/var/opt/nydus/ops/oscrypto/_win/__pycache__
Edit: /var/opt/nydus/ops/oscrypto/_win/__pycache__/tls.cpython-312.pyc (60540B)
N j d dl mZmZmZmZ d dlZd dlZd dlZd dl Z d dl
Z
ddl m Z
ddlmZ ddlmZmZmZmZmZmZmZmZmZmZmZm Z m Z m Z ddl m Z m!Z!m"Z" dd l#m$Z$m%Z%m"Z& dd
l'm(Z( dd l)m*Z*m+Z+m,Z,m-Z- dd l.m/Z/m0Z0m1Z1m2Z2 dd
l3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;m
Z>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZF ddlGmHZHm Z ddlImJZJ ej dk reLZMej ZOnePZOej dk r
ej ZRn ej ZRddgZS ej d ZU ej ZWeWd eWd fZX G d de0 ZY G d de/ ZZ G d de[ Z\ G d de[ Z]y) )unicode_literalsdivisionabsolute_importprint_functionN ) Certificate)pretty_message)buffer_from_bytesbuffer_from_unicodebytes_from_buffercastderefis_nullnativenewnullrefsizeofstructunwrapwrite_to_buffer )secur32 Secur32Const handle_error)crypt32 Crypt32Constr )kernel32) type_namestr_clsbyte_cls int_types)TLSErrorTLSVerificationErrorTLSDisconnectErrorTLSGracefulDisconnectError)detect_client_auth_requestdetect_other_protocol
extract_chainget_dh_params_length parse_alertparse_session_inforaise_client_authraise_dh_paramsraise_disconnectionraise_expired_not_yet_validraise_handshakeraise_hostnameraise_no_issuerraise_protocol_errorraise_protocol_version
raise_revokedraise_self_signedraise_verificationraise_weak_signature)load_certificater )parse_certificate) )r<
TLSSession TLSSockets (
|
|
)c e Zd Zy)_TLSDowngradeErrorN)__name__
__module__ __qualname__ B/opt/nydus/tmp/pip-target-a90h98xg/lib/python/oscrypto/_win/tls.pyrA rA Q s rF rA c e Zd ZdZy)_TLSRetryErrorz
TLSv1.2 on Windows 7 and 8 seems to have isuses with some DHE_RSA
ServerKeyExchange messages due to variable length integer encoding. This
exception is used to trigger a reconnection to attempt the handshake again.
N)rB rC rD __doc__rE rF rG rI rI V s rF rI c 8 e Zd ZdZdZdZdZdZdZddZ d Z
d Z y)r> zj
A TLS session object that multiple TLSSocket objects can share for the
sake of session reuse
Nc j t |t s t t dt | || _ |
t
g d }t |t r
t
|g }n.t |t s t t dt | |t
g d z
}|r t t dt | || _
g | _ |r|D ] }t |t r
|j }nt |t r t | }nmt |t r/t! |d 5 }t |j# }ddd n.t |t$ s t t dt | | j j' | | j) y# 1 sw Y 7xY w) a]
:param protocol:
A unicode string or set of unicode strings representing allowable
protocols to negotiate with the server:
- "TLSv1.2"
- "TLSv1.1"
- "TLSv1"
- "SSLv3"
Default is: {"TLSv1", "TLSv1.1", "TLSv1.2"}
:param manual_validation:
If certificate and certificate path validation should be skipped
and left to the developer to implement
:param extra_trust_roots:
A list containing one or more certificates to be treated as trust
roots, in one of the following formats:
- A byte string of the DER encoded certificate
- A unicode string of the certificate filename
- An asn1crypto.x509.Certificate object
- An oscrypto.asymmetric.Certificate object
:raises:
ValueError - when any of the parameters contain an invalid value
TypeError - when any of the parameters are of the wrong type
OSError - when an error is returned by the OS crypto library
zM
manual_validation must be a boolean, not %s
N)TLSv1TLSv1.1TLSv1.2zu
protocol must be a unicode string or set of unicode strings,
not %s
SSLv3rM rN rO z
protocol must contain only the unicode strings "SSLv3", "TLSv1",
"TLSv1.1", "TLSv1.2", not %s
rbz
extra_trust_roots must be a list of byte strings, unicode
strings, asn1crypto.x509.Certificate objects or
