3
2a @ sd d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ m
Z m Z
d dlZd dlmZmZmZ d dlmZmZmZ d dlmZmZmZmZmZmZ d dlmZ m Z d dlm Z m Z m!Z!m"Z" yd d lm#Z# W n e$k
r Y nX d d
lm%Z%m&Z&m'Z'm(Z(m)Z) d d lm*Z* e j+d e,d
d ed e
j+de,dd ed e j+de,dd ed e j+de,dd ed e
j+de,dd ed e j+de,dd ed e-j. Z/e-_/dd e-j0j1 D Z2e3e-d dZ4ej5d krd d lm6Z6m7Z7 d d l8m8Z8m9Z9m:Z:m;Z; d d l8mZ>d dl?Z?d dl@Z@eAZBejCr.d!gZDng ZDd"ZEd#ZFG d$d% d%eGZHdRd'd(ZId)d* ZJd+d, ZKed-d.ZLd/d0 ZMG d1d2 d2ed2d3ZNG d4d5 d5eNe ZOG d6d7 d7eZPeOjQfdddd8d9d:ZRe.fdd;eOjQdddddd<d=d>ZSeRZTeSZUG d?d@ d@ZVG dAdB dBe8ZWddd;eXe.ddCdCdf dDdEZYdFdG ZZdHZ[dIZ\dJdK Z]dLdM Z^e.dfdNdOZ_dPdQ Z`dS )S N)
namedtuple)EnumIntEnumIntFlag)OPENSSL_VERSION_NUMBEROPENSSL_VERSION_INFOOPENSSL_VERSION) _SSLContext MemoryBIO
SSLSession)SSLErrorSSLZeroReturnErrorSSLWantReadErrorSSLWantWriteErrorSSLSyscallError SSLEOFError)txt2objnid2obj) RAND_statusRAND_add
RAND_bytesRAND_pseudo_bytes)RAND_egd)HAS_SNIHAS_ECDHHAS_NPNHAS_ALPN HAS_TLSv1_3)_OPENSSL_API_VERSION
_SSLMethodc C s | j do| dkS )NZ PROTOCOL_PROTOCOL_SSLv23)
startswith)name r# (/opt/alt/python36/lib64/python3.6/ssl.py| s r% )sourceOptionsc C s
| j dS )NZOP_)r! )r" r# r# r$ r% s ZAlertDescriptionc C s
| j dS )NZALERT_DESCRIPTION_)r! )r" r# r# r$ r% s ZSSLErrorNumberc C s
| j dS )NZ
SSL_ERROR_)r! )r" r# r# r$ r% s VerifyFlagsc C s
| j dS )NZVERIFY_)r! )r" r# r# r$ r% s
VerifyModec C s
| j dS )NZCERT_)r! )r" r# r# r$ r% s c C s i | ]\}}||qS r# r# ).0r" valuer# r# r$
s r, ZPROTOCOL_SSLv2win32)enum_certificates enum_crls)socketAF_INET SOCK_STREAMcreate_connection)
SOL_SOCKETSO_TYPEz
tls-uniquezTLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:DH+CHACHA20:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+HIGH:DH+HIGH:RSA+AESGCM:RSA+AES:RSA+HIGH:!aNULL:!eNULL:!MD5:!3DESzTLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:DH+CHACHA20:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+HIGH:DH+HIGH:RSA+AESGCM:RSA+AES:RSA+HIGH:!aNULL:!eNULL:!MD5:!DSS:!RC4:!3DESc @ s e Zd ZdS )CertificateErrorN)__name__
__module__ __qualname__r# r# r# r$ r6 s r6 c C s g }| s dS | j d^}}|jd}||kr|jdsx|jdr|jtj| n|jtj|j dd x |D ]}|jtj| qW tj
d d
j | d tj }|j
|S ) NF.*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)splitcountr6 reprlowerappendr! reescapereplacecompilejoin
IGNORECASEmatch) ZdnhostnameZ
max_wildcardsZpatsZleftmostZ remainderZ wildcardsZfragZpatr# r# r$ _dnsname_match s&
rJ c C s t j| j }||kS )N) ipaddress
ip_addressrstrip)Zipnamehost_ipZipr# r# r$ _ipaddress_match s rO c C sP | s t dytj|}W n t k
r2 d }Y nX g }| jdf }xb|D ]Z\}}|dkr||d krpt||rpd S |j| qJ|dkrJ|d k rt||rd S |j| qJW |sxF| jdf D ]6}x0|D ](\}}|dkrt||rd S |j| qW qW t|dkr td|d j t
t |f n,t|dkrDtd
||d f ntd d S )
Nztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDZsubjectAltNameZDNSz
IP AddressZsubjectZ
commonNamer: z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found)
ValueErrorrK rL getrJ rA rO lenr6 rF mapr? )certrI rN ZdnsnamesZsankeyr+ subr# r# r$ match_hostname s>
rW DefaultVerifyPathszQcafile capath openssl_cafile_env openssl_cafile openssl_capath_env openssl_capathc C sd t j } tjj| d | d }tjj| d | d }ttjj|rF|nd tjj|rX|nd f| S )Nr r: ) _sslget_default_verify_pathsosenvironrQ rX pathisfileisdir)partscafilecapathr# r# r$ r\ U s r\ c s@ e Zd Zf Z fddZe fddZe fddZ ZS ) _ASN1Objectc s t j| ft|dd S )NF)r" )super__new___txt2obj)clsoid) __class__r# r$ rg h s z_ASN1Object.__new__c s t j| ft| S )N)rf rg _nid2obj)ri Znid)rk r# r$ fromnidk s z_ASN1Object.fromnidc s t j| ft|dd S )NT)r" )rf rg rh )ri r" )rk r# r$ fromnameq s z_ASN1Object.fromname) r7 r8 r9 __slots__rg classmethodrm rn
__classcell__r# r# )rk r$ re c s re znid shortname longname oidc @ s e Zd ZdZdZdS )Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)r7 r8 r9 SERVER_AUTH CLIENT_AUTHr# r# r# r$ rr x s rr c s e Zd Zd!Zd"ZefddZefddZd#d d
Zd$ddZ dd Z
dd Z dd Z e
jfddZe fddZej fddZe fdd Zej fd d Ze fd d Zej fd d Z ZS )%
SSLContextprotocol __weakref__CAROOTc O s" t j| |}|tkr |jt |S )N)r rg _SSLv2_IF_EXISTS set_ciphers_DEFAULT_CIPHERS)ri rv argskwargsselfr# r# r$ rg s
zSSLContext.__new__c C s
|| _ d S )N)rv )r rv r# r# r$ __init__ s zSSLContext.__init__FTNc C s t |||||| |dS )N)sock server_sidedo_handshake_on_connectsuppress_ragged_eofsserver_hostname_context_session) SSLSocket)r r r r r r sessionr# r# r$ wrap_socket s
zSSLContext.wrap_socketc C s | j ||||d}t||dS )N)r r )r )Z _wrap_bio SSLObject)r ZincomingZoutgoingr r r sslobjr# r# r$ wrap_bio s
zSSLContext.wrap_bioc C sd t }xN|D ]F}t|d}t|dks2t|dkr:td|jt| |j| q W | j| d S )Nasciir z(NPN protocols must be 1 to 255 in length) bytearraybytesrR r rA extendZ_set_npn_protocols)r
npn_protocolsprotosrv br# r# r$ set_npn_protocols s
z SSLContext.set_npn_protocolsc C sd t }xN|D ]F}t|d}t|dks2t|dkr:td|jt| |j| q W | j| d S )Nr r r z)ALPN protocols must be 1 to 255 in length)r r rR r rA r Z_set_alpn_protocols)r Zalpn_protocolsr rv r r# r# r$ set_alpn_protocols s
z SSLContext.set_alpn_protocolsc C sz t }y@x:t|D ].\}}}|dkr|dks6|j|kr|j| qW W n tk
rd tjd Y nX |rv| j|d |S )NZx509_asnTz-unable to enumerate Windows certificate store)cadata)r r. rj r PermissionErrorwarningswarnload_verify_locations)r storenamepurposeZcertsrT encodingZtrustr# r# r$ _load_windows_store_certs s z$SSLContext._load_windows_store_certsc C sD t |tst|tjdkr8x| jD ]}| j|| q$W | j d S )Nr- )
