|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /proc/self/root/usr/lib/python2.7/site-packages/urllib3/contrib/_securetransport/ |
Upload File : |
�
�J�bc @ s< d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m
Z
m Z m Z e j
d e j � Z d � Z d � Z d � Z d � Z d
� Z d d � Z d � Z d
� Z d � Z d � Z d � Z d � Z i d d 6d d 6d d 6d d 6d d 6Z d � Z d S( s�
Low-level helpers for the SecureTransport bindings.
These are Python functions that are not directly related to the high-level APIs
but are necessary to get them to work. They include a whole bunch of low-level
CoreFoundation messing about and memory management. The concerns in this module
are almost entirely about trying to avoid memory leaks and providing
appropriate and useful assistance to the higher-level code.
i����Ni ( t CFConstt CoreFoundationt Securitys; -----BEGIN CERTIFICATE-----
(.*?)
-----END CERTIFICATE-----c C s t j t j | t | � � S( sv
Given a bytestring, create a CFData object from it. This CFData object must
be CFReleased by the caller.
( R t CFDataCreatet kCFAllocatorDefaultt len( t
bytestring( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _cf_data_from_bytes s c C sw t | � } d � | D� } d � | D� } t j | | � } t j | | � } t j t j | | | t j t j � S( sK
Given a list of Python tuples, create an associated CFDictionary.
c s s | ] } | d Vq d S( i N( ( t .0t t( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pys <genexpr>, s c s s | ] } | d Vq d S( i N( ( R R ( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pys <genexpr>- s ( R R t CFTypeReft CFDictionaryCreateR t kCFTypeDictionaryKeyCallBackst kCFTypeDictionaryValueCallBacks( t tuplest dictionary_sizet keyst valuest cf_keyst cf_values( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _cf_dictionary_from_tuples% s c C s. t j | � } t j t j | t j � } | S( si
Given a Python binary data, create a CFString.
The string must be CFReleased by the caller.
( t ctypest c_char_pR t CFStringCreateWithCStringR R t kCFStringEncodingUTF8( t py_bstrt c_strt cf_str( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _cfstr; s c C s� d } y� t j t j d t j t j � � } | sB t d � � n xT | D]L } t | � } | sp t d � � n z t j | | � Wd t j
| � XqI WWn? t k
r� } | r� t j
| � n t j
d | f � � n X| S( s�
Given a list of Python binary data, create an associated CFMutableArray.
The array must be CFReleased by the caller.
Raises an ssl.SSLError on failure.
i s Unable to allocate memory!Ns Unable to allocate array: %s( t NoneR t CFArrayCreateMutableR R t byreft kCFTypeArrayCallBackst MemoryErrorR t CFArrayAppendValuet CFReleaset
BaseExceptiont sslt SSLError( t lstt cf_arrt itemR t e( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _create_cfstring_arrayI s(
c C s� t j | t j t j � � } t j | t j � } | d k r� t j d � } t j
| | d t j � } | s~ t d � � n | j } n | d k r� | j
d � } n | S( s�
Creates a Unicode string from a CFString object. Used entirely for error
reporting.
Yes, it annoys me quite a lot that this function is this complex.
i s' Error copying C string from CFStringRefs utf-8N( R t castt POINTERt c_void_pR t CFStringGetCStringPtrR R R t create_string_buffert CFStringGetCStringt OSErrort valuet decode( R3 t value_as_void_pt stringt buffert result( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _cf_string_to_unicodeh s c C s� | d k r d St j | d � } t | � } t j | � | d k sS | d k r` d | } n | d k rx t j } n | | � � d S( s[
Checks the return code and throws an exception if there is an error to
report
i Nu u OSStatus %s( R t SecCopyErrorMessageStringR R9 R R# R% R& ( t errort exception_classt cf_error_stringt output( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _assert_no_error� s
c C sR | j d d � } g t j | � D] } t j | j d � � ^ q" } | s^ t j d � � n t j t j
d t j t j
� � } | s� t j d � � n y� x� | D]� } t | � } | s� t j d � � n t j t j
| � } t j | � | st j d � � n t j | | � t j | � q� WWn! t k
rMt j | � � n X| S( s�
Given a bundle of certs in PEM format, turns them into a CFArray of certs
that can be used to validate a cert chain.
s
s
i s No root certificates specifiedi s Unable to allocate memory!s Unable to build cert object!( t replacet
_PEM_CERTS_REt finditert base64t b64decodet groupR% R& R R R R R R R R t SecCertificateCreateWithDataR# R" t Exception( t
pem_bundlet matcht der_certst
cert_arrayt der_bytest certdatat cert( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _cert_array_from_pem� s4 4
c C s t j � } t j | � | k S( s=
Returns True if a given CFTypeRef is a certificate.
