shell bypass 403
o
^ b�� �
@ s� d dl Z d dlZd dlmZ d dlmZmZm Z
d dl Z d dl m Z m
Z
mZ d dl mZmZmZ d dl mZmZmZmZmZmZmZ d dl mZmZ d dl m Z m Z m Z m Z zd d l m!Z! W n e"yh Y nw d d
l m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, d d l m-Z-m.Z. ej/d e0d
d� e d� e
j/de0dd� e d� ej/de0dd� e d� ej/de0dd� e d� e
j/de0dd� e d� ej/de0dd� e d� e1j2 Z3e1_3dd� e1j4�5� D �Z6e7e1d d�Z8G d d � d e�Z9G d d � d e�Z:G d!d"� d"e�Z;G d#d$� d$e�Z<e j=d%k�rd d&l m>Z>m?Z? d d'l@m@Z@mAZAmBZB d d(l@mCZCmDZDmEZE d dl@ZFd dlGZGd dlHZHd dlIZIeJZKd)gZLeMe d*�ZNe-ZOeZPd+d,� ZQd-d.� ZRd/d0� ZSd1d2� ZTed3d4�ZUd5d6� ZVG d7d8� d8ed8d9��ZWG d:d;� d;eWe�ZXG d<d=� d=e�ZYeXjZfdddd>�d?d@�Z[dZe\dAeXjZddddddB�dCdD�Z]e[Z^e]Z_G dEdF� dF�Z`dGdH� ZaG dIdJ� dJe@�ZbebeY_ce`eY_ddddAe\e2ddKdKdf dLdM�ZedNdO� ZfdPZgdQZhdRdS� ZidTdU� ZjekdeEfdVdW�ZldXdY� ZmdS )[� N)�
namedtuple)�Enum�IntEnum�IntFlag)�OPENSSL_VERSION_NUMBER�OPENSSL_VERSION_INFO�OPENSSL_VERSION)� _SSLContext� MemoryBIO�
SSLSession)�SSLError�SSLZeroReturnError�SSLWantReadError�SSLWantWriteError�SSLSyscallError� SSLEOFError�SSLCertVerificationError)�txt2obj�nid2obj)� RAND_status�RAND_add�
RAND_bytes�RAND_pseudo_bytes)�RAND_egd)
�HAS_SNI�HAS_ECDH�HAS_NPN�HAS_ALPN� HAS_SSLv2� HAS_SSLv3� HAS_TLSv1� HAS_TLSv1_1� HAS_TLSv1_2� HAS_TLSv1_3)�_DEFAULT_CIPHERS�_OPENSSL_API_VERSION�
_SSLMethodc C s | � d�o| dkS )NZ PROTOCOL_�PROTOCOL_SSLv23��
startswith��name� r, �,/usr/local/python-3.10/lib/python3.10/ssl.py�<lambda>| s r. )�source�Optionsc C �
| � d�S )NZOP_r( r* r, r, r- r. � �
ZAlertDescriptionc C r1 )NZALERT_DESCRIPTION_r( r* r, r, r- r. � r2 ZSSLErrorNumberc C r1 )NZ
SSL_ERROR_r( r* r, r, r- r. � r2 � VerifyFlagsc C r1 )NZVERIFY_r( r* r, r, r- r. � r2 �
VerifyModec C r1 )NZCERT_r( r* r, r, r- r. � r2 c C s i | ]\}}||�qS r, r, )�.0r+ �valuer, r, r- �
<dictcomp>� s r7 ZPROTOCOL_SSLv2c @ s6 e Zd ZejZejZejZ ej
Z ej Z
ejZejZdS )�
TLSVersionN)�__name__�
__module__� __qualname__�_sslZPROTO_MINIMUM_SUPPORTEDZMINIMUM_SUPPORTEDZ PROTO_SSLv3�SSLv3Z PROTO_TLSv1ZTLSv1Z
PROTO_TLSv1_1ZTLSv1_1Z
PROTO_TLSv1_2ZTLSv1_2Z
PROTO_TLSv1_3ZTLSv1_3ZPROTO_MAXIMUM_SUPPORTEDZMAXIMUM_SUPPORTEDr, r, r, r- r8 � s
r8 c @ s& e Zd Z dZdZdZdZdZdZdS )�_TLSContentType� � � � � � N) r9 r: r; �CHANGE_CIPHER_SPEC�ALERTZ HANDSHAKEZAPPLICATION_DATA�HEADERZINNER_CONTENT_TYPEr, r, r, r- r> � s r> c @ s� e Zd Z dZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Z!d Z"d!Z#d"Z$d#S )$�
_TLSAlertTyper �
r? r@ rA � �( �) �* �+ �, �- �. �/ �0 �1 �2 �3 �< �F �G �P �V �Z �d �m �n �o �p �q �r �s �t �x N)%r9 r: r; Z CLOSE_NOTIFYZUNEXPECTED_MESSAGEZBAD_RECORD_MACZDECRYPTION_FAILEDZRECORD_OVERFLOWZDECOMPRESSION_FAILUREZHANDSHAKE_FAILUREZNO_CERTIFICATEZBAD_CERTIFICATEZUNSUPPORTED_CERTIFICATEZCERTIFICATE_REVOKEDZCERTIFICATE_EXPIREDZCERTIFICATE_UNKNOWNZILLEGAL_PARAMETERZ
