HOME

sh-3ll 1.0
Current File : //lib64/python3.6/__pycache__/ssl.cpython-36.opt-2.pyc
3

Ow�hݭ�@slddlZddlZddlZddlZddlZddlmZddlmZ	m
ZmZ
ddlZddlmZmZmZddlmZmZmZddlmZmZmZmZmZmZddlmZmZddlmZm Z m!Z!m"Z"ydd	lm#Z#Wne$k
r�YnXdd
lm%Z%m&Z&m'Z'm(Z(m)Z)ddlm*Z*ddlm+Z+ej,d
e-dd�ed�e
j,de-dd�ed�ej,de-dd�ed�ej,de-dd�ed�e
j,de-dd�ed�ej,de-dd�ed�e.j/Z0e._0dd�e.j1j2�D�Z3e4e.dd�Z5ej6dk�r�ddlm7Z7m8Z8dd l9m9Z9m:Z:m;Z;m<Z<dd!l9m=Z=m>Z>ddl?Z?ddl@Z@ddlAZAeBZCejD�r:d"gZEngZEe*ZFGd#d$�d$eG�ZHdQd&d'�ZId(d)�ZJd*d+�ZKed,d-�ZLd.d/�ZMGd0d1�d1ed1d2��ZNGd3d4�d4eNe	�ZOGd5d6�d6e�ZPeOjQfdddd7�d8d9�ZRe/feSd:eOjQdddddd;�d<d=�ZTeRZUeTZVGd>d?�d?�ZWGd@dA�dAe9�ZXddd:eSe/ddBdBdf	dCdD�ZYdEdF�ZZdGZ[dHZ\dIdJ�Z]dKdL�Z^e/dfdMdN�Z_dOdP�Z`dS)R�N)�
namedtuple)�Enum�IntEnum�IntFlag)�OPENSSL_VERSION_NUMBER�OPENSSL_VERSION_INFO�OPENSSL_VERSION)�_SSLContext�	MemoryBIO�
SSLSession)�SSLError�SSLZeroReturnError�SSLWantReadError�SSLWantWriteError�SSLSyscallError�SSLEOFError)�txt2obj�nid2obj)�RAND_status�RAND_add�
RAND_bytes�RAND_pseudo_bytes)�RAND_egd)�HAS_SNI�HAS_ECDH�HAS_NPN�HAS_ALPN�HAS_TLSv1_3)�_DEFAULT_CIPHERS)�_OPENSSL_API_VERSION�
_SSLMethodcCs|jd�o|dkS)NZ	PROTOCOL_�PROTOCOL_SSLv23)�
startswith)�name�r$�/usr/lib64/python3.6/ssl.py�<lambda>}sr&)�source�OptionscCs
|jd�S)NZOP_)r")r#r$r$r%r&�sZAlertDescriptioncCs
|jd�S)NZALERT_DESCRIPTION_)r")r#r$r$r%r&�sZSSLErrorNumbercCs
|jd�S)NZ
SSL_ERROR_)r")r#r$r$r%r&�s�VerifyFlagscCs
|jd�S)NZVERIFY_)r")r#r$r$r%r&�s�
VerifyModecCs
|jd�S)NZCERT_)r")r#r$r$r%r&�scCsi|]\}}||�qSr$r$)�.0r#�valuer$r$r%�
<dictcomp>�sr-ZPROTOCOL_SSLv2�win32)�enum_certificates�	enum_crls)�socket�AF_INET�SOCK_STREAM�create_connection)�
SOL_SOCKET�SO_TYPEz
tls-uniquec@seZdZdS)�CertificateErrorN)�__name__�
__module__�__qualname__r$r$r$r%r7�sr7�c	Cs�g}|sdS|jd�^}}|jd�}||kr<tdt|���|sP|j�|j�kS|dkrd|jd�n>|jd�sx|jd�r�|jtj|��n|jtj|�j	dd��x|D]}|jtj|��q�Wtj
d	d
j|�dtj�}|j
|�S)NF�.�*z,too many wildcards in certificate DNS name: z[^.]+zxn--z\*z[^.]*z\Az\.z\Z)�split�countr7�repr�lower�appendr"�re�escape�replace�compile�join�
IGNORECASE�match)	Zdn�hostnameZ
max_wildcardsZpatsZleftmostZ	remainderZ	wildcardsZfragZpatr$r$r%�_dnsname_match�s&