( R t SecCertificateGetTypeIDR t CFGetTypeID( R) t expected( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _is_cert� s c C s t j � } t j | � | k S( s;
Returns True if a given CFTypeRef is an identity.
( R t SecIdentityGetTypeIDR RQ ( R) RR ( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _is_identity� s c C s� t j d � } t j | d � j d � } t j | d � } t j � } t j j | | � j d � } t
j � } t
j | t
| � | t d t j | � � } t | � | | f S( s�
This function creates a temporary Mac keychain that we can use to work with
credentials. This keychain uses a one-time password and a temporary file to
store the data. We expect to have one keychain per socket. The returned
SecKeychainRef must be freed by the caller, including calling
SecKeychainDelete.
Returns a tuple of the SecKeychainRef and the path to the temporary
directory that contains it.
i( i s utf-8N( t ost urandomRC t b16encodeR4 t tempfilet mkdtempt patht joint encodeR t SecKeychainReft SecKeychainCreateR t FalseR R R R? ( t random_bytest filenamet passwordt
tempdirectoryt
keychain_patht keychaint status( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _temporary_keychain� s '
c C sk g } g } d } t | d � � } | j � } Wd QXzt j t j | t | � � } t j � } t j | d d d d d | t
j | � � } t | � t j
| � } x� t | � D] }
t j | |
� } t
j | t j � } t | � r t j | � | j | � q� t | � r� t j | � | j | � q� q� WWd | rSt j | � n t j | � X| | f S( s�
Given a single file, loads all the trust objects from it into arrays and
the keychain.
Returns a tuple of lists: the first list is a list of identities, the
second a list of certs.
t rbNi ( R t opent readR R R R t
CFArrayRefR t
SecItemImportR R R? t CFArrayGetCountt ranget CFArrayGetValueAtIndexR, R
RS t CFRetaint appendRU R# ( Rf R[ t certificatest
identitiest result_arrayt ft raw_filedatat filedataR8 t result_countt indexR) ( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _load_items_from_file� sB
c G sK g } g } d � | D� } z� x= | D]5 } t | | � \ } } | j | � | j | � q& W| s� t j � } t j | | d t j | � � } t | � | j | � t j
| j d � � n t j t j
d t j t j � � } x* t j | | � D] }
t j | |
� q� W| SWd x' t j | | � D] } t j
| � q/WXd S( s�
Load certificates and maybe keys from a number of files. Has the end goal
of returning a CFArray containing one SecIdentityRef, and then zero or more
SecCertificateRef objects, suitable for use as a client certificate trust
chain.
c s s | ] } | r | Vq d S( N( ( R R[ ( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pys <genexpr>R s i N( R{ t extendR t SecIdentityReft SecIdentityCreateWithCertificateR R R? Rr R R# t popR R R t itertoolst chainR" ( Rf t pathsRs Rt t file_patht new_identitiest new_certst new_identityRg t trust_chainR) t obj( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _load_client_cert_chain. s0
i i t SSLv2i t SSLv3t TLSv1s TLSv1.1s TLSv1.2c C sf t | \ } } d } d } t j d | | � } t | � } d } t j d | | | | � | } | S( s6
Builds a TLS alert record for an unknown CA.
i i0 s >BBi s >BBBH( t TLS_PROTOCOL_VERSIONSt structt packR ( t versiont ver_majt ver_mint severity_fatalt description_unknown_cat msgt msg_lent record_type_alertt record( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt _build_tls_unknown_ca_alert� s ( i i ( i i ( i i ( i i ( i i ( t __doc__RC R R� RV t reR% R� RY t bindingsR R R t compilet DOTALLRA R R R R+ R9 R R? RO RS RU Rh R{ R� R� R� ( ( ( sM /tmp/pip-install-spIB81/urllib3/urllib3/contrib/_securetransport/low_level.pyt <module> s<
. # 7 K