oscrypto.asymmetric.Certificate objects, not %s
)
isinstancebool TypeErrorr r _manual_validationsetr
ValueErrorrepr
_protocols_extra_trust_rootsr asn1r! r; openreadAsn1Certificateappend_obtain_credentials)selfprotocolmanual_validationextra_trust_rootsunsupported_protocolsextra_trust_rootfs rG __init__zTLSSession.__init__m s > +T2N +,
#4 :;H h (H:HHc*N (#
!)3/W+X X ^ *+
#"$ $5 . <'7'<'<$ 0(;'89I'J$ 0': .5+|j# t j$ t j& t j( g t+ t, dt/ | z }t1 | D ]
\ }}|||< t j2 t j4 z } | j6 s | j8 s| t j: z } n| t j< z } t? t, d }
tA |
} t jB | _" d| _# tI | _% tI | _& d| _' tI | _( t/ | | _) || _* || _+ d| _, d| _- d| _. | | _/ d| _0 t+ t, d } t- jb tI t jd t jf tI |
tI tI | tI }
ti |
| | _5 y)zU
Obtains a credentials handle from secur32.dll for use with SChannel
rP r rO z
ALG_ID[%s]
SCHANNEL_CREDz CredHandle *N)6r SP_PROT_SSL3_CLIENTSP_PROT_TLS1_CLIENTSP_PROT_TLS1_1_CLIENTSP_PROT_TLS1_2_CLIENTitemsrZ CALG_AES_128 CALG_AES_256 CALG_3DES CALG_SHA1
CALG_ECDHE
CALG_DH_EPHEM
CALG_RSA_KEYX
CALG_RSA_SIGN
CALG_ECDSA
CALG_DSS_SIGNextend CALG_SHA512 CALG_SHA384 CALG_SHA256r r len enumerateSCH_USE_STRONG_CRYPTOSCH_CRED_NO_DEFAULT_CREDSrV r[ SCH_CRED_AUTO_CRED_VALIDATION SCH_CRED_MANUAL_CRED_VALIDATIONr r SCHANNEL_CRED_VERSION dwVersioncCredsr paCred
hRootStorecMappers
aphMapperscSupportedAlgspalgSupportedAlgsgrbitEnabledProtocolsdwMinimumCipherStrengthdwMaximumCipherStrengthdwSessionLifespandwFlags dwCredFormatAcquireCredentialsHandleW
UNISP_NAMESECPKG_CRED_OUTBOUNDr _credentials_handle)rb protocol_valuesprotocol_bit_maskkeyvaluealgs alg_arrayindexalgflagsschannel_cred_pointer
schannel_credcred_handle_pointerresults rG ra z TLSSession._obtain_credentials sv "55!55#99#99
)//1JCdoo%!U*! 2
% % % % " " " " # # & & & & & & # # & &
' KK (( (( ((
D !9: #D/JE3 "Ie * 22\5[5[[&&t/F/F \?? ?E \AA AE &w @ 45
"."D"D
#v
#'6
!"
#'6
'*9~
$*3
'.?
+01
-01
-*+
' %
%&
" !'> :22 F # # - - F ! F F F
V #6 rF c | j r2t j | j }t | d | _ y y N)r r FreeCredentialsHandler )rb r s rG __del__zTLSSession.__del__ s6 # # 2243K3KLF '+D $ $rF )NFN) rB rC rD rJ rZ _ciphersrV r[ r ri ra r rE rF rG r> r> a s8
JH X#tO7b,rF c e Zd ZdZdZdZdZdZdZdZ dZ
dZ dZ dZ
dZdZdZdZdZdZdZdZdZdZdZdZdZdZe d d Z d!dZ d Z d Z d"dZ!d Z"d d
Z#d Z$d Z%d
Z&d Z'd dZ(d Z)d Z*d Z+d Z,e-d Z.e-d Z/e-d Z0e-d Z1e-d Z2e-d Z3e-d Z4e-d Z5e-d Z6e-d Z7e-d Z8d Z9y)#r? z8
A wrapper around a socket.socket that adds TLS
NFc 2 t |t j s t t dt | t |t s t t dt | |.t |t s t t dt | | dd| }||_ ||_ |j |S # t $ r'}t |j |j }|d}~wt $ r }t! |j }|d}~ww xY w)az
Takes an existing socket and adds TLS
:param socket:
A socket.socket object to wrap with TLS
:param hostname:
A unicode string of the hostname or IP the socket is connected to
:param session:
An existing TLSSession object to allow for session reuse, specific
protocol or manual certificate validation
:raises:
ValueError - when any of the parameters contain an invalid value
TypeError - when any of the parameters are of the wrong type
OSError - when an error is returned by the OS crypto library
zU
socket must be an instance of socket.socket, not %s
zK
hostname must be a unicode string, not %s
N`
session must be an instance of oscrypto.tls.TLSSession, not %s
)session)rS socket_socketrU r r r r> _socket _hostname
_handshakerA r$ message certificaterI r# )clsr hostnamer
new_socketenew_es rG wrapzTLSSocket.wrapE s * &'..1N &!
