Viewing File: /opt/alt/python35/lib/python3.5/site-packages/urllib3/contrib/__pycache__/pyopenssl.cpython-35.pyc
¨`W. ã ' @ s d Z d d l m Z y$ d d l m Z d d l m Z Wn1 e k
rm Z z e
e ƒ ‚ WYd d Z [ Xn Xd d l Z d d l
m Z d d l m Z m Z d d l m Z m Z y d d l m Z Wn( e
k
rô d Z d d
l m Z Yn Xd d l Z d d l Z d d l Z d d l m Z d d
l m Z d d g Z e Z! e j" e j# j$ e j% e j# j& i Z' e( e d ƒ r£e( e j# d ƒ r£e j# j) e' e j* <e( e d ƒ r×e( e j# d ƒ r×e j# j+ e' e j, <y e' j- e j. e j# j/ i ƒ Wn e0 k
r Yn Xe j1 e j# j2 e j3 e j# j4 e j5 e j# j4 e j# j6 i Z7 e j8 j9 j: d ƒ Z; d Z< e j! Z= e j> Z? d d „ Z@ d d „ ZA Gd d „ d e ƒ Z d d „ ZB Gd d „ d eC ƒ ZD e rÞd% d d „ ZE n e ZE eE eD _E d! d" „ ZF d d d d d d d d# d$ „ Z> d S)&a! SSL with SNI_-support for Python 2. Follow these instructions if you would
like to verify SSL certificates in Python 2. Note, the default libraries do
*not* do certificate checking; you need to do additional work to validate
certificates yourself.
This needs the following packages installed:
* pyOpenSSL (tested with 0.13)
* ndg-httpsclient (tested with 0.3.2)
* pyasn1 (tested with 0.1.6)
You can install them with the following command:
pip install pyopenssl ndg-httpsclient pyasn1
To activate certificate checking, call
:func:`~urllib3.contrib.pyopenssl.inject_into_urllib3` from your Python code
before you begin making HTTP requests. This can be done in a ``sitecustomize``
module, or at any other time before your application begins using ``urllib3``,
like this::
try:
import urllib3.contrib.pyopenssl
urllib3.contrib.pyopenssl.inject_into_urllib3()
except ImportError:
pass
Now you can use :mod:`urllib3` as you normally would, and it will support SNI
when the required modules are installed.
Activating this module also has the positive side effect of disabling SSL/TLS
compression in Python 2 (see `CRIME attack`_).
If you want to configure the default list of supported cipher suites, you can
set the ``urllib3.contrib.pyopenssl.DEFAULT_SSL_CIPHER_LIST`` variable.
Module Variables
----------------
:var DEFAULT_SSL_CIPHER_LIST: The list of supported SSL/TLS cipher suites.
.. _sni: https://en.wikipedia.org/wiki/Server_Name_Indication
.. _crime attack: https://en.wikipedia.org/wiki/CRIME_(security_exploit)
é )Úabsolute_import)ÚSUBJ_ALT_NAME_SUPPORT)ÚSubjectAltNameN)Údecoder)ÚunivÚ
constraint)ÚtimeoutÚerror)Ú _fileobject)Úbackport_makefileé )Ú
connection)ÚutilÚinject_into_urllib3Úextract_from_urllib3ÚPROTOCOL_TLSv1_1ÚTLSv1_1_METHODÚPROTOCOL_TLSv1_2ÚTLSv1_2_METHODÚasciii @ c C s t t _ t t _ d t _ d S)z7Monkey-patch urllib3 with PyOpenSSL-backed SSL-support.TN)Ússl_wrap_socketr
ÚHAS_SNIr Ú IS_PYOPENSSL© r r ú
/pyopenssl.pyr n s c C s t t _ t t _ d t _ d S)z4Undo monkey-patching by :func:`inject_into_urllib3`.FN)Ú orig_connection_ssl_wrap_socketr
r Úorig_util_HAS_SNIr r r r r r r r v s c @ s2 e Z d Z d Z e j j e j d d ƒ Z d S)r z0ASN.1 implementation for subjectAltNames supporté i N) Ú__name__Ú
__module__Ú __qualname__Ú__doc__r Z
SequenceOfZsizeSpecr ZValueSizeConstraintr r r r r s r c C s g } t s | St ƒ } xâ t | j ƒ ƒ D]Î } | j | ƒ } | j ƒ } | d k r\ q, | j ƒ } t j | d | ƒ} xz | D]r } t | t ƒ sœ q„ xW t t
| ƒ ƒ D]C } | j | ƒ }
|
j ƒ d k rÙ q¯ | j
t |
j ƒ ƒ ƒ q¯ Wq„ Wq, W| S)Ns subjectAltNameZasn1SpecZdNSName)r r ÚrangeZget_extension_countÚ
get_extensionZget_short_nameÚget_dataÚ der_decoderÚdecodeÚ
isinstanceÚlenZgetComponentByPositionÚgetNameÚappendÚstrZ getComponent) Z peer_certZdns_nameZ
general_namesÚiÚextZext_nameZext_datZ decoded_datÚnameÚentryZ componentr r r Úget_subj_alt_nameŠ s*
%r0 c @ s¸ e Z d Z d Z d d d „ Z d d „ Z d d „ Z d d
„ Z d d „ Z d
d „ Z d d „ Z
d d „ Z d d „ Z d d „ Z
d d d „ Z d d „ Z d d „ Z d S) Ú
WrappedSocketz§API-compatibility wrapper for Python OpenSSL's Connection-class.
