?L;F L d Z ddlmZ ddlZdZ G d de Zd
dZd ZdS ) zHThe match_hostname() function from Python 3.2, essential when using SSL. )absolute_importNz3.2.2c e Zd ZdS )CertificateErrorN)__name__
__module__ __qualname__ p/builddir/build/BUILD/cloudlinux-venv-1.0.10/venv/lib/python3.11/site-packages/raven/utils/ssl_match_hostname.pyr r
s Dr
r c h g }| sdS | d }|d }| d }||k r t dt | z |s*| | k S |dk r| d n| d s| d r(| t j | n;| t j | dd |d
d D ])}| t j | *t j
d d
| z dz t j }|
| S )zhMatching according to RFC 6125, section 6.4.3
http://tools.ietf.org/html/rfc6125#section-6.4.3
F.r *z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*r Nz\Az\.z\Z)splitcountr reprlowerappend
startswithreescapereplacecompilejoin
IGNORECASEmatch) dnhostname
max_wildcardspatspartsleftmost wildcardsfragpats r _dnsname_matchr& s
D
u HHTNNEQxHs##I=
:T"XX EG G G .xxzzX^^ - ---
3
G V $ $ A(;(;F(C(C A
BIh''((((
BIh''//w??@@@ abb % % BIdOO$$$$
*UUZZ - --5r}
E
EC 99X r
c z | st d g }| dd }|D ]3\ }}|dk r(t || r dS | | 4|sP| dd D ]9}|D ]4\ }}|dk r)t || r dS | | 5:t | dk r;t d |d
d t t | t | dk rt d |d |d
t d )a) Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
zempty or no certificatesubjectAltNamer DNSNsubject
commonNamer z hostname z doesn't match either of z, z doesn't match r z=no appropriate commonName or subjectAltName fields were found)
ValueErrorgetr& r lenr r mapr )certr dnsnamessankeyvaluesubs r match_hostnamer6 @ s 42333H
((#R
(
(C # #
U %<< eX..
OOE " " "
+ 88Ir** + +C !
+
+
U ,&&%eX66 OOE***
+ 8}}q $))Ch$7$7888
:
X ! .6hh D
K
r
)r ) __doc__
__future__r r __version__r, r r& r6 r r
r r: s N N & & & & & & z / / / / d(
(
(
(
(
r