iԇ dZddlmZddlZejZddlZddlmZm Z ddlm Z ddl m Z eZddlmZgdZeed red gZnd gZdd lmZdd lmZdd lmZdd lmZddlmZddlmZddlmZddlmZddlmZddlm Z ddlm!Z!ddlm"Z"ddlm#Z#ddlm$Z$ddlm%Z%ddlm&Z&ddlm'Z'ddlm(Z(e ee)edgzdZ*ee*zezZ+de+vre+,dej-Z.Gd d!ej/Z0Gd"d#e1Z2Gd$d%e.Z-Gd&d'eZ3e3e-_4e d(Z5e d)Z6e d*Z7ddd+ee$dd,d,df d-Z8e$dfd.Z9dS)/zSSL wrapper for socket objects on Python 3. For the documentation, refer to :mod:`ssl` module manual. This module implements cooperative SSL socket wrappers. )absolute_importN)sockettimeout_default)timeout) copy_globals)ref) SSLContext SSLSocketget_server_certificate wrap_socket)AF_INET) SOCK_STREAM)SO_TYPE) SOL_SOCKET)SSLWantReadError)SSLWantWriteError) SSLEOFError)SSLZeroReturnError) CERT_NONE)SSLError) SSL_ERROR_EOF)SSL_ERROR_WANT_READ)SSL_ERROR_WANT_WRITE)PROTOCOL_SSLv23)CHANNEL_BINDING_TYPES) CERT_REQUIRED)DER_cert_to_PEM_cert)create_connectionr)names_to_ignoredunder_names_to_keep namedtuplec"eZdZdZfdZxZS)_contextawaresock)_sslsockc^t||||||_dSN)super__init__r%)selffamilytypeprotofilenosslsocket_wref __class__s 5/usr/local/lib/python3.11/dist-packages/gevent/ssl.pyr)z_contextawaresock.__init__[s, uf555& )__name__ __module__ __qualname__ __slots__r) __classcell__r0s@r1r$r$Xs=I'''''''''r2r$ceZdZdZdZdZdS) _Callback user_functionc||_dSr'r;)r*r<s r1r)z_Callback.__init__ds*r2cF|}|j|g|RSr')r%r<)r*connargss r1__call__z_Callback.__call__gs*}}!t!$.....r2N)r3r4r5r6r)rArr2r1r:r:`s7"I+++/////r2r:c eZdZdZdZ ddZeejdrEejj fdZej j fdZ ej j fd Z eed r.ej j fd Z ej j fd Z eed refdZej fdZeedr#efdZej fdZxZSfdZxZS)r rNFTc :||||||||S)N)sock server_sidedo_handshake_on_connectsuppress_ragged_eofsserver_hostname_context_session)sslsocket_class)r*rDrErFrGrHsessions r1r zSSLContext.wrap_socketrs5##;$;!5+ $ r2settercntttj||dSr')r(orig_SSLContextoptions__set__r*valuer0s r1rPzSSLContext.optionss, /? 3 3 ; C CD% P P P P Pr2cntttj||dSr')r(rO verify_flagsrQrRs r1rUzSSLContext.verify_flagss, /? 3 3 @ H Hu U U U U Ur2cntttj||dSr')r(rO verify_moderQrRs r1rWzSSLContext.verify_modes, /? 3 3 ? G Ge T T T T Tr2minimum_versioncntttj||dSr')r(rOrXrQrRs r1rXzSSLContext.minimum_version- /? 3 3 C K KDRW X X X X Xr2cntttj||dSr')r(rOmaximum_versionrQrRs r1r\zSSLContext.maximum_versionrZr2 _msg_callbackcftj}t|tr|j}|Sr')r(r] isinstancer:r<r*resultr0s r1r]zSSLContext._msg_callbacks.WW*F&),, .-Mr2c |rt|rt|}tt_ t ttj||tt_dS#tt_wxYwr')callabler:rO__ssl__r r(r]rQrRs r1r]zSSLContext._msg_callbacksw )% )!%((!0G  0j*--;CCD%PPP%/"""Z"////s 3A::B  sni_callbackcftj}t|tr|j}|Sr')r(rer_r:r<r`s r1rezSSLContext.sni_callbacks.WW)F&),, .-Mr2c|rt|rt|}tttj||dSr')rcr:r(rOrerQrRs r1rezSSLContext.sni_callbacksN )% )!%(( /? 3 3 @ H Hu U U U U Ur2c|rt|rt|}t|dSr')rcr:r(set_servername_callback)r*server_name_callbackr0s r1riz"SSLContext.set_servername_callbacksK# G1E(F(F G'01E'F'F$ GG + +,@ A A A A Ar2)FTTNN)r3r4r5r6rKr hasattrrOrPrMrUrWrXr\propertyr]rerir7r8s@r1r r ks{IO,1,0)-$(  w&11U  ' Q Q Q Q ( ' Q  % , V V V V - , V  $ + U U U U , + Uw 122 Y  ( / Y Y Y Y 0 / Y  ( / Y Y Y Y 0 / Yw000          0 0 0 0   0w//B          V V V V   V V V V V  B B B B B B B B Br2r c eZdZdZddddeeddeeddddddddfdZdZ dZ e d Z e j d Z e d Zej d Ze d ZdZd7dZdZd8dZdZd9dZdZeedr dZdZdZdZdZdefdZd7dZ dZ!d:dZ"d;d!Z#dd2Z3d3Z4ee5j6d4r d5Z7d6Z8xZ9SxZ9S)?r zp gevent `ssl.SSLSocket `_ for Python 3. NFTrc*|r||_n|r|std|r|std|r|s|}t||_||j_|r|j||r|j|||r|j||r|j|||_||_ ||_ ||_ ||_ ||_ |tt t"krt%d|r"|rtd|td|jjr|std||_||_||_||_| |_d}d}|c|}t5j||j|j|j|| n1| t5j|| nt5j|| | | d|_!d|_" |j#$d }n#tJ$r}|j&tLj'kr|(|)}|*d |+d }n9#tJ$r,}|j&tLj'tLj,fvrd }Yd}~nd}~wwxYw|*||rMd}t[|j&|}||_.d|_/ |(n#tJ$rYnwxYw|Yd}~nd}~wwxYw|0|||_1|r |2|||_"|r?|}|dkrtd|3dSdS#tJ$r|(wxYwdS)Nz5certfile must be specified for server-side operationszcertfile must be specifiedz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostnameF)r+r,r-r.)r.)r+r,r-Tr2z5Closed before TLS handshake with data in recv buffer.zHdo_handshake_on_connect should not be specified for non-blocking sockets)4rI ValueErrorr rWload_verify_locationsload_cert_chainset_npn_protocols set_cipherskeyfilecertfile cert_reqs ssl_versionca_certsciphers getsockoptrrrNotImplementedErrorcheck_hostnamerJrErHrFrG gettimeoutrr)r+r,r-r.detach_closed_sslobj_sock getpeernameOSErrorerrnoENOTCONNclose getblocking setblockingrecvEINVALrreasonlibrary settimeout _connected_SSLSocket__create_sslobj do_handshake)r*rDrvrwrErxryrzrFr+r,r-r.rG npn_protocolsr{rHrJrI connected sock_timeouteblockingnotconn_pre_handshake_datar notconn_pre_handshake_data_errorrs r1r)zSSLSocket.__init__s  #$DMM /8 / "./// ?x ? !=>>> # #"&{33DM(1DM % > 33H=== A --h@@@ ? // >>> 3 ))'222"DL$DM&DN*D $DM"DL ??:w / /; > >%&IJJ J  3 3 "2333# "2333 = ' H HFGG G  &.'>$$8!   ??,,L OD#';!%"&*#';;==  2 2 2 2 KKMMMM   OD 0 0 0 0 0 ODd% H H H H  (  J " " $ $ $NIIM$ 7$ 7$ 7w%.(( ''))H   U # # # 1 .2YYq\\** 1 1 175>5<"@@@-0******  1   X & & &) 7Q3;AGV3L3L0:@07;?08JJLLLLD66 7 7 7 7 7/$ 7P  %%%#   #33KJJ *("oo//G#~~()sttt%%''''' ((        st7I M0AM+3K M+ K?"K:5M+:K???M+?MM+ M!M+ M!!M++M0AO00 Pc Bt||||t|Sr')r$_wref)r*r+r,r-r.s r1_gevent_sock_classzSSLSocket._gevent_sock_classds ufeDkkJJJr2c\d|jd|j|jndS)Nz server=z , cipher=)rErcipherr*s r1 _extra_reprzSSLSocket._extra_reprgs:    %)\%=DL   ! ! !2 E  r2c|jSr')rIrs r1contextzSSLSocket.contextns }r2c,||_||j_dSr')rIrr)r*ctxs r1rzSSLSocket.contextrs " r2c,|j |jjSdS)z!The SSLSession for client socket.N)rrLrs r1rLzSSLSocket.sessionws < #<' ' $ #r2c>||_|j||j_dSdSr')rJrrL)r*rLs r1rLzSSLSocket.session}s) < ##*DL  $ #r2c,|j |jjSdS)z.Was the client session reused during handshakeN)rsession_reusedrs r1rzSSLSocket.session_reuseds < #<. . $ #r2c:td|jjz)NzCan't dup() %s instances)r}r0r3rs r1dupz SSLSocket.dups$!"<"&."9#:;; ;r2cdSr'r)r*msgs r1 _checkClosedzSSLSocket._checkCloseds r2c@|js|dSdSr')rrrs r1_check_connectedzSSLSocket._check_connecteds0            r2c~|d} |jstd|dkr|dndS | ||j||z }|S|j|pdS#t$r0|jdkr||jtYnt$r0|jdkr||j tYnSt$r|j r|dn|cYSt$r.}|jdtkr|j r |dn|cYd}~Sd}~wwxYw') zRead up to LEN bytes and return them. Return zero-length string on EOF. .. versionchanged:: 24.2.1 No longer requires a non-None *buffer* to implement ``len()``. This is a backport from 3.11.8. rTz'Read on closed or unwrapped SSL socket.Nr2rp timeout_exc)rrrqreadrr_wait _read_event_SSLErrorReadTimeoutr _write_eventrrGrr@r)r*nbytesbuffer bytes_readexs r1rzSSLSocket.reads   < L !JKKK{{$nss!3 %$,"3"3FF"C"CCJ%%|((4888# O O O<3&& 4+9M NNNNN$ P P P<3&& 4,:N OOOOO%   ,A"(.33j@@@   71:..43L."(.33j@@@@@@  5 s;!A9A997D:26D:*D: D: "D5.D:4D55D:c| |jstd |j|S#t$r}|jdt kr.|jdkr||j tnE|jdtkr.|jdkr||j tnYd}~nd}~wwxYw)zhWrite DATA to the underlying SSL channel. Returns number of bytes of DATA actually transmitted.Tz(Write on closed or unwrapped SSL socket.rrprN) rrrqwriterr@rrrr_SSLErrorWriteTimeoutrr)r*datars r1rzSSLSocket.writes  < M !KLLL |))$///   71:!444|s**JJt/=RJSSSSWQZ#777|s**JJt0>SJTTTT   sA C$B CC$c|| |jj}n#t$r|jj}YnwxYw||S)zReturns a formatted version of the data in the certificate provided by the other end of the SSL channel. Return None if no certificate was provided, {} if a certificate was provided, but not validated.)rrrpeer_certificateAttributeError getpeercert)r* binary_formcs r1rzSSLSocket.getpeercertsr   ) -AA ) ) ) (AAA )q~~s 7AAc||jr tjsdS|jSr')rr_sslHAS_NPNselected_npn_protocolrs r1rzSSLSocket.selected_npn_protocols@ | 4< 4|11333r2HAS_ALPNc||jr tjsdS|jSr')rrrrselected_alpn_protocolrs r1rz SSLSocket.selected_alpn_protocols@      < t} t<6688 8r2c4|jS)zReturn a list of ciphers shared by the client during the handshake or None if this is not a valid server connection. )rshared_ciphersrs r1rzSSLSocket.shared_ciphers s<..00 0r2cF|jsdS|jS)z^Return a string identifying the protocol version used by the current SSL channel. N)rversionrs r1rzSSLSocket.versions'< t<'')) )r2cn||jsdS|jSr')rrrrs r1rzSSLSocket.ciphers7 | 4|""$$$r2cn||jsdS|jSr')rr compressionrs r1rzSSLSocket.compression s7 | 4|'')))r2c||tur|j}|jr|dkrt d|jz |j|S#t$r+|jdkrYdS||j Yn7t$r+|jdkrYdS||j YnwxYwtj ||||S)Nrz3non-zero flags not allowed in calls to send() on %sTrp)rrrrrqr0rrrrrrrsend)r*rflagsrs r1rzSSLSocket.send&s   o % %lG < ;zz IN#$$$ 2 2<--d333'111|s** qqJJt/00000(222|s** qqJJt0111112 2;tT5':: :s$ A%%C =C C 0C  C c||jrtd|jz|t j|||St j||||S)Nz%sendto not allowed on instances of %s)rrrqr0rsendto)r*r flags_or_addraddrs r1rzSSLSocket.sendto=sl  < -D!^,-- - <=t];; ;}T4===r2c0td|jz)Nz&sendmsg not allowed on instances of %sr}r0r*r@kwargss r1sendmsgzSSLSocket.sendmsgFs#""J"&.