Note: _makefile_refs, _drop() and _reuse() are needed for the garbage
collector of pypy.
Tc C s1 | | _ | | _ | | _ d | _ d | _ d S)Nr F)r
ÚsocketÚsuppress_ragged_eofsÚ_makefile_refsÚ_closed)Úselfr
r2 r3 r r r Ú__init__¯ s
zWrappedSocket.__init__c C s
| j j ƒ S)N)r2 Úfileno)r6 r r r r8 ¶ s zWrappedSocket.filenoc C s5 | j d k r | j d 8_ | j r1 | j ƒ d S)Nr r )r4 r5 Úclose)r6 r r r Ú_decref_socketiosº s z WrappedSocket._decref_socketiosc O s5 y | j j | | Ž } Wnt j j k
rt } z3 | j rP | j d k rP d St t | ƒ ƒ ‚ WYd d } ~ Xn½ t j j k
rÀ } z' | j j
ƒ t j j k r« d S‚ WYd d } ~ Xnq t j j k
r,t
j
| j g g g | j j ƒ ƒ \ } } } | st d ƒ ‚ n | j | | Ž SYn X| Sd S)Nr úUnexpected EOFó z The read operation timed outéÿÿÿÿ)r= r; )r
ÚrecvÚOpenSSLÚSSLÚ SysCallErrorr3 ÚargsÚ SocketErrorr+ ÚZeroReturnErrorÚ get_shutdownÚRECEIVED_SHUTDOWNÚ
WantReadErrorÚselectr2 Ú
gettimeoutr )r6 rB ÚkwargsÚdataÚeÚrdÚwdÚedr r r r> À s" $*zWrappedSocket.recvc O s/ y | j j | | Ž SWnt j j k
rr } z3 | j rN | j d k rN d St t | ƒ ƒ ‚ WYd d } ~ Xn¹ t j j k
r¾ } z' | j j
ƒ t j j k r© d S‚ WYd d } ~ Xnm t j j k
r*t
j
| j g g g | j j ƒ ƒ \ } } } | st d ƒ ‚ n | j | | Ž SYn Xd S)Nr úUnexpected EOFr z The read operation timed outr= )r= rP )r
Ú recv_intor? r@ rA r3 rB rC r+ rD rE rF rG rH r2 rI r )r6 rB rJ rL rM rN rO r r r rQ × s $*zWrappedSocket.recv_intoc C s | j j | ƒ S)N)r2 Ú
settimeout)r6 r r r r rR ì s zWrappedSocket.settimeoutc C s| xu y | j j | ƒ SWq t j j k
rs t j g | j g g | j j ƒ ƒ \ } } } | sl t ƒ ‚ w Yq Xq Wd S)N) r
Úsendr? r@ ZWantWriteErrorrH r2 rI r )r6 rK Ú_Zwlistr r r Ú_send_until_doneï s z WrappedSocket._send_until_donec C sJ d } x= | t | ƒ k rE | j | | | t … ƒ } | | 7} q Wd S)Nr )r( rU ÚSSL_WRITE_BLOCKSIZE)r6 rK Ú
total_sentÚsentr r r Úsendallú s zWrappedSocket.sendallc C s | j j ƒ d S)N)r
Úshutdown)r6 r r r rZ s zWrappedSocket.shutdownc C s^ | j d k rK y d | _ | j j ƒ SWqZ t j j k
rG d SYqZ Xn | j d 8_ d S)Nr T)r4 r5 r
r9 r? r@ ÚError)r6 r r r r9 s zWrappedSocket.closeFc C sp | j j ƒ } | s | S| r8 t j j t j j | ƒ Sd d | j ƒ j f f f d d d „ t | ƒ Dƒ i S)NZsubjectZ
commonNameZsubjectAltNamec S s g | ] } d | f ‘ q S)ZDNSr )Ú.0Úvaluer r r ú
