관리-도구
편집 파일: _windows.cpython-38.pyc
U &?�f�E � @ s2 d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZmZmZm Z m Z m Z m Z m Z mZmZ d dlmZmZmZmZmZmZmZmZmZmZ d dlmZm Z ddl m Z eZ eZ eZ!G d d � d e�Z"ee"�Z#ee#�Z$G d d � d e�Z%ee%�Z&G d d� de�Z'G dd� de�Z(e�r ee( Z)nee(�Z)G dd� de�Z*G dd� de�Z+ee+�Z,G dd� de�Z-ee-�Z.G dd� de�Z/ee/�Z0ee0�Z1G dd� de�Z2G dd � d e�Z3ee3�Z4G d d � d e�Z5ee5�Z6G d d � d e�Z7ee7�Z8ee �Z9dZ:d!Z;d"Z<d#Z=dZ>ed$�Z?d%Z@d&ZAd'ZBd(ZCd)ZDd*ZEd+ZFd,ZGd-ZHd.ZId/ZJd#ZKd0ZLd1ZMd2ZNeBeCB eDB eEB eFB eGB eHB eIB eJB ZOed3�ZPed4�ZQeRe e e d5�d6d7�ZSePjTZTe8e9feT_UeSeT_VePjWZWeee!ee feW_Ue eW_XeSeW_VePjYZYe eeeee$feY_UeeY_XePjZZZeeefeZ_Ue#eZ_XeSeZ_VePj[Z[e e#ee e)ee e1fe[_Uee[_XeSe[_VePj\Z\e e0e4e6fe\_Uee\_XePj]Z]e efe]_Uee]_XeSe]_VePj^Z^e0fe^_UePj_Z_e#fe__UePj`Z`e fe`_UeQjaZaeeeeeee fea_Ueea_XdDejbeced eedB dd8�d9d:�Zfejbe dB e e e)eedB egdd;�d<d=�Zhejbeced e e e)eedB egdd>�d?d@�Zie jjejbejkd dA�dBdC��ZldS )E� N)�WinDLL��WinError) �POINTER� Structure�c_char_p�c_ulong�c_void_p� c_wchar_p�cast�create_unicode_buffer�pointer�sizeof) �BOOL�DWORD�HANDLE�LONG�LPCSTR�LPCVOID�LPCWSTR� LPFILETIME�LPSTR�LPWSTR)� TYPE_CHECKING�Any� )� _set_ssl_context_verify_modec @ s. e Zd ZdefdefdefdefdeffZdS )� CERT_CONTEXTZdwCertEncodingTypeZ pbCertEncodedZ cbCertEncodedZ pCertInfoZ hCertStoreN)�__name__� __module__� __qualname__r r � HCERTSTORE�_fields_� r# r# �M/opt/hc_python/lib/python3.8/site-packages/pip/_vendor/truststore/_windows.pyr ' s �r c @ s e Zd Zdefdee�ffZdS )�CERT_ENHKEY_USAGE�cUsageIdentifier�rgpszUsageIdentifierN)r r r r r r r" r# r# r# r$ r% 5 s �r% c @ s e Zd ZdefdeffZdS )�CERT_USAGE_MATCHZdwType�UsageN)r r r r r% r" r# r# r# r$ r( ? s �r( c @ sF e Zd Zdefdefdefdefdefdefdefdefd eff Zd S ) �CERT_CHAIN_PARA�cbSize�RequestedUsageZRequestedIssuancePolicy�dwUrlRetrievalTimeoutZ fCheckRevocationFreshnessTime�dwRevocationFreshnessTimeZpftCacheResyncZpStrongSignParaZdwStrongSignFlagsN) r r r r r( r r r r" r# r# r# r$ r* F s �r* c @ s e Zd ZdefdeffZdS )�CERT_TRUST_STATUSZ dwErrorStatusZ dwInfoStatusN)r r r r r" r# r# r# r$ r/ Z s �r/ c @ s: e Zd ZdefdefdefdefdefdefdeffZ dS ) �CERT_CHAIN_ELEMENTr+ � pCertContext� TrustStatusZpRevocationInfoZpIssuanceUsageZpApplicationUsageZpwszExtendedErrorInfoN) r r r r � PCERT_CONTEXTr/ r �PCERT_ENHKEY_USAGEr r" r# r# r# r$ r0 a s �r0 c @ s> e Zd Zdefdefdefdee�fdefdefdeffZ dS ) �CERT_SIMPLE_CHAINr+ r2 ZcElementZ rgpElementZpTrustListInfo�fHasRevocationFreshnessTimer. N) r