golden hour

/opt/saltstack/salt/lib/python3.10/site-packages/urllib3/util/__pycache__

File/Folder	Size	Actions
__init__.cpython-310.pyc	1.05 KB
connection.cpython-310.pyc	3.33 KB
proxy.cpython-310.pyc	1.28 KB
queue.cpython-310.pyc	1.01 KB
request.cpython-310.pyc	3.41 KB
response.cpython-310.pyc	2.27 KB
retry.cpython-310.pyc	15.75 KB
ssl_.cpython-310.pyc	11 KB
ssl_match_hostname.cpython-310.pyc	3.16 KB
ssltransport.cpython-310.pyc	7.2 KB
timeout.cpython-310.pyc	8.89 KB
url.cpython-310.pyc	10.41 KB
wait.cpython-310.pyc	2.99 KB

Edit: ssl_match_hostname.cpython-310.pyc

�����xe~����������������������@���sr���d�Z�ddlZddlZzddlZW�n�ey���dZY�nw�dZG�dd��de�Zddd�Zd	d
��Z	dd��Z
d
d��ZdS�)zJThe match_hostname() function from Python 3.3.3, essential when using SSL.�����Nz3.5.0.1c�������������������@���s���e�Zd�ZdS�)�CertificateErrorN)�__name__�
__module__�__qualname__��r���r����S/opt/saltstack/salt/lib/python3.10/site-packages/urllib3/util/ssl_match_hostname.pyr������s����r�������c�����������
������C���s����g�}|�sdS�|���d�}|d�}|dd��}|�d�}||kr&tdt|�����|s0|����|���kS�|dkr:|�d��n|�d	�sD|�d	�rM|�t�|���n|�t�|��	d
d���|D�]
}|�t�|���q[t�
dd
�|��d�tj�}	|	�
|�S�)zhMatching according to RFC 6125, section 6.4.3

http://tools.ietf.org/html/rfc6125#section-6.4.3
    F�.r���r���N�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr����repr�lower�append�
startswith�re�escape�replace�compile�join�
IGNORECASE�match)
�dn�hostnameZ
max_wildcardsZpats�partsZleftmost�	remainder�	wildcards�frag�patr���r���r����_dnsname_match���s,���

�
r���c�����������������C���s&���t�|�t�rtjdk�rt|�ddd�}�|�S�)N)�����ascii�strict)�encoding�errors)�
isinstance�str�sys�version_infoZunicode)�objr���r���r����_to_unicodeO���s���r*���c�����������������C���s���t��t|������}||kS�)z�Exact matching of IP addresses.

RFC 6125 explicitly doesn't define an algorithm for this
    (section 1.7.2 - "Out of Scope").
    )�	ipaddress�
ip_addressr*����rstrip)�ipname�host_ip�ipr���r���r����_ipaddress_matchV���s���r1���c��������������	���C���sf��|�st�d��z	t�t|��}W�n�tt�fy���d}Y�n�ty,���tdu�r)d}n��Y�nw�g�}|��dd�}|D�]/\}}|dkrQ|du�rKt||�rK�dS�|�|��q7|dkrf|durat	||�ra�dS�|�|��q7|s�|��dd�D�]}|D�]\}}|dkr�t||�r���dS�|�|��qsqot
|�d	kr�td
|d�t
t|��f���t
|�d	kr�td||d
�f���td��)a)��Verify that *cert* (in decoded format as returned by
    SSLSocket.getpeercert()) matches the *hostname*.  RFC 2818 and RFC 6125
    rules are followed, but IP addresses are not accepted for *hostname*.

CertificateError is raised on failure. On success, the function
    returns nothing.
    ztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDN�subjectAltNamer����DNSz
IP Address�subject�
commonNamer���z&hostname %r doesn't match either of %sz, zhostname %r doesn't match %rr���z=no appropriate commonName or subjectAltName fields were found)�
ValueErrorr+���r,���r*����UnicodeError�AttributeError�getr���r���r1����lenr���r����mapr
���)�certr���r/����dnsnames�san�key�value�subr���r���r����match_hostnameb���s\������
�

�����rB���)r���)�__doc__r���r'���r+����ImportError�__version__r6���r���r���r*���r1���rB���r���r���r���r����<module>���s�����
6