UNKNOWN_CAZ
ACCESS_DENIEDZ DECODE_ERRORZ
DECRYPT_ERRORZEXPORT_RESTRICTIONZPROTOCOL_VERSIONZINSUFFICIENT_SECURITYZINTERNAL_ERRORZINAPPROPRIATE_FALLBACKZ
USER_CANCELEDZNO_RENEGOTIATIONZMISSING_EXTENSIONZUNSUPPORTED_EXTENSIONZCERTIFICATE_UNOBTAINABLEZUNRECOGNIZED_NAMEZ BAD_CERTIFICATE_STATUS_RESPONSEZBAD_CERTIFICATE_HASH_VALUEZUNKNOWN_PSK_IDENTITYZCERTIFICATE_REQUIREDZNO_APPLICATION_PROTOCOLr, r, r, r- rH � sH rH c @ sf e Zd Z dZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdZdZdZdZdZdZdZdZdS )�_TLSMessageTyper � � � � � � � � � �
� � � r? r@ rA rB � �C � rD N)r9 r: r; Z
HELLO_REQUESTZ CLIENT_HELLOZ SERVER_HELLOZHELLO_VERIFY_REQUESTZNEWSESSION_TICKETZEND_OF_EARLY_DATAZHELLO_RETRY_REQUESTZENCRYPTED_EXTENSIONSZ CERTIFICATEZSERVER_KEY_EXCHANGEZCERTIFICATE_REQUESTZ SERVER_DONEZCERTIFICATE_VERIFYZCLIENT_KEY_EXCHANGE�FINISHEDZCERTIFICATE_URLZCERTIFICATE_STATUSZSUPPLEMENTAL_DATAZ
KEY_UPDATEZ
NEXT_PROTOZ MESSAGE_HASHrE r, r, r, r- rg � s0 rg �win32)�enum_certificates� enum_crls)�socket� SOCK_STREAM�create_connection)�
SOL_SOCKET�SO_TYPE�_GLOBAL_DEFAULT_TIMEOUT�
tls-unique� HOSTFLAG_NEVER_CHECK_SUBJECTc C s� | sdS | � d�}|s| �� |�� kS |dkr td�| ���| �d�\}}}d|v r2td�| ���|s;td�| ���|dkrFtd�| ���|�d�\}}}|rR|sTdS |�� |�� kS ) NF�*rh z1too many wildcards in certificate DNS name: {!r}.�.z9wildcard can only be present in the leftmost label: {!r}.z>sole wildcard without additional labels are not support: {!r}.z<partial wildcards in leftmost label are not supported: {!r}.)�count�lower�CertificateError�format� partition)Zdn�hostnameZ wildcardsZ dn_leftmost�sepZ dn_remainderZhostname_leftmostZhostname_remainderr, r, r- �_dnsname_match s<
����r� c C s� zt �| �}W n ty Y nw t �|�| kr|S td�| ���zt �t j| �W S ty8 td�| ��� ty@ Y nw td�| ���)Nz'{!r} is not a quad-dotted IPv4 address.z+{!r} is neither an IPv4 nor an IP6 address.z {!r} is not an IPv4 address.) �_socket� inet_aton�OSError� inet_ntoa�
ValueErrorr� � inet_pton�AF_INET6�AttributeError)Zipname�addrr, r, r- � _inet_patonD s* �� � �r� c C s t | �� �}||kS �N)r� �rstrip)Zcert_ipaddress�host_ipZipr, r, r- �_ipaddress_matchg s r� c C sN t jdtdd� | std��zt|�}W n ty d }Y nw g }| �dd�}|D ]/\}}|dkrE|d u r?t||�r? d S |�|� q+|dkrZ|d urUt||�rU d S |�|� q+|s| �d d�D ]}|D ]\}}|d
kr}t||�rx d S |�|� qgqct |�d kr�t
d |d
� t t
|��f ��t |�d kr�t
d||d f ��t
d��)Nz"ssl.match_hostname() is deprecatedri ��category�
stacklevelztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDZsubjectAltNamer, ZDNSz
IP Address�subjectZ
commonNamerh z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found)�warnings�warn�DeprecationWarningr� r� �getr� �appendr� �lenr� �join�map�repr)�certr� r� ZdnsnamesZsan�keyr6 �subr, r, r- �match_hostnames sV � �
�
�� �
�r� �DefaultVerifyPathszQcafile capath openssl_cafile_env openssl_cafile openssl_capath_env openssl_capathc C sh t �� } tj�| d | d �}tj�| d | d �}ttj�|�r$|nd tj�|�r-|nd g| �R � S )Nr rh ri rj ) r< �get_default_verify_paths�os�environr� r� �path�isfile�isdir)�parts�cafile�capathr, r, r- r� � s ��r� c sB e Zd Z dZ� fdd�Ze� fdd��Ze� fdd��Z� ZS )� _ASN1Objectr, c s t � j| gt|dd��R � S )NFr* ��super�__new__�_txt2obj)�cls�oid�� __class__r, r- r� � s z_ASN1Object.__new__c s t � j| gt|��R � S r� )r� r� �_nid2obj)r� Znidr� r, r- �fromnid� s z_ASN1Object.fromnidc s t � j| gt|dd��R � S )NTr* r� )r� r+ r� r, r- �fromname� s z_ASN1Object.fromname) r9 r: r; � __slots__r� � classmethodr� r� �
__classcell__r, r, r� r- r� � s r� znid shortname longname oidc @ s e Zd Z dZdZdS )�Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)r9 r: r; � SERVER_AUTH� CLIENT_AUTHr, r, r, r- r� � s r� c s� e Zd Z dZdZdZd1dd�Zdd� Z d2d d
�Z d3d d �Z d
d� Z
dd� Z dd� Z dd� Z
ejfdd�Zeed�rbe� fdd��Zej� fdd��Ze� fdd ��Zej� fd d ��Ze� fd d ��Zej� fd d ��Zeed!�r�ed"d#� �Zejd$d#� �Zned%d#� �Ze� fd&d'��Zej� fd(d'��Ze� fd)d*��Ze� fd+d,��Z e j� fd-d,��Z e� fd.d/��Z e j� fd0d/��Z � Z S )4�
SSLContext)ZCAZROOTNc O s, |d u rt jdtdd� t}t�| |�}|S )Nz9ssl.SSLContext() without protocol argument is deprecated.ri r� )r� r� r� � PROTOCOL_TLSr r� )r� �protocol�args�kwargs�selfr, r, r- r� � s � zSSLContext.__new__c C s0 |d u rd S t |t�r|�d��d�S |�d�S )NZidna�ascii)�
isinstance�str�encode�decode)r� r� r, r, r- �_encode_hostname� s
zSSLContext._encode_hostnameFTc C s | j j|||||| |d�S )N)�sock� server_side�do_handshake_on_connect�suppress_ragged_eofs�server_hostname�context�session)�sslsocket_class�_create)r� r� r� r� r� r� r� r, r, r- � wrap_socket� s �zSSLContext.wrap_socketc C s | j j|||| �|�|| d�S )N)r� r� r� r� )�sslobject_classr� r� )r� �incoming�outgoingr� r� r� r, r, r- �wrap_bio
s
�zSSLContext.wrap_bioc C sp t jdtdd� t� }|D ]#}t|d�}t|�dks t|�dkr$td��|�t|�� |�|� q
| � |� d S )N�'ssl NPN is deprecated, use ALPN insteadri �r� r� r � z(NPN protocols must be 1 to 255 in length)
r� r� r� � bytearray�bytesr� r r� �extendZ_set_npn_protocols)r� Z
npn_protocols�protosr� �br, r, r- �set_npn_protocols s �
z SSLContext.set_npn_protocolsc s: �d u r d � _ d S t��std��� �fdd�}|� _ d S )Nznot a callable objectc s � � |�}�| ||�S r� )r� )�sslobjZ
servernameZsslctx�r� �server_name_callbackr, r- �shim_cb+ s
z3SSLContext.set_servername_callback.<locals>.shim_cb)Z sni_callback�callable� TypeError)r� r� r� r, r� r- �set_servername_callback$ s
z"SSLContext.set_servername_callbackc C s` t � }|D ]#}t|d�}t|�dkst|�dkr td��|�t|�� |�|� q| �|� d S )Nr� r r� z)ALPN protocols must be 1 to 255 in length)r� r� r� r r� r� Z_set_alpn_protocols)r� Zalpn_protocolsr� r� r� r, r, r- �set_alpn_protocols1 s