isinstancere TypeErrorsysplatform_windows_cert_storesr Zset_default_verify_paths)r r r r# r# r$ load_default_certs s
z SSLContext.load_default_certsc s t t jS )N)r' rf options)r )rk r# r$ r s zSSLContext.optionsc s t ttjj| | d S )N)rf ru r __set__)r r+ )rk r# r$ r s c s t t jS )N)r( rf verify_flags)r )rk r# r$ r s zSSLContext.verify_flagsc s t ttjj| | d S )N)rf ru r r )r r+ )rk r# r$ r s c s* t j}yt|S tk
r$ |S X d S )N)rf verify_moder) rP )r r+ )rk r# r$ r s
zSSLContext.verify_modec s t ttjj| | d S )N)rf ru r r )r r+ )rk r# r$ r s )rv rw )rx ry )FTTNN)FNN)r7 r8 r9 ro r PROTOCOL_TLSrg r r r r r r rr rs r propertyr setterr r rq r# r# )rk r$ ru s(
ru )rc rd r c C sz t | tst| tt}| tjkr2t|_d|_ n| tj
krF|j t |sR|sR|rb|j
||| n|jtkrv|j| |S )NT)r re r ru r rr rs
CERT_REQUIREDr check_hostnamert r{ _RESTRICTED_SERVER_CIPHERSr CERT_NONEr )r rc rd r contextr# r# r$ create_default_context s
r F) cert_reqsr r certfilekeyfilerc rd r c
C s t |tst|t| } |d k r(|| _|| _|r@| r@td|sH|rT| j|| |s`|s`|rp| j||| n| jt kr| j
| | S )Nzcertfile must be specified) r re r ru r r rP load_cert_chainr r r )
rv r r r r r rc rd r r r# r# r$ _create_unverified_context s
r c @ s e Zd Zd/ddZedd Zejdd Zedd Zejd d Zed
d Zed d
Z edd Z
d0ddZ dd Z d1ddZ
dd Zdd Zd d Zd d Zd d! Zd"d# Zd$d% Zd&d' Zd2d)d*Zd+d, Zd-d. ZdS )3r Nc C s& || _ |p | | j _|d k r"|| j _d S )N)_sslobjownerr )r r r r r# r# r$ r G s zSSLObject.__init__c C s | j jS )N)r r )r r# r# r$ r N s zSSLObject.contextc C s || j _d S )N)r r )r ctxr# r# r$ r S s c C s | j jS )N)r r )r r# r# r$ r W s zSSLObject.sessionc C s || j _d S )N)r r )r r r# r# r$ r \ s c C s | j jS )N)r session_reused)r r# r# r$ r ` s zSSLObject.session_reusedc C s | j jS )N)r r )r r# r# r$ r e s zSSLObject.server_sidec C s | j jS )N)r r )r r# r# r$ r j s zSSLObject.server_hostname c C s( |d k r| j j||}n | j j|}|S )N)r read)r rR buffervr# r# r$ r p s zSSLObject.readc C s | j j|S )N)r write)r datar# r# r$ r | s zSSLObject.writeFc C s | j j|S )N)r Zpeer_certificate)r binary_formr# r# r$ getpeercert s zSSLObject.getpeercertc C s t jr| jj S d S )N)r[ r r selected_npn_protocol)r r# r# r$ r s z SSLObject.selected_npn_protocolc C s t jr| jj S d S )N)r[ r r selected_alpn_protocol)r r# r# r$ r s z SSLObject.selected_alpn_protocolc C s
| j j S )N)r cipher)r r# r# r$ r s zSSLObject.cipherc C s
| j j S )N)r shared_ciphers)r r# r# r$ r s zSSLObject.shared_ciphersc C s
| j j S )N)r compression)r r# r# r$ r s zSSLObject.compressionc C s
| j j S )N)r pending)r r# r# r$ r s zSSLObject.pendingc C s4 | j j | jjr0| js tdt| j | j d S )Nz-check_hostname needs server_hostname argument)r do_handshaker r r rP rW r )r r# r# r$ r s
zSSLObject.do_handshakec C s
| j j S )N)r shutdown)r r# r# r$ unwrap s zSSLObject.unwrap
tls-uniquec C s0 |t krtd|dkr&tdj|| jj S )Nz Unsupported channel binding typez
tls-uniquez({0} channel binding type not implemented)CHANNEL_BINDING_TYPESrP NotImplementedErrorformatr Z
tls_unique_cb)r cb_typer# r# r$ get_channel_binding s z SSLObject.get_channel_bindingc C s
| j j S )N)r version)r r# r# r$ r s zSSLObject.versionc C s
| j j S )N)r verify_client_post_handshake)r r# r# r$ r s z&SSLObject.verify_client_post_handshake)NN)r N)F)r )r7 r8 r9 r r r r r r r r r r r r r r r r r r r r r r r# r# r# r$ r 7 s,
r c s e Zd ZddddeeddeeddddddddfddZedd Z e j
d d Z ed
d Z e j
d d Z ed
d Z dd Z
dUddZdd ZdVddZdd ZdWddZd d Zd d Zd d! Zd"d# Zd$d% ZdXd&d'ZdYd(d)Zd*d+ ZdZd,d-Zd[ fd.d/ Z d\d0d1Z d]d2d3Z d^d4d5Z d_d6d7Z d8d9 Z!d:d; Z"dd? Z$d@dA Z%dBdC Z&dDdE Z'd`dFdGZ(dHdI Z)dJdK Z*dLdM Z+dNdO Z,dadQdRZ-dSdT Z. Z/S )br NFTr c C sj |r || _ n|r | r td|r0| r0td|r>| r>|}t|| _ || j _|r`| j j| |rr| j j|| |r| j j| |r| j j| || _|| _ || _
|| _ || _ || _
|jtttkrtd|r|rtd|d k rtd| j jo| rtd|| _|| _|| _|| _|
| _|d k rdtj| |j|j |j |j d | j |j |j! n,| d k r~tj| | d ntj| | |
| d y | j" W n8 t#k
r } z|j$t$j%kr d
}W Y d d }~X nX d }d
| _&d | _'|| _(|rfyN| j j)| ||}t*|| | jd | _'|r>| j }|d
kr6td| j+ W n$ t#tfk
rd | j, Y nX d S )Nz5certfile must be specified for server-side operationszcertfile must be specifiedz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostname)familytypeprotofileno)r )r r r FT)r r g zHdo_handshake_on_connect should not be specified for non-blocking sockets)-r rP ru r r r r r{ r r r ssl_versionca_certsciphersZ
getsockoptr4 r5 r2 r r r r r r r r0 r r r r r
settimeout
gettimeoutdetach getpeernameOSErrorerrnoZENOTCONNZ_closedr
_connected _wrap_socketr r close)r r r r r r r r r r r r r r r r r r r eZ connectedr timeoutr# r# r$ r s
zSSLSocket.__init__c C s | j S )N)r )r r# r# r$ r 7 s zSSLSocket.contextc C s || _ || j_d S )N)r r r )r r r# r# r$ r ; s c C s | j d k r| j jS d S )N)r r )r r# r# r$ r @ s
zSSLSocket.sessionc C s || _ | jd k r|| j_d S )N)r r r )r r r# r# r$ r F s
c C s | j d k r| j jS d S )N)r r )r r# r# r$ r L s
zSSLSocket.session_reusedc C s t d| jj d S )NzCan't dup() %s instances)r rk r7 )r r# r# r$ dupR s z
SSLSocket.dupc C s d S )Nr# )r msgr# r# r$ _checkClosedV s zSSLSocket._checkClosedc C s | j s| j d S )N)r r )r r# r# r$ _check_connectedZ s zSSLSocket._check_connected c C st | j | jstdy| jj||S tk
rn } z.|jd tkr\| jr\|d k rVdS dS n W Y d d }~X nX d S )Nz'Read on closed or unwrapped SSL socket.r )r r rP r r r} Z
