3
ՔRe,! " @ s d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZm Z d dl
m Z m Z y d dl
Z
W n ek
rt dZ
Y nX dddddgZd j j ZyejjZejZW n ek
r e ZZY nX e
dk oeeefkZyd d
l
mZmZ W nR ek
r: y d d lmZ d d lmZ W n ek
r4 dZdZY nX Y nX esRG d
d de Zesjd ddZ dd ZG dd deZ G dd deZ d ddZ dd Z!e!dd Z"d d Z#d d Z$dS )! N)urllib http_clientmapfilter)ResolutionErrorExtractionErrorVerifyingHTTPSHandlerfind_ca_bundle is_available
cert_paths
opener_fora
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
/usr/local/share/certs/ca-root-nss.crt
/etc/ssl/ca-bundle.pem
)CertificateErrormatch_hostname)r
)r c @ s e Zd ZdS )r
N)__name__
__module__ __qualname__ r r /builddir/build/BUILDROOT/alt-python36-setuptools-38.5.2-7.el9.x86_64/opt/alt/python36/lib/python3.6/site-packages/setuptools/ssl_support.pyr
5 s r
c
C s g }| s dS | j d}|d }|dd }|jd}||krLtdt| |s`| j |j kS |dkrt|jd n>|jd s|jd r|jtj| n|jtj|j d
d x |D ]}|jtj| qW tj
d d
j | d tj } | j
|S )zpMatching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
F.r r N*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)splitcountr
reprlowerappend
startswithreescapereplacecompilejoin
IGNORECASEmatch)
dnhostname
max_wildcardspatspartsleftmost remainder wildcardsfragpatr r r _dnsname_match; s*
r. c C s | s t dg }| jdf }x0|D ](\}}|dkr"t||r@dS |j| q"W |sxF| jdf D ]6}x0|D ](\}}|dkrjt||rdS |j| qjW q`W t|dkrtd|d jtt|f n*t|dkrtd
||d f ntd dS )
a= Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
zempty or no certificatesubjectAltNameDNSNsubject
commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found)
ValueErrorgetr. r lenr
r! r r )certr% dnsnamessankeyvaluesubr r r r o s.
r c @ s e Zd ZdZdd Zdd ZdS )r z=Simple verifying handler: no auth, subclasses, timeouts, etc.c C s || _ tj| d S )N) ca_bundle HTTPSHandler__init__)selfr< r r r r> s z VerifyingHTTPSHandler.__init__c s j fdd|S )Nc s t | jf|S )N)VerifyingHTTPSConnr< )hostkw)r? r r s z2VerifyingHTTPSHandler.https_open..)do_open)r? reqr )r? r
https_open s z VerifyingHTTPSHandler.https_openN)r r r __doc__r> rF r r r r r s c @ s e Zd ZdZdd Zdd ZdS )r@ z@Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j| |f| || _d S )N)HTTPSConnectionr> r< )r? rA r< rB r r r r> s zVerifyingHTTPSConn.__init__c C s t j| j| jft| dd }t| drHt| dd rH|| _| j | j}n| j}tt drxt j
| j d}|j ||d| _nt j |t j
| j d| _yt| jj | W n. tk
r | jjt j | jj Y nX d S )Nsource_address_tunnel _tunnel_hostcreate_default_context)cafile)server_hostname) cert_reqsca_certs)socketcreate_connectionrA portgetattrhasattrsockrJ rK sslrL r< wrap_socket
CERT_REQUIREDr getpeercertr
shutdown SHUT_RDWRclose)r? rV actual_hostctxr r r connect s$
zVerifyingHTTPSConn.connectN)r r r rG r> r` r r r r r@ s r@ c C s t jjt| pt jS )z@Get a urlopen() replacement that uses ca_bundle for verification)r request build_openerr r open)r< r r r r s c s t j fdd}|S )Nc s t ds | | _ jS )Nalways_returns)rU rd )argskwargs)funcr r wrapper s
zonce..wrapper) functoolswraps)rg rh r )rg r once s rk c sX y dd l } W n tk
r d S X G fddd| j }|jd |jd |jS )Nr c s, e Zd Z fddZ fddZ ZS )z"get_win_certfile..CertFilec s t | j tj| j d S )N)superr> atexitregisterr] )r? )CertFile __class__r r r> s z+get_win_certfile..CertFile.__init__c s, yt | j W n tk
r& Y nX d S )N)rl r] OSError)r? )ro rp r r r] s z(get_win_certfile..CertFile.close)r r r r> r]
__classcell__r )ro )rp r ro s ro CAROOT) wincertstore ImportErrorro Zaddstorename)ru Z _wincertsr )ro r get_win_certfile s
rx c C s$ t tjjt} t p"t| dp"t S )z*Return an existing CA bundle path, or NoneN)r ospathisfiler rx next_certifi_where)Zextant_cert_pathsr r r r s
c
C s, y t dj S tttfk
r& Y nX d S )Ncertifi)
__import__whererv r r r r r r r} s r} )r )N)%ry rQ rm r ri Zsetuptools.extern.six.movesr r r r
pkg_resourcesr r rW rv __all__stripr r ra r= rH AttributeErrorobjectr
r
r Z backports.ssl_match_hostnamer3 r. r r@ r rk rx r r} r r r r sP
4)
(