z SSLContext.set_alpn_protocolsc C st t � }z t|�D ]\}}}|dkr |du s|j|v r |�|� qW n ty/ t�d� Y nw |r8| j|d� |S )NZx509_asnTz-unable to enumerate Windows certificate store)�cadata)r� rz r� r� �PermissionErrorr� r� �load_verify_locations)r� � storename�purposeZcertsr� �encodingZtrustr, r, r- �_load_windows_store_certs< s
�� � z$SSLContext._load_windows_store_certsc C s@ t |t�s t|��tjdkr| jD ]}| �||� q| �� d S )Nry )r� r� r� �sys�platform�_windows_cert_storesr� Zset_default_verify_paths)r� r� r� r, r, r- �load_default_certsJ s
z SSLContext.load_default_certs�minimum_versionc � t t� j�S r� )r8 r� r� �r� r� r, r- r� S � zSSLContext.minimum_versionc s4 |t jkr| jtj M _ttt�j�| |� d S r� ) r8 r= �optionsr0 Z OP_NO_SSLv3r� r� r� �__set__�r� r6 r� r, r- r� W s
c r r� )r8 r� �maximum_versionr r� r, r- r ] r zSSLContext.maximum_versionc � t tt�j�| |� d S r� )r� r� r r r r� r, r- r a � c r r� )r0 r� r r r� r, r- r e r zSSLContext.optionsc r r� )r� r� r r r r� r, r- r i r r� c C s | j tj@ }|tjkS r� �Z _host_flagsr< r� )r� Zncsr, r, r- �hostname_checks_common_namen s
z&SSLContext.hostname_checks_common_namec C s. |r
| j tj M _ d S | j tjO _ d S r� r r r, r, r- r
s s c C s dS �NTr, r r, r, r- r
z � c s t � j}|d ur |jS d S r� )r� �
_msg_callback�
user_function)r� �innerr� r, r- r
~ s
zSSLContext._msg_callbackc sb � d u rt tt�j�| d � d S t� d�s t� � d���� fdd�}� |_t tt�j�| |� d S )N�__call__z is not callable.c s� zt |�}W n ty Y nw zt|�}W n ty Y nw |tjkr(t}n
|tjkr0t}nt}z||�}W n tyA Y nw � | |||||�S r� )r8 r� r> rG rF rH rg )�conn� direction�versionZ content_typeZmsg_type�dataZmsg_enum��callbackr, r- r � s. � �
��z'SSLContext._msg_callback.<locals>.inner)r� r� r
r �hasattrr� r )r� r r r� r r- r
� s
c r r� )r& r� r� r r� r, r- r� � r zSSLContext.protocolc r r� )r3 r� � verify_flagsr r� r, r- r � r zSSLContext.verify_flagsc r r� )r� r� r r r r� r, r- r � r c s* t � j}zt|�W S ty | Y S w r� )r� � verify_moder4 r� r r� r, r- r � s
�zSSLContext.verify_modec r r� )r� r� r r r r� r, r- r � r r� )FTTNN)FNN) r9 r: r; r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r �propertyr� �setterr r r< r
r
r� r r r� r, r, r� r- r� � sl
�
�
&%r� )r� r� r� c C s� t | t�s
t| ��| tjkrtt�}t|_d|_ n| tj
kr$tt �}nt | ��|s.|s.|r6|�
|||� n
|jtkr@|�| � t|d�rTtj�d�}|rTtjjsT||_|S )NT�keylog_filename�
SSLKEYLOGFILE)r� r� r� r� r� r� �PROTOCOL_TLS_CLIENT�
CERT_REQUIREDr �check_hostnamer� �PROTOCOL_TLS_SERVERr� r� � CERT_NONEr� r r� r� r� r� �flags�ignore_environmentr )r� r� r� r� r� �
keylogfiler, r, r- �create_default_context� s&
r& F)� cert_reqsr r� �certfile�keyfiler� r� r� c C s� t |t�s
t|��|tjkr| d u rt} n|tjkr"| d u r!t} nt|��t | �} || _