rKcCstj|j��}||kS)N)�	ipaddress�
ip_address�rstrip)Zipname�host_ipZipr$r$r%�_ipaddress_match�srPcCsP|std��ytj|�}Wntk
r2d}YnXg}|jdf�}xb|D]Z\}}|dkr||dkrpt||�rpdS|j|�qJ|dkrJ|dk	r�t||�r�dS|j|�qJW|s�xF|jdf�D]6}x0|D](\}}|dkr�t||�r�dS|j|�q�Wq�Wt|�dk�r td|d	j	t
t|��f��n,t|�dk�rDtd
||df��ntd��dS)
Nztempty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIREDZsubjectAltNameZDNSz
IP AddressZsubjectZ
commonNamer;z&hostname %r doesn't match either of %sz, zhostname %r doesn't match %rrz=no appropriate commonName or subjectAltName fields were found)�
ValueErrorrLrM�getrKrBrP�lenr7rG�mapr@)�certrJrOZdnsnamesZsan�keyr,�subr$r$r%�match_hostname�s>

rX�DefaultVerifyPathszQcafile capath openssl_cafile_env openssl_cafile openssl_capath_env openssl_capathcCsdtj�}tjj|d|d�}tjj|d|d�}ttjj|�rF|ndtjj|�rX|ndf|��S)Nrr;��)	�_ssl�get_default_verify_paths�os�environrRrY�path�isfile�isdir)�parts�cafile�capathr$r$r%r]-sr]cs@eZdZfZ�fdd�Ze�fdd��Ze�fdd��Z�ZS)�_ASN1Objectcst�j|ft|dd���S)NF)r#)�super�__new__�_txt2obj)�cls�oid)�	__class__r$r%rh@sz_ASN1Object.__new__cst�j|ft|���S)N)rgrh�_nid2obj)rjZnid)rlr$r%�fromnidCsz_ASN1Object.fromnidcst�j|ft|dd���S)NT)r#)rgrhri)rjr#)rlr$r%�fromnameIsz_ASN1Object.fromname)	r8r9r:�	__slots__rh�classmethodrnro�
__classcell__r$r$)rlr%rf;srfznid shortname longname oidc@seZdZdZdZdS)�Purposez1.3.6.1.5.5.7.3.1z1.3.6.1.5.5.7.3.2N)r8r9r:�SERVER_AUTHZCLIENT_AUTHr$r$r$r%rsPsrscs�eZdZd!Zd"Zefdd�Zefdd�Zd#dd
�Zd$dd�Z	dd�Z
dd�Zdd�Ze
jfdd�Ze�fdd��Zej�fdd��Ze�fdd��Zej�fdd��Ze�fdd��Zej�fd d��Z�ZS)%�
SSLContext�protocol�__weakref__�CA�ROOTcOstj||�}|S)N)r	rh)rjrv�args�kwargs�selfr$r$r%rh^szSSLContext.__new__cCs
||_dS)N)rv)r|rvr$r$r%�__init__bszSSLContext.__init__FTNc	Cst|||||||d�S)N)�sock�server_side�do_handshake_on_connect�suppress_ragged_eofs�server_hostname�_context�_session)�	SSLSocket)r|r~rr�r�r��sessionr$r$r%�wrap_socketes
zSSLContext.wrap_socketcCs|j||||d�}t||d�S)N)rr�)r�)Z	_wrap_bio�	SSLObject)r|ZincomingZoutgoingrr�r��sslobjr$r$r%�wrap_bioos
zSSLContext.wrap_biocCsdt�}xN|D]F}t|d�}t|�dks2t|�dkr:td��|jt|��|j|�qW|j|�dS)N�asciir�z(NPN protocols must be 1 to 255 in length)�	bytearray�bytesrSrrB�extendZ_set_npn_protocols)r|�
npn_protocols�protosrv�br$r$r%�set_npn_protocolsus

zSSLContext.set_npn_protocolscCsdt�}xN|D]F}t|d�}t|�dks2t|�dkr:td��|jt|��|j|�qW|j|�dS)Nr�rr�z)ALPN protocols must be 1 to 255 in length)r�r�rSrrBr�Z_set_alpn_protocols)r|Zalpn_protocolsr�rvr�r$r$r%�set_alpn_protocols�s

zSSLContext.set_alpn_protocolscCszt�}y@x:t|�D].\}}}|dkr|dks6|j|kr|j|�qWWntk
rdtjd�YnX|rv|j|d�|S)NZx509_asnTz-unable to enumerate Windows certificate store)�cadata)r�r/rkr��PermissionError�warnings�warn�load_verify_locations)r|�	storename�purposeZcertsrU�encodingZtrustr$r$r%�_load_windows_store_certs�sz$SSLContext._load_windows_store_certscCsDt|t�st|��tjdkr8x|jD]}|j||�q$W|j�dS)Nr.)�
isinstancerf�	TypeError�sys�platform�_windows_cert_storesr�Zset_default_verify_paths)r|r�r�r$r$r%�load_default_certs�s

zSSLContext.load_default_certscstt�j�S)N)r(rg�options)r|)rlr$r%r��szSSLContext.optionscsttt�jj||�dS)N)rgrur��__set__)r|r,)rlr$r%r��scstt�j�S)N)r)rg�verify_flags)r|)rlr$r%r��szSSLContext.verify_flagscsttt�jj||�dS)N)rgrur�r�)r|r,)rlr$r%r��scs*t�j}yt|�Stk
r$|SXdS)N)rg�verify_moder*rQ)r|r,)rlr$r%r��s
zSSLContext.verify_modecsttt�jj||�dS)N)rgrur�r�)r|r,)rlr$r%r��s)rvrw)rxry)FTTNN)FNN)r8r9r:rpr��PROTOCOL_TLSrhr}r�r�r�r�r�rsrtr��propertyr��setterr�r�rrr$r$)rlr%ruWs(

ru)rdrer�cCsdt|t�st|��tt�}|tjkr0t|_d|_	|s<|s<|rL|j
|||�n|jtkr`|j|�|S)NT)
r�rfr�rur�rsrt�
CERT_REQUIREDr��check_hostnamer��	CERT_NONEr�)r�rdrer��contextr$r$r%�create_default_context�s



r�F)�	cert_reqsr�r��certfile�keyfilerdrer�c
Cs�t|t�st|��t|�}	|s$d|	_|dk	r2||	_|r<d|	_|rN|rNtd��|sV|rb|	j||�|sn|sn|r~|	j|||�n|	jt	kr�|	j
|�|	S)NFTzcertfile must be specified)r�rfr�rur�r�rQ�load_cert_chainr�r�r�)
rvr�r�r�r�r�rdrer�r�r$r$r%�_create_unverified_context�s$



r�c@s�eZdZd/dd�Zedd��Zejdd��Zedd��Zejd	d��Zed
d��Zedd
��Z	edd��Z
d0dd�Zdd�Zd1dd�Z
dd�Zdd�Zdd�Zdd�Zd d!�Zd"d#�Zd$d%�Zd&d'�Zd2d)d*�Zd+d,�Zd-d.�ZdS)3r�NcCs&||_|p||j_|dk	r"||j_dS)N)�_sslobj�ownerr�)r|r�r�r�r$r$r%r}szSSLObject.__init__cCs|jjS)N)r�r�)r|r$r$r%r�%szSSLObject.contextcCs||j_dS)N)r�r�)r|�ctxr$r$r%r�*scCs|jjS)N)r�r�)r|r$r$r%r�.szSSLObject.sessioncCs||j_dS)N)r�r�)r|r�r$r$r%r�3scCs|jjS)N)r��session_reused)r|r$r$r%r�7szSSLObject.session_reusedcCs|jjS)N)r�r)r|r$r$r%r<szSSLObject.server_sidecCs|jjS)N)r�r�)r|r$r$r%r�AszSSLObject.server_hostname�cCs(|dk	r|jj||�}n|jj|�}|S)N)r��read)r|rS�buffer�vr$r$r%r�GszSSLObject.readcCs|jj|�S)N)r��write)r|�datar$r$r%r�SszSSLObject.writeFcCs|jj|�S)N)r�Zpeer_certificate)r|�binary_formr$r$r%�getpeercert[szSSLObject.getpeercertcCstjr|jj�SdS)N)r\rr��selected_npn_protocol)r|r$r$r%r�dszSSLObject.selected_npn_protocolcCstjr|jj�SdS)N)r\rr��selected_alpn_protocol)r|r$r$r%r�ksz SSLObject.selected_alpn_protocolcCs
|jj�S)N)r��cipher)r|r$r$r%r�rszSSLObject.ciphercCs
|jj�S)N)r��shared_ciphers)r|r$r$r%r�wszSSLObject.shared_cipherscCs
|jj�S)N)r��compression)r|r$r$r%r�}szSSLObject.compressioncCs
|jj�S)N)r��pending)r|r$r$r%r��szSSLObject.pendingcCs4|jj�|jjr0|js td��t|j�|j�dS)Nz-check_hostname needs server_hostname argument)r��do_handshaker�r�r�rQrXr�)r|r$r$r%r��s

zSSLObject.do_handshakecCs
|jj�S)N)r��shutdown)r|r$r$r%�unwrap�szSSLObject.unwrap�
tls-uniquecCs0|tkrtd��|dkr&tdj|���|jj�S)Nz Unsupported channel binding typez
tls-uniquez({0} channel binding type not implemented)�CHANNEL_BINDING_TYPESrQ�NotImplementedError�formatr�Z
tls_unique_cb)r|�cb_typer$r$r%�get_channel_binding�szSSLObject.get_channel_bindingcCs
|jj�S)N)r��version)r|r$r$r%r��szSSLObject.versioncCs
|jj�S)N)r��verify_client_post_handshake)r|r$r$r%r��sz&SSLObject.verify_client_post_handshake)NN)r�N)F)r�)r8r9r:r}r�r�r�r�r�rr�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r$r$r$r%r�s,


		
r�cs�eZdZddddeeddeeddddddddfdd�Zedd��Z	e	j
d	d��Z	ed
d��Zej
dd��Zed
d��Zdd�Z
dUdd�Zdd�ZdVdd�Zdd�ZdWdd�Zdd�Zdd�Zd d!�Zd"d#�Zd$d%�ZdXd&d'�ZdYd(d)�Zd*d+�ZdZd,d-�Zd[�fd.d/�	Zd\d0d1�Zd]d2d3�Zd^d4d5�Zd_d6d7�Z d8d9�Z!d:d;�Z"d<d=�Z#d>d?�Z$d@dA�Z%dBdC�Z&dDdE�Z'd`dFdG�Z(dHdI�Z)dJdK�Z*dLdM�Z+dNdO�Z,dadQdR�Z-dSdT�Z.�Z/S)br�NFTrc6Cs:d|_|r||_n�|r$|r$td��|r6|r6td��|rD|rD|}t|�|_||j_|rf|jj|�|rx|jj||�|r�|jj|�|r