golden hour
/opt/saltstack/salt/lib/python3.10/site-packages/cheroot/ssl/__pycache__
⬆️ Go Up
Upload
File/Folder
Size
Actions
__init__.cpython-310.pyc
1.86 KB
Del
OK
builtin.cpython-310.pyc
10.16 KB
Del
OK
pyopenssl.cpython-310.pyc
10.7 KB
Del
OK
Edit: builtin.cpython-310.pyc
o �xe}F � @ s> d Z ddlmZmZmZ eZddlZddlZddl Z zddl Z W n e y+ dZ Y nw zddl m Z W n e yQ zddlm Z W n e yN dZ Y nw Y nw ddlZddlmZ dd lmZ dd lmZmZ dd lmZmZ dd lmZ ejrej Z ne Z d d� Z dd� Z dd� Z!dd� Z"dd� Z#G dd� de�Z$dS )z� A library for integrating Python's builtin :py:mod:`ssl` library with Cheroot. The :py:mod:`ssl` module must be importable for SSL functionality. To use this module, set ``HTTPServer.ssl_adapter`` to an instance of ``BuiltinSSLAdapter``. � )�absolute_import�division�print_functionN)�DEFAULT_BUFFER_SIZE���� )�Adapter� )�errors)�IS_ABOVE_OPENSSL10�suppress�� StreamReader� StreamWriter)� HTTPServerc s6 t |�dk r td��t| ��� � t� fdd�|D ��S )zACheck whether SSL exception contains either of messages provided.r zF_assert_ssl_exc_contains() requires at least one message to be passed.c 3 s � | ] }|� � � v V qd S )N)�lower)�.0�m�Z err_msg_lower� �G/opt/saltstack/salt/lib/python3.10/site-packages/cheroot/ssl/builtin.py� <genexpr>4 s � z+_assert_ssl_exc_contains.<locals>.<genexpr>)�len� TypeError�strr �any)�excZmsgsr r r �_assert_ssl_exc_contains, s � r c C s| t tjt��. | j|ddd�� }|�d� W d � n1 s w Y W d � dS W d � dS 1 s7w Y dS )z;Wrap a socket in ssl and perform the server-side handshake.T��do_handshake_on_connect� server_sides 0000N)r �ssl�SSLError�OSError� wrap_socket�send)�context�server�ssl_sockr r r �_loopback_for_cert_thread7 s � ��"�r) c C s� t j|d�}|�| |� d|_t j|_t�� \}}zStj t ||fd�}z9|� � |j |ddd�� }|� d� |�� W d � W |�� W |�� |�� S 1 sRw Y W |�� n|�� w W |�� |�� dS |�� |�� w )z@Create a loopback connection to parse a cert with a private key.)�cafileF)�target�argsTr � N)r! �create_default_context�load_cert_chain�check_hostname� CERT_NONE� verify_mode�socket� socketpair� threading�Threadr) �startr$ �recv� getpeercert�join�close)� certificate� private_key�certificate_chainr& �clientr' �threadr( r r r �_loopback_for_certV s8 �� � � � rA c C sr t ttjt�� t| ||�W d � S 1 sw Y t t�� tj�| �W d � S 1 s2w Y i S )zParse a certificate.N) r �AttributeErrorr! r" r# rA � Exception�_ssl�_test_decode_cert)r< r= r> r r r � _parse_certx s � �rF c C s || _ dS )z7Handle the SNI callback to tag the socket with the SNI.N)�sni)�sockrG r& r r r � _sni_callback� s rI c s� e Zd ZdZdZ dZ dZ dZ ddddddd d �Zd d d ddddddddddd� Z d-� fdd� Z e dd � �Z e j d d � �Z � fd d �Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*efd+d,�Z� ZS ).�BuiltinSSLAdapterzDWrapper for integrating Python's builtin :py:mod:`ssl` with Cheroot.NZ M_VERSIONZM_SERIALZV_STARTZV_ENDZS_DNZI_DN�SAN)�versionZ serialNumber� notBefore�notAfter�subjectZissuer�subjectAltName�CZST�L�OZOUZCN�T�I�G�S�DZUID�Email) Z countryNameZstateOrProvinceNameZ localityNameZorganizationNameZorganizationalUnitName� commonName�titleZinitialsZ givenNameZsurname� descriptionZuseridZ emailAddressc s t du rtd��tt| ��||||� t jt jj|d�| _| j� ||� | j dur/| j� |� | � dt ||| j��| _| js@dS d}t|dd�� }|�� }W d � n1 sWw Y |�t j�}|dkrhdS |�t j|�}|dkrudS |tt j�7 }|||� | jd< dS ) zASet up context in addition to base class properties if available.Nz-You must install the ssl module to use HTTPS.)�purposer* Z SSL_SERVERZrt)�moder ZSSL_SERVER_CERT)r! � ImportError�superrJ �__init__r. �Purpose� CLIENT_AUTHr& r/ �ciphers� set_ciphers�_make_env_cert_dictrF r> � _server_env�open�read�find� PEM_HEADER� PEM_FOOTERr ) �selfr< r= r> rd �cert�fZ cert_startZcert_end�� __class__r r ra � s< �� � � zBuiltinSSLAdapter.__init__c C s | j S )z>:py:class:`~ssl.SSLContext` that will be used to wrap sockets.)