|d ur4|| _ |r9d| _
|rA|sAtd��|sE|rK| � ||� |sQ|sQ|rY| �
|||� n
| j tkrc| �|� t| d�rwtj�d�}
|
rwtjjsw|
| _| S )NT�certfile must be specifiedr r )r� r� r� r� r� r r� r! r� r� r r �load_cert_chainr� r" r� r r� r� r� r� r# r$ r ) r� r' r r� r( r) r� r� r� r� r% r, r, r- �_create_unverified_context
s>
�
�
r, c @ s� e Zd Z dd� Ze d1dd��Zedd� �Zejd d� �Zed
d � �Z e jd d � �Z ed
d� �Z
edd� �Z edd� �Z d2dd�Z
dd� Zd3dd�Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd4d+d,�Zd-d.� Zd/d0� ZdS )5� SSLObjectc O � t | jj� d���)NzU does not have a public constructor. Instances are returned by SSLContext.wrap_bio().�r� r� r9 �r� r� r� r, r, r- �__init__W � �zSSLObject.__init__FNc C s* | � | �}|j||||||d�}||_|S )N)r� r� �ownerr� )r� Z _wrap_bio�_sslobj) r� r� r� r� r� r� r� r� r� r, r, r- r� ] s
�zSSLObject._createc C �
| j jS r� �r4 r� r r, r, r- r� i � zSSLObject.contextc C � || j _d S r� r6 �r� �ctxr, r, r- r� n r c C r5 r� �r4 r� r r, r, r- r� r r7 zSSLObject.sessionc C r8 r� r; �r� r� r, r, r- r� w r c C r5 r� �r4 �session_reusedr r, r, r- r> { r7 zSSLObject.session_reusedc C r5 r� )r4 r� r r, r, r- r� � r7 zSSLObject.server_sidec C r5 r� )r4 r� r r, r, r- r� � s zSSLObject.server_hostname� c C s, |d ur| j �||�}|S | j �|�}|S r� )r4 �read)r� r� �buffer�vr, r, r- r@ � s �zSSLObject.readc C � | j �|�S r� )r4 �write�r� r r, r, r- rD � s zSSLObject.writec C rC r� )r4 � getpeercert�r� Z binary_formr, r, r- rF � s zSSLObject.getpeercertc C s t jdtdd� d S �Nr� ri r� )r� r� r� r r, r, r- �selected_npn_protocol� s
�z SSLObject.selected_npn_protocolc C � | j �� S r� )r4 �selected_alpn_protocolr r, r, r- rK � �
z SSLObject.selected_alpn_protocolc C rJ r� )r4 �cipherr r, r, r- rM � �
zSSLObject.cipherc C rJ r� )r4 �shared_ciphersr r, r, r- rO � rL zSSLObject.shared_ciphersc C rJ r� )r4 � compressionr r, r, r- rP � rN zSSLObject.compressionc C rJ r� )r4 �pendingr r, r, r- rQ � �
zSSLObject.pendingc C s | j �� d S r� )r4 � do_handshaker r, r, r- rS � s zSSLObject.do_handshakec C rJ r� )r4 �shutdownr r, r, r- �unwrap� rR zSSLObject.unwrapr� c C rC r� )r4 �get_channel_binding�r� Zcb_typer, r, r- rV � s z SSLObject.get_channel_bindingc C rJ r� �r4 r r r, r, r- r � rN zSSLObject.versionc C s
| j �� S r� )r4 � verify_client_post_handshaker r, r, r- rY � s
z&SSLObject.verify_client_post_handshake)FNNN�r? N�F�r� )r9 r: r; r1 r� r� r r� r r� r> r� r� r@ rD rF rI rK rM rO rP rQ rS rU rV r rY r, r, r, r- r- H sF �
r- c C s t t| j�j| _| S r� )�getattrr- r9 �__doc__)�funcr, r, r- � _sslcopydoc� s r` c s e Zd Z dd� Ze dW� fdd� �Zeedd � ��Zej d
d � �Zeed d � ��Z
e
j d
d � �Z
eedd� ��Z dd� Z dXdd�Z
