JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/setuptools/__pycache__/ssl_support.cpython-39.opt-1.pyc
a
���hu! � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dl m
Z
m Z z d dl Z W n e
yj dZ Y n0 g d�Zd�� �� ZzejjZejjZW n ey� e ZZY n0 e duo�eeefvZzd dl mZmZ W nN e
�y& z d dlmZ d dlmZ W n e
�y dZdZY n0 Y n0 e�s>G dd � d e �Ze�sVd d d �Z d
d� ZG dd� de�Z G dd� de�Z d dd�Z dd� Z!e!dd� �Z"dd� Z#dd � Z$dS ) � N)�ResolutionError�ExtractionError)�VerifyingHTTPSHandler�find_ca_bundle� is_available�
cert_paths�
opener_fora
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-certificates.crt
/usr/share/ssl/certs/ca-bundle.crt
/usr/local/share/certs/ca-root.crt
/etc/ssl/cert.pem
/System/Library/OpenSSL/certs/cert.pem
/usr/local/share/certs/ca-root-nss.crt
/etc/ssl/ca-bundle.pem
)�CertificateError�match_hostname)r )r
c @ s e Zd ZdS )r N)�__name__�
__module__� __qualname__� r r �:/usr/lib/python3.9/site-packages/setuptools/ssl_support.pyr 7 s r � c
C s� g }| s dS | � d�}|d }|dd� }|�d�}||krLtdt| � ��|s`| �� |�� kS |dkrt|�d� n>|�d �s�|�d �r�|�t�|�� n|�t�|�� d
d �� |D ]}|�t�|�� q�t�
d d
� |� d tj �} | �
|�S )zqMatching according to RFC 6125, section 6.4.3
https://tools.ietf.org/html/rfc6125#section-6.4.3
F�.r r N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr �repr�lower�append�
startswith�re�escape�replace�compile�join�
IGNORECASE�match)
Zdn�hostnameZ
max_wildcardsZpats�partsZleftmostZ remainderZ wildcards�frag�patr r r �_dnsname_match= s,
� r$ c C s� | s t d��g }| �dd�}|D ]*\}}|dkr t||�r@ dS |�|� q |s�| �dd�D ]6}|D ],\}}|dkrdt||�r� dS |�|� qdq\t|�dkr�td |d
�tt|��f ��n*t|�dkr�td ||d f ��ntd
��dS )a= Verify that *cert* (in decoded format as returned by
SSLSocket.getpeercert()) matches the *hostname*. RFC 2818 and RFC 6125
rules are followed, but IP addresses are not accepted for *hostname*.
CertificateError is raised on failure. On success, the function
returns nothing.
zempty or no certificateZsubjectAltNamer ZDNSNZsubjectZ
commonNamer z&hostname %r doesn't match either of %sz, z hostname %r doesn't match %rr z=no appropriate commonName or subjectAltName fields were found) �
ValueError�getr$ r �lenr r �mapr )Zcertr ZdnsnamesZsan�key�value�subr r r r
s s>
��
���r
c @ s e Zd ZdZdd� Zdd� ZdS )r z=Simple verifying handler: no auth, subclasses, timeouts, etc.c C s || _ t�| � d S �N)� ca_bundle� HTTPSHandler�__init__)�selfr- r r r r/ � s z VerifyingHTTPSHandler.__init__c s � � � fdd�|�S )Nc s t | � jfi |��S r, )�VerifyingHTTPSConnr- )�host�kw�r0 r r �<lambda>� � z2VerifyingHTTPSHandler.https_open.<locals>.<lambda>)Zdo_open)r0 Zreqr r4 r �
https_open� s
�z VerifyingHTTPSHandler.https_openN)r r r
�__doc__r/ r7 r r r r r � s r c @ s e Zd ZdZdd� Zdd� ZdS )r1 z@Simple verifying connection: no auth, subclasses, timeouts, etc.c K s t j| |fi |�� || _d S r, )�HTTPSConnectionr/ r- )r0 r2 r- r3 r r r r/ � s zVerifyingHTTPSConn.__init__c C s� t �| j| jft| dd ��}t| d�rHt| dd �rH|| _| �� | j}n| j}tt d�rxt j
| j d�}|j ||d�| _nt j |t j
| j d�| _zt| j�� |� W n, ty� | j�t j� | j�� � Y n0 d S )NZsource_address�_tunnel� _tunnel_host�create_default_context)Zcafile)Zserver_hostname)Z cert_reqsZca_certs)�socketZcreate_connectionr2 �port�getattr�hasattr�sockr: r; �sslr< r- Z wrap_socketZ
CERT_REQUIREDr
Z getpeercertr ZshutdownZ SHUT_RDWR�close)r0 rA Z actual_host�ctxr r r �connect� s( �
�
zVerifyingHTTPSConn.connectN)r r r
r8 r/ rE r r r r r1 � s r1 c C s t j�t| pt� ��jS )z@Get a urlopen() replacement that uses ca_bundle for verification)�urllib�requestZ build_openerr r �open)r- r r r r � s �r c s t �� �� fdd��}|S )Nc s t � d�s� | i |��� _� jS )N�always_returns)r@ rI )�args�kwargs��funcr r �wrapper� s
zonce.<locals>.wrapper)� functools�wraps)rM rN r rL r �once� s rQ c sX z dd l } W n ty Y d S 0 G � fdd�d| j�� � � }|�d� |�d� |jS )Nr c s, e Zd Z�� fdd�Z�� fdd�Z� ZS )z"get_win_certfile.<locals>.CertFilec s t � | ��� t�| j� d S r, )�superr/ �atexit�registerrC r4 ��CertFile� __class__r r r/ � s z+get_win_certfile.<locals>.CertFile.__init__c s* zt � | ��� W n ty$ Y n0 d S r, )rR rC �OSErrorr4 rU r r rC � s z(get_win_certfile.<locals>.CertFile.close)r r r
r/ rC �
__classcell__r �rV )rW r rV � s rV ZCAZROOT)� wincertstore� ImportErrorrV Zaddstore�name)r[ Z _wincertsr rZ r �get_win_certfile� s
r^ c C s$ t tjjt�} t� p"t| d�p"t� S )z*Return an existing CA bundle path, or NoneN)�filter�os�path�isfiler r^ �next�_certifi_where)Zextant_cert_pathsr r r r � s ��r c
C s, zt d��� W S tttfy& Y n0 d S )NZcertifi)�
__import__�wherer\ r r r r r r rd s rd )r )N)%r` r= rS r rO Zurllib.requestrF Z http.client�httpZ
pkg_resourcesr r rB r\ �__all__�stripr r rG r. Zclientr9 �AttributeError�objectr r r
Z backports.ssl_match_hostnamer% r$ r r1 r rQ r^ r rd r r r r �<module> sV
�
6*(
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg