File: //opt/cppython/lib/python3.8/site-packages/setuptools/__pycache__/ssl_support.cpython-38.pyc
U
<D�gu! � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dl m
Z
m Z z d dl Z W n e
k
rl dZ Y nX dddddgZd�� �� ZzejjZejjZW n ek
r� e ZZY nX e dk o�eeefkZzd d l mZmZ W nR e
k
�r4 z d d
lmZ d d lmZ W n e
k
�r. dZdZY nX Y nX e�sLG d d
� d
e �Ze�sdd dd�Z dd� ZG dd� de�Z G dd� de�Z d dd�Z dd� Z!e!dd� �Z"dd� Z#d d � Z$dS ) � N)�ResolutionError�ExtractionError�VerifyingHTTPSHandler�find_ca_bundle� is_available�
cert_paths�
opener_fora
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
/usr/local/share/certs/ca-root-nss.crt
/etc/ssl/ca-bundle.pem
)�CertificateError�match_hostname)r )r
c @ s e Zd ZdS )r N)�__name__�
__module__� __qualname__� r r �C/opt/cppython/lib/python3.8/site-packages/setuptools/ssl_support.pyr 7 s r � c
C s� g }| s dS | � d�}|d }|dd� }|�d�}||krLtdt| � ��|s`| �� |�� kS |dkrt|�d� n>|�d �s�|�d �r�|�t�|�� n|�t�|�� d
d �� |D ]}|�t�|�� q�t�
d d
� |� d tj �} | �
|�S )zqMatching according to RFC 6125, section 6.4.3
https://tools.ietf.org/html/rfc6125#section-6.4.3
F�.r r N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append�
startswith�re�escape�replace�compile�join�
IGNORECASE�match)
�dn�hostname�
max_wildcards�pats�parts�leftmost� remainder� wildcards�frag�patr r r �_dnsname_match= s,
� r* c C s� | s t d��g }| �dd�}|D ]*\}}|dkr t||�r@ dS |�|� q |s�| �dd�D ]6}|D ],\}}|dkrdt||�r� dS |�|� qdq\t|�dkr�td |d
�tt|��f ��n*t|�dkr�td ||d f ��ntd
��dS )a= Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
zempty or no certificate�subjectAltNamer �DNSN�subject�
commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) �
ValueError�getr* r �lenr r �mapr )�certr! �dnsnames�san�key�value�subr r r r
s s>
��
���r
c @ s e Zd ZdZdd� Zdd� ZdS )r z=Simple verifying handler: no auth, subclasses, timeouts, etc.c C s || _ t�| � d S �N)� ca_bundle� HTTPSHandler�__init__)�selfr: r r r r< � s z VerifyingHTTPSHandler.__init__c s � � � fdd�|�S )Nc s t | � jf|�S r9 )�VerifyingHTTPSConnr: )�host�kw�r= r r �<lambda>� � z2VerifyingHTTPSHandler.https_open.<locals>.<lambda>)�do_open)r= �reqr rA r �
https_open� s
�z VerifyingHTTPSHandler.https_openN)r r r
�__doc__r< rF r r r r r � s c @ s e Zd ZdZdd� Zdd� ZdS )r> z@Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j| |f|� || _d S r9 )�HTTPSConnectionr< r: )r= r? r: r@ r r r r< � s zVerifyingHTTPSConn.__init__c C s� t �| j| jft| dd ��}t| d�rHt| dd �rH|| _| �� | j}n| j}tt d�rxt j
| j d�}|j ||d�| _nt j |t j
| j d�| _zt| j�� |� W n. tk
r� | j�t j� | j�� � Y nX d S )N�source_address�_tunnel� _tunnel_host�create_default_context)�cafile)�server_hostname)� cert_reqs�ca_certs)�socket�create_connectionr? �port�getattr�hasattr�sockrJ rK �sslrL r: � wrap_socket�
CERT_REQUIREDr
� getpeercertr �shutdown� SHUT_RDWR�close)r= rV � actual_host�ctxr r r �connect� s.
�
�
zVerifyingHTTPSConn.connectN)r r r
rG r< r` r r r r r> � s r> c C s t j�t| pt� ��jS )z@Get a urlopen() replacement that uses ca_bundle for verification)�urllib�request� build_openerr r �open)r: r r r r � s �c s t �� �� fdd��}|S )Nc s t � d�s� | |�� _� jS )N�always_returns)rU re )�args�kwargs��funcr r �wrapper� s
zonce.<locals>.wrapper)� functools�wraps)ri rj r rh r �once� s rm c sZ z dd l } W n tk
r" Y d S X G � fdd�d| j�� � � }|�d� |�d� |jS )Nr c s, e Zd Z�� fdd�Z�� fdd�Z� ZS )z"get_win_certfile.<locals>.CertFilec s t � | ��� t�| j� d S r9 )�superr< �atexit�registerr] rA ��CertFile� __class__r r r< � s z+get_win_certfile.<locals>.CertFile.__init__c s, zt � | ��� W n tk
r& Y nX d S r9 )rn r] �OSErrorrA rq r r r] � s z(get_win_certfile.<locals>.CertFile.close)r r r
r< r] �
__classcell__r �rr )rs r rr � s rr �CA�ROOT)� wincertstore� ImportErrorrr Zaddstore�name)ry Z _wincertsr rv r �get_win_certfile� s
r| c C s$ t tjjt�} t� p"t| d�p"t� S )z*Return an existing CA bundle path, or NoneN)�filter�os�path�isfiler r| �next�_certifi_where)Zextant_cert_pathsr r r r � s ��c
C s. zt d��� W S tttfk
r( Y nX d S )N�certifi)�
__import__�whererz r r r r r r r� s r� )r )N)%r~ rQ ro r rk �urllib.requestra � http.client�http�
pkg_resourcesr r rW rz �__all__�stripr r rb r; �clientrH �AttributeError�objectr r r
Z backports.ssl_match_hostnamer/ r* r r> r rm r| r r� r r r r �<module> sb
�
�
6*(