#122 2r2c||jr|dkrtd|jz t j|||S#t $r|jdkrtdwxYw)Nrz6non-zero flags not allowed in calls to sendall() on %srpz&The operation did not complete (write)) rrrqr0rsendall_socket_timeoutrr)r*rrs r1rzSSLSocket.sendallLs  < $zz LN#$$$ >$e44 4   |s""'(PQQQ   s A&A6rc||jr:|dkrtd|jz|dkrdS||St j|||S)Nrz3non-zero flags not allowed in calls to recv() on %sr2)rrrqr0rrrr*buflenrs r1rzSSLSocket.recv\s~  < %zz IN#$$${{s99V$$ ${4///r2c8||4|.t|5}|j}dddn #1swxYwY|sd}|jr3|dkrt d|jz|||Stj||||S)z .. versionchanged:: 24.2.1 No longer requires a non-None *buffer* to implement ``len()``. This is a backport from 3.11.8. Nrrz8non-zero flags not allowed in calls to recv_into() on %s) r memoryviewrrrqr0rr recv_into)r*rrrviews r1rzSSLSocket.recv_intojs  >!'')4![F)))))))))))))))  < -zz ![^b^l!lmmm99VV,, ,ffe<< 0G D=   MMOOO s +AA) tls-uniquec$t|jdr|j|S|tvrt d|dkr"t d||jdS|jS)zGet channel binding data for current connection. Raise ValueError if the requested `cb_type` is not supported. Return bytes of the data or None if the data is not available (e.g. before the handshake). get_channel_bindingz Unsupported channel binding typerz({0} channel binding type not implementedN)rkrrrrqr}format tls_unique_cb)r*cb_types r1rzSSLSocket.get_channel_binding-s 4> >1CII=>>>r2get_verified_chaincT|j}|gSd|DS)NcLg|]!}|tj"Sr public_bytesr ENCODING_DER.0certs r1 z0SSLSocket.get_verified_chain..K)KKKTD%%d&788KKKr2)rrr*chains r1rzSSLSocket.get_verified_chainEs3L3355E} KKUKKK Kr2cT|j}|gSd|DS)NcLg|]!}|tj"Srr!r$s r1r'z2SSLSocket.get_unverified_chain..Sr(r2)rget_unverified_chainr)s r1r-zSSLSocket.get_unverified_chainMs3L5577E} KKUKKK Kr2r')rN)F)r)rrr)FN)r):r3r4r5__doc__rrr rr)rrrlrrMrLrrrrrrrrrkrrrrrrrrrrrrrrrrrrrrrrrr r r rrrrdr rr-r7r8s@r1r r s!$"i,t)-k4&*$!%KKKKZKKK   X ^##^#((X(  ^++^+ //X/ ;;;    2222z. 444 wtZ  * 9 9 9  1 1 1  * * *%%% *** !/;;;;.>>>>222  0 0 0 0====(4444AAAA222999 ### :::x!!!UUU&    0((( ... &,,,, ??? ww "677L L L L L L L L L L LLLLLr2r zThe read operation timed outzThe write operation timed outz!The handshake operation timed outFTc 4t||||||||||  S)N rDrvrwrErxryrzrFrGr{)r r0s r1r r _s4 $(!, !,x-D*>$  & & &&r2c"|\}}|t}nt}t|5}t||||5}|d}dddn #1swxYwYdddn #1swxYwYdx}}t |S)zRetrieve the certificate from the server at the specified address, and return it as a PEM-encoded string. If 'ca_certs' is specified, validate the server cert against it. If 'ssl_version' is specified, use it in the connection attempt.N)ryrxrzT)rrrr rr)rryrz_rxrDsslsockdercerts r1r r ns  DAq!  4 0D ;#,xAAA 0DK))$//G 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0000000000000000Gd  ( ((s4A3A A3A A3#A $A33A7:A7):r. __future__rsslrdrr gevent.socketrrrr gevent._utilrrr weakrefrr__implements__rkappend __extra__r rrrrrrrrrrrrrrrrrglobals __imports____all__remover rOrr$objectr:r rKrrrr r rr2r1rBs'&&&&&| 21111111444444%%%%%%   77M""-(((II I !!!!!!""""""######$$$$$$&%%%%%$$$$$$!!!!!!l WWYY"hZ/  ; & 27 NN<   $'''''1''' / / / / / / / /`B`B`B`B`B`B`B`BFE LE LE LE LE LE LE LE LP' ''EFF'(GHH+O,OPP#T!Y+d(,%) & & & &.=t))))))r2