Ë
|
ê^iÕ ã ó¶ d Z ddlmZ ddlZddlZddlZddlmZmZ ej rddl m
|
Z
|
dZ G d d e « Z d dd
|
Zdd Z d dd Zy)zHThe match_hostname() function from Python 3.5, essential when using SSL.é )Ú annotationsN)Ú IPv4AddressÚ IPv6Addressé )Ú_TYPE_PEER_CERT_RET_DICTz3.5.0.1c ó e Zd Zy)ÚCertificateErrorN)Ú__name__Ú
|
__module__Ú __qualname__© ó õr H:\项ç®\archive\æµè¯ç»\èæ¬\Change_password\venv_build\Lib\site-packages\urllib3/util/ssl_match_hostname.pyr r s Ør r c ó g }| sy| j d« }|d }|dd }|j d« }||kD rt dt | « z « |s*t | j « |j « k( « S |dk( r|j d« n{|j d « s|j d « r%|j t j |« « n4|j t j |« j d
|
d « « |D ]& }|j t j |« « ( t j d d j |« z dz t j « } | j |« S )zhMatching according to RFC 6125, section 6.4.3
|
|
http://tools.ietf.org/html/rfc6125#section-6.4.3
|
Fú.r r NÚ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)ÚsplitÚcountr ÚreprÚboolÚlowerÚappendÚ
|
startswithÚreÚescapeÚreplaceÚcompileÚjoinÚ
|
IGNORECASEÚmatch)
|
ÚdnÚhostnameÚ max_wildcardsÚpatsÚpartsÚleftmostÚ remainderÚ wildcardsÚfragÚpats
|
r Ú_dnsname_matchr+ sO ð DÙ Øð HHTNEØQxHØab IàsÓ#IØ=Ò ô
|
Ø :¼TÀ"»XÑ Eó
|
ð
|
ñ
|
ÜBHHJ (§.¡.Ó"2Ñ2Ó3Ð3ð
|
3ð GÕ Ø × Ñ VÔ $¨×(;Ñ(;¸FÔ(Cð
|
BIIhÓ'Õ(ð BIIhÓ'×/Ñ/°°wÓ?Ô@ð ò %Ø BIIdOÕ$ð%ô **UUZZ¨Ó -Ñ-°Ñ5´r·}±}Ó
|
ECØ 99XÓ Ð r c ó t j | j « « }t |j |j k( « S )a
Exact matching of IP addresses.
|
|
RFC 9110 section 4.3.5: "A reference identity of IP-ID contains the decoded
|
bytes of the IP address. An IP version 4 address is 4 octets, and an IP
|
version 6 address is 16 octets. [...] A reference identity of type IP-ID
|
matches if the address is identical to an iPAddress value of the
|
subjectAltName extension of the certificate."
|
)Ú ipaddressÚ
|
ip_addressÚrstripr Úpacked)ÚipnameÚhost_ipÚips r Ú_ipaddress_matchr4 P s2 ô
|
× Ñ fmmoÓ .BÜ W^^Ñ+Ó ,Ð,r c ó | s t d« d|v r(t j |d|j d« « }nt j |« }g }| j dd« }|D ]S \ }}|dk( r"|t ||« r y|j |« -|dk( s3|t ||« r y|j |« U |rK|I|sG| j dd« D ]2 }|D ]+ \ }}|d k( s t ||« r y|j |« - 4 t |« d
|
kD r.t d |d d j t t |« « « t |« d
|
k( rt d |d|d « t d« # t $ r d}Y 0w xY w)a) Verify that *cert* (in decoded format as returned by
|
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
|
rules are followed, but IP addresses are not accepted for *hostname*.
|
|
CertificateError is raised on failure. On success, the function
|
returns nothing.
|
ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDú%NÚsubjectAltNamer ÚDNSz
|
IP AddressÚsubjectÚ
|
commonNamer z hostname z doesn't match either of z, z doesn't match r z/no appropriate subjectAltName fields were found) Ú
|
ValueErrorr- r. ÚrfindÚgetr+ r r4 Úlenr r Úmapr ) Úcertr" Úhostname_checks_common_namer2 ÚdnsnamesÚsanÚkeyÚvalueÚsubs r Úmatch_hostnamerG _ s¬ ñ Üð -ó
|
ð
|
ð
|
ð (?Ü ×*Ñ*¨8Ð4I°h·n±nÀSÓ6IÐ+JÓKGä ×*Ñ*¨8Ó4Gð
|
HØ'+§x¡xÐ0@À"Ó'ECð ò #
|
UØ %<ؤ>°%¸Ô#BÙØ OOEÕ "Ø LÓ ØÐ"Ô'7¸¸wÔ'GÙØ OOEÕ "ð#ñ # w ¹xØ88I rÓ*ò +CØ !ò +
|
UØ,Ó&Ü% e¨XÔ6Ú Ø OO EÕ*ñ +ð +ô 8}qÒÝ â,4°d·i±iÄÄDÈ(Ó@SÔ6Tð Vó
|
ð
|
ô
|
X !Ò Ü ¨8¨,°oÀhÈqÁkÀ_Ð UÓVÐVä Ð PÓQÐQøôG ò àðús AE2 Å2 FÆ F)r )r! z
|
typing.Anyr" Ústrr# ÚintÚreturnz typing.Match[str] | None | bool)r1 rH r2 zIPv4Address | IPv6AddressrJ r )F)r@ z _TYPE_PEER_CERT_RET_DICT | Noner" rH rA r rJ ÚNone)Ú__doc__Ú
|
__future__r r- r Útypingr r Ú TYPE_CHECKINGÚssl_r Ú __version__r; r r+ r4 rG r r r ú<module>rR s ðÙ Nõ #ã Û Û ß .à ×ÒÝ.à ô zô ð
|
9:ð5 Øð5 Ø !ð5 Ø25ð5 à$ó5 óp -ð$ ).ð@RØ
|
)ð@Ràð@Rð "&ð@Rð
|
ô @Rr
|