<listcomp> s z-WrappedSocket.getpeercert.<locals>.<listcomp>) r
Zget_peer_certificater? ZcryptoZdump_certificateZ
FILETYPE_ASN1Z get_subjectZCNr0 )r6 Z binary_formÚx509r r r Ú getpeercert s zWrappedSocket.getpeercertc C s | j d 7_ d S)Nr )r4 )r6 r r r Ú_reuse# s zWrappedSocket._reusec C s/ | j d k r | j ƒ n | j d 8_ d S)Nr )r4 r9 )r6 r r r Ú_drop& s
zWrappedSocket._dropN)r r r r! r7 r8 r: r> rQ rR rU rY rZ r9 r` ra rb r r r r r1 ¨ s
r1 r c C s% | j d 7_ t | | | d d ƒS)Nr r9 T)r4 r
)r6 ÚmodeÚbufsizer r r Úmakefile. s re c C s
| d k S)Nr r )Úcnxr_ Zerr_noZ err_depthZ return_coder r r Ú_verify_callback7 s rg c C s t j j t | ƒ } | r5 | p% | } | j | ƒ | rH | j | ƒ | t j k rk | j t | t
ƒ | sw | rÒ y | j | | ƒ WqÜ t j j k
rÎ } z t j
d | | ƒ ‚ WYd d } ~ XqÜ Xn
| j ƒ d }
| j |
ƒ | j t ƒ t j j | | ƒ } t | t j ƒ r2| j d ƒ } | j | ƒ | j ƒ xª y | j ƒ Wn” t j j k
r³t j | g g g | j ƒ ƒ \ } }
}
| s¬t d ƒ ‚ wLYn> t j j k
rð} z t j
d | ƒ ‚ WYd d } ~ Xn XPqLWt | | ƒ S)Nzbad ca_certs: %ri zutf-8zselect timed outzbad handshake: %r) r? r@ ZContextÚ_openssl_versionsZuse_certificate_fileZuse_privatekey_fileÚsslÚ CERT_NONEZ
set_verifyÚ_openssl_verifyrg Zload_verify_locationsr[ ZSSLErrorZset_default_verify_pathsZ set_optionsZset_cipher_listÚDEFAULT_SSL_CIPHER_LISTÚ
Connectionr' ÚsixZ text_typeÚencodeZset_tlsext_host_nameZset_connect_stateZ do_handshakerG rH rI r r1 )ÚsockZkeyfileZcertfileZ cert_reqsZca_certsZserver_hostnameZ ssl_versionZ ca_cert_dirÚctxrL ZOP_NO_COMPRESSIONrf rM rT r r r r ; sD
,
* &r r= )Gr! Z
__future__r Z%ndg.httpsclient.ssl_peer_verificationr Z ndg.httpsclient.subj_alt_namer ZBaseSubjectAltNameÚ SyntaxErrorrL Ú ImportErrorZ OpenSSL.SSLr? Zpyasn1.codec.derr r% Z pyasn1.typer r r2 r r rC r
Z#urllib3.packages.backports.makefiler ri rH rn Ú r
r Ú__all__r ZPROTOCOL_SSLv23r@ Z
SSLv23_METHODZPROTOCOL_TLSv1Z TLSv1_METHODrh Úhasattrr r r r ÚupdateZPROTOCOL_SSLv3Z SSLv3_METHODÚAttributeErrorrj Z VERIFY_NONEZ
CERT_OPTIONALZ VERIFY_PEERZ
CERT_REQUIREDZVERIFY_FAIL_IF_NO_PEER_CERTrk Zssl_ZDEFAULT_CIPHERSro rl rV r r r r r r0 Úobjectr1 re rg r r r r Ú<module>- sj
!!
…
Back to Directory
File Manager