Ë
|
ñúh ã ó d Z ddlmZ ddlZddlZddlZddlZddlZddl Z ddl
|
Z
|
ddl Z ddl Z ddl Z ddlmZ ddlmZ ddlmZ dd lmZmZmZ dd
|
lmZmZmZm Z m Z m Z dd l m Z d dgZ#dZ$ejH Z%ejL jN Z( e jR « Z* e jV « Z,dZ-ej\ ej^ ej` ejb ejd ejf ejh ejj ejl ejn ejp ejr ejt ejv ejx ejz ej| ej~ ej ej ej ej ej ej ej ej ej ej ej ej g ZLej ej ej feej ej fiZP eQe
|
d« r%ej¤ ej¤ fePe
|
j¦ < eQe
|
d« r%ej¨ ej¨ fePe
|
jª < eQe
|
d« r%ej ej fePe
|
j¬ < eQe
|
d« r%ej® ej® fePe
|
j° < eQe
|
d« r%ej ej fePe
|
j² < d ZZd Z[d Z\d Z] ej¼ e\« Z_ ejÀ e]« Za G d deb« Zce rd d Zdnd!d Zdedec_d G d d eb« Zey# e $ r dZ dd l!m"Z" Y #w xY w)"aê
|
SecureTranport support for urllib3 via ctypes.
|
|
This makes platform-native TLS available to urllib3 users on macOS without the
|
use of a compiler. This is an important feature because the Python Package
|
Index is moving to become a TLSv1.2-or-higher server, and the default OpenSSL
|
that ships with macOS is not capable of doing TLSv1.2. The only way to resolve
|
this is to give macOS users an alternative solution to the problem, and that
|
solution is to use SecureTransport.
|
|
We use ctypes here because this solution must not require a compiler. That's
|
because pip is not allowed to require a compiler either.
|
|
This is not intended to be a seriously long-term solution to this problem.
|
The hope is that PEP 543 will eventually solve this issue for us, at which
|
point we can retire this contrib module. But in the short term, we need to
|
solve the impending tire fire that is Python on Mac without this kind of
|
contrib module. So...here we are.
|
|
To use this module, simply import and inject it::
|
|
import pip._vendor.urllib3.contrib.securetransport as securetransport
|
securetransport.inject_into_urllib3()
|
|
Happy TLSing!
|
|
This code is a bastardised version of the code found in Will Bond's oscrypto
|
library. An enormous debt is owed to him for blazing this trail for us. For
|
that reason, this code should be considered to be covered both by urllib3's
|
license and by oscrypto's:
|
|
.. code-block::
|
|
Copyright (c) 2015-2016 Will Bond <will@wbond.net>
|
|
Permission is hereby granted, free of charge, to any person obtaining a
|
copy of this software and associated documentation files (the "Software"),
|
to deal in the Software without restriction, including without limitation
|
the rights to use, copy, modify, merge, publish, distribute, sublicense,
|
and/or sell copies of the Software, and to permit persons to whom the
|
Software is furnished to do so, subject to the following conditions:
|
|
The above copyright notice and this permission notice shall be included in
|
all copies or substantial portions of the Software.
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
|
DEALINGS IN THE SOFTWARE.
|
é )Úabsolute_importNé )Úutil)Úsix)ÚPROTOCOL_TLS_CLIENTé )ÚCoreFoundationÚSecurityÚ SecurityConst)Ú_assert_no_errorÚ_build_tls_unknown_ca_alertÚ_cert_array_from_pemÚ_create_cfstring_arrayÚ_load_client_cert_chainÚ_temporary_keychain)Ú _fileobject©Úbackport_makefileÚinject_into_urllib3Úextract_from_urllib3Ti @ ÚPROTOCOL_SSLv2ÚPROTOCOL_SSLv3ÚPROTOCOL_TLSv1ÚPROTOCOL_TLSv1_1ÚPROTOCOL_TLSv1_2c óä t t _ t t j _ t t _ t t j _ dt _ dt j _ y)zG
|
Monkey-patch urllib3 with SecureTransport-backed SSL-support.
|
TN)ÚSecureTransportContextr Ú
|
SSLContextÚssl_ÚHAS_SNIÚIS_SECURETRANSPORT© ó ú^H:\Change_password\venv_build\Lib\site-packages\pip/_vendor/urllib3/contrib/securetransport.pyr r ¼ s> ô -DOÜ1DIIÔÜDLÜ DIIÔØ "DÔØ#'DIIÕ r# c óä t t _ t t j _ t t _ t t j _ dt _ dt j _ y)z>
|
Undo monkey-patching by :func:`inject_into_urllib3`.
|
FN)Úorig_util_SSLContextr r r Úorig_util_HAS_SNIr r! r" r# r$ r r È s> ô +DOÜ/DIIÔÜ$DLÜ)DIIÔØ #DÔØ#(DIIÕ r# c ó~ d} t j | « }|t j S |j }|d }|j « }d}d} ||k r||dk\ r:t j ||« s$t j t j d« ||z
|
} t j | z j ||z « }
|
|j |
|
| « } || z }| s|st j S n||k r||d< ||k7 rt j& S y# t j $ rl} | j }|T|t j k7 rA||d< |t j k( s|t j" k( rt j$ cY d} ~ S Y d} ~ d} ~ ww xY w# t( $ r#} || |_ t j cY d} ~ S d} ~ ww xY w)zs
|
SecureTransport read callback. This is called by ST to request that data
|
be returned from the socket.
|
Nr ú timed out)Ú_connection_refsÚgetr ÚerrSSLInternalÚsocketÚ
|
gettimeoutr Ú wait_for_readÚerrorÚerrnoÚEAGAINÚctypesÚc_charÚ from_addressÚ recv_intoÚerrSSLClosedGracefulÚ
|
ECONNRESETÚEPIPEÚerrSSLClosedAbortÚerrSSLWouldBlockÚ ExceptionÚ
|
_exception) Ú connection_idÚ data_bufferÚdata_length_pointerÚwrapped_socketÚ base_socketÚrequested_lengthÚtimeoutr0 Ú
|
read_countÚ remainingÚbufferÚ
|
chunk_sizeÚes r$ Ú_read_callbackrJ Ô s¹ ð
|
Nð.,Ü)×-Ñ-¨mÓ<Ø Ð !Ü ×/Ñ/Ð /Ø$×+Ñ+ à.¨qÑ1Ðà ×+Ñ+Ó-ØØ
|
ð Ø Ð /Ò/Ø? g°¢lÜ ×-Ñ-¨k¸7ÔCÜ $ll¬5¯<©<¸Ó EÐEà ,¨zÑ 9 Ü --¨)Ñ3×AÑAØ *Ñ,óð )× 2Ñ 2°6¸9Ó E
|
ØjÑ(
|
Ù!Ù%Ü ,× AÑ AÐAØð Ð /Ó/ð0 ",ÐAÑ à Ð)Ò )Ü ×1Ñ1Ð 1àøô ò ØGGEàÐ U¬e¯l©lÒ%:Ø)3Ð# AÑ&ØE× ,Ñ ,Ò,°¼¿¹Ò0DÜ(×:Ñ:Õ:Øÿøð ûô ò ,Ø Ð %Ø()NÔ %Ü ×+Ñ+Õ+ûð,úsf &F «%F ÁBD Ã,D Ã3F ÄF Ä!AFÅ<F Å=F ÆFÆF ÆF Æ F Æ F<ÆF7Æ1F<Æ7F<c ó4 d} t j | « }|t j S |j }|d }t j ||« }|j « }d}d} | |k rb||dk\ r:t j ||« s$t j t j d« |j |« }
|
| |
|
z } ||
|
d }| |k rb| |d< | |k7 rt j" S y# t j $ rl} | j }|T|t j k7 rA| |d< |t j k( s|t j k( rt j cY d} ~ S Y d} ~ d} ~ ww xY w# t$ $ r#} || |_ t j cY d} ~ S d} ~ ww xY w)zx
|
SecureTransport write callback. This is called by ST to request that data
|
actually be sent on the network.
|
Nr r) )r* r+ r r, r- r3 Ú string_atr. r Úwait_for_writer0 r1 r2 Úsendr8 r9 r: r; r< r= ) r> r? r@ rA rB Úbytes_to_writeÚdatarD r0 ÚsentÚ
|
chunk_sentrI s r$ Ú_write_callbackrS s ð
|
Nð*,Ü)×-Ñ-¨mÓ<Ø Ð !Ü ×/Ñ/Ð /Ø$×+Ñ+ à,¨QÑ/Ü× Ñ ¨^Ó<à ×+Ñ+Ó-ØØð Ø Ò'Ø? g°¢lÜ ×.Ñ.¨{¸GÔDÜ $ll¬5¯<©<¸Ó EÐEØ (× -Ñ -¨dÓ 3
|
Ø
|
Ñ"ð JKÐ(ð Ó'ð& "&ÐAÑ à >Ò !Ü ×1Ñ1Ð 1àøô ò ØGGEàÐ U¬e¯l©lÒ%:Ø)-Ð# AÑ&ØE× ,Ñ ,Ò,°¼¿¹Ò0DÜ(×:Ñ:Õ:Øÿøð ûô ò ,Ø Ð %Ø()NÔ %Ü ×+Ñ+Õ+ûð,ús` &E+ «;E+ Á'A&C) ÃE+ Ã)E(Ã<AE#ÅE(ÅE+ Å E#Å E+ Å#E(Å(E+ Å+ FÅ4FÆ FÆFc ó° e Zd ZdZd Zej d « Zd Zd Z d Z
|
d Z d Z d Z d
|
Zd Zdd Zd Zd Zd Zd Zd Zd ZddZd Zd Zd Zy )Ú WrappedSocketz²
|
API-compatibility wrapper for Python's OpenSSL wrapped socket object.
