ó ÐH/\c @@sSdZddlmZddlZejZddlZddlmZddl m Z ddl m Z ddl m Z ddl mZdd lmZdd lmZd d d dddddgZeeeƒdeddgdfƒZyeWn)ek r ddddddfZnXeeZdekrGejdƒnejZd efd„ƒYZejeeed„Z e!ee"ejeeeeed „ Z#e Z$e#Z%d efd!„ƒYZ&epÚe'e&d"ƒ røe(d#„d$„ƒe&_ne)d%ƒZ*e)d&ƒZ+e)d'ƒZ,eee"e-e!ee.e.ed(„ Z/e!ed)„Z0dS(*s®SSL wrapper for socket objects on Python 2.7.9 and above. For the documentation, refer to :mod:`ssl` module manual. This module implements cooperative SSL socket wrappers. i(tabsolute_importN(tsocket(ttimeout_default(tcreate_connection(terror(ttimeout(tPYPY(t copy_globalst SSLContextt SSLSockett wrap_sockettget_server_certificatetcreate_default_contextt_create_unverified_contextt_create_default_https_contextt_create_stdlib_contexttnames_to_ignoreRRtdunder_names_to_keeptrecvtrecvfromt recv_intot recvfrom_intotsendtsendtot namedtuplecB@seZeeedd„ZRS(c C@s+td|d|d|d|d|d|ƒS(Ntsockt server_sidetdo_handshake_on_connecttsuppress_ragged_eofstserver_hostnamet_context(R (tselfRRRRR((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR <s N(t__name__t __module__tFalsetTruetNoneR (((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR;scC@sBt|tƒst|ƒ‚nttƒ}|jtO_|jtO_|jtt ddƒO_|t j kr‡t |_ t|_np|t jkr÷|jtt ddƒO_|jtt ddƒO_|jtt ddƒO_|jtƒn|s |s |r|j|||ƒn|j tkr>|j|ƒn|S(síCreate a SSLContext object with default settings. NOTE: The protocol and settings may change anytime without prior deprecation. The values represent a fair balance between maximum compatibility and security. tOP_NO_COMPRESSIONitOP_CIPHER_SERVER_PREFERENCEtOP_SINGLE_DH_USEtOP_SINGLE_ECDH_USE(t isinstancet _ASN1Objectt TypeErrorRtPROTOCOL_SSLv23toptionst OP_NO_SSLv2t OP_NO_SSLv3tgetattrt_ssltPurposet SERVER_AUTHt CERT_REQUIREDt verify_modeR#tcheck_hostnamet CLIENT_AUTHt set_cipherst_RESTRICTED_SERVER_CIPHERStload_verify_locationst CERT_NONEtload_default_certs(tpurposetcafiletcapathtcadatatcontext((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR Gs&   c C@sït|tƒst|ƒ‚nt|ƒ} | jtO_| jtO_|dk r`|| _n|| _ |r…| r…t dƒ‚n|s‘|r¤| j ||ƒn|s¶|s¶|rÌ| j |||ƒn| jt krë| j|ƒn| S(s/Create a SSLContext object for Python stdlib modules All Python stdlib modules shall use this function to create SSLContext objects in order to keep common settings in one place. The configuration is less restrict than create_default_context()'s to increase backward compatibility. scertfile must be specifiedN(R)R*R+RR-R.R/R$R5R6t ValueErrortload_cert_chainR:R;R<( tprotocolt cert_reqsR6R=tcertfiletkeyfileR>R?R@RA((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR ws"       cB@s eZdZd/d/d/eeed/eee dd/ed/d/d/d/d„Z e d„ƒZ e j d„ƒZ d„Zd/d„Zd„Zdd/d „Zd „Zed „Zd „Zeed ƒrÏd„Znd„Zd„Zd„Zded„Zd/d„Zd„Zdd„Zddd„Z d/dd„Z!ddd„Z"d/dd„Z#d„Z$d„Z%d„Z&d„Z'd„Z(e)ržd„Z*d „Z+nd!„Z,d"„Z-d#„Z.d$„Z/d%„Z0d&„Z1d'„Z2d(„Z3d)d*d+„Z4d,d-„Z5d.„Z6RS(0s„ gevent `ssl.SSLSocket `_ for Pythons >= 2.7.9 but less than 3. icC@s&|r||_n|r.| r.tdƒ‚n|rJ| rJtdƒ‚n|r`| r`|}nt|ƒ|_||j_|r”|jj|ƒn|r°|jj||ƒn|rÉ|jj|ƒn|râ|jj|ƒn||_||_ ||_ ||_ ||_ ||_ |jttƒtkr?tdƒ‚ntretj|d|ƒ|jƒntj|d|jƒx3tD]+}yt||ƒWq‚tk r¬q‚Xq‚W|rÌ|rÌtdƒ‚n|jjrî| rîtdƒ‚n||_||_||_| |_|j |j!ƒƒy|j"ƒWn1t#k rf}|j$t$j%kr]‚nt&}nXt'}d|_(t&|_)d|_+||_,|r"yb|jj-|j||d|ƒ|_+|rø|j!ƒ}|d krëtd ƒ‚n|j.ƒnWq"t#k r}|j/ƒ|‚q"XndS( Ns5certfile must be specified for server-side operationsscertfile must be specifieds!only stream sockets are supportedt_socks4server_hostname can only be specified in client modes'check_hostname requires server_hostnameitssl_sockgsHdo_handshake_on_connect should not be specified for non-blocking sockets(0RRBRR5R:RCtset_npn_protocolsR8RGRFREt ssl_versiontca_certstcipherst getsockoptt SOL_SOCKETtSO_TYPEt SOCK_STREAMtNotImplementedErrorRRt__init__t_dropRHt_delegate_methodstdelattrtAttributeErrorR6RRRRt settimeoutt gettimeoutt getpeernamet socket_errorterrnotENOTCONNR"R#t_makefile_refst_closedR$t_sslobjt _connectedt _wrap_sockett do_handshaketclose(RRRGRFRRERKRLRtfamilyttypetprototfilenoRt npn_protocolsRMRRtattrtet connectedRtx((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRS­s†                             cC@s|jS(N(R(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRAscC@s||_||j_dS(N(RR`RA(Rtctx((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRAs cC@std|jjƒ‚dS(NsCan't dup() %s instances(RRt __class__R (R((s0lib/python2.7/site-packages/gevent/_sslgte279.pytdupscC@sdS(N((Rtmsg((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt _checkClosedscC@s|js|jƒndS(N(RaRZ(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt_check_connected"s icC@sl|jƒx[|js%tdƒ‚n|dkrE|dkrAdSdS|dkrl|dkrltdƒ‚ny9|dk rŽ|jj||ƒS|jj|p dƒSWq tk rã|jdkrÊ‚n|j|jdt ƒq t k r|jdkr‚n|j|j dt ƒq t k rc}|j dtkr]|jr]|dk rYdSdS‚q Xq WdS( sORead up to LEN bytes and return them. Return zero-length string on EOF.s'Read on closed or unwrapped SSL socket.itsNegative read lengthigt timeout_excN(RrR`RBR$treadtSSLWantReadErrorRt_waitt _read_eventt_SSLErrorReadTimeouttSSLWantWriteErrort _write_eventtSSLErrortargst SSL_ERROR_EOFR(Rtlentbuffertex((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRv*s4       cC@sÜ|jƒxË|js%tdƒ‚ny|jj|ƒSWq tk rÓ}|jdtkrŒ|jdkrs‚n|j|j dt ƒqÔ|jdt krÍ|jdkr´‚n|j|j dt ƒqÔ‚q Xq WdS(shWrite DATA to the underlying SSL channel. Returns number of bytes of DATA actually transmitted.s(Write on closed or unwrapped SSL socket.igRuN( RrR`RBtwriteR}R~tSSL_ERROR_WANT_READRRxRyt_SSLErrorWriteTimeouttSSL_ERROR_WANT_WRITER|(RtdataR‚((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRƒKs   cC@s$|jƒ|jƒ|jj|ƒS(sáReturns a formatted version of the data in the certificate provided by the other end of the SSL channel. Return None if no certificate was provided, {} if a certificate was provided, but not validated.(RrRsR`tpeer_certificate(Rt binary_form((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt getpeercertbs  cC@s/|jƒ|j stj r"dS|jjƒS(N(RrR`R1tHAS_NPNR$tselected_npn_protocol(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRŒls tHAS_ALPNcC@s/|jƒ|j stj r"dS|jjƒS(N(RrR`R1RR$tselected_alpn_protocol(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRŽts cC@s$|jƒ|jsdS|jjƒS(N(RrR`R$tcipher(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRzs  cC@s$|jƒ|jsdS|jjƒS(N(RrR`R$t compression(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR€s  cC@s,|dkr(td||jfƒ‚ndS(Nis/non-zero flags not allowed in calls to %s on %s(RBRo(Rtmethtflags((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt __check_flags†s cC@sà|jƒ|jd|ƒ|tkr2|j}n|jsQtj||||ƒSxˆtrÛy|jj|ƒSWqTt k r¤|jdkr‘dS|j |j ƒqTt k r×|jdkrÄdS|j |j ƒqTXqTWdS(NRgi(Rrt_SSLSocket__check_flagsRRR`RRR#RƒRwRxRyR{R|(RR‡R’R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRŒs"       cC@sb|jƒ|jr)td|jƒ‚n5|dkrHtj|||ƒStj||||ƒSdS(Ns%sendto not allowed on instances of %s(RrR`RBRoR$RR(RR‡t flags_or_addrtaddr((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR¢s   cO@std|jƒ‚dS(Ns&sendmsg not allowed on instances of %s(RRRo(RR~tkwargs((s0lib/python2.7/site-packages/gevent/_sslgte279.pytsendmsg¬scC@su|jƒ|jd|ƒytj||ƒWn@tk rp}|jdkr^tdƒ‚nt|jŒ‚nXdS(Ntsendallgs&The operation did not complete (write)( RrR”RR™t_socket_timeoutRR{R}R~(RR‡R’R‚((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR™²s cC@se|jƒ|jrR|dkr5td|jƒ‚n|dkrEdS|j|ƒStj|||ƒS(Nis3non-zero flags not allowed in calls to recv() on %sRt(RrR`RBRoRvRR(RtbuflenR’((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRÀs     cC@s—|jƒ|dk r1|dkr1t|ƒ}n|dkrFd}n|jr|dkrqtd|jƒ‚n|j||ƒStj||||ƒS(Niis8non-zero flags not allowed in calls to recv_into() on %s( RrR$R€R`RBRoRvRR(RRtnbytesR’((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRÌs     cC@s<|jƒ|jr)td|jƒ‚ntj|||ƒS(Ns'recvfrom not allowed on instances of %s(RrR`RBRoRR(RR›R’((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRÜs   cC@sC|jƒ|jr)td|jƒ‚ntj||||ƒSdS(Ns,recvfrom_into not allowed on instances of %s(RrR`RBRoRR(RRRœR’((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRãs   cO@std|jƒ‚dS(Ns&recvmsg not allowed on instances of %s(RRRo(RR~R—((s0lib/python2.7/site-packages/gevent/_sslgte279.pytrecvmsgëscO@std|jƒ‚dS(Ns+recvmsg_into not allowed on instances of %s(RRRo(RR~R—((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt recvmsg_intoïscC@s$|jƒ|jr |jjƒSdS(Ni(RrR`tpending(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRŸós   cC@s'|jƒd|_tj||ƒdS(N(RrR$R`Rtshutdown(Rthow((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR ùs  cC@s;|jdkr(d|_tj|ƒn|jd8_dS(Ni(R^R$R`RRd(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRdþs cC@s|jd7_dS(Ni(R^(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt_reusescC@s/|jdkr|jƒn|jd8_dS(Ni(R^Rd(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRT s cC@sñxêtrìy|jjƒSWqtk rè}|jdtkrL|jrLdS|jdtkr—|jdkrt‚nt j ƒ|j |j dt ƒqé|jdtkrâ|jdkr¿‚nt j ƒ|j |jdtƒqé‚qXqWdS(NiRtgRu(R#R`R R}R~RRR„Rtsyst exc_clearRxRyRzR†R|R…(RR‚((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt_sslobj_shutdowns"   cC@sD|js"tdt|ƒƒ‚n|jƒ}d|_td|ƒS(NsNo SSL wrapper around RH(R`RBtstrR¥R$R(Rts((s0lib/python2.7/site-packages/gevent/_sslgte279.pytunwrap$s    cC@sd|_tj|ƒdS(N(R$R`Rt _real_close(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR©/s cC@sä|jƒx–tr¢y|jjƒPWq tk rc|jdkrJ‚n|j|jdtƒq t k rž|jdkr…‚n|j|j dtƒq Xq W|j j rà|j sÇtdƒ‚nt|jƒ|j ƒndS(sPerform a TLS/SSL handshake.gRus-check_hostname needs server_hostname argumentN(RsR#R`RcRwRRxRyt_SSLErrorHandshakeTimeoutR{R|RR6RRBtmatch_hostnameRŠ(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRc3s"       cC@sÜ|jrtdƒ‚n|jr0tdƒ‚n|jj|jt|jd|ƒ|_ya|rut j ||ƒ}nd}t j ||ƒ|s³t |_|jr³|jƒq³n|SWntk r×d|_‚nXdS(Ns!can't connect in server-side modes/attempt to connect already-connected SSLSocket!RI(RRBRaRRbRHR"RR`Rt connect_exR$tconnectR#RRcR[(RR–R¬trc((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt _real_connectIs$  '    cC@s|j|tƒdS(sQConnects to remote ADDR, and then wraps the connection in an SSL channel.N(R¯R"(RR–((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR­`scC@s|j|tƒS(sQConnects to remote ADDR, and then wraps the connection in an SSL channel.