r r r r/ r �PCERT_CHAIN_ELEMENTr r r" r# r# r# r$ r5 p s �r5 c @ sD e Zd Zdefdefdefdee�fdefdefdefdeffZ d S ) �CERT_CHAIN_CONTEXTr+ r2 ZcChainZrgpChainZcLowerQualityChainContextZrgpLowerQualityChainContextr6 r. N) r r r r r/ r �PCERT_SIMPLE_CHAINr r r" r# r# r# r$ r8 s �r8 c @ s( e Zd ZdefdefdefdeffZdS )� SSL_EXTRA_CERT_CHAIN_POLICY_PARAr+ � dwAuthType� fdwChecks�pwszServerNameN)r r r r r r" r# r# r# r$ r: � s �r: c @ s" e Zd ZdefdefdeffZdS )�CERT_CHAIN_POLICY_PARAr+ �dwFlags�pvExtraPolicyParaN)r r r r r r" r# r# r# r$ r> � s �r> c @ s. e Zd ZdefdefdefdefdeffZdS )�CERT_CHAIN_POLICY_STATUSr+ �dwErrorZ lChainIndex� lElementIndexZpvExtraPolicyStatusN)r r r r r r r" r# r# r# r$ rA � s �rA c @ s^ e Zd Zdefdefdefdefdefdefdefdefd efd efd efd efd eff ZdS )�CERT_CHAIN_ENGINE_CONFIGr+ ZhRestrictedRootZhRestrictedTrustZhRestrictedOtherZcAdditionalStoreZrghAdditionalStorer? r- ZMaximumCachedCertificatesZCycleDetectionModulus�hExclusiveRootZhExclusiveTrustedPeopleZdwExclusiveFlagsN)r r r r r! r r" r# r# r# r$ rD � s �rD i s Memory� s 1.3.6.1.5.5.7.3.1i i � � � �@ � � i i � i @ � i i z crypt32.dllz kernel32.dll)�result�_�args�returnc C s | s t � �|S )Nr )rN rO rP r# r# r$ �_handle_win_error� s rR )� ssl_context� cert_chain�server_hostnamerQ c C s� |st �d��d}ttdddd�}�zJ|dd� D ] }t|ttB |t |�t d� q2|d }t ttB |t |��}t � }d|_ td t�|_t� }||_t� } || _t| �| _t| �} | jt j@ r�t} n| jt j@ r�t } nd} zt | d||| || d� W nv t jk �rj } zT| j dd�} | �rXzt | | ||| || d� W n t jk �rT | d�Y nX n� W 5 d} ~ X Y nX W 5 t|d� |�r�t|� X dS )z9Verify the cert_chain from the server using Windows APIs.z#Peer sent no certificates to verifyNr r )� chain_flagsT)� binary_form) �ssl�SSLCertVerificationError� CertOpenStore�CERT_STORE_PROV_MEMORY�CertCloseStore�CertFreeCertificateContext� CertAddEncodedCertificateToStore�X509_ASN_ENCODING�PKCS_7_ASN_ENCODING�len�CERT_STORE_ADD_USE_EXISTING� CertCreateCertificateContextr% r& r �OID_PKIX_KP_SERVER_AUTHr' r( r) r* r, r r+ r � verify_flags�VERIFY_CRL_CHECK_CHAIN�!CERT_CHAIN_REVOCATION_CHECK_CHAIN�VERIFY_CRL_CHECK_LEAF�$CERT_CHAIN_REVOCATION_CHECK_END_CERT�_get_and_verify_cert_chain� get_ca_certs� _verify_using_custom_ca_certs)rS rT rU r1 �hIntermediateCertStore� cert_bytesZ leaf_certZcert_enhkey_usageZcert_usage_matchZ chain_params� pChainPararV �e�custom_ca_certsr# r# r$ �_verify_peercerts_implB s� � � � �� rr )rS � hChainEnginerm �pPeerCertContextro rU rV rQ c C sf d }�zHtt� �}t||d |||d |� |j}t� } t| �| _t| _ d| _ |rXt |�| _ t � } tt| �t�| _| jtjkr�| jtO _| js�| jtO _t| �| _t| �} t� } t| �| _t| �} tt|| | � | j}|�rLt d�}t t t B d |d|t|�d �}|dk�r&d|d�d| j � d�}n |j!�"� }t�#|�}||_$||_%|d �W 5 |�r`t |j� X d S )Nr i z Certificate chain policy error z#xz [�])&�CertFreeCertificateChain�contentsr �PCERT_CHAIN_CONTEXT�CertGetCertificateChainr: r r+ �AUTHTYPE_SERVERr; r< r r= r> r r r@ � verify_moderX � CERT_NONEr? �(CERT_CHAIN_POLICY_VERIFY_MODE_NONE_FLAGS�check_hostname�*CERT_CHAIN_POLICY_IGNORE_INVALID_NAME_FLAGrA � CertVerifyCertificateChainPolicy�CERT_CHAIN_POLICY_SSLrB r �FormatMessageW�FORMAT_MESSAGE_FROM_SYSTEM� FORMAT_MESSAGE_IGNORE_INSERTSrC �value�striprY Zverify_messageZ verify_code)rS rs rm rt ro rU rV ZppChainContextZ pChainContextZ ssl_extra_cert_chain_policy_paraZ chain_policyZ pPolicyParaZ policy_statusZ pPolicyStatusZ error_codeZerror_message_bufZerror_message_chars� error_message�errr# r# r$ rj � s~ � � � �� rj )rS rq rm rt ro rU rV rQ c C s� d }t tdd dd �}zt|D ] } t|ttB | t| �td � qt � } t | �| _ || _ t | �} t t� �} t| | � | j}t| ||||||� W 5 |r�t|� t|d� X d S )Nr )rZ r[ � CertFreeCertificateChainEnginer\ r^ r_ r` ra rb rD r r+ rE r �HCERTCHAINENGINE� CertCreateCertificateChainEnginerw rj ) rS rq rm rt ro rU rV rs ZhRootCertStorern Zcert_chain_engine_configZpConfigZ phChainEnginer# r# r$ rl � sD � �� rl )�ctxrQ c c s@ | j }| j}d| _ t| tj� z d V W 5 || _ t| |� X d S )NF)r~ r{ r rX r| )r� r~ r{ r# r# r$ �_configure_context* s r� )N)m� contextlibrX �typing�ctypesr r r r r r r r r r r r Zctypes.wintypesr r r r r r r r r r r r Z_ssl_constantsr r� r! ZHCRYPTPROV_LEGACYr r3 ZPCCERT_CONTEXTr% r4 r( r* ZPCERT_CHAIN_PARAr/ r0 r7 r5 r9 r8 rx ZPCCERT_CHAIN_CONTEXTr: r> ZPCERT_CHAIN_POLICY_PARArA ZPCERT_CHAIN_POLICY_STATUSrD ZPCERT_CHAIN_ENGINE_CONFIGZPHCERTCHAINENGINEr_ r` r[ rb ZUSAGE_MATCH_TYPE_ORrd ri rg Z1CERT_CHAIN_POLICY_IGNORE_ALL_NOT_TIME_VALID_FLAGSZ7CERT_CHAIN_POLICY_IGNORE_INVALID_BASIC_CONSTRAINTS_FLAGZ'CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAGr Z)CERT_CHAIN_POLICY_IGNORE_WRONG_USAGE_FLAGZ,CERT_CHAIN_POLICY_IGNORE_INVALID_POLICY_FLAGZ.CERT_CHAIN_POLICY_IGNORE_ALL_REV_UNKNOWN_FLAGSZ%CERT_CHAIN_POLICY_ALLOW_TESTROOT_FLAGZ%CERT_CHAIN_POLICY_TRUST_TESTROOT_FLAGrz r� r� r� r} Zwincrypt�kernel32�boolrR r� ZargtypesZerrcheckrZ �restyper^ rc ry r� r\ rv r] r� r� � SSLContext�list�bytes�strrr �intrj rl �contextmanager�Iteratorr� r# r# r# r$ �<module> sN 0 0 ��������� �� � � � �� ]� Y� 4