(G,N (#
z':'FN '"
tW5
#
'
! ! # # (AMMBEK QYY'EK s$ 1C D "C.. D:DDc d| _ d| _ |
|d| _ nt |t s t t
dt | t |t s t t
dt | |8t |t j s t t
dt | t j ||f| | _ | j j | | t }n.t |t s t t
dt | || _ | j r|| _ | j# yy# t$ $ r | j' t |j( t+ dg z
|j, |j. }|j1 d| _ || _ t j ||f| | _ | j j | | j# Y yt2 $ rR d| _ t j ||f| | _ | j j | | j# Y yw xY w)a
:param address:
A unicode string of the domain name or IP address to connect to
:param port:
An integer of the port number to connect to
:param timeout:
An integer timeout to use for the socket
:param session:
An oscrypto.tls.TLSSession object to allow for session reuse and
controlling the protocols and validation performed
rF NzR
address must be a unicode string, not %s
zI
port must be an integer, not %s
zJ
timeout must be a number, not %s
r rO )_received_bytes_decrypted_bytesr rS r rU r r r" numbersNumberr create_connection
settimeoutr> _sessionr r rA closerZ rW rV r[ r rI )rb addressporttimeoutr new_sessions rG ri zTLSSocket.__init__ s' # # ?t| DL gw/ g& ! dI. dO ! ":gw~~+N g& ! #44gt_gNDL LL # #G , ? lGGZ0N '"
<< $DN
"!
'
"
(&&i[)99....
!'*$ +
& 8 8'4 ' R ''0!"
"'*$ & 8 8'4 ' R ''0!
"s ?E B7I$
AI$#I$c 6 t t d|z }t d| D ]6 }d|| _ t j
|| _ t || _ 8 t t d }t | }t j |_ ||_
||_ ||fS )z
Creates a SecBufferDesc struct and contained SecBuffer structs
:param number:
The number of contains SecBuffer objects to create
:return:
A tuple of (SecBufferDesc pointer, SecBuffer array)
z
SecBuffer[%d]r
SecBufferDesc)r r rangecbBufferr SECBUFFER_EMPTY
BufferTyper pvBufferr r SECBUFFER_VERSION ulVersioncBufferspBuffers)rb numberbuffersr sec_buffer_desc_pointersec_buffer_descs rG _create_bufferszTLSSocket._create_buffers s g 781f%E&'GEN #(4(D(DGEN %&*fGEN # &
#)/"B !89$0$B$B!#) #* '11rF c
$ d}d} t j t j t j t dt }t
| r t d t }| j j D ] }|j }t j |t j |t | t j t }|s t d |j |j t# t d }t% j& | j( t* j, | }t/ | t1 | }t3 t d| }t# t4 d } t5 j6 | t3 t d| }
t# t d } t3 t dt j8 | d< t3 t dt j: | d< t3 t dt j< | d < t? t d
} t1 | }
d |
_ t3 t d | |
_! t? t d
}t1 | }t jD |_# |
|_$ t? t d }t1 | }||_% tM t | }||_' t# t d }t jP t ||
||t jR t jT z t | }t | t jV }t1 | }t1 | }tY tZ |j\ }|dk( rt1 |j^ }t1 | }tY tZ |j` }|jb |dz
}t1 | }t1 |jd } tg | jh tY tZ | jj } tm jn | } | j |v r|t jp z }t? t d } t1 | } tM t | | _' t jr | _: d| _; t3 t dty | jz | _> t? t d }!t1 |! }"tM t |" |"_' ||"_? t3 t d| |"_@ t? t d }#t1 |# }$tM t |$ |$_' t j t j ||!|# }t | t1 | }%tg |%jh tY tZ |%jj }tm jn | }|$j }&|&r|&t j k( r t | |&t j k( r.t | }'|'j r t | n t | |&t j k( rt || jz |&t j k( r t | |&t j k( r t | t | |j t ddg v r t | |rt j |d |rt j | yy# |rt j |d |rt j | w w xY w)z
Manually invoked windows certificate chain builder and verification
step when there are extra trust roots to include in the search process
Nr zPCERT_CONTEXT *
PCERT_CONTEXTz