(R¯R#(RR–((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR¬escC@sStj|ƒ\}}|jƒ|jj|d|jd|jdtƒ}||fS(s¿Accepts a new connection from a remote client, and returns a tuple containing that new connection wrapped with a server-side SSL channel, and the address of the remote client.RRR(Rtacceptt _drop_eventsRR RRR#(RtnewsockR–((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR°js    triÿÿÿÿcC@s.ts|jd7_nt|||dtƒS(sMake and return a file-like object that works with the SSL connection. Just use the code from the socket module.iRd(RR^t _fileobjectR#(Rtmodetbufsize((s0lib/python2.7/site-packages/gevent/_sslgte279.pytmakefilewss tls-uniquecC@s_|tkrtdƒ‚n|dkr?tdj|ƒƒ‚n|jdkrRdS|jjƒS(säGet channel binding data for current connection. Raise ValueError if the requested `cb_type` is not supported. Return bytes of the data or None if the data is not available (e.g. before the handshake). s Unsupported channel binding types tls-uniques({0} channel binding type not implementedN(tCHANNEL_BINDING_TYPESRBRRtformatR`R$t tls_unique_cb(Rtcb_type((s0lib/python2.7/site-packages/gevent/_sslgte279.pytget_channel_binding‚s  cC@s |jdkrdS|jjƒS(s— Return a string identifying the protocol version used by the current SSL channel, or None if there is no established channel. N(R`R$tversion(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR½‘sN(7R R!t__doc__R$R"R;R,R#tAF_INETRQRStpropertyRAtsetterRpRrRsRvRƒRŠRŒthasattrR1RŽRRR”RRRR˜R™RRRRRRžRŸR RdRR¢RTR¥R¨R©RcR¯R­R¬R°R·R¼R½(((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR §sd    ]   !                        RcC@s |jƒS(N(RY(R((s0lib/python2.7/site-packages/gevent/_sslgte279.pyt¢scC@s |j|ƒS(N(RX(Rtvalue((s0lib/python2.7/site-packages/gevent/_sslgte279.pyRãssThe read operation timed outsThe write operation timed outs!The handshake operation timed outc C@sCtd|d|d|d|d|d|d|d|d |d | ƒ S( NRRGRFRRERKRLRRRM(R ( RRGRFRRERKRLRRRM((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR «s   c C@s‘|\}}|dk r!t}nt}t|d|d|ƒ}tt|ƒƒ4}t|j|ƒƒ}|jtƒ}WdQXWdQXt |ƒS(s÷Retrieve the certificate from the server at the specified address, and return it as a PEM-encoded string. If 'ca_certs' is specified, validate the server cert against it. If 'ssl_version' is specified, use it in the connection attempt.RER>N( R$R4R;RtclosingRR RŠR#tDER_cert_to_PEM_cert( R–RKRLt_RERARtsslsocktdercert((s0lib/python2.7/site-packages/gevent/_sslgte279.pyR ¹s     (1R¾t __future__Rtsslt__ssl__R1R\tgevent._socket2Rt gevent.socketRRRR[RRštgevent._compatRt gevent._utilRt__implements__tglobalst __imports__RUt NameErrort__all__tremoveRtorig_SSLContextR2R3R$R R,R"R RRR RÂRÀR}RzR…RªR;R#R R (((s0lib/python2.7/site-packages/gevent/_sslgte279.pytsl          / 'ÿô