File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/cheroot/ssl/__pycache__/builtin.cpython-310.pyc
Back
o ;jiC � @ s d Z ddlZddlZddlZddlmZ zddlZW n ey% dZY nw zddlm Z W n eyK zddl m Z W n eyH dZ Y nw Y nw ddl m Z ddl mZmZ dd lmZ d d l mZ d d � Zdd� Zdd�dd�Zdd�dd�Zdd� ZG dd� de�ZdS )z� A library for integrating Python's builtin :py:mod:`ssl` library with Cheroot. The :py:mod:`ssl` module must be importable for SSL functionality. To use this module, set ``HTTPServer.ssl_adapter`` to an instance of ``BuiltinSSLAdapter``. � N)�suppress)�DEFAULT_BUFFER_SIZE���� )�errors�� StreamReader� StreamWriter)� HTTPServer� )�Adapterc s6 t |�dk r td��t| ��� � t� fdd�|D ��S )zACheck whether SSL exception contains either of messages provided.r zF_assert_ssl_exc_contains() requires at least one message to be passed.c 3 s � | ] }|� � � v V qd S )N)�lower)�.0�m�Z err_msg_lower� �G/opt/saltstack/salt/lib/python3.10/site-packages/cheroot/ssl/builtin.py� <genexpr>+ s � z+_assert_ssl_exc_contains.<locals>.<genexpr>)�len� TypeError�strr �any)�excZmsgsr r r �_assert_ssl_exc_contains# s � r c C s| t tjt��. | j|ddd�� }|�d� W d � n1 s w Y W d � dS W d � dS 1 s7w Y dS )z;Wrap a socket in ssl and perform the server-side handshake.T��do_handshake_on_connect� server_sides 0000N)r �ssl�SSLError�OSError� wrap_socket�send)�context�server�ssl_sockr r r �_loopback_for_cert_thread. s � ��"�r% ��private_key_passwordc C s� t j|d�}|j| ||d� d|_t j|_t�� \}}zStj t ||fd�}z9|� � |j |ddd�� }|� d� |�� W d � W |�� W |�� |�� S 1 sTw Y W |�� n|�� w W |�� |�� dS |�� |�� w ) z@Create a loopback connection to parse a cert with a private key.)�cafile��passwordF)�target�argsTr � N)r �create_default_context�load_cert_chain�check_hostname� CERT_NONE� verify_mode�socket� socketpair� threading�Threadr% �startr �recv� getpeercert�join�close) � certificate� private_key�certificate_chainr' r" �clientr# �threadr$ r r r �_loopback_for_certO sD � �� � � � rA c C sv t ttjt�� t| |||d�W d � S 1 sw Y t t�� tj�| �W d � S 1 s4w Y i S )zParse a certificate.r& N) r �AttributeErrorr r r rA � Exception�_ssl�_test_decode_cert)r< r= r> r' r r r � _parse_cert} s � � �rF c C s || _ dS )z7Handle the SNI callback to tag the socket with the SNI.N)�sni)�sockrG r" r r r � _sni_callback� s rI c s� e Zd ZdZdZ dZ dZ dZ dZ ddddddd d �Z d d d ddddddddddd� Z d.dd�� fdd� Z e d d � �Z e jd d � �Z � fd d �Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+efd,d-�Z� ZS )/�BuiltinSSLAdapterzDWrapper for integrating Python's builtin :py:mod:`ssl` with Cheroot.NZ M_VERSIONZM_SERIALZV_STARTZV_ENDZS_DNZI_DN�SAN)�versionZ serialNumber� notBefore�notAfter�subjectZissuer�subjectAltName�CZST�L�OZOUZCN�T�I�G�S�DZUID�Email) Z countryNameZstateOrProvinceNameZ localityNameZorganizationNameZorganizationalUnitName� commonName�titleZinitialsZ givenNameZsurname� descriptionZuseridZ emailAddressr& c s t du rtd��tt| �j|||||d� t jt jj|d�| _| jj |||d� | j dur3| j� |� | � dt ||| j|d��| _| jsFdS d}t|�� }|�� }W d � n1 s[w Y |�t j�}|dkrldS |�t j|�} | dkrydS | tt j�7 } ||| � | jd< dS ) zASet up context in addition to base class properties if available.Nz-You must install the ssl module to use HTTPS.r& )�purposer( r) Z SSL_SERVERr ZSSL_SERVER_CERT)r � ImportError�superrJ �__init__r. �Purpose� CLIENT_AUTHr" r/ �ciphers� set_ciphers�_make_env_cert_dictrF r> � _server_env�open�read�find� PEM_HEADER� PEM_FOOTERr ) �selfr< r= r> rc r' �cert�fZ cert_startZcert_end�� __class__r r r` � sV ��� �� � zBuiltinSSLAdapter.__init__c C s | j S )z>:py:class:`~ssl.SSLContext` that will be used to wrap sockets.)