SSL_ERROR_EOFr )r rR r xr# r# r$ r b s zSSLSocket.readc C s" | j | jstd| jj|S )Nz(Write on closed or unwrapped SSL socket.)r r rP r )r r r# r# r$ r t s zSSLSocket.writec C s | j | j | jj|S )N)r r r r )r r r# r# r$ r } s zSSLSocket.getpeercertc C s* | j | j stj r d S | jj S d S )N)r r r[ r r )r r# r# r$ r s z SSLSocket.selected_npn_protocolc C s* | j | j stj r d S | jj S d S )N)r r r[ r r )r r# r# r$ r s z SSLSocket.selected_alpn_protocolc C s | j | jsd S | jj S d S )N)r r r )r r# r# r$ r s zSSLSocket.cipherc C s | j | jsd S | jj S )N)r r r )r r# r# r$ r s zSSLSocket.shared_ciphersc C s | j | jsd S | jj S d S )N)r r r )r r# r# r$ r s zSSLSocket.compressionc C sB | j | jr0|dkr$td| j | jj|S tj| ||S d S )Nr z3non-zero flags not allowed in calls to send() on %s)r r rP rk r r0 send)r r flagsr# r# r$ r s
zSSLSocket.sendc C sH | j | jr td| j n&|d kr4tj| ||S tj| |||S d S )Nz%sendto not allowed on instances of %s)r r rP rk r0 sendto)r r Z
flags_or_addraddrr# r# r$ r s zSSLSocket.sendtoc O s t d| j d S )Nz&sendmsg not allowed on instances of %s)r rk )r r} r~ r# r# r$ sendmsg s zSSLSocket.sendmsgc C s | j | jr|dkr$td| j d}t|L}|jd6}t|}x&||k rl| j||d }||7 }qHW W d Q R X W d Q R X ntj | ||S d S )Nr z6non-zero flags not allowed in calls to sendall() on %sB)
r r rP rk
memoryviewcastrR r r0 sendall)r r r r> ZviewZ byte_viewamountr r# r# r$ r s
"zSSLSocket.sendallc s, | j d krt j|||S | j|||S d S )N)r rf sendfileZ_sendfile_use_send)r fileoffsetr> )rk r# r$ r s
zSSLSocket.sendfilec C s@ | j | jr.|dkr$td| j | j|S tj| ||S d S )Nr z3non-zero flags not allowed in calls to recv() on %s)r r rP rk r r0 recv)r buflenr r# r# r$ r s
zSSLSocket.recvc C sf | j |r |d kr t|}n |d kr*d}| jrR|dkrFtd| j | j||S tj| |||S d S )Ni r z8non-zero flags not allowed in calls to recv_into() on %s)r rR r rP rk r r0 recv_into)r r nbytesr r# r# r$ r s
zSSLSocket.recv_intoc C s0 | j | jr td| j ntj| ||S d S )Nz'recvfrom not allowed on instances of %s)r r rP rk r0 recvfrom)r r r r# r# r$ r s
zSSLSocket.recvfromc C s2 | j | jr td| j ntj| |||S d S )Nz,recvfrom_into not allowed on instances of %s)r r rP rk r0
recvfrom_into)r r r r r# r# r$ r s
zSSLSocket.recvfrom_intoc O s t d| j d S )Nz&recvmsg not allowed on instances of %s)r rk )r r} r~ r# r# r$ recvmsg s zSSLSocket.recvmsgc O s t d| j d S )Nz+recvmsg_into not allowed on instances of %s)r rk )r r} r~ r# r# r$ recvmsg_into s zSSLSocket.recvmsg_intoc C s | j | jr| jj S dS d S )Nr )r r r )r r# r# r$ r s
zSSLSocket.pendingc C s | j d | _tj| | d S )N)r r r0 r )r Zhowr# r# r$ r s zSSLSocket.shutdownc C s. | j r| j j }d | _ |S tdt| d S )NzNo SSL wrapper around )r r rP str)r sr# r# r$ r s
zSSLSocket.unwrapc C s$ | j r| j j S tdt| d S )NzNo SSL wrapper around )r r rP r )r r# r# r$ r $ s