FILETIME *z char *[3]zchar *r r CERT_ENHKEY_USAGEr< zchar **CERT_USAGE_MATCHCERT_CHAIN_PARAzPCERT_CHAIN_CONTEXT * SSL_EXTRA_CERT_CHAIN_POLICY_PARAz wchar_t *CERT_CHAIN_POLICY_PARAzvoid *CERT_CHAIN_POLICY_STATUSmd5md2)Ur
CertOpenStorer CERT_STORE_PROV_MEMORYX509_ASN_ENCODINGr r handle_crypt32_errorrW r r[ dump CertAddEncodedCertificateToStorer CERT_STORE_ADD_USE_EXISTINGaddsha256r r QueryContextAttributesW_context_handle_pointerr SECPKG_ATTR_REMOTE_CERT_CONTEXTr r r
r GetSystemTimeAsFileTimePKIX_KP_SERVER_AUTHSERVER_GATED_CRYPTO SGC_NETSCAPEr cUsageIdentifierrgpszUsageIdentifierUSAGE_MATCH_TYPE_ORdwTypeUsageRequestedUsager cbSizeCertGetCertificateChainCERT_CHAIN_CACHE_END_CERT&CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY.CERT_CHAIN_POLICY_IGNORE_ALL_REV_UNKNOWN_FLAGSr intcChainrgpChaincElement
rgpElement pCertContextr
pbCertEncoded
cbCertEncodedr_ load'CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAGAUTHTYPE_SERVER
dwAuthType fdwChecksr r pwszServerNamer pvExtraPolicyPara CertVerifyCertificateChainPolicyCERT_CHAIN_POLICY_SSLdwErrorCERT_E_EXPIREDr0 CERT_E_UNTRUSTEDROOTr: self_signedr7 r3 CERT_E_CN_NO_MATCHr2 TRUST_E_CERT_SIGNATUREr9 CRYPT_E_REVOKEDr6 r8 hash_algoCertCloseStoreCertFreeCertificateChain)(rb storecert_chain_context_pointer cert_hashescert cert_datar cert_context_pointer_pointercert_context_pointerorig_now_pointer now_pointerusage_identifierscert_enhkey_usage_pointercert_enhkey_usagecert_usage_match_pointercert_usage_matchcert_chain_para_pointercert_chain_paracert_chain_para_size"cert_chain_context_pointer_pointer cert_chain_policy_para_flagscert_chain_context
num_chainsfirst_simple_chain_pointerfirst_simple_chain num_elementslast_element_pointer last_elementlast_element_certlast_element_cert_data last_cert(ssl_extra_cert_chain_policy_para_pointer ssl_extra_cert_chain_policy_para cert_chain_policy_para_pointercert_chain_policy_para cert_chain_policy_status_pointercert_chain_policy_status cert_contexterror
oscrypto_certs( rG _extra_trust_root_validationz&TLSSocket._extra_trust_root_validation s %)"g M )) 33 .. E u~$Q' %K
88 IIK AA 22 N <<F
(+ , 9 ,/w8I+J ( 44,, <<,F
#)*F#G #' BV#W #8\ : , ,-= > w 6FGK #G[ 9 #'<;[;[#\ a #'<;[;[#\ a #'<;T;T#U a (.w8K(L % &'@ A 12 .59'9N_5` 2'-g7I'J $ %&> ? &2&F&F #%6 "&,W6G&H # $%< =O-=O *#)'?#C %9O "14W>U1V . 44$' 66 9l9ll2 F
! (+7+f+f ()/0R)S &
"((B!C %7%>%>?JQ-34F4O4O-P*%+,F%G" %c+=+F+F G '9'D'D\TUEU'V$ %&: ; $*<+D+D$E!):%333 1 ? ?@*& , 0 01G H ##{20L4h4hh07=gGi7j 4/56^/_ ,6B#DNN3? , ; .4G=U-V *%+,J%K ",27V.W $ + == 22*.0 F
! (!"67L),*D*DfSR^RlRlFmnI"'' 2D,44EL 7 77/5L = ==$4T$:M$00)$/'-L ; ;;"4 8L ? ??(.L 8 88!$'"4(~~eU^!44$T* &&ua0)001KL * &&ua0)001KL *s Z&[ 2\c B d}d}d} |r
| j }nt t d }|}t j dt j
dt j dt j dt j dt j dt j d i}d
| _ |D ] }| xj |z c_ | j d \ }}t j |d
_ | j d \ } }t j |d
_ t j |d _ t t d
}
|r
|} t! } n t! } |} t j" | j$ j& | | j( | j d
d
t! d
| | |
t! }
|
t+ t j, t j. g vrt1 |
t2 |s| }n| }d}d}|d
j4 d
kD rt7 |d
j8 |d
j4 }||z
}| j: j= | d
|d
_ t j> |d
j8 t! |d
_ tA d }tC t d| |d
_ d}|
t j, k7 r d}| j: jE d }|dk( r
tG ||z
}| xjJ |z
c_% tM | jJ |d
_ tO || jJ t j" | j$ j& || j( | j d
d
|d
t! | |
t! }
|
t jP k( rt j |d
_ |d j t jR k7 rnt jR |d _ d
|d _ tU |d j8 s4t j> |d j8 t! |d _ |r
tG |
t jV k( r;tY | r
t[ t] | }|r|dk( r
t_ ta |
t jb k( r$te | }tg |d
| j( |
t jh k( rte | }tk |d
|
t jl k( r=te | }|d
}to | }|jp s ts | tu | |
t jv k( rty | dk r
t{ |
t j| k( r
t[ |
t~ j k( r t |
t j k( r|d j4 d
kD rt7 |d j8 |d j4 }||z
}|dd }|dk( s|dk( rTd| j$ j v r |d
j8 t! |d
_ |d j t j k( r|d j4 }| jJ | d | _% t jR |d _ d
|d _ t j> |d j8 t! |d _ |
t j, k( r|| d }nd| _% |
t j, k7 r t t d }t j |t j | }
t1 |
t2 t | } t j d t j d t j d t j d!t j dij t t | j t | j | _Z | j t+ g d" v r4t || } | d# | _\ | d$ | _] | d% | _^ | d& | __ t |
} |D ]" }|| z d
k( s t t d'|| |s|| _ d}t t d( } t j | j t j | }
t1 |
t | } t t | j | _e t t | j | _g t t | j | _i | j | j z | j z | _j | j$ j r| j |rttU |d
j8 s"t j> |d
j8 tU |d j8 s"t j> |d j8 |rt j | yy# tH $ r d}Y w xY w# t t j f$ r | j w xY w# |rttU |d
j8 s"t j> |d
j8 tU |d j8 s"t j> |d j8 |rt j | w w xY w))z
Perform an initial TLS handshake, or a renegotiation
:param renegotiate:
If the handshake is for a renegotiation
Nz CtxtHandle *zreplay detectionzsequence detectionconfidentialityzmemory allocation integrityzstream orientationz disable automatic client authr r r ULONG *rF i BYTE *F T)r F i r= ( +rO zMServer certificate verification failed - weak certificate signature algorithmzTLS handshake failed SecPkgContext_ConnectionInfoSSLv2rQ rM rN rP cipher_suite compression
session_idsession_ticketzl
Unable to obtain a credential context with the property %s
SecPkgContext_StreamSizes)qr r r r ISC_REQ_REPLAY_DETECTISC_REQ_SEQUENCE_DETECTISC_REQ_CONFIDENTIALITYISC_REQ_ALLOCATE_MEMORYISC_REQ_INTEGRITYISC_REQ_STREAMISC_REQ_USE_SUPPLIED_CREDS_context_flagsr SECBUFFER_TOKENr SECBUFFER_ALERTr InitializeSecurityContextWr r r rW SEC_E_OKSEC_I_CONTINUE_NEEDEDr r# r r r r sendFreeContextBufferr
r
recvr/ socket_error_clsr r r SEC_E_INCOMPLETE_MESSAGEr r SEC_E_ILLEGAL_MESSAGEr' r- r+ r5 r1 SEC_E_WRONG_PRINCIPALr) r2 SEC_E_CERT_EXPIREDr0 SEC_E_UNTRUSTED_ROOTr: r r3 r7 SEC_E_INTERNAL_ERRORr* r. SEC_I_INCOMPLETE_CREDENTIALSr r r9 SEC_E_INVALID_TOKENrZ rA r( r4 SEC_E_BUFFER_TOO_SMALLSEC_E_MESSAGE_ALTEREDrI SEC_E_INVALID_PARAMETERSECBUFFER_EXTRAr r SECPKG_ATTR_CONNECTION_INFOr SP_PROT_SSL2_CLIENTrl rm rn ro getr r
dwProtocolr _protocolr,
_cipher_suite _compression _session_id_session_ticketr OSErrorr SECPKG_ATTR_STREAM_SIZEScbHeader _header_sizecbMaximumMessage
_message_size cbTrailer
_trailer_size _buffer_sizer[ r> r r< r DeleteSecurityContext)!rb renegotiate
in_buffers out_buffersnew_context_handle_pointertemp_context_handle_pointerrequested_flagsflagin_sec_buffer_desc_pointerout_sec_buffer_desc_pointer output_context_flags_pointer first_handle
second_handler handshake_server_byteshandshake_client_bytestokenin_data_buffer
bytes_read fail_late
alert_infochainr r= alert_bytes alert_number extra_amountconnection_info_pointerconnection_info session_infooutput_context_flagsstream_sizes_pointer stream_sizess! rG r zTLSSocket._handshake s
%)"` J.2.J.J+-0.-I*.H+ 224F 446J 446G 446I .. ++-A 779X O #$D '##t+# ( 6:5I5I!5L 2 &
'3'C'CJqM $7;7K7KA7N 4 '(4(D(DKN %(4(D(DKN %+.w +B ( : $
#v ;
77
11 ## +,
F S,"7"7 9[9[!\ ]] VX. .;+.:+%( "%( "1~&&*)+a.*A*A;q>CZCZ[&%/& !!%(*+ A'))+a.*A*AB*.& A' .u 5N%)'8^%LJqM " JL 1 11% %I!% !2!24!8J!S(+- '*4&$$
2$),T-A-A)B
1
& 0D0DE ;;MM55/NN''.F/0F
\ B BB/;/K/KJqM, "!}//<3O3OO3?3O3O
1
012
1
. &z!}'='= > # 5 5jm6L6L M59VJqM 2 +- \ ? ??12HI)+!,-C!DJ!jG&;.0#%\ ? ?? )*@ AE"58T^^<\ < << )*@ AE/a9\ > >> )*@ AE 8D$4T$:M(44'-%d+\ > >>+,BCdJ')\ F FF%'\ @ @@(.\ = == #1~..2&7 A8O8OQ\]^Q_QhQh&i .+=.'21Q'7 '72lg6M (DMM,D,D DT]]MeMeIfijIj(56L(M&8$s$)!H'" !" 22HI)+,-CD,-CD#% \ @ @@FlNpNpDp DMM$<$<< ,-C DD ')\ A AA+,BCdJ')l&;&;\=_=_%`!aa 2 q>**Q. -k!n.E.E{ST~G^G^ _E*e3*LL%%e,./KN+--k!n.E.EF.2fKN+ a=++|/K/KK#-a=#9#9L+/+?+?
+OD(/;/K/KJqM,-.JqM*--jm.D.DE-1VJqM* !6!661G
1W. ,/D(_ L 1 11b '-W6T&U # 44+ 88'F
* $%< =O 00' 00' 00' 22I 22I c&o 8 897?C]C];^_
N ~~%M!NN 12HJ` a %1.%A"$0 $?!#/ #= '34D'E$#()E#F '//A5!. (- # ( /J,-1*'-g7R'S$ 8800 99(
V$ %&: ; $*3 0E0E$F!%+C 1N1N%O"%+C 1G1G%H"$($5$58J8J$JTM_M_$_!}}//113 {1~ 6 67--k!n.E.EF {1~ 6 67--k!n.E.EF)--.HI *_ ) % $I%H ' JJL {1~ 6 67--k!n.E.EF {1~ 6 67--k!n.E.EF)--.HI *sL J?o ,o 4Wo Eo D'o o o o o +p p Br c
t |t s t t dt | j
D j dk7 r% j d| } j |d _ |S j j st j _ j d \ _ _
t j j d _ t# t$ d j j d _ t) | j }t+ j d
j d j d j d
fd
} j }t- | }d _ |dkD r j/ d s d _ |S t- j0 dk( }||k r|rP xj0 j2 j5 | z
c_ t- j0 dk( r
t7 t9 t- j0 j }|dk( rnT| j d _ t= j j0 d| t% j> j
j dt+ }d }|t j@ k( r | d }|t jB k( rd _" jG n|t jH k( r# jK d
jM | S |t jN k7 rtQ |tR tU t jV t jX t jZ g } d}
fD ] } | j } | t j k( r/|t] | j& | j: z
}t- | }Q| t j^ k( rta tb | j: }
| | vste t d| |
r j0 ||
z
d _ n j0 |d _ | j/ d rd }|st- j0 dk( rn||k rt- | |kD r||d _ |d| }|S )a0
Reads data from the TLS-wrapped socket
:param max_length:
The number of bytes to read
:raises:
socket.socket - when a non-TLS socket error occurs
oscrypto.errors.TLSError - when a TLS-related error occurs
ValueError - when any of the parameters contain an invalid value
TypeError - when any of the parameters are of the wrong type
OSError - when an error is returned by the OS crypto library
:return:
A byte string of the data read
zG
max_length must be an integer, not %s
NrF r rC r r r< c P t j _ t t dj
_ d _ t j _ _ d_ t j _ _ d_ t j _ _ d_ y )NrC r ) r SECBUFFER_DATAr r
r _decrypt_data_bufferr r r )buf0buf1buf2buf3
null_valuerb s rG _reset_buffersz&TLSSocket.read.._reset_buffers s~ * 9 9DO (D4M4M NDM DM * : :DO &DM DM * : :DO &DM DM * : :DO &DM DMrF FT)r z]
Unexpected decrypt output buffer of type %s
)3rS r" rU r r r r
_raise_closedr r
r~ r
_decrypt_desc_decrypt_buffersr r r r
r r maxr r select_readr r r_ r/ minr r DecryptMessagera SEC_I_CONTEXT_EXPIRED_remote_closedshutdownSEC_I_RENEGOTIATEr r^ r[ r r# rW r SECBUFFER_STREAM_HEADERSECBUFFER_STREAM_TRAILERr rl r r rv )rb
max_lengthoutputto_recvr
output_lendo_readdata_lenr valid_buffer_typesr buf buffer_typer r r r r s ` @@@@@rG r^ zTLSSocket.read sn $ *i0N *%
' ' / $$+ ..q<(,(=(=jk(J%
(((9$:K:K(LD %8<8L8LQ8O 5D 52>2M2MD ! !! $ /04WhHaHa0bD ! !! $ -j$"3"34 V
$$Q'$$Q'$$Q'$$Q' " &&[
# >$"2"21"5$'D !M d**+q0:%$$ (9(9'(BB$t++,1')3t 3 34d6G6GHH1}08D ! !! $ - D 5 5t7K7KAh7W X ++,,"" F G >>> <===&*#
<999D1yy,,<000 VX.!$ ,, 44 55& "
L dD$/ !nn ,"="== / cll KKF!$VJ L$@$@@#)#s||#2V2VD ! !! $ /040A0AD ! !! $ -04WhHaHa0bD ! !! $ -2>2M2MD ! !! $ /03D4M4MtO`O`0aD ! !! $ -2>2W2WD ! !! $ /040B0BD ! !! $ -03D4M4MtO`O`cgcucuOu0vD ! !! $ -$i!m3t9d&8&89H D 5 5tAh7GIZIZ [08D ! !! $ -03D4M4MtO`O`ckOk0lD ! !! $ - ++,,"" F ... VX. S$"7"7":"C"CDG vc4#8#8#;#D#DE EG vc4#8#8#;#D#DE EG
!!"3D4M4Mw"WX >D7 $i!m, MM
77e#')
s "/M( (N;NNc l t j g | j gg | \ }}}t | dkD S )aw
Blocks until the socket is ready to be written to, or the timeout is hit
:param timeout:
A float - the period of time to wait for the socket to be ready to
written to. None for no time limit.
:return:
A boolean - if the socket is ready for writing. Will only be False
if timeout is not None.
r )r r r )rb r r write_readys rG select_writezTLSSocket.select_write' s5 #MM"t||nb' J;; !##rF c
| j yd} t dk\ rt t d }d|d _ t
j |d _ t t dt d |d _
t t d }t | }t
j |_ d |_ ||_ t j" | j | }t% |t& | j) d
\ }}t
j |d _ t
j* |d _ t t d }t j, | j. j0 | j | j2 | j4 ddt7 dt7 ||t7 }t9 t
j: t
j< t
j> g }||vrt% |t& tA |d j |d j } | jB jE | |rttK |d j s"t jL |d j tK |d j s"t jL |d j t jN | j d| _ | jB jQ tF jR y# tF jH $ r Y w xY w# tF jH $ r Y yw xY w# |rttK |d j s"t jL |d j tK |d j s"t jL |d j t jN | j d| _ | jB jQ tF jR w # tF jH $ r Y w w xY wxY w) z
Shuts down the TLS session and then shuts down the underlying socket
:raises:
OSError - when an error is returned by the OS crypto library
N)rF r z SecBuffer[1]r r rC s r r r rB )*r _win_version_infor r r r rX r r
r
r r r r r r r ApplyControlTokenr r# r rY rZ r r r rW r rW r[ SEC_E_CONTEXT_EXPIREDr\ r r r] r r< r r^ r r SHUT_RDWR)
rb r r r r r r r acceptable_resultsr s
rG r zTLSSocket.shutdown7 sH ' ' / F !F* g~6 '(
#(4(D(D
%&*7H>OPc>d&e
#*0/*J'"()@"A,8,J,J)+,(+2( 2243O3OQhi VX.7;7K7KA7N 4 '(4(D(DKN %(4(D(DKN %+.w +B ( 77
11,,##+,
F "% %% 22 22& "
// VX.%k!n&=&={1~?V?VWE
!!%(
{1~ 6 67--k!n.E.EF {1~ 6 67--k!n.E.EF ) )$*F*F G+/D (
%%g&7&78 MM
MM
{1~ 6 67--k!n.E.EF {1~ 6 67--k!n.E.EF ) )$*F*F G+/D (
%%g&7&78MM
sa G;L!