�_context)rl r r r r" s zBuiltinSSLAdapter.contextc C sj || _ tt��$ tjr|jdu r#t|_W d � dS W d � dS W d � dS 1 s.w Y dS )z Set the ssl ``context`` to use.N)rq r rB r �HAS_SNI� sni_callbackrI )rl r" r r r r" $ s ��"�c s t t| ��|�S )z!Wrap and return the given socket.)r_ rJ �bind)rl rH ro r r rt 2 s zBuiltinSSLAdapter.bindc C s� z | j j|ddd�}W nO tjtjfy" } ztj|j� |�d}~w tjyH } z|j tj ko4t |d�}|r;tj }ntj}||j� |�d}~w t yZ } ztj|j� |�d}~ww || �|�fS )z<Wrap and return the given socket, plus WSGI environ entries.Tr Nz http request)r" r r � SSLEOFError�SSLZeroReturnErrorr Z FatalSSLAlertr, r �errno� SSL_ERROR_SSLr Z NoSSLErrorr � get_environ)rl rH �sZtls_connection_drop_errorZgeneric_tls_errorZ!peer_speaks_plain_http_over_httpsZ reraised_connection_drop_exc_clsZtcp_connection_drop_errorr r r �wrap6 sL � ���� ��������zBuiltinSSLAdapter.wrapc C s� |� � }dd|d |d d|d dtjtjf tjdd � }tt�� |�� }|d ur.||d < W d � n1 s8w Y tt�� |j j � � |d < W d � n1 sTw Y tt��( |d d� }|j � � D ]}||d |d fkr}|d |d< nqiW d � n1 s�w Y tt�� |j|d< W d � n1 s�w Y | j r�| j jtjkr�|�� }|r�d|d< |�| �d|�� t�|jdd���� |d< |�| j� |S )z;Create WSGI environ entries to be merged into each request.�https�onr r � r z %s Python/%sZNONE) zwsgi.url_schemeZHTTPSZ SSL_PROTOCOLZ SSL_CIPHERZSSL_CIPHER_EXPORTZSSL_CIPHER_USEKEYSIZEZSSL_VERSION_INTERFACEZSSL_VERSION_LIBRARY�SSL_CLIENT_VERIFYNZSSL_COMPRESS_METHODZSSL_SESSION_ID�name�protocolZalg_bitsZSSL_CIPHER_ALGKEYSIZEZ SSL_TLS_SNI�SUCCESSr Z SSL_CLIENTT)� binary_formZSSL_CLIENT_CERT)�cipherr rL �sysr �OPENSSL_VERSIONr rB � compression�session�id�hexr" � get_ciphersrG r2 r1 r9 �updatere �DER_cert_to_PEM_cert�striprf )rl rH r� Z ssl_environr� Z target_cipherZcipZ client_certr r r ry Y sd ��� � � � �� � � � �� z BuiltinSSLAdapter.get_environc C s� |si S i }| j �� D ]2\}}d||f }|�|�}|dkr(|�| �||�� q |�d�r7|�| �||�� q t|�||< q d|v rat� |d �}|t� |d �8 }|d }tt |��|d|f < |S )z�Return a dict of WSGI environment variables for a certificate. E.g. SSL_CLIENT_M_VERSION, SSL_CLIENT_M_SERIAL, etc. See https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#envvars. �%s_%srK Z_DNrM rN i�Q z %s_V_REMAIN) �CERT_KEY_TO_ENV�items�getr� �_make_env_san_dict�endswith�_make_env_dn_dictr r �cert_time_to_seconds�int) rl � env_prefixZ parsed_cert�envZcert_keyZenv_var�key�valueZremainr r r re � s" z%BuiltinSSLAdapter._make_env_cert_dictc C sh |si S i }d}d}|D ]%\}}|dkr!||d||f < |d7 }q |dkr1||d||f < |d7 }q |S )z�Return a dict of WSGI environment variables for a certificate DN. E.g. SSL_CLIENT_SAN_Email_0, SSL_CLIENT_SAN_DNS_0, etc. See SSL_CLIENT_SAN_* at https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#envvars. r �DNSz %s_DNS_%ir rY z %s_Email_%ir )rl r� � cert_valuer� Z dns_countZ email_count� attr_name�valr r r r� � s �z$BuiltinSSLAdapter._make_env_san_dictc C s� |si S g }i }|D ]*}|D ]%\}}| j �|�}|�d|p ||f � |s&q|�|g � || �|� qq |d�|�i} |�� D ](\}} d�| �| d||f < t| �dkrVq@t| �D ] \} }|| d||| f < qZq@| S )z�Return a dict of WSGI environment variables for a certificate DN. E.g. SSL_CLIENT_S_DN_CN, SSL_CLIENT_S_DN_C, etc. See SSL_CLIENT_S_DN_x509 at https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#envvars. z%s=%s�,r� r z%s_%s_%i)�CERT_KEY_TO_LDAP_CODEr� �append� setdefaultr: r� r � enumerate) rl r� r� �dnZdn_attrsZrdnr� r� Z attr_coder� �values�ir r r r� � s. � � �z#BuiltinSSLAdapter._make_env_dn_dict�rc C s d|v rt nt}||||�S )zReturn socket file object.r� r )rl rH �mode�bufsize�clsr r r �makefile� s zBuiltinSSLAdapter.makefile)NN)�__name__� __module__� __qualname__�__doc__r< r= r> rc r' r� r� r` �propertyr" �setterrt r{ ry re r� r� r r� � __classcell__r r ro r rJ � sd ��"��: #@ rJ )r� r3 r� r5 � contextlibr r r^ Z_pyior �ior~ r r� r r r# r r r r% rA rF rI rJ r r r r �<module> s@ � ��� & �3 �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings