collectionsr enumr _Enumr _IntEnumr _IntFlagr rN r r r
r r r
r r r r r r r r r+ r r0 r r r r r ImportErrorr r r r r r! r" r# r$ r% r& r' _convert_rK r( rB r+ __members__itemsr r _SSLv2_IF_EXISTSrJ r^ rl r r r r r r r r r r r r r' r r socket_errorr r HAS_NEVER_CHECK_COMMON_NAME_RESTRICTED_SERVER_CIPHERSr r r r r r r r& r: r> r; r r r _create_default_https_contextr r r r rW r[ rY r r r r r r r r rD r2 r0 r s Xt
" " " " " " H H H H H H H H H H N N N N N N N N N N 3 3 3 3 3 3 3 3 3 3 : 9 9 9 9 9 9 9 E E E E E E E E E E E E D
8 7 7 7 7 7 7 7 (KK
x''
66
h..
8++
())
0:/F F*,QQ*2H2N2N2P2PQQQ7:'7>> h5 5 5 5 5 5 5 5 h h&" &" &" &" &" &" &" &"R h : <711111111 9 9 9 9 9 9 9 9 9 9 ? ? ? ? ? ? ? ? ? ?
% %gd,J K K . + .> .> .>b D D DF ;0 ;0 ;0| Z 4 & & & @ @ @ @ @**],HII @ @ @*& & & & &k5 & & &BG BG BG BG BG BG BG BGJ $+#6 $$"&t$ $ $ $ $L49*/9L$($"&tD4 4 4 4 4n !7 4 X; X; X; X; X; X; X; X;v | | | | | | | |@ '
&
#T !Y (4(,%) @ 7 7 7< +
(
; ; ; .A$(2I) ) ) ),; ; ; ; ;s A& &A.-A.