|
|
Note: _makefile_refs, _drop(), and _reuse() are needed for the garbage
|
collector of PyPy.
|
c óè || _ d | _ d| _ d| _ d | _ d | _ d | _ d | _ | j j « | _ | j j d« y ©Nr F) r- ÚcontextÚ_makefile_refsÚ_closedr= Ú _keychainÚ _keychain_dirÚ_client_cert_chainr. Ú_timeoutÚ
|
settimeout)Úselfr- s r$ Ú__init__zWrappedSocket.__init__M se Ø Ø Ø ÔØ Ø Ø Ø !ÔØ"&Ô ð ×.Ñ.Ó0 Ø × Ñ qÕ!r# c # ó K d| _ d | j &| j dc}| _ | j « |yw)a]
|
A context manager that can be used to wrap calls that do I/O from
|
SecureTransport. If any of the I/O callbacks hit an exception, this
|
context manager will correctly propagate the exception after the fact.
|
This avoids silently swallowing those exceptions.
|
|
It also correctly forces the socket closed.
|
N)r= Úclose)r` Ú exceptions r$ Ú_raise_on_errorz WrappedSocket._raise_on_error_ sC è ø ð ó
|
Ø ??Ð &Ø)-¯ © ¸$Ð &ItØ JJLØOð 'ùs ?Ac óÂ t j t t « z t }t j | j
|
|t t « « }t |« y)a4
|
Sets up the allowed ciphers. By default this matches the set in
|
util.ssl_.DEFAULT_CIPHERS, at least as supported by macOS. This is done
|
custom and doesn't allow changing at this time, mostly because parsing
|
OpenSSL cipher strings is going to be a freaking nightmare.
|
N)r
|
ÚSSLCipherSuiteÚlenÚ CIPHER_SUITESÚSSLSetEnabledCiphersrX r )r` ÚciphersÚresults r$ Ú _set_cipherszWrappedSocket._set_cipherst sH ô ×*Ñ*¬S´ Ó-?Ñ?Ä-ÐPÜ×.Ñ.Ø LL'¤3¤}Ó#5ó
|
ô Õ r# c óÖ |syt |« } t j | j |« }t |« t j |« y# t j |« w xY w)z<
|
Sets up the ALPN protocols on the context.
|
N)r r
|
ÚSSLSetALPNProtocolsrX r r Ú CFRelease)r` Ú protocolsÚ protocols_arrrl s r$ Ú_set_alpn_protocolsz!WrappedSocket._set_alpn_protocols sT ñ Ø Ü.¨yÓ9 ð 4Ü ×1Ñ1°$·,±,À ÓNFÜ VÔ $ä × $Ñ $ ]Õ 3øN× $Ñ $ ]Õ 3ús +A ÁA(c ó |syt j t j f} | j |« }||v ryd|fz }t | j « « }| j j |« t j ddd« }| j j t j t j |« | j « t j d|z « # t $ r}d|}Y d}~¿d}~ww xY w)zþ
|
Called when we have set custom validation. We do this in two cases:
|
first, when cert validation is entirely disabled; and second, when
|
using a custom trust DB.
|
Raises an SSLError if the connection is not trusted.