dd� ZdYdd�Zdd� ZedZdd ��Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zd[� fd(d)� ZdX� fd*d+� Zd,d-� Zd[� fd.d/� Zd\� fd0d1� Zd]� fd2d3� Z d^� fd4d5� Z d]� fd6d7� Z d^� fd8d9� Z d:d;� Z d<d=� Z!ed>d?� �Z"� fd@dA�Z#edBdC� �Z$edDdE� �Z%� fdFdG�Z&edZdHdI��Z'� fdJdK�Z(dLdM� Z)dNdO� Z*� fdPdQ�Z+ed_dSdT��Z,edUdV� �Z-� Z.S )`� SSLSocketc O r. )NzX does not have a public constructor. Instances are returned by SSLContext.wrap_socket().r/ r0 r, r, r- r1 � r2 zSSLSocket.__init__FTNc
s� |� tt�tkr td��|r |rtd��|d ur td��|jr%|s%td��t|j|j |j
|� � d�}| j | fi |��} t
t| �jd i |�� | �|�� � |�� || _|| _d| _d | _|| _|�|�| _|| _|| _z| � � W n t y� }
z|
j t j kr�� d} W Y d }
~
nd }
~
ww d} | | _ | r�z&| jj!| || j| | jd�| _|r�| �� } | d kr�td
��| �"� W | S W | S t tfy� | �#� � w | S ) Nz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostname)�family�type�proto�filenoFT�r3 r� � zHdo_handshake_on_connect should not be specified for non-blocking socketsr, )$�
getsockoptr r� r} �NotImplementedErrorr� r �dictrb rc rd re r� r� ra r1 �
settimeout�
gettimeout�detach�_context�_session�_closedr4 r� r� r� r� r� � getpeernamer� �errnoZENOTCONN�
_connected� _wrap_socketrS �close)
r� r� r� r� r� r� r� r� r� r� �eZ connected�timeoutr� r, r- r� � sl
� ���
� ��zSSLSocket._createc C s | j S r� )rn r r, r, r- r� 4 s zSSLSocket.contextc C s || _ || j_d S r� )rn r4 r� r9 r, r, r- r� 9 s c C � | j d ur | j jS d S r� r; r r, r, r- r� > �
�zSSLSocket.sessionc C s || _ | jd ur|| j_d S d S r� )ro r4 r� r< r, r, r- r� D s
�c C rx r� r= r r, r, r- r> J ry zSSLSocket.session_reusedc C s t d| jj ��)NzCan't dup() %s instances)ri r� r9 r r, r, r- �dupP s �z
SSLSocket.dupc C s d S r� r, )r� �msgr, r, r- � _checkClosedT r zSSLSocket._checkClosedc C s | j s | �� d S d S r� )rs rq r r, r, r- �_check_connectedX s �zSSLSocket._check_connectedr? c
C s� | � � | jd u rtd��z|d ur| j�||�W S | j�|�W S tyJ } z |jd tkrE| jrE|d ur>W Y d }~dS W Y d }~dS � d }~ww )Nz'Read on closed or unwrapped SSL socket.r � )r| r4 r� r@ r r� Z
SSL_ERROR_EOFr� )r� r� rA �xr, r, r- r@ ` s
��zSSLSocket.readc C s( | � � | jd u rtd��| j�|�S )Nz(Write on closed or unwrapped SSL socket.)r| r4 r� rD rE r, r, r- rD u s
zSSLSocket.writec C s | � � | �� | j�|�S r� )r| r} r4 rF rG r, r, r- rF ~ s zSSLSocket.getpeercertc C s | � � tjdtdd� d S rH )r| r� r� r� r r, r, r- rI � s �z SSLSocket.selected_npn_protocolc C s& | � � | jd u s tjsd S | j�� S r� )r| r4 r< r rK r r, r, r- rK � s
z SSLSocket.selected_alpn_protocolc C � | � � | jd u r d S | j�� S r� )r| r4 rM r r, r, r- rM � �
zSSLSocket.cipherc C r� r� )r| r4 rO r r, r, r- rO � r� zSSLSocket.shared_ciphersc C r� r� )r| r4 rP r r, r, r- rP � r� zSSLSocket.compressionr c sB | � � | jd ur|dkrtd| j ��| j�|�S t� �||�S )Nr z3non-zero flags not allowed in calls to send() on %s)r| r4 r� r� rD r� �send)r� r r# r� r, r- r� � s
