Ë
|
ñúhb6 ã óö d Z ddlZddlZddlZddlZddlZddlZddlZddlZddl m
|
Z
|
m Z m Z ej dej « Zd Zd Zd Zd Zd
|
Zdd Zd Zd Zd Zd Zd Zd ZddddddZ d Z y)a¦
|
Low-level helpers for the SecureTransport bindings.
|
|
These are Python functions that are not directly related to the high-level APIs
|
but are necessary to get them to work. They include a whole bunch of low-level
|
CoreFoundation messing about and memory management. The concerns in this module
|
are almost entirely about trying to avoid memory leaks and providing
|
appropriate and useful assistance to the higher-level code.
|
é Né )ÚCFConstÚCoreFoundationÚSecuritys; -----BEGIN CERTIFICATE-----
|
(.*?)
|
-----END CERTIFICATE-----c ó^ t j t j | t | « « S )zv
|
Given a bytestring, create a CFData object from it. This CFData object must
|
be CFReleased by the caller.
|
)r Ú CFDataCreateÚkCFAllocatorDefaultÚlen)Ú
|
bytestrings úiH:\Change_password\venv_build\Lib\site-packages\pip/_vendor/urllib3/contrib/_securetransport/low_level.pyÚ_cf_data_from_bytesr s( ô
|
× &Ñ &Ü×*Ñ*¨J¼¸J»ó ð ó c ó t | « }d | D « }d | D « }t j |z | }t j |z | }t j t j |||t j
|
t j « S )zK
|
Given a list of Python tuples, create an associated CFDictionary.
|
c 3 ó& K | ] }|d yw)r N© ©Ú.0Úts r ú <genexpr>z-_cf_dictionary_from_tuples.<locals>.<genexpr>, s è ø Ò !QAaDÑ !ùó c 3 ó& K | ] }|d yw)r Nr r s r r z-_cf_dictionary_from_tuples.<locals>.<genexpr>- s è ø Ò #qadÑ #ùr )r
|
r Ú CFTypeRefÚCFDictionaryCreater Ú kCFTypeDictionaryKeyCallBacksÚ kCFTypeDictionaryValueCallBacks)ÚtuplesÚdictionary_sizeÚkeysÚvaluesÚcf_keysÚ cf_valuess r Ú_cf_dictionary_from_tuplesr" % s ô &kOñ "&Ô !DÙ #FÔ #FÜ ×'Ñ'¨/Ñ9¸DÐAGÜ ×)Ñ)¨OÑ;¸fÐEIä × ,Ñ ,Ü×*Ñ*ØØØÜ×4Ñ4Ü×6Ñ6ó ð r c ó t j | « }t j t j |t
|
j « }|S )zi
|
Given a Python binary data, create a CFString.
|
The string must be CFReleased by the caller.
|
)ÚctypesÚc_char_pr ÚCFStringCreateWithCStringr r ÚkCFStringEncodingUTF8)Úpy_bstrÚc_strÚcf_strs r Ú_cfstrr+ ; s> ô
|
OOGÓ $EÜ × 5Ñ 5Ü×*Ñ*Ø Ü×%Ñ%óFð
|
Mr c óþ d} t j t j dt j t j
|
« « }|s t d« | D ]F }t |« }|s t d« t j ||« t j |« H |S # t j |« w xY w# t $ r4}|rt j |« t j d|« d}~ww xY w)zª
|
Given a list of Python binary data, create an associated CFMutableArray.
|
The array must be CFReleased by the caller.
|
|
Raises an ssl.SSLError on failure.
|
Nr úUnable to allocate memory!zUnable to allocate array: ) r ÚCFArrayCreateMutabler r$ ÚbyrefÚkCFTypeArrayCallBacksÚ MemoryErrorr+ ÚCFArrayAppendValueÚ CFReleaseÚ BaseExceptionÚsslÚSSLError)ÚlstÚcf_arrÚitemr* Úes r Ú_create_cfstring_arrayr; I så ð FðBÜ ×4Ñ4Ü × .Ñ .Ø Ü LL ×=Ñ=Ó >ó
|
ñ
|
Ü Ð :Ó;Ð ;Øò 1DÜD\FÙÜ!Ð">Ó?Ð?ð 1Ü ×1Ñ1°&¸&ÔAä ×(Ñ(¨Õ0ñ 1ð Møô ×(Ñ(¨Õ0ûÜ ò BÙ Ü × $Ñ $ VÔ ,Üll¹QÐ@ÓAÐAûðBús0 A0B? Á5B%Â B? Â%B<Â<B? Â? C<Ã/C7Ã7C<c ó t j | t j t j « « }t j
|
|t j « }|Tt j d« }t j ||dt j « }|s t d« |j }||j d« }|S )z¨
|
Creates a Unicode string from a CFString object. Used entirely for error
|
reporting.
|
|
Yes, it annoys me quite a lot that this function is this complex.
|
i z'Error copying C string from CFStringRefúutf-8) r$ ÚcastÚPOINTERÚc_void_pr ÚCFStringGetCStringPtrr r' Úcreate_string_bufferÚCFStringGetCStringÚOSErrorÚvalueÚdecode)rE Úvalue_as_void_pÚstringÚbufferÚresults r Ú_cf_string_to_unicoderK h s¥ ô kk %¬¯ © ¼¿¹Ó)HÓIOä × 1Ñ 1Ø×6Ñ6óFð ~Ü×,Ñ,¨TÓ2Ü ×2Ñ2Ø V T¬7×+HÑ+Hó
|
ñ ÜÐCÓDÐ DØ Ø ÐØ wÓ'Ø Mr c óÆ | dk( ryt j | d« }t |« }t j |« ||dk( rd| z }|t
|
j } ||« )z[
|
Checks the return code and throws an exception if there is an error to
|
report
|
r NÚ z OSStatus %s)r ÚSecCopyErrorMessageStringrK r r3 r5 r6 )ÚerrorÚexception_classÚcf_error_stringÚoutputs r Ú_assert_no_errorrS sg ð
|
zØä ×8Ñ8¸ÀÓEOÜ " ?Ó 3FÜ× Ñ _Ô-à ~ 3 Ø %Ñ'àÐ Ü ,,á
|
&Ó
|
!Ð!r c ó6 | j dd« } t j | « D cg c]& }t j |j d« « ( }}|st j d« t j t j dt j t j « « }|st j d« |D ] }t |« }|st j d« t j t j |« }t j" |« |st j d« t j$ ||« t j" |« ¡ |S c c}w # t& $ r t j" |« w xY w)z
|
Given a bundle of certs in PEM format, turns them into a CFArray of certs
|
that can be used to validate a cert chain.
|
s
|
ó
|
r z No root certificates specifiedr r- z Unable to build cert object!)ÚreplaceÚ _PEM_CERTS_REÚfinditerÚbase64Ú b64decodeÚgroupr5 r6 r r. r r$ r/ r0 r r Ú SecCertificateCreateWithDatar3 r2 Ú Exception)Ú
|
pem_bundleÚmatchÚ der_certsÚ
|
cert_arrayÚ der_bytesÚcertdataÚcerts r Ú_cert_array_from_pemre sh ð ×#Ñ# G¨UÓ3Jô 7D×6LÑ6LÈZÓ6XöØ-2×Ñ Q Õ(ðIð ñ ÜllÐ;Ó<Ð<ä ×4Ñ4Ü×*Ñ*Ø Ü ^×9Ñ9Ó:óJñ
|
ÜllÐ7Ó8Ð8ðØ"ò +IÜ*¨9Ó5HÙÜllÐ#?Ó@Ð@Ü×8Ñ8Ü ×2Ñ2°HóDô × $Ñ $ XÔ .ÙÜllÐ#AÓBÐBä × -Ñ -¨j¸$Ô ?Ü × $Ñ $ TÕ *ñ +ð( ÐùòGøô8 ò ô × Ñ Ô,Ø ð ús ª+E3à B$E8 Å8 Fc óZ t j « }t j | « |k( S )z=
|
Returns True if a given CFTypeRef is a certificate.