|
Nzerror code: %dz exception: Úiir r z certificate verify failed, %s)r ÚkSecTrustResultUnspecifiedÚkSecTrustResultProceedÚ_evaluate_trustr< r Úversionr- ÚsendallÚstructÚpackÚ
|
setsockoptÚ
|
SOL_SOCKETÚ SO_LINGERrc ÚsslÚSSLError) r` ÚverifyÚ trust_bundleÚ successesÚ trust_resultÚreasonrI ÚrecÚoptss r$ Ú_custom_validatez WrappedSocket._custom_validate sã ñ Ø ô × 4Ñ 4Ü × 0Ñ 0ð
|
ð ,Ø ×/Ñ/° Ó=LØyÑ(ØØ%¨ ¨Ñ7Fô *¨$¯,©,«.Ó9Ø ×ÑCÔ ô {{4 AÓ&Ø × Ñ v× 0Ñ 0´&×2BÑ2BÀDÔIØ
|
|
ÜllÐ:¸VÑCÓDÐDøô ó ,á()Ð+Fûð ,ús ¥C- »C- Ã- DÃ6D Ä Dc ó t j j |« r%t |d« 5 }|j « }d d d « d }t j « } t |« }t j | j t j |« « }t |« |st j d« t j ||« }t |« t j |d« }t |« t j" « }t j$ |t j |« « }t |« |rt' j( |« |t' j( |« |j* S # 1 sw Y ExY w# |rt' j( |« |t' j( |« w w xY w)NÚrbz Failed to copy trust referenceT)ÚosÚpathÚisfileÚopenÚreadr
|
Ú SecTrustRefr ÚSSLCopyPeerTrustrX r3 Úbyrefr r r Ú SecTrustSetAnchorCertificatesÚ!SecTrustSetAnchorCertificatesOnlyÚSecTrustResultTypeÚSecTrustEvaluater rp Úvalue)r` r ÚfÚ
|
cert_arrayÚtrustrl r
s r$ rx z WrappedSocket._evaluate_trust± sb ä 77>>,Ô 'Ül DÓ)ð (¨QØ vvx ÷ (ð
|
Ü×$Ñ$Ó&ð 5ä-¨lÓ;Jô ×.Ñ.¨t¯|©|¼V¿\¹\È%Ó=PÓQFÜ VÔ $ÙÜllÐ#CÓDÐDä ×;Ñ;¸EÀ:ÓNFÜ VÔ $ä ×?Ñ?ÀÀtÓLFÜ VÔ $ä#×6Ñ6Ó8LÜ ×.Ñ.¨u´f·l±lÀ<Ó6PÓQFÜ VÔ $áÜ ×(Ñ(¨Ô/àÐ%Ü ×(Ñ(¨Ô4à×!Ñ!Ð!÷G (ñ (ûñ: Ü ×(Ñ(¨Ô/àÐ%Ü ×(Ñ(¨Õ4ð &ús ¬F Á C*F Æ F
|
Æ 1F>c
|
ó
|
t j dt j t j « | _ t j | j
|
t t « }
|
t |
|
« t 5 t | « dz } | t v r| dz dz } | t v r| t | < ddd« t j | j
|
« }
|
t |
|
« |rVt |t « s|j! d« }t j" | j
|
|t% |« « }
|
t |
|
« | j' « | j) | « t j* | j
|
|« }
|
t |
|
« t j, | j
|
|« }
|
t |
|
« |r|:t j. | j
|
t j0 d« }
|
t |
|
« |rht3 « \ | _ | _ t9 | j4 ||« | _ t j< | j
|
| j: « }
|
t |
|
« | j? « 5 t j@ | j
|
« }
|
|
|
t jB k( rtE jF d« |
|
t jH k( r | jK ||« ddd« t |
|
« ddd« y# 1 sw Y IxY w# 1 sw Y nxY w¶)z
|
Actually performs the TLS handshake. This is run automatically by
|
wrapped socket, and shouldn't be needed in user code.
|
Niÿÿÿr zutf-8Tzhandshake timed out)&r
|
ÚSSLCreateContextr ÚkSSLClientSideÚkSSLStreamTyperX Ú SSLSetIOFuncsÚ_read_callback_pointerÚ_write_callback_pointerr Ú_connection_ref_lockÚidr* ÚSSLSetConnectionÚ
|
isinstanceÚbytesÚencodeÚSSLSetPeerDomainNamerh rm rs ÚSSLSetProtocolVersionMinÚSSLSetProtocolVersionMaxÚSSLSetSessionOptionÚ"kSSLSessionOptionBreakOnServerAuthr r[ r\ r r] ÚSSLSetCertificatere Ú SSLHandshaker; r- rD ÚerrSSLServerAuthCompletedr ) r` Úserver_hostnamer r Ú min_versionÚ max_versionÚ client_certÚ
|
client_keyÚclient_key_passphraseÚalpn_protocolsrl Úhandles r$ Ú handshakezWrappedSocket.handshakeÙ s ô$ ×0Ñ0Ø -×.Ñ.´ ×0LÑ0Ló
|
ô ×'Ñ'Ø LLÔ0Ô2Ió
|
ô Ô ô
|
"ñ ,ÜX
|
Ñ*FØÔ ,Ñ,Ø 1*¨
|
Ñ2ð Ô ,Ò,à'+Ô VÑ $÷ ,ô ×*Ñ*¨4¯<©<¸Ó@ÜÔ ñ Ü o¬uÔ5Ø"1×"8Ñ"8¸Ó"Aä ×2Ñ2Ø o¬s°?Ó/CóFô VÔ $ð ×ÑÔð × Ñ Ô0ô ×2Ñ2°4·<±<ÀÓMÜÔ ä×2Ñ2°4·<±<ÀÓMÜÔ ñ Ð1Ü ×1Ñ1Ø m× NÑ NÐPTóFô VÔ $ñ Ü1DÓ1FÑ .DNDÔ .Ü&=Ø ¨Zó'DÔ #ô ×/Ñ/°· ± ¸d×>UÑ>UÓVFÜ VÔ $àØ×%Ñ%Ó'ñ
|
Ü!×.Ñ.¨t¯|©|Ó<à]× ;Ñ ;Ò;Ü ..Ð)>Ó?Ð?Ø}× FÑ FÒFØ×)Ñ)¨&°,Ô?Ø ÷
|
ð
|
ô % VÔ,Ø÷
|
ð
|
÷i ,ñ ,ú÷h
|
ð
|
úð s% Á3'K+Â K+É A.K8Ë K8Ë+K5Ë8Lc ó6 | j j « S ©N)r- Úfileno©r` s r$ r¼ zWrappedSocket.fileno6 s Ø{{×!Ñ!Ó#Ð#r# c ó | j dkD r| xj dz c_ | j r| j « y y )Nr r )rY rZ rc r½ s r$ Ú_decref_socketiosz WrappedSocket._decref_socketios: s6 Ø × Ñ Ò "Ø × Ò 1Ñ $Õ Ø <<Ø JJLð r# c ó^ t j |« }| j ||« }|d | }|S r» )r3 Úcreate_string_bufferr6 )r` ÚbufsizrG Ú
|
bytes_readrP s r$ ÚrecvzWrappedSocket.recv@ s3 Ü×,Ñ,¨VÓ4Ø^^ F¨FÓ3
|
ØkzÐ"Ø r# Nc ó | j ry| t |« }t j |z j |« }t j
|
d« }| j « 5 t j | j ||t j |« « }d d d « t j k( r0|j dk( rt j d« |j S |t j t j" fv r | j% « |j S t' |« |j S # 1 sw Y ¡xY w)Nr zrecv timed out)rZ rh r3 r4 Ú from_bufferÚc_size_tre r
|
ÚSSLReadrX r r r; r r- rD r7 ÚerrSSLClosedNoNotifyrc r )r` rG ÚnbytesÚprocessed_bytesrl s r$ r6 zWrappedSocket.recv_intoF s à <<Øà >Ü[Fä-- &Ñ(×5Ñ5°fÓ=Ü //¨!Ó,à × !Ñ !Ó #ñ Ü ×%Ñ%Ø f f¬f¯l©l¸?Ó.KóF÷ ð ]×3Ñ3Ò 3ð
|
×$Ñ$¨Ò)ä nnÐ%5Ó6Ð6ð ×$Ñ$Ð$ð Ü × .Ñ .Ü × .Ñ .ð
|
ñ
|
ð JJLð ×$Ñ$Ð$ô VÔ $ð ×$Ñ$Ð$÷= ð ús Á"6D8Ä8Ec ó || _ y r» ©r^ )r` rD s r$ r_ zWrappedSocket.settimeoutq s Ø r# c ó | j S r» rÍ r½ s r$ r. zWrappedSocket.gettimeoutt s Ø}}Ð r# c ó t j d« }| j « 5 t j | j
|
|t |« t j |« « }d d d « t j k( r$|j dk( rt j d« t |« |j S # 1 sw Y WxY w)Nr zsend timed out)r3 rÇ re r
|
ÚSSLWriterX rh r r r; r r- rD r )r` rP rË rl s r$ rN zWrappedSocket.sendw s Ü //¨!Ó,à × !Ñ !Ó #ñ Ü ×&Ñ&Ø d¤C¨£I¬v¯|©|¸OÓ/LóF÷ ð
|
]×3Ñ3Ò 3¸×8MÑ8MÐQRÒ8Rä..Ð!1Ó2Ð 2ä VÔ $ð ×$Ñ$Ð$÷ ð ús ¦?B;Â;Cc ó d}|t |« k r0| j |||t z « }||z }|t |« k r/y y ©Nr )rh rN ÚSSL_WRITE_BLOCKSIZE)r` rP Ú
|
total_sentrQ s r$ rz zWrappedSocket.sendall sF Ø
|
Ø3t9Ò$Ø99T *¨zÔ<OÑ/OÐ PÓQDØ $Ñ Jð 3t9Õ$r# c ó | j « 5 t j | j « d d d « y # 1 sw Y y xY wr» )re r
|
ÚSSLCloserX r½ s r$ ÚshutdownzWrappedSocket.shutdown s5 Ø × !Ñ !Ó #ñ ,Ü × Ñ dllÔ +÷ ,÷ ,ñ ,ús :ºAc óD | j dk rüd| _ | j r&t j | j « d | _ | j
|
r&t j | j
|
« d | _ | j rkt j | j « t j | j « t j | j « d x| _ | _ | j j « S | xj dz c_ y )Nr T)rY rZ rX r rp r] r[ r
|