z&SSLSocket.verify_client_post_handshakec C s d | _ tj| d S )N)r r0 _real_close)r r# r# r$ r * s zSSLSocket._real_closec C sF | j | j }z$|dkr(|r(| jd | jj W d | j| X d S )Ng )r r r r r )r blockr r# r# r$ r . s
zSSLSocket.do_handshakec C s | j rtd| jr td| jj| d| j}t|| | jd| _y>|rTt j
| |}nd }t j | | |s|d| _| j r|| j
|S ttfk
r d | _ Y nX d S )Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!F)r r T)r rP r r r r r r r r0
connect_exconnectr r r )r r r r Zrcr# r# r$
_real_connect9 s( zSSLSocket._real_connectc C s | j |d d S )NF)r
)r r r# r# r$ r R s zSSLSocket.connectc C s | j |dS )NT)r
)r r r# r# r$ r W s zSSLSocket.connect_exc C s. t j| \}}| jj|| j| jdd}||fS )NT)r r r )r0 acceptr r r r )r Znewsockr r# r# r$ r \ s zSSLSocket.accept
tls-uniquec C s | j d krd S | j j|S )N)r r )r r r# r# r$ r h s
z SSLSocket.get_channel_bindingc C s | j d krd S | j j S )N)r r )r r# r# r$ r q s
zSSLSocket.version)N)r N)F)r )N)r )r N)r r )Nr )r r )Nr )F)r )0r7 r8 r9 r r r1 r2 r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r
r r r r r rq r# r# )rk r$ r s^ Z
r Tc
C s t | ||||||||| d
S )N)
r r r r r r r r r r )r )
r r r r r r r r r r r# r# r$ r { s r c
C s ddl m} ddlm} d}d}y |j| d d j d }W n$ tk
rb td| |f Y n0X || dd |}||d |f|dd S d S )Nr )strptime)timegmJanFebMarAprMayJunJulAugSepOctNovDecz %d %H:%M:%S %Y GMTrZ r: z*time data %r does not match format "%%b%s"rY ) r r r r r r r r r r r r )Ztimer
Zcalendarr indextitlerP )Z cert_timer
r ZmonthsZ time_formatZ month_numberttr# r# r$ cert_time_to_seconds s
r z-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----c C s2 t tj| dd}td tj|d d t d S )NASCIIstrict
@ )r base64Zstandard_b64encode
PEM_HEADERtextwrapfill
PEM_FOOTER)Zder_cert_bytesfr# r# r$ DER_cert_to_PEM_cert s r* c C s\ | j tstdt | j jts0tdt | j tttt }tj|j ddS )Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr r! )
r! r% rP stripendswithr( rR r$ Z decodebytesencode)Zpem_cert_stringdr# r# r$ PEM_cert_to_DER_cert s
r/ c
C sd | \}}|d k rt }nt}t|||d}t| &}|j|}|jd} W d Q R X W d Q R X t| S )N)r rc T)r r _create_stdlib_contextr3 r r r* )
r r r hostZportr r r ZsslsockZdercertr# r# r$ get_server_certificate s
r2 c C s t j| dS )Nz )_PROTOCOL_NAMESrQ )Z
protocol_coder# r# r$ get_protocol_name s r4 )r: )arK r& rB r r] collectionsr enumr Z_Enumr Z_IntEnumr Z_IntFlagr[ r r r r r
r r r
r r r r r rh r rl r r r r r ImportErrorr r r r r r _convertr7 r r r __members__itemsr3 getattrrz r r. r/ r0 r1 r2 r3 r4 r5 r$ r r r Z socket_errorZHAS_TLS_UNIQUEr r| r rP r6 rJ rO rW rX r\ re rr ru rs r r Z _create_default_https_contextr0 r r r r r r% r( r* r/ r2 r4 r# r# r# r$ ] s
1 4i % -