�_context)rm r r r r& � s zBuiltinSSLAdapter.contextc C sj || _ tt��$ tjr|jdu r#t|_W d � dS W d � dS W d � dS 1 s.w Y dS )z Set the ssl ``context`` to use.N)rr r rB r! �HAS_SNI� sni_callbackrI )rm r& r r r r& � s ��"�c s t t| ��|�S )z!Wrap and return the given socket.)r` rJ �bind)rm rH rp r r ru s zBuiltinSSLAdapter.bindc C s� di f}z | j j|ddd�}W nh tjyY } z=|jtjkr&|W Y d}~S |jtjkrGt|d�r4tj �d}t|g|�R � rF|W Y d}~S � t|d�rT|W Y d}~S � d}~w t yw } z |j dk}|rrt rr|W Y d}~S � d}~ww || � |�fS )z<Wrap and return the given socket, plus WSGI environ entries.NTr z http request) zunknown protocolz unknown caZ unknown_caz unknown errorzhttps proxy requestzinappropriate fallbackzwrong version numberzno shared cipherzcertificate unknownzccs received earlyzcertificate verify failedzversion too lowzunsupported protocolz handshake operation timed out)r �Error)r& r$ r! r" �errno� SSL_ERROR_EOF� SSL_ERROR_SSLr r Z NoSSLError�generic_socket_errorr, r � get_environ)rm rH Z EMPTY_RESULT�s�exZ _block_errorsr Z is_error0r r r �wrap s8 � �� ��zBuiltinSSLAdapter.wrapc C s� |� � }dd|d |d d|d dtjtjf tjdd � }tt�� |�� }|d ur.||d < W d � n1 s8w Y tt�� |j j � � |d < W d � n1 sTw Y tt��( |d d� }|j � � D ]}||d |d fkr}|d |d< nqiW d � n1 s�w Y tt�� |j|d< W d � n1 s�w Y | j r�| j jtjkr�|�� }|r�d|d< |�| �d|�� t�|jdd���� |d< |�| j� |S )z;Create WSGI environ entries to be merged into each request.�https�onr r � r z %s Python/%sZNONE) zwsgi.url_schemeZHTTPSZ SSL_PROTOCOLZ SSL_CIPHERZSSL_CIPHER_EXPORTZSSL_CIPHER_USEKEYSIZEZSSL_VERSION_INTERFACEZSSL_VERSION_LIBRARY�SSL_CLIENT_VERIFYNZSSL_COMPRESS_METHODZSSL_SESSION_ID�name�protocolZalg_bitsZSSL_CIPHER_ALGKEYSIZEZ SSL_TLS_SNI�SUCCESSr� Z SSL_CLIENTT)� binary_formZSSL_CLIENT_CERT)�cipherr rL �sysr! �OPENSSL_VERSIONr rB � compression�session�id�hexr& � get_ciphersrG r2 r1 r9 �updaterf �DER_cert_to_PEM_cert�striprg )rm rH r� Z ssl_environr� Z target_cipherZcipZ client_certr r r r{ M s` �� � � � �� � � � �� z BuiltinSSLAdapter.get_environc C s� |si S i }| j �� D ]2\}}d||f }|�|�}|dkr(|�| �||�� q |�d�r7|�| �||�� q t|�||< q d|v rat� |d �}|t� |d �8 }|d }tt |��|d|f < |S )z�Return a dict of WSGI environment variables for a certificate. E.g. SSL_CLIENT_M_VERSION, SSL_CLIENT_M_SERIAL, etc. See https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#envvars. �%s_%srK Z_DNrM rN i�Q z %s_V_REMAIN) �CERT_KEY_TO_ENV�items�getr� �_make_env_san_dict�endswith�_make_env_dn_dictr r! �cert_time_to_seconds�int) rm � env_prefixZ parsed_cert�envZcert_keyZenv_var�key�valueZremainr r r rf � s" z%BuiltinSSLAdapter._make_env_cert_dictc C sh |si S i }d}d}|D ]%\}}|dkr!||d||f < |d7 }q |dkr1||d||f < |d7 }q |S )z�Return a dict of WSGI environment variables for a certificate DN. E.g. SSL_CLIENT_SAN_Email_0, SSL_CLIENT_SAN_DNS_0, etc. See SSL_CLIENT_SAN_* at https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#envvars. r �DNSz %s_DNS_%ir rY z %s_Email_%ir )rm r� � cert_valuer� Z dns_countZ email_count� attr_name�valr r r r� � s �z$BuiltinSSLAdapter._make_env_san_dictc C s� |si S g }i }|D ]*}|D ]%\}}| j �|�}|�d|p ||f � |s&q|�|g � || �|� qq |d�|�i} |�� D ](\}} d�| �| d||f < t| �dkrVq@t| �D ] \} }|| d||| f < qZq@| S )z�Return a dict of WSGI environment variables for a certificate DN. E.g. SSL_CLIENT_S_DN_CN, SSL_CLIENT_S_DN_C, etc. See SSL_CLIENT_S_DN_x509 at https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#envvars. z%s=%s�,r� r z%s_%s_%i)�CERT_KEY_TO_LDAP_CODEr� �append� setdefaultr: r� r � enumerate) rm r� r� �dnZdn_attrsZrdnr� r� Z attr_coder� �values�ir r r r� � s. � � �z#BuiltinSSLAdapter._make_env_dn_dict�rc C s d|v rt nt}||||�S )zReturn socket file object.r� r )rm rH r^ �bufsize�clsr r r �makefile� s zBuiltinSSLAdapter.makefile)NN)�__name__� __module__� __qualname__�__doc__r< r= r> rd r� r� ra �propertyr& �setterru r~ r{ rf r� r� r r� � __classcell__r r rp r rJ � s\ �� �( <> rJ )%r� Z __future__r r r �typeZ __metaclass__r3 r� r5 r! r_ Z_pyior �ioZsixr� r r Z_compatr r r� r r r' r ZPY2�errorrz r# r r) rA rF rI rJ r r r r �<module> sH � ��� "
Save