ÚSecKeychainDeleteÚshutilÚrmtreer\ r- rc r½ s r$ rc zWrappedSocket.close sÌ à × Ñ Ò "Ø DLØ||Ü ×(Ñ(¨¯ © Ô6Ø # Ø×&Ò&Ü ×(Ñ(¨×)@Ñ)@ÔAØ*.Ô'Ø~~Ü×*Ñ*¨4¯>©>Ô:Ü ×(Ñ(¨¯ © Ô8Ü d× 0Ñ 0Ô1Ø6:Ð: Ô!3Ø;;×$Ñ$Ó&Ð &à × Ò 1Ñ $Ö r# c ón |s t d« t j « }d }d } t j | j t j |« « }t |« |s1 |rt j |« |rt j |« y y t j |« }|s1 |rt j |« |rt j |« y y t j |d« }|sJ t j |« }|sJ t j |« }t j |« } t j | |« }|rt j |« |rt j |« |S # |rt j |« |rt j |« w w xY w)Nz2SecureTransport only supports dumping binary certsr )Ú
|
ValueErrorr
|
r r rX r3 r r r rp ÚSecTrustGetCertificateCountÚ SecTrustGetCertificateAtIndexÚSecCertificateCopyDataÚCFDataGetLengthÚCFDataGetBytePtrrL )
|
r` Ú binary_formr ÚcertdataÚ der_bytesrl Ú
|
cert_countÚleafÚ data_lengthr? s
|
r$ Ú getpeercertzWrappedSocket.getpeercert¥ s ñ( Ü Ð QÓRÐ RÜ×$Ñ$Ó&ØØ ð 0ä ×.Ñ.¨t¯|©|¼V¿\¹\È%Ó=PÓQFÜ VÔ $Ùàñ& Ü ×(Ñ(¨Ô2ÙÜ ×(Ñ(¨Õ/ð ô' "×=Ñ=¸eÓDJÙ ð ñ Ü ×(Ñ(¨Ô2ÙÜ ×(Ñ(¨Õ/ð ô ×9Ñ9¸%ÀÓCDÙK4ô ×6Ñ6°tÓ<HÙO8ä(×8Ñ8¸ÓBKÜ(×9Ñ9¸(ÓCKÜ ×(Ñ(¨°kÓBIáÜ ×(Ñ(¨Ô2ÙÜ ×(Ñ(¨Ô/àÐøñ Ü ×(Ñ(¨Ô2ÙÜ ×(Ñ(¨Õ/ð ús §A F ÂF à A3F Æ1F4c óf t j « }t j | j t j
|
|« « }t |« |j t j k( rt j d« |j t j k( ry|j t j k( ry|j t j k( ry|j t j k( ry|j t j k( ryt j d|z « )Nz(SecureTransport does not support TLS 1.3zTLSv1.2zTLSv1.1ÚTLSv1ÚSSLv3ÚSSLv2zUnknown TLS version: %r)r
|
Ú SSLProtocolÚ SSLGetNegotiatedProtocolVersionrX r3 r r r r ÚkTLSProtocol13r r ÚkTLSProtocol12ÚkTLSProtocol11Ú kTLSProtocol1Ú kSSLProtocol3Ú kSSLProtocol2)r` Úprotocolrl s r$ ry zWrappedSocket.versionß sÜ Ü×'Ñ'Ó)Ü×9Ñ9Ø LL&,, xÓ0ó
|
ô Ô Ø >>]× 9Ñ 9Ò 9Ü,,Ð IÓJÐ JØ ^^}× ;Ñ ;Ò ;Ø Ø ^^}× ;Ñ ;Ò ;Ø Ø ^^}× :Ñ :Ò :ØØ ^^}× :Ñ :Ò :ØØ ^^}× :Ñ :Ò :Øä,,Ð 8¸8Ñ CÓDÐ Dr# c ó. | xj dz c_ y ©Nr )rY r½ s r$ Ú_reusezWrappedSocket._reuseô s Ø ×ÒqÑ Ör# c ón | j dk r| j « y | xj dz c_ y rø )rY rc r½ s r$ Ú_dropzWrappedSocket._drop÷ s* Ø × Ñ Ò "Ø JJLà × Ò 1Ñ $Ö r# r» )F)Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__ra Ú
|
contextlibÚcontextmanagerre rm rs r rx r¹ r¼ r¿ rÄ r6 r_ r. rN rz r× rc ré ry rù rû r" r# r$ rU rU E s ñò"ð$ × Ñ ñ ó ð ò( !ò 4ò!EòF&"òP[òz$òò ó )%òV ò ò%ò" ò ,ò%ó&8òtEò*!ó%r# rU c óJ | xj dz c_ t | ||d¬« S )Nr T)rc )rY r )r` ÚmodeÚbufsizes r$ Úmakefiler s$ Ø ×ÒqÑ ÕÜ4 w°dÔ;Ð;r# c ó( d}t | ||g|¢i |¤S rÒ r )r` r Ú bufferingÚargsÚkwargss r$ r r s" ð Ü t¨YÐH¸ÒHÀÑHÐHr# c óê e Zd ZdZd Zed « Zej d « Zed « Zej d « Zed « Z e j d « Z d Z
|
d
|
Z d Z dd Z ddZd Z ddZy )r z¯
|
I am a wrapper class for the SecureTransport library, to translate the
|
interface of the standard library ``SSLContext`` object to calls into
|
SecureTransport.