�� zSSLSocket.sendc sF | � � | jd urtd| j ��|d u rt� �||�S t� �|||�S )Nz%sendto not allowed on instances of %s)r| r4 r� r� r� �sendto)r� r Z
flags_or_addrr� r� r, r- r� � s
�zSSLSocket.sendtoc O � t d| j ��)Nz&sendmsg not allowed on instances of %s�ri r� r0 r, r, r- �sendmsg� s �zSSLSocket.sendmsgc s� | � � | jd urc|dkrtd| j ��d}t|��?}|�d��!}t|�}||k r:| �||d � �}||7 }||k s)W d � n1 sDw Y W d � d S W d � d S 1 s\w Y d S t� � ||�S )Nr z6non-zero flags not allowed in calls to sendall() on %s�B)
r| r4 r� r� �
memoryview�castr� r� r� �sendall)r� r r# r� �view� byte_view�amountrB r� r, r- r� � s$
����P�zSSLSocket.sendallc s* | j d ur
| �|||�S t� �|||�S r� )r4 �_sendfile_use_sendr� �sendfile)r� �file�offsetr� r� r, r- r� � s
zSSLSocket.sendfilec s@ | � � | jd ur|dkrtd| j ��| �|�S t� �||�S )Nr z3non-zero flags not allowed in calls to recv() on %s)r| r4 r� r� r@ r� �recv�r� �buflenr# r� r, r- r� � s
��
zSSLSocket.recvc sf | � � |r|d u rt|�}n|d u rd}| jd ur+|dkr%td| j ��| �||�S t� �|||�S )Nr? r z8non-zero flags not allowed in calls to recv_into() on %s)r| r� r4 r� r� r@ r� � recv_into�r� rA �nbytesr# r� r, r- r� � s
�� zSSLSocket.recv_intoc s. | � � | jd urtd| j ��t� �||�S )Nz'recvfrom not allowed on instances of %s)r| r4 r� r� r� �recvfromr� r� r, r- r� � s
�zSSLSocket.recvfromc s0 | � � | jd urtd| j ��t� �|||�S )Nz,recvfrom_into not allowed on instances of %s)r| r4 r� r� r� �
recvfrom_intor� r� r, r- r� s
�zSSLSocket.recvfrom_intoc O r� )Nz&recvmsg not allowed on instances of %sr� r0 r, r, r- �recvmsg
� �zSSLSocket.recvmsgc O r� )Nz+recvmsg_into not allowed on instances of %sr� r0 r, r, r- � recvmsg_into r� zSSLSocket.recvmsg_intoc C s | � � | jd ur| j�� S dS �Nr )r| r4 rQ r r, r, r- rQ s
zSSLSocket.pendingc s | � � d | _t� �|� d S r� )r| r4 r� rT )r� �howr� r, r- rT s zSSLSocket.shutdownc C s* | j r
| j �� }d | _ |S tdt| � ���NzNo SSL wrapper around )r4 rT r� r� )r� �sr, r, r- rU " s
zSSLSocket.unwrapc C s | j r| j �� S tdt| � ��r� )r4 rY r� r� r r, r, r- rY + s
z&SSLSocket.verify_client_post_handshakec s d | _ t� �� d S r� )r4 r� � _real_closer r� r, r- r� 2 s zSSLSocket._real_closec C sN | � � | �� }z|dkr|r| �d � | j�� W | �|� d S | �|� w )Nrg )r} rl rk r4 rS )r� �blockrw r, r, r- rS 6 s
zSSLSocket.do_handshakec s� | j rtd��| js| jd urtd��| jj| d| j| | jd�| _z |r+t� � |�}nd }t� �
|� |s?d| _| j r?| � � |W S t
tfyN d | _� w )Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!Frf T)r� r� rs r4 r� rt r� ro r� �
connect_ex�connectr� rS r� )r� r� r� �rcr� r, r- �
_real_connectA s, � �zSSLSocket._real_connectc C s | � |d� d S )NF�r� �r� r� r, r, r- r� [ s zSSLSocket.connectc C s | � |d�S r r� r� r, r, r- r� ` s zSSLSocket.connect_exc s0 t � �� \}}| jj|| j| jdd�}||fS )NT)r� r� r� )r� �acceptr� r� r� r� )r� Znewsockr� r� r, r- r� e s �zSSLSocket.acceptr� c C s0 | j d ur | j �|�S |tvrtd�|���d S )Nz({0} channel binding type not implemented)r4 rV �CHANNEL_BINDING_TYPESr� r� rW r, r, r- rV q s
�z SSLSocket.get_channel_bindingc C s | j d ur
| j �� S d S r� rX r r, r, r- r | s
zSSLSocket.version)FTTNNNr� rZ r[ )r )r N)r? r r� r\ )/r9 r: r; r1 r� r� r r` r� r r� r> rz r| r} r@ rD rF rI rK rM rO rP r� r� r� r� r� r� r� r� r� r� r� rQ rT rU rY r� rS r� r� r� r� rV r r� r, r, r� r- ra � s� �>
ra Tc
C s| t jdtdd� |r|std��|r|std��t|�}
||
_|r&|
�|� |r.|
�||� | r5|
�| � |
j | |||d�S )Nz=ssl.wrap_socket() is deprecated, use SSLContext.wrap_socket()ri r� z5certfile must be specified for server-side operationsr* )r� r� r� r� )
r� r� r� r� r� r r� r+ Z set_ciphersr� ) r� r) r( r� r' � ssl_version�ca_certsr� r� Zciphersr� r, r, r- r� � s, �
�r� c C s� ddl m} ddlm} d}d}z|�| d d� �� �d }W n ty/ td| |f ��w || dd � |�}||d |f|d d
� �S ) Nr )�strptime)�timegm) ZJanZFebZMarZAprZMayZJunZJulZAugZSepZOctZNovZDecz %d %H:%M:%S %Y GMTrj rh z*time data %r does not match format "%%b%s"ri rm )�timer� Zcalendarr� �index�titler� )Z cert_timer� r� ZmonthsZ time_formatZ month_number�ttr, r, r- �cert_time_to_seconds� s �� r� z-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----c sT t t�| �dd�� tg}|� fdd�tdt� �d�D �7 }|�td � d�|�S )N�ASCII�strictc s g | ]
}� ||d � �qS )�@ r, )r5 �i��fr, r- �
<listcomp>� s z(DER_cert_to_PEM_cert.<locals>.<listcomp>r r� �
) r� �base64Zstandard_b64encode�
PEM_HEADER�ranger� r� �
PEM_FOOTERr� )Zder_cert_bytes�ssr, r� r- �DER_cert_to_PEM_cert� s "
r� c C s^ | � t�s tdt ��| �� �t�stdt ��| �� tt�tt� � }t�|� dd��S )Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %sr� r� )
r) r� r� �strip�endswithr� r� r� Z decodebytesr� )Zpem_cert_string�dr, r, r- �PEM_cert_to_DER_cert� s
��r� c C s� | \}}|d ur t }nt}t|||d�}t| |d��1}|j||d��
} | �d�}
W d � n1 s3w Y W d � t|
�S W d � t|
�S 1 sOw Y t|
�S )N)r' r� )rw )r� T)r r" �_create_stdlib_contextr~ r� rF r� ) r� r� r� rw �host�portr' r� r� ZsslsockZdercertr, r, r- �get_server_certificate� s( � �
��
��r� c C s t �| d�S )Nz <unknown>)�_PROTOCOL_NAMESr� )Z
protocol_coder, r, r- �get_protocol_name� s r� r� )nr� r� � collectionsr �enumr Z_Enumr �_IntEnumr Z_IntFlagr< r r r r r
r r r
r r r r r r r� r r� r r r r r � ImportErrorr r r r r r r r! r" r# r$ r% � _convert_r9 r& r� r' � __members__�itemsr� r] Z_SSLv2_IF_EXISTSr8 r> rH rg r� rz r{ r| r} r~ r r� r� r� r� rr r� r� Z socket_errorr� r ZHAS_NEVER_CHECK_COMMON_NAMEZ_RESTRICTED_SERVER_CIPHERSr� r� r� r� r� r� r� r� r� r� r� r& r" r, Z _create_default_https_contextr� r- r` ra r� r� r� r� r� r� r� r� r r� r� r, r, r, r- �<module> s� Y $ �0������
)
1# >� �& �7
�
