ó ÐH/\c @@sÛdZddlmZddlZejZddlZddlmZm Z ddlm Z ddlm Z ddlmZddlmZd d d d gZeeeƒd edgdfƒZeeZdekrêejdƒnejZd efd„ƒYZdejfd„ƒYZy eZWnek r?n"Xeedƒrae e d„Znd efd„ƒYZ!e!e_"e dƒZ#e dƒZ$e dƒZ%e e e&e'e(e e)e)e d„ Z*e(e d„Z+dS(s SSL wrapper for socket objects on Python 3. For the documentation, refer to :mod:`ssl` module manual. This module implements cooperative SSL socket wrappers. i(tabsolute_importN(tsocketttimeout_default(terror(ttimeout(t copy_globals(treft SSLContextt SSLSockett wrap_sockettget_server_certificatetnames_to_ignoreRtdunder_names_to_keept namedtuplecB@sÎeZd Zeeed d d„Zeedƒs<eZ neej dƒrej j d„ƒZ ej j d„ƒZ ej j d„ƒZ needƒrÌejj d„ƒZejj d„ƒZnRS( cC@s4|jd|d|d|d|d|d|d|ƒS(Ntsockt server_sidetdo_handshake_on_connecttsuppress_ragged_eofstserver_hostnamet_contextt_session(tsslsocket_class(tselfRRRRRtsession((s+lib/python2.7/site-packages/gevent/_ssl3.pyR 4s  tcheck_hostnametsettercC@s tttƒjj||ƒdS(N(tsupertorig_SSLContexttoptionst__set__(Rtvalue((s+lib/python2.7/site-packages/gevent/_ssl3.pyROscC@s tttƒjj||ƒdS(N(RRt verify_flagsR(RR((s+lib/python2.7/site-packages/gevent/_ssl3.pyRSscC@s tttƒjj||ƒdS(N(RRt verify_modeR(RR((s+lib/python2.7/site-packages/gevent/_ssl3.pyR Wstminimum_versioncC@s tttƒjj||ƒdS(N(RRR!R(RR((s+lib/python2.7/site-packages/gevent/_ssl3.pyR!]scC@s tttƒjj||ƒdS(N(RRtmaximum_versionR(RR((s+lib/python2.7/site-packages/gevent/_ssl3.pyR"asN(t__name__t __module__tNoneRtFalsetTrueR thasattrRRRRRR R!R"(((s+lib/python2.7/site-packages/gevent/_ssl3.pyR/s  t_contextawaresockcB@sYeZdZed„ƒZejd„ƒZed„ƒZejd„ƒZd„ZRS(t_sslsockcC@s |jƒjS(N(R*tcontext(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR+sscC@s||jƒ_dS(N(R*R+(Rtctx((s+lib/python2.7/site-packages/gevent/_ssl3.pyR+wscC@s |jƒjS(s!The SSLSession for client socket.(R*R(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR{scC@s||jƒ_dS(N(R*R(RR((s+lib/python2.7/site-packages/gevent/_ssl3.pyR€scC@s;yt|jƒ|ƒSWntk r*nXt|ƒ‚dS(N(tgetattrR*t RuntimeErrortAttributeError(Rtname((s+lib/python2.7/site-packages/gevent/_ssl3.pyt __getattr__„s  (R*(R#R$t __slots__tpropertyR+RRR1(((s+lib/python2.7/site-packages/gevent/_ssl3.pyR)fs  t_createcC@sItjtƒ}||_|p!||j_|dk rE||j_n|S(N(t SSLObjectt__new__t_sslobjtownerR%R(tsslobjR8Rts((s+lib/python2.7/site-packages/gevent/_ssl3.pyt_SSLObject_factory—s   cB@s eZdZeZd+d+d+eeed+e e e dd+e d+d+d+d+d+d„Z e d„ƒZejd„ƒZe d„ƒZejd„ƒZe d„ƒZd„Zd+d „Zd „Zd d+d „Zd „Zed„Zd„Zeedƒrd„Zd„Zd„Znd„Zd„Zde d„Z!d+d„Z"d„Z#dd„Z$d dd„Z%d+dd„Z&d dd„Z'd+dd„Z(d„Z)d„Z*d „Z+d!„Z,d"„Z-d#„Z.d$„Z/d%„Z0d&„Z1d'„Z2d(„Z3d)d*„Z4RS(,sl gevent `ssl.SSLSocket `_ for Python 3. ic C@sœ|r||_n|r.| r.tdƒ‚n|rJ| rJtdƒ‚n|r`| r`|}nt|ƒ|_||j_|r”|jj|ƒn|r°|jj||ƒn|rÉ|jj|ƒn|râ|jj|ƒn||_||_ ||_ ||_ ||_ ||_ |jttƒtkr?tdƒ‚n|rx|rZtdƒ‚n|dk rxtdƒ‚qxn|jjrš| rštdƒ‚n||_||_||_||_| |_t}|dk rotj|d|jd|jd |jd |j ƒƒ|j!|j"ƒƒy|j#ƒWn+t$k r[}|j%t%j&krb‚qbnXt'}|j(ƒnA| dk r‘tj|d | ƒntj|d| d| d | ƒt)|ƒ|j*_+t|_,d|_-||_.|r˜yŒ|jj/|j*||ƒ|_-|dk r4t0|j-d |d |jƒ|_-n|rn|j"ƒ}|d kratdƒ‚n|j1ƒnWq˜t$k r”}|j2ƒ|‚q˜XndS(Ns5certfile must be specified for server-side operationsscertfile must be specifieds!only stream sockets are supporteds4server_hostname can only be specified in client modes,session can only be specified in client modes'check_hostname requires server_hostnametfamilyttypetprototfilenoR8RgsHdo_handshake_on_connect should not be specified for non-blocking sockets(3Rt ValueErrorRR tload_verify_locationstload_cert_chaintset_npn_protocolst set_cipherstkeyfiletcertfilet cert_reqst ssl_versiontca_certstcipherst getsockoptt SOL_SOCKETtSO_TYPEt SOCK_STREAMtNotImplementedErrorR%RRRRRRR&Rt__init__R<R=R>R?t settimeoutt gettimeoutt getpeernamet socket_errorterrnotENOTCONNR'tdetacht_wreft_sockR*t_closedR7t _connectedt _wrap_socketR;t do_handshaketclose(RRRERFRRGRHRIRR<R=R>R?Rt npn_protocolsRJRRRt connectedteRtx((s+lib/python2.7/site-packages/gevent/_ssl3.pyRP©s–                                    cC@s|jS(N(R(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR+ scC@s||_||j_dS(N(RR7R+(RR,((s+lib/python2.7/site-packages/gevent/_ssl3.pyR+s cC@s|jdk r|jjSdS(s!The SSLSession for client socket.N(R7R%R(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyRscC@s+||_|jdk r'||j_ndS(N(RR7R%R(RR((s+lib/python2.7/site-packages/gevent/_ssl3.pyRs cC@s|jdk r|jjSdS(s.Was the client session reused during handshakeN(R7R%tsession_reused(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyRc"scC@std|jjƒ‚dS(NsCan't dup() %s instances(ROt __class__R#(R((s+lib/python2.7/site-packages/gevent/_ssl3.pytdup(scC@sdS(N((Rtmsg((s+lib/python2.7/site-packages/gevent/_ssl3.pyt _checkClosed,scC@s|js|jƒndS(N(R[RS(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyt_check_connected0s icC@sK|jƒx:trF|js+tdƒ‚n|dkrK|dkrGdSdSy9|dk rm|jj||ƒS|jj|pdƒSWq tk rÂ|jdkr©‚n|j|j dt ƒq t k rý|jdkrä‚n|j|j dt ƒq t k rB}|jdtkr<|jr<|dkr8dSdS‚q Xq WdS(sORead up to LEN bytes and return them. Return zero-length string on EOF.s'Read on closed or unwrapped SSL socket.itigt timeout_excN(RgR'R7R@R%treadtSSLWantReadErrorRt_waitt _read_eventt_SSLErrorReadTimeouttSSLWantWriteErrort _write_eventtSSLErrortargst SSL_ERROR_EOFR(Rtlentbuffertex((s+lib/python2.7/site-packages/gevent/_ssl3.pyRk8s0        cC@sâ|jƒxÑtrÝ|js+tdƒ‚ny|jj|ƒSWq tk rÙ}|jdtkr’|jdkry‚n|j |j dt ƒqÚ|jdt krÓ|jdkrº‚n|j |j dt ƒqÚ‚q Xq WdS(shWrite DATA to the underlying SSL channel. Returns number of bytes of DATA actually transmitted.s(Write on closed or unwrapped SSL socket.igRjN(RgR'R7R@twriteRrRstSSL_ERROR_WANT_READRRmRnt_SSLErrorWriteTimeouttSSL_ERROR_WANT_WRITERq(RtdataRw((s+lib/python2.7/site-packages/gevent/_ssl3.pyRxYs    cC@sN|jƒ|jƒy|jj}Wntk rC|jj}nX||ƒS(sáReturns a formatted version of the data in the certificate provided by the other end of the SSL channel. Return None if no certificate was provided, {} if a certificate was provided, but not validated.(RgRhR7tpeer_certificateR/t getpeercert(Rt binary_formtc((s+lib/python2.7/site-packages/gevent/_ssl3.pyR~ps   cC@s/|jƒ|j stj r"dS|jjƒS(N(RgR7t_ssltHAS_NPNR%tselected_npn_protocol(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyRƒ€s tHAS_ALPNcC@s/|jƒ|j stj r"dS|jjƒS(N(RgR7RR„R%tselected_alpn_protocol(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR…ˆs cC@s |jjƒS(sReturn a list of ciphers shared by the client during the handshake or None if this is not a valid server connection. (R7tshared_ciphers(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR†ŽscC@s|js dS|jjƒS(s^Return a string identifying the protocol version used by the current SSL channel. N(R7R%tversion(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR‡”s cC@s$|jƒ|jsdS|jjƒS(N(RgR7R%tcipher(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyRˆs  cC@s$|jƒ|jsdS|jjƒS(N(RgR7R%t compression(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR‰£s  cC@sõ|jƒ|tkr"|j}n|jrÛ|dkrMtd|jƒ‚nx¡tr×y|jj|ƒSWqPtk r |jdkrdS|j |j ƒqPt k rÓ|jdkrÀdS|j |j ƒqPXqPWnt j||||ƒSdS(Nis3non-zero flags not allowed in calls to send() on %sg(RgRRR7R@RdR'RxRlRmRnRpRqRtsend(RR|tflagsR((s+lib/python2.7/site-packages/gevent/_ssl3.pyRŠ©s(        cC@sb|jƒ|jr)td|jƒ‚n5|dkrHtj|||ƒStj||||ƒSdS(Ns%sendto not allowed on instances of %s(RgR7R@RdR%Rtsendto(RR|t flags_or_addrtaddr((s+lib/python2.7/site-packages/gevent/_ssl3.pyRŒÀs   cO@std|jƒ‚dS(Ns&sendmsg not allowed on instances of %s(RORd(RRstkwargs((s+lib/python2.7/site-packages/gevent/_ssl3.pytsendmsgÊscC@sˆ|jƒ|jr8|dkr8td|jƒ‚q8nytj|||ƒSWn2tk rƒ|jdkr}tdƒ‚n‚nXdS(Nis6non-zero flags not allowed in calls to sendall() on %sgs&The operation did not complete (write)( RgR7R@RdRtsendallt_socket_timeoutRRp(RR|R‹((s+lib/python2.7/site-packages/gevent/_ssl3.pyR‘Ðs    cC@se|jƒ|jrR|dkr5td|jƒ‚n|dkrEdS|j|ƒStj|||ƒS(Nis3non-zero flags not allowed in calls to recv() on %sRi(RgR7R@RdRkRtrecv(RtbuflenR‹((s+lib/python2.7/site-packages/gevent/_ssl3.pyR“às     cC@s‘|jƒ|r+|dkr+t|ƒ}n|dkr@d}n|jr{|dkrktd|jƒ‚n|j||ƒStj||||ƒS(Niis8non-zero flags not allowed in calls to recv_into() on %s( RgR%RuR7R@RdRkRt recv_into(RRvtnbytesR‹((s+lib/python2.7/site-packages/gevent/_ssl3.pyR•îs     cC@s@|jƒ|jr)td|jƒ‚ntj|||ƒSdS(Ns'recvfrom not allowed on instances of %s(RgR7R@RdRtrecvfrom(RR”R‹((s+lib/python2.7/site-packages/gevent/_ssl3.pyR—ús   cC@sC|jƒ|jr)td|jƒ‚ntj||||ƒSdS(Ns,recvfrom_into not allowed on instances of %s(RgR7R@RdRt recvfrom_into(RRvR–R‹((s+lib/python2.7/site-packages/gevent/_ssl3.pyR˜s   cO@std|jƒ‚dS(Ns&recvmsg not allowed on instances of %s(RORd(RRsR((s+lib/python2.7/site-packages/gevent/_ssl3.pytrecvmsg scO@std|jƒ‚dS(Ns+recvmsg_into not allowed on instances of %s(RORd(RRsR((s+lib/python2.7/site-packages/gevent/_ssl3.pyt recvmsg_intoscC@s$|jƒ|jr |jjƒSdS(Ni(RgR7tpending(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR›s   cC@s'|jƒd|_tj||ƒdS(N(RgR%R7Rtshutdown(Rthow((s+lib/python2.7/site-packages/gevent/_ssl3.pyRœs  cC@sÓ|js"tdt|ƒƒ‚nxŒtr°y|jjƒ}PWq%tk rw|jdkrd‚n|j|jƒq%t k r¬|jdkr™‚n|j|j ƒq%Xq%Wd|_||j ksÏt ‚|S(NsNo SSL wrapper around g(R7R@tstrR'RœRlRRmRnRpRqR%RYtAssertionError(RR:((s+lib/python2.7/site-packages/gevent/_ssl3.pytunwraps"     cC@sd|_tj|ƒdS(N(R%R7Rt _real_close(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR¡As cC@s÷|jƒx–tr¢y|jjƒPWq tk rc|jdkrJ‚n|j|jdtƒq t k rž|jdkr…‚n|j|j dtƒq Xq Wt j d dkró|j jró|jsÚtdƒ‚nt|jƒ|jƒndS( sPerform a TLS/SSL handshake.gRjiiis-check_hostname needs server_hostname argumentN(ii(RhR'R7R]RlRRmRnt_SSLErrorHandshakeTimeoutRpRqtsyst version_infoRRRR@tmatch_hostnameR~(R((s+lib/python2.7/site-packages/gevent/_ssl3.pyR]Fs"      cC@s |jrtdƒ‚n|jr0tdƒ‚n|jj|jt|jƒ|_|j dk r„t |jd|d|j ƒ|_nya|r¢t j ||ƒ}nd}t j||ƒ|sà|jrÔ|jƒnt|_n|SWntk rd|_‚nXdS(Ns!can't connect in server-side modes/attempt to connect already-connected SSLSocket!R8R(RR@R[RR\RYR&RR7RR%R;Rt connect_extconnectRR]R'RT(RRŽR¦trc((s+lib/python2.7/site-packages/gevent/_ssl3.pyt _real_connect^s(  !$     cC@s|j|tƒdS(sQConnects to remote ADDR, and then wraps the connection in an SSL channel.N(R©R&(RRŽ((s+lib/python2.7/site-packages/gevent/_ssl3.pyR§wscC@s|j|tƒS(sQConnects to remote ADDR, and then wraps the connection in an SSL channel.(R©R'(RRŽ((s+lib/python2.7/site-packages/gevent/_ssl3.pyR¦|scC@sStj|ƒ\}}|jƒ|jj|d|jd|jdtƒ}||fS(s¿Accepts a new connection from a remote client, and returns a tuple containing that new connection wrapped with a server-side SSL channel, and the address of the remote client.RRR(Rtacceptt _drop_eventsRR RRR'(RtnewsockRŽ((s+lib/python2.7/site-packages/gevent/_ssl3.pyRªs    s tls-uniquecC@st|jdƒr"|jj|ƒS|tkr=tdƒ‚n|dkratdj|ƒƒ‚n|jdkrtdS|jjƒS(säGet channel binding data for current connection. Raise ValueError if the requested `cb_type` is not supported. Return bytes of the data or None if the data is not available (e.g. before the handshake). tget_channel_bindings Unsupported channel binding types tls-uniques({0} channel binding type not implementedN( R(R7R­tCHANNEL_BINDING_TYPESR@ROtformatR%t tls_unique_cb(Rtcb_type((s+lib/python2.7/site-packages/gevent/_ssl3.pyR­Žs  N(5R#R$t__doc__R)t_gevent_sock_classR%R&t CERT_NONEtPROTOCOL_SSLv23R'tAF_INETRNRPR3R+RRRcReRgRhRkRxR~RƒR(RR…R†R‡RˆR‰RRŠRŒRR‘R“R•R—R˜R™RšR›RœR R¡R]R©R§R¦RªR­(((s+lib/python2.7/site-packages/gevent/_ssl3.pyRŸsb    \   !               $      sThe read operation timed outsThe write operation timed outs!The handshake operation timed outc C@sCtd|d|d|d|d|d|d|d|d |d | ƒ S( NRRERFRRGRHRIRRRJ(R( RRERFRRGRHRIRRRJ((s+lib/python2.7/site-packages/gevent/_ssl3.pyR ©s   cC@st|\}}|dk r!t}nt}t|ƒ}t|d|d|d|ƒ}|jtƒ}|jƒt|ƒS(s÷Retrieve the certificate from the server at the specified address, and return it as a PEM-encoded string. If 'ca_certs' is specified, validate the server cert against it. If 'ssl_version' is specified, use it in the connection attempt.RHRGRIN( R%t CERT_REQUIREDR´tcreate_connectionR R~R'R^tDER_cert_to_PEM_cert(RŽRHRIt_RGR:tdercert((s+lib/python2.7/site-packages/gevent/_ssl3.pyR ¸s     (,R²t __future__Rtsslt__ssl__RRUt gevent.socketRRRRTRR’t gevent._utilRtweakrefRRXt__implements__tglobalst __imports__t__all__tremoveRRR³R)R5R;t NameErrorR(R%RRRoRzR¢R&R´RµR'R R (((s+lib/python2.7/site-packages/gevent/_ssl3.pytsT         7'  ÿÿ