|
c ó t | \ | _ | _ d| _ d| _ d | _ d | _ d | _ d | _ d | _ y rW )
|
Ú_protocol_to_min_maxÚ _min_versionÚ _max_versionÚ_optionsÚ_verifyÚ _trust_bundleÚ _client_certÚ _client_keyÚ_client_key_passphraseÚ_alpn_protocols)r` rö s r$ ra z SecureTransportContext.__init__ sM Ü/CÀHÑ/MÑ,Ô4Ô,Ø Ø Ø !ÔØ ÔØ ÔØ&*Ô#Ø #Õ r# c ó y)ú
|
SecureTransport cannot have its hostname checking disabled. For more,
|
see the comment on getpeercert() in this file.
|
Tr" r½ s r$ Úcheck_hostnamez%SecureTransportContext.check_hostname! s ð r# c ó y)r Nr" ©r` r s r$ r z%SecureTransportContext.check_hostname) s ð r# c ó | j S r» ©r r½ s r$ Úoptionsz SecureTransportContext.options1 s ð }}Ð r# c ó || _ y r» r r s r$ r z SecureTransportContext.options; s ð r# c óZ | j rt j S t j S r» )r r Ú CERT_REQUIREDÚ CERT_NONEr½ s r$ Ú verify_modez"SecureTransportContext.verify_mode@ s à$(§L¢Ls× Ñ ÐC´c·m±mÐCr# c óH |t j k( rd| _ y d| _ y )NTF)r r r r s r$ r" z"SecureTransportContext.verify_modeD s à $¬×(9Ñ(9Ò 9t ¸u r# c ó y r» r" r½ s r$ Úset_default_verify_pathsz/SecureTransportContext.set_default_verify_pathsH s ð r# c ó" | j « S r» )r% r½ s r$ Úload_default_certsz)SecureTransportContext.load_default_certsT s Ø×,Ñ,Ó.Ð.r# c óT |t j j k7 r t d« y )Nz5SecureTransport doesn't support custom cipher strings)r r ÚDEFAULT_CIPHERSrÝ )r` rk s r$ Ú set_ciphersz"SecureTransportContext.set_ciphersW s% à dii×/Ñ/Ò /Ü Ð TÓUÐ Uð 0r# Nc óz | t d« |t |« 5 d d d « |xs || _ y # 1 sw Y xY w)Nz1SecureTransport does not support cert directories)rÝ r r )r` ÚcafileÚcapathÚcadatas r$ Úload_verify_locationsz,SecureTransportContext.load_verify_locations\ sJ à Ð Ü Ð PÓQÐ Qð Ð Üf ñ Ø÷ ð $Ò - vÕ÷ ð ús 1±:c ó. || _ || _ || _ y r» )r r Ú_client_cert_passphrase)r` ÚcertfileÚkeyfileÚpasswords r$ Úload_cert_chainz&SecureTransportContext.load_cert_chainh s Ø $ÔØ"ÔØ'/Õ$r# c ó t t d« s t d« |D cg c] }t j |« c}| _ yc c}w )z
|
Sets the ALPN protocols that will later be set on the context.
|
|
Raises a NotImplementedError if ALPN is not supported.
|
ro z2SecureTransport supports ALPN only in macOS 10.12+N)Úhasattrr
|
ÚNotImplementedErrorr Ú ensure_binaryr )r` rq Úps r$ Úset_alpn_protocolsz)SecureTransportContext.set_alpn_protocolsm sC ô xÐ!6Ô7Ü%ØDóð ð ?HÖ H¸¤× 1Ñ 1°!Õ 4Ò HÕ ùÒ Hs Ac ó |rJ |sJ |sJ t |« }|j || j | j | j | j
|
| j | j | j | j « |S r» )
|
rU r¹ r r r r r r r r )r` ÚsockÚ server_sideÚdo_handshake_on_connectÚsuppress_ragged_eofsr± rA s r$ Ú wrap_socketz"SecureTransportContext.wrap_sockety s ñ Ð Ù&Ð&Ð&Ù#Ð#Ð#ô ' tÓ,ð × Ñ Ø Ø LLØ × Ñ Ø × Ñ Ø × Ñ Ø × Ñ Ø × Ñ Ø × 'Ñ 'Ø × Ñ ô
|
|
ð Ð r# )NNN)NN)FTTN)rü rý rþ rÿ ra Úpropertyr Úsetterr r" r% r' r* r/ r5 r; rA r" r# r$ r r sË ñò $ð ñó ðð ×Ññ ó ð ð ñ ó ð ð ^^ñ ó ð ð ñDó ðDð ×ÑñEó ðEò
|
ò/òVó
|
|
.ó0ò
|
|
Ið Ø $Ø !Ø ô r# r )éÿÿÿÿ)ÚrN)frÿ Ú
|
__future__r r r3 r1 Úos.pathr rÚ r- r r{ Ú threadingÚweakrefÚ r Úpackagesr Ú util.ssl_r Ú_securetransport.bindingsr r
|
r Ú_securetransport.low_levelr r r r r r r Ú ImportErrorÚpackages.backports.makefiler Ú__all__r r' r r r& ÚWeakValueDictionaryr* ÚLockr£ rÓ Ú'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384Ú'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256Ú%TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Ú%TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Ú-TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256Ú+TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256Ú#TLS_DHE_RSA_WITH_AES_256_GCM_SHA384Ú#TLS_DHE_RSA_WITH_AES_128_GCM_SHA256Ú'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384Ú$TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHAÚ'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256Ú$TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHAÚ%TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384Ú"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHAÚ%TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256Ú"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHAÚ#TLS_DHE_RSA_WITH_AES_256_CBC_SHA256Ú TLS_DHE_RSA_WITH_AES_256_CBC_SHAÚ#TLS_DHE_RSA_WITH_AES_128_CBC_SHA256Ú TLS_DHE_RSA_WITH_AES_128_CBC_SHAÚTLS_AES_256_GCM_SHA384ÚTLS_AES_128_GCM_SHA256Ú TLS_RSA_WITH_AES_256_GCM_SHA384Ú TLS_RSA_WITH_AES_128_GCM_SHA256ÚTLS_AES_128_CCM_8_SHA256ÚTLS_AES_128_CCM_SHA256Ú TLS_RSA_WITH_AES_256_CBC_SHA256Ú TLS_RSA_WITH_AES_128_CBC_SHA256Ú TLS_RSA_WITH_AES_256_CBC_SHAÚ TLS_RSA_WITH_AES_128_CBC_SHAri Ú PROTOCOL_TLSró rñ r r7 rõ r rô r r rò r r r r rJ rS Ú SSLReadFuncr¡ Ú SSLWriteFuncr¢ ÚobjectrU r r r" r# r$ ú<module>rv s ðñ4õj 'ã Û Û Û Û Û Û
|
Û Û Û å Ý Ý +ß NÑ N÷÷ ð@Ý"ð
|
!Ð"8Ð
|
9ð àLLÐ Øyy×+Ñ+Ð ð$ /7×.Ñ.Ó0Ð Ø%y~~Ó'Ð ð Ð ð ×9Ñ9Ø×9Ñ9Ø×7Ñ7Ø×7Ñ7Ø×?Ñ?Ø×=Ñ=Ø×5Ñ5Ø×5Ñ5Ø×9Ñ9Ø×6Ñ6Ø×9Ñ9Ø×6Ñ6Ø×7Ñ7Ø×4Ñ4Ø×7Ñ7Ø×4Ñ4Ø×5Ñ5Ø×2Ñ2Ø×5Ñ5Ø×2Ñ2Ø×(Ñ(Ø×(Ñ(Ø×1Ñ1Ø×1Ñ1Ø×*Ñ*Ø×(Ñ(Ø×1Ñ1Ø×1Ñ1Ø×.Ñ.Ø×.Ñ.ð= ðJ ×Ñ ×3Ñ3°]×5QÑ5QÐRØ-×5Ñ5°}×7SÑ7SÐTðÐ ñ
|
3Ð Ô!à×#Ñ#Ø×#Ñ#ð0Ð×+Ñ+Ñ,ñ 3Ð Ô!à×#Ñ#Ø×#Ñ#ð0Ð×+Ñ+Ñ,ñ 3Ð Ô!à×#Ñ#Ø×#Ñ#ð0Ð×+Ñ+Ñ,ñ 3Ð"Ô#à×$Ñ$Ø×$Ñ$ð2Ð×-Ñ-Ñ.ñ 3Ð"Ô#à×$Ñ$Ø×$Ñ$ð2Ð×-Ñ-Ñ.ò (ò )ò4,òn0,ðl .×-Ñ-¨nÓ=Ð Ø/(×/Ñ/°Ó@Ð ôv%Fô v%ñr ô<ó Ið " Ô ôH Võ H øð} ò @ØKß?Ð?ð@ús Á M7 Í7 NÎN
|
