U
|
G=®d_! ã @ s¼ d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZm Z d dl
|
m Z m Z z d dl Z W n ek
|
rt dZ Y nX dddddgZd ¡ ¡ ZzejjZejZW n ek
|
r¾ e ZZY nX e dk oÒeeefkZzd d
|
l mZmZ W nR ek
|
r: z d d lmZ d d lmZ W n ek
|
r4 dZdZY nX Y nX esRG d d de Zesjd ddZ dd ZG dd deZ G dd deZ d ddZ dd Z!e!dd Z"d d Z#d d Z$dS )!é N)ÚurllibÚ http_clientÚmapÚfilter)ÚResolutionErrorÚExtractionErrorÚVerifyingHTTPSHandlerÚfind_ca_bundleÚ is_availableÚ
|
cert_pathsÚ
|
opener_fora
|
/etc/pki/tls/certs/ca-bundle.crt
|
/etc/ssl/certs/ca-certificates.crt
|
/usr/share/ssl/certs/ca-bundle.crt
|
/usr/local/share/certs/ca-root.crt
|
/etc/ssl/cert.pem
|
/System/Library/OpenSSL/certs/cert.pem
|
/usr/local/share/certs/ca-root-nss.crt
|
/etc/ssl/ca-bundle.pem
|
)ÚCertificateErrorÚmatch_hostname)r )r c @ s e Zd ZdS )r N)Ú__name__Ú
|
__module__Ú __qualname__© r r úMD:\z\workplace\VsCode\pyvenv\venv\Lib\site-packages\setuptools/ssl_support.pyr 6 s r é c
|
C sò g }| s dS | d¡}|d }|dd
}| d¡}||krLtdt| |s`| ¡ | ¡ kS |dkrt| d¡ n>| d ¡s| d ¡r| t |¡¡ n| t |¡ d
|
d ¡¡ |D ]}| t |¡¡ q¶t
|
d d |¡ d tj ¡} | |¡S )zqMatching according to RFC 6125, section 6.4.3
|
|
https://tools.ietf.org/html/rfc6125#section-6.4.3
|
FÚ.r r NÚ*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)ÚsplitÚcountr ÚreprÚlowerÚappendÚ
|
startswithÚreÚescapeÚreplaceÚcompileÚjoinÚ
|
IGNORECASEÚmatch)
|
ÚdnÚhostnameZ max_wildcardsZpatsÚpartsZleftmostÚ remainderÚ wildcardsÚfragÚpatr r r Ú_dnsname_match< s,
|
|
|
ÿ r+ c C sì | s t dg }| dd¡}|D ]*\}}|dkr t||r@ dS | |¡ q |s| dd¡D ]6}|D ],\}}|dkrdt||r dS | |¡ qdq\t|dkr¾td |d
|
tt|¡f n*t|dkràtd ||d f ntd dS )a= Verify that *cert* (in decoded format as returned by
|
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
|
rules are followed, but IP addresses are not accepted for *hostname*.
|
|
CertificateError is raised on failure. On success, the function
|
returns nothing.
|
zempty or no certificateÚsubjectAltNamer ÚDNSNÚsubjectÚ
|
commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) Ú
|
ValueErrorÚgetr+ r Úlenr r! r r )Úcertr% ÚdnsnamesÚsanÚkeyÚvalueÚsubr r r r r s>
|
|
ÿÿ
|
ÿÿÿr c @ s e Zd ZdZdd Zdd ZdS )r z=Simple verifying handler: no auth, subclasses, timeouts, etc.c C s || _ t | ¡ d S ©N)Ú ca_bundleÚ HTTPSHandlerÚ__init__)Úselfr: r r r r< s z VerifyingHTTPSHandler.__init__c s fdd|¡S )Nc s t | jf|S r9 )ÚVerifyingHTTPSConnr: )ÚhostÚkw©r= r r Ú<lambda>¥ ó z2VerifyingHTTPSHandler.https_open.<locals>.<lambda>)Údo_open)r= Úreqr rA r Ú
|
https_open£ s
|
þz VerifyingHTTPSHandler.https_openN)r r r Ú__doc__r< rF r r r r r s c @ s e Zd ZdZdd Zdd ZdS )r> z@Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j| |f| || _d S r9 )ÚHTTPSConnectionr< r: )r= r? r: r@ r r r r< s zVerifyingHTTPSConn.__init__c C sÖ t | j| jft| dd ¡}t| drHt| dd rH|| _| ¡ | j}n| j}tt drxt j
|
| j d}|j ||d| _nt j |t j | j d| _zt| j ¡ | W n. tk
|
rÐ | j t j¡ | j ¡ Y nX d S )NÚsource_addressÚ_tunnelÚ _tunnel_hostÚcreate_default_context)Úcafile)Úserver_hostname)Ú cert_reqsÚca_certs)ÚsocketÚcreate_connectionr? ÚportÚgetattrÚhasattrÚsockrJ rK ÚsslrL r: Ú wrap_socketÚ CERT_REQUIREDr Ú getpeercertr ÚshutdownÚ SHUT_RDWRÚclose)r= rV Ú actual_hostÚctxr r r Úconnect± s.
|
|
ÿ
|
ÿ
|
zVerifyingHTTPSConn.connectN)r r r rG r< r` r r r r r> ª s r> c C s t j t| pt ¡jS )z@Get a urlopen() replacement that uses ca_bundle for verification)r ÚrequestÚ build_openerr r Úopen)r: r r r r Ò s ÿc s t ¡ fdd}|S )Nc s t ds | | _ jS )NÚalways_returns)rU rd )ÚargsÚkwargs©Úfuncr r ÚwrapperÛ s
|
zonce.<locals>.wrapper)Ú functoolsÚwraps)rh ri r rg r ÚonceÚ s rl c sZ z dd l } W n tk
|
r" Y d S X G fddd| j }| d¡ | d¡ |jS )Nr c s, e Zd Z fddZ fddZ ZS )z"get_win_certfile.<locals>.CertFilec s t | ¡ t | j¡ d S r9 )Úsuperr< ÚatexitÚregisterr] rA ©ÚCertFileÚ __class__r r r< ë s z+get_win_certfile.<locals>.CertFile.__init__c s, zt | ¡ W n tk
|
r& Y nX d S r9 )rm r] ÚOSErrorrA rp r r r] ï s z(get_win_certfile.<locals>.CertFile.close)r r r r< r] Ú __classcell__r ©rq )rr r rq ê s rq ÚCAÚROOT)Ú wincertstoreÚ ImportErrorrq ZaddstoreÚname)rx Z _wincertsr ru r Úget_win_certfileã s
|
|
r{ c C s$ t tjjt} t p"t| dp"t S )z*Return an existing CA bundle path, or NoneN)r ÚosÚpathÚisfiler r{ ÚnextÚ_certifi_where)Zextant_cert_pathsr r r r û s ÿýc
|
C s. zt d ¡ W S tttfk
|
r( Y nX d S )NÚcertifi)Ú
|
__import__Úwherery r r r r r r r s r )r )N)%r| rQ rn r rj Zsetuptools.extern.six.movesr r r r Ú pkg_resourcesr r rW ry Ú__all__Ústripr r ra r; rH ÚAttributeErrorÚobjectr
|
r r Z backports.ssl_match_hostnamer0 r+ r r> r rl r{ r r r r r r Ú<module> s`
|
þ
|
|
ÿ
|
6*(
|
|
|