|
)r ÚSecCertificateGetTypeIDr Ú CFGetTypeID©r9 Úexpecteds r Ú_is_certrk Ä s( ô ×/Ñ/Ó1HÜ × %Ñ % dÓ +¨xÑ 7Ð7r c óZ t j « }t j | « |k( S )z;
|
Returns True if a given CFTypeRef is an identity.
|
)r ÚSecIdentityGetTypeIDr rh ri s r Ú _is_identityrn Ì s( ô ×,Ñ,Ó.HÜ × %Ñ % dÓ +¨xÑ 7Ð7r c
|
óâ t j d« } t j | dd « j d« }t j | dd « }t j « }t j j ||« j d« }t j « }t j |t |« |ddt j |« « }t! |« ||fS )a³
|
This function creates a temporary Mac keychain that we can use to work with
|
credentials. This keychain uses a one-time password and a temporary file to
|
store the data. We expect to have one keychain per socket. The returned
|
SecKeychainRef must be freed by the caller, including calling
|
SecKeychainDelete.
|
|
Returns a tuple of the SecKeychainRef and the path to the temporary
|
directory that contains it.
|
é( Né r= F)ÚosÚurandomrY Ú b16encoderF ÚtempfileÚmkdtempÚpathÚjoinÚencoder ÚSecKeychainRefÚSecKeychainCreater
|
r$ r/ rS )Ú random_bytesÚfilenameÚpasswordÚ tempdirectoryÚ keychain_pathÚkeychainÚstatuss r Ú_temporary_keychainr Ô sÈ ô" ::b>LÜ× Ñ ¨R¨aÐ 0Ó1×8Ñ8¸ÓAHÜ× Ñ ¨Q¨RÐ 0Ó1HÜ ×$Ñ$Ó&MäGGLL °Ó9×@Ñ@ÀÓIMô ×&Ñ&Ó(HÜ × 'Ñ 'Øs8} h°°t¼V¿\¹\È(Ó=SóFô VÔ ð ]Ð "Ð"r c ó¶ g }g }d}t |d« 5 }|j « }ddd« t j t j t |« « }t j « }t j |ddddd| t j |« « }t |« t j |« } t | « D ] }
|
t j ||
|
« } t j | t j « } t# | « r't j$ | « |j' | « ot) | « s{t j$ | « |j' | « ¢ |rt j* |« t j* |« ||fS # 1 sw Y {xY w# |rt j* |« t j* « w xY w)zÊ
|
Given a single file, loads all the trust objects from it into arrays and
|
the keychain.
|
Returns a tuple of lists: the first list is a list of identities, the
|
second a list of certs.
|
NÚrbr )ÚopenÚreadr r r r
|
Ú
|
CFArrayRefr Ú SecItemImportr$ r/ rS ÚCFArrayGetCountÚrangeÚCFArrayGetValueAtIndexr> r rk ÚCFRetainÚappendrn r3 ) r rw Ú certificatesÚ
|
identitiesÚ result_arrayÚfÚ raw_filedataÚfiledatarJ Ú result_countÚindexr9 s r Ú_load_items_from_filer ÷ s ð LØJØLä dDÓ ð QØvvx ÷ ð$+Ü!×.Ñ.Ü × .Ñ .° ¼cÀ,Ó>Oó
|
ô &×0Ñ0Ó2 Ü×'Ñ'Ø Ø Ø Ø Ø Ø Ø Ü LL Ó &ó
|
ô Ô ô &×5Ñ5°lÓC Ü<Ó(ò (EÜ!×8Ñ8¸ ÀuÓMDÜ;;t¤^×%=Ñ%=Ó>Dä~Ü ×'Ñ'¨Ô-Ø ×#Ñ# DÕ)Ü dÕ#Ü ×'Ñ'¨Ô-Ø×!Ñ! $Õ'ñ (ñ Ü × $Ñ $ \Ô 2ä× Ñ Ô*à Ð %Ð%÷S ñ ûñH Ü × $Ñ $ \Ô 2ä× Ñ Õ*ús F DF* Å(F* Æ F'Æ*.Gc óP g }g }d |D « } |D ]3 }t | |« \ }}|j |« |j |« 5 |st j « }t j | |d t j |« « }t |« |j |« t j |j d« « t j t j dt j t j « « } t j ||« D ] }
|
t j" | |
|
« | t j ||« D ] } t j | « S # t j ||« D ] } t j | « w xY w)zü
|
Load certificates and maybe keys from a number of files. Has the end goal
|
of returning a CFArray containing one SecIdentityRef, and then zero or more
|
SecCertificateRef objects, suitable for use as a client certificate trust
|
chain.
|
c 3 ó& K | ] }|s| y w©Nr )r rw s r r z*_load_client_cert_chain.<locals>.<genexpr>R s è ø Ò ,d¢tTÑ ,ùs r )r Úextendr ÚSecIdentityRefÚ SecIdentityCreateWithCertificater$ r/ rS r r r3 Úpopr. r r0 Ú itertoolsÚchainr2 ) r Úpathsr r Ú file_pathÚnew_identitiesÚ new_certsÚ new_identityr Ú trust_chainr9 Úobjs r Ú_load_client_cert_chainr¨ . s| ð@ LØJñ -eÔ ,Eð"*Ø ò +IÜ(=¸hÈ Ó(RÑ %NIØ × Ñ nÔ -Ø × Ñ Õ *ð +ñ Ü#×2Ñ2Ó4LÜ ×>Ñ>Ø, q/¬6¯<©<¸ Ó+EóFô VÔ $Ø × Ñ lÔ +ô × $Ñ $ \×%5Ñ%5°aÓ%8Ô 9ô %×9Ñ9Ü × .Ñ .Ø Ü LL ×=Ñ=Ó >ó
|
ô
|
OO J° Ó=ò ADô × -Ñ -¨k¸4Õ @ð Að
|
ä ?? :¨|Ó<ò *CÜ × $Ñ $ SÕ )ñ *ø9?? :¨|Ó<ò *CÜ × $Ñ $ SÕ )ñ *ús D3E3 Å32F%)r é )é r )rª r )rª r© )rª rª )ÚSSLv2ÚSSLv3ÚTLSv1zTLSv1.1zTLSv1.2c ó¦ t | \ }}d}d}t j d||« }t |« }d}t j d||||« |z }|S )z6
|
Builds a TLS alert record for an unknown CA.
|
r© é0 z>BBé z>BBBH)ÚTLS_PROTOCOL_VERSIONSÚstructÚpackr
|
) ÚversionÚver_majÚver_minÚseverity_fatalÚdescription_unknown_caÚmsgÚmsg_lenÚrecord_type_alertÚrecords r Ú_build_tls_unknown_ca_alertr½ sb ô -¨WÑ5ÑGWØNØ !ÐÜ
|
++e^Ð-CÓ
|
DCÜ#hGØ ÐÜ [[Ð"3°W¸gÀwÓ OÐRUÑ UFØ Mr r ) Ú__doc__rY r$ r rr Úrer5 r² ru Úbindingsr r r ÚcompileÚDOTALLrW r r" r+ r; rK rS re rk rn r r r¨ r± r½ r r r ú<module>rà s¤ ðñó Û Û Û Û Û
|
Û Û ç 7Ñ 7ð
|
|
ØDÀbÇiÁió ò
|
òò, ò ò>ó2"ò*+ò\8ò8ò #òF4&ònH*ðX Ø Ø ØØñ Ð ó r
|
