관리-도구
편집 파일: ssl_support.cpython-36.pyc
3 K�Re,! � " @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZm Z d dl m Z m Z y d dl Z W n ek rt dZ Y nX dddddgZd j� j� ZyejjZejZW n ek r� e ZZY nX e dk o�eeefkZyd d l mZmZ W nR ek �r: y d d lmZ d d lmZ W n ek �r4 dZdZY nX Y nX e�sRG d d� de �Ze�sjd dd�Z dd� ZG dd� de�Z G dd� de�Z d dd�Z dd� Z!e!dd� �Z"d d� Z#d d � Z$dS )!� N)�urllib� http_client�map�filter)�ResolutionError�ExtractionError�VerifyingHTTPSHandler�find_ca_bundle� is_available� cert_paths� opener_fora /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/certs/ca-certificates.crt /usr/share/ssl/certs/ca-bundle.crt /usr/local/share/certs/ca-root.crt /etc/ssl/cert.pem /System/Library/OpenSSL/certs/cert.pem /usr/local/share/certs/ca-root-nss.crt /etc/ssl/ca-bundle.pem )�CertificateError�match_hostname)r )r c @ s e Zd ZdS )r N)�__name__� __module__� __qualname__� r r ��/builddir/build/BUILDROOT/alt-python36-setuptools-38.5.2-7.el8.x86_64/opt/alt/python36/lib/python3.6/site-packages/setuptools/ssl_support.pyr 5 s r � c C s� g }| s dS | j d�}|d }|dd� }|jd�}||krLtdt| � ��|s`| j� |j� kS |dkrt|jd� n>|jd �s�|jd �r�|jtj|�� n|jtj|�j d d �� x |D ]}|jtj|�� q�W tj d d j |� d tj �} | j |�S )zpMatching according to RFC 6125, section 6.4.3 http://tools.ietf.org/html/rfc6125#section-6.4.3 F�.r r N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append� startswith�re�escape�replace�compile�join� IGNORECASE�match) �dn�hostname� max_wildcards�pats�parts�leftmost� remainder� wildcards�frag�patr r r �_dnsname_match; s* r. c C s� | s t d��g }| jdf �}x0|D ](\}}|dkr"t||�r@dS |j|� q"W |s�xF| jdf �D ]6}x0|D ](\}}|dkrjt||�r�dS |j|� qjW q`W t|�dkr�td|d jtt|��f ��n*t|�dkr�td ||d f ��ntd ��dS ) a= Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. zempty or no certificate�subjectAltName�DNSN�subject� commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) � ValueError�getr. r �lenr r! r r )�certr% �dnsnames�san�key�value�subr r r r o s. r c @ s e Zd ZdZdd� Zdd� ZdS )r z=Simple verifying handler: no auth, subclasses, timeouts, etc.c C s || _ tj| � d S )N)� ca_bundle� HTTPSHandler�__init__)�selfr< r r r r> � s z VerifyingHTTPSHandler.__init__c s � j � fdd�|�S )Nc s t | � jf|�S )N)�VerifyingHTTPSConnr< )�host�kw)r? r r �<lambda>� s z2VerifyingHTTPSHandler.https_open.<locals>.<lambda>)�do_open)r? �reqr )r? r � https_open� s z VerifyingHTTPSHandler.https_openN)r r r �__doc__r> rF r r r r r � s c @ s e Zd ZdZdd� Zdd� ZdS )r@ z@Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j| |f|� || _d S )N)�HTTPSConnectionr> r< )r? rA r< rB r r r r> � s zVerifyingHTTPSConn.__init__c C s� t j| j| jft| dd ��}t| d�rHt| dd �rH|| _| j� | j}n| j}tt d�rxt j | j d�}|j ||d�| _nt j |t j | j d�| _yt| jj� |� W n. tk r� | jjt j� | jj� � Y nX d S )N�source_address�_tunnel� _tunnel_host�create_default_context)�cafile)�server_hostname)� cert_reqs�ca_certs)�socket�create_connectionrA �port�getattr�hasattr�sockrJ rK �sslrL r< � wrap_socket� CERT_REQUIREDr � getpeercertr �shutdown� SHUT_RDWR�close)r? rV � actual_host�ctxr r r �connect� s$ zVerifyingHTTPSConn.connectN)r r r rG r> r` r r r r r@ � s r@ c C s t jjt| pt� ��jS )z@Get a urlopen() replacement that uses ca_bundle for verification)r �request� build_openerr r �open)r< r r r r � s c s t j� �� fdd��}|S )Nc s t � d�s� | |�� _� jS )N�always_returns)rU rd )�args�kwargs)�funcr r �wrapper� s zonce.<locals>.wrapper)� functools�wraps)rg rh r )rg r �once� s rk c sX y dd l } W n tk r d S X G � fdd�d| j�� � � }|jd� |jd� |jS )Nr c s, e Zd Z�� fdd�Z�� fdd�Z� ZS )z"get_win_certfile.<locals>.CertFilec s t � | �j� tj| j� d S )N)�superr> �atexit�registerr] )r? )�CertFile� __class__r r r> � s z+get_win_certfile.<locals>.CertFile.__init__c s, yt � | �j� W n tk r& Y nX d S )N)rl r] �OSError)r? )ro rp r r r] � s z(get_win_certfile.<locals>.CertFile.close)r r r r> r] � __classcell__r )ro )rp r ro � s ro �CA�ROOT)� wincertstore� ImportErrorro Zaddstore�name)ru Z _wincertsr )ro r �get_win_certfile� s rx c C s$ t tjjt�} t� p"t| d�p"t� S )z*Return an existing CA bundle path, or NoneN)r �os�path�isfiler rx �next�_certifi_where)Zextant_cert_pathsr r r r � s c C s, y t d�j� S tttfk r& Y nX d S )N�certifi)� __import__�whererv r r r r r r r} s r} )r )N)%ry rQ rm r ri Zsetuptools.extern.six.movesr r r r � pkg_resourcesr r rW rv �__all__�stripr r ra r= rH �AttributeError�objectr r r Z backports.ssl_match_hostnamer3 r. r r@ r rk rx r r} r r r r �<module> sP 4) (