관리-도구
편집 파일: ssl_support.cpython-38.opt-1.pyc
U �Qab-! � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZm Z d dl m Z m Z z d dl Z W n ek rt dZ Y nX dddddgZd �� �� ZzejjZejZW n ek r� e ZZY nX e dk o�eeefkZzd d l mZmZ W nR ek �r: z d d lmZ d d lmZ W n ek �r4 dZdZY nX Y nX e�sRG d d� de �Ze�sjd dd�Z dd� ZG dd� de�Z G dd� de�Z d dd�Z dd� Z!e!dd� �Z"d d� Z#d d � Z$dS )!� N)�urllib� http_client�map�filter)�ResolutionError�ExtractionError�VerifyingHTTPSHandler�find_ca_bundle� is_available� cert_paths� opener_fora /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/certs/ca-certificates.crt /usr/share/ssl/certs/ca-bundle.crt /usr/local/share/certs/ca-root.crt /etc/ssl/cert.pem /System/Library/OpenSSL/certs/cert.pem /usr/local/share/certs/ca-root-nss.crt /etc/ssl/ca-bundle.pem )�CertificateError�match_hostname)r )r c @ s e Zd ZdS )r N)�__name__� __module__� __qualname__� r r �:/usr/lib/python3.8/site-packages/setuptools/ssl_support.pyr 5 s r � c C s� g }| s dS | � d�}|d }|dd� }|�d�}||krLtdt| � ��|s`| �� |�� kS |dkrt|�d� n>|�d �s�|�d �r�|�t�|�� n|�t�|�� d d �� |D ]}|�t�|�� q�t� d d � |� d tj �} | � |�S )zqMatching according to RFC 6125, section 6.4.3 https://tools.ietf.org/html/rfc6125#section-6.4.3 F�.r r N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append� startswith�re�escape�replace�compile�join� IGNORECASE�match) Zdn�hostnameZ max_wildcardsZpats�partsZleftmostZ remainderZ wildcardsZfragZpatr r r �_dnsname_match; s, � r& c C s� | s t d��g }| �dd�}|D ]*\}}|dkr t||�r@ dS |�|� q |s�| �dd�D ]6}|D ],\}}|dkrdt||�r� dS |�|� qdq\t|�dkr�td |d �tt|��f ��n*t|�dkr�td ||d f ��ntd ��dS )a= Verify that *cert* (in decoded format as returned by SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125 rules are followed, but IP addresses are not accepted for *hostname*. CertificateError is raised on failure. On success, the function returns nothing. zempty or no certificateZsubjectAltNamer ZDNSNZsubjectZ commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) � ValueError�getr& r �lenr r! r r )Zcertr$ ZdnsnamesZsan�key�value�subr r r r o s2 � �r c @ s e Zd ZdZdd� Zdd� ZdS )r z=Simple verifying handler: no auth, subclasses, timeouts, etc.c C s || _ t�| � d S �N)� ca_bundle� HTTPSHandler�__init__)�selfr. r r r r0 � s z VerifyingHTTPSHandler.__init__c s � � � fdd�|�S )Nc s t | � jf|�S r- )�VerifyingHTTPSConnr. )�host�kw�r1 r r �<lambda>� � z2VerifyingHTTPSHandler.https_open.<locals>.<lambda>)Zdo_open)r1 Zreqr r5 r � https_open� s �z VerifyingHTTPSHandler.https_openN)r r r �__doc__r0 r8 r r r r r � s c @ s e Zd ZdZdd� Zdd� ZdS )r2 z@Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j| |f|� || _d S r- )�HTTPSConnectionr0 r. )r1 r3 r. r4 r r r r0 � s zVerifyingHTTPSConn.__init__c C s� t �| j| jft| dd ��}t| d�rHt| dd �rH|| _| �� | j}n| j}tt d�rxt j | j d�}|j ||d�| _nt j |t j | j d�| _zt| j�� |� W n. tk r� | j�t j� | j�� � Y nX d S )NZsource_address�_tunnel� _tunnel_host�create_default_context)Zcafile)Zserver_hostname)Z cert_reqsZca_certs)�socketZcreate_connectionr3 Zport�getattr�hasattr�sockr; r< �sslr= r. Z wrap_socketZ CERT_REQUIREDr Z getpeercertr ZshutdownZ SHUT_RDWR�close)r1 rA Z actual_hostZctxr r r �connect� s. � � zVerifyingHTTPSConn.connectN)r r r r9 r0 rD r r r r r2 � s r2 c C s t j�t| pt� ��jS )z@Get a urlopen() replacement that uses ca_bundle for verification)r �requestZ build_openerr r �open)r. r r r r � s �c s t �� �� fdd��}|S )Nc s t � d�s� | |�� _� jS )N�always_returns)r@ rG )�args�kwargs��funcr r �wrapper� s zonce.<locals>.wrapper)� functools�wraps)rK rL r rJ r �once� s rO c sZ z dd l } W n tk r" Y d S X G � fdd�d| j�� � � }|�d� |�d� |jS )Nr c s, e Zd Z�� fdd�Z�� fdd�Z� ZS )z"get_win_certfile.<locals>.CertFilec s t � | ��� t�| j� d S r- )�superr0 �atexit�registerrC r5 ��CertFile� __class__r r r0 � s z+get_win_certfile.<locals>.CertFile.__init__c s, zt � | ��� W n tk r& Y nX d S r- )rP rC �OSErrorr5 rS r r rC � s z(get_win_certfile.<locals>.CertFile.close)r r r r0 rC � __classcell__r �rT )rU r rT � s rT ZCAZROOT)� wincertstore� ImportErrorrT Zaddstore�name)rY Z _wincertsr rX r �get_win_certfile� s r\ c C s$ t tjjt�} t� p"t| d�p"t� S )z*Return an existing CA bundle path, or NoneN)r �os�path�isfiler r\ �next�_certifi_where)Zextant_cert_pathsr r r r � s ��c C s. zt d��� W S tttfk r( Y nX d S )NZcertifi)� __import__�whererZ r r r r r r ra s ra )r )N)%r] r> rQ r rM Zsetuptools.extern.six.movesr r r r Z pkg_resourcesr r rB rZ �__all__�stripr r rE r/ r: �AttributeError�objectr r r Z backports.ssl_match_hostnamer' r& r r2 r rO r\ r ra r r r r �<module> sZ � 4) (