K/ )L /LL! LL! L L !B P?)O)(P)O?<P>O??Pc R | j | j r# | j j d| _ yy# t j $ r Y w xY w# | j r= | j j n# t j $ r Y nw xY wd| _ w w xY w)zN
Shuts down the TLS session and socket and forcibly closes it
N)r r r r r< r s rG r zTLSSocket.close s
$ MMO ||LL&&( $
||LL&&(
# s@ A A AA
B&)BB&BB&B B&c t t d }t j | j t
j | }t |t t | }t t d| }t | }t |j t t |j }t! j" | | _ g | _ d} |j( }t j* |t- }t/ | st | }t |j t t |j } | |k7 r.| j& j1 t! j" | t j* || }t/ | s|rt j2 |d yy# |rt j2 |d w w xY w)zh
Reads end-entity and intermediate certificate information from the
TLS session
zCERT_CONTEXT **zCERT_CONTEXT *Nr )r r r r r r r r r# r r
r r r r r r_ r _certificate_intermediates
hCertStoreCertEnumCertificatesInStorer r r` r )
rb r r r r; r store_handlecontext_pointercontextr s
rG _read_certificatesz TLSSocket._read_certificates sz (+74E'F$00 ( ( 8 8 (
VX& %&B C #G-=?S T 23 %l&@&@&lNhNhBij + 0 0 ; 8'22L % A A,PTPV WO o. 1()>)>sGLaLa@bc 9$''../C/CD/IJ")"E"ElTc"d o. &&|Q7 |&&|Q7 s
CF& &Gc F | j r t d t d )zi
Raises an exception describing if the local or remote end closed the
connection
z$The remote end closed the connectionz!The connection was already closed)r r& r% r s rG r zTLSSocket._raise_closed s% ,-ST T$%HI IrF c | j | j | j | j | j S )zu
An asn1crypto.x509.Certificate object of the end-entity certificate
presented by the server
)r r r r r s rG r zTLSSocket.certificate s@ ' ' / $ # # % rF c | j | j | j | j | j S )zz
A list of asn1crypto.x509.Certificate objects that were presented as
intermediates by the server
)r r r r r r s rG
intermediateszTLSSocket.intermediates s@ ' ' / $ # # %"""rF c | j S )zg
A unicode string of the IANA cipher suite name of the negotiated
cipher suite
)rr r s rG rK zTLSSocket.cipher_suite s !!!rF c | j S )zM
A unicode string of: "TLSv1.2", "TLSv1.1", "TLSv1", "SSLv3"
)rq r s rG rc zTLSSocket.protocol ~~ rF c | j S )z5
A boolean if compression is enabled
)rs r s rG rL zTLSSocket.compression s rF c | j S zM
A unicode string of "new" or "reused" or None for no ticket
)rt r s rG rM zTLSSocket.session_id s rF c | j S r )ru r s rG rN zTLSSocket.session_ticket
s ###rF c | j S )zM
The oscrypto.tls.TLSSession object used for this connection
)r r s rG r zTLSSocket.session s }} rF c | j S )zN
A unicode string of the TLS server domain name or IP address
)r r s rG r zTLSSocket.hostname r rF c < | j j d S )zJ
An integer of the port number the socket is connected to
r )r getpeernamer s rG r zTLSSocket.port% s {{&&(++rF c R | j | j | j S )z9
The underlying socket.socket connection
)r r r r s rG r zTLSSocket.socket- s& ' ' / ||rF c $ | j y r )r r s rG r zTLSSocket.__del__8 s
rF r )
N)F):rB rC rD rJ r r r rW r ry r{ r} r r r r r r r r r r rq rr rs rt ru r classmethodr ri r r> r r^ r r r r r r r r r r propertyr r rK rc rL rM rN r r r r r rE rF rG r? r? s GH "NILMMOM M LNIMLKON< <|U"n26pMdlJ\ hT#(5 n ,&<"|$ Rh$ &8P J ! ! # # " " ! ! $ $ , , rF )^
__future__r r r r sysrer r r r _asn1r r_ _errorsr _ffir
r r r
r r r r r r r r r r _secur32r r r _crypt32r r r _kernel32r _typesr r r! r" errorsr# r$ r% r& _tlsr' r( r) r* r+ r, r- r. r/ r0 r1 r2 r3 r4 r5 r6 r7 r8 r9
asymmetricr: keysr; version_infoxranger r< r` WindowsError
_pattern_typer __all__compiler getwindowsversion_gwvr rA rI objectr> r? rE rF rG r s6 R R
2 $ : 9 Q Q < < c c * 6 $d E }}#f GjjG bjj ) s !Wd1g& -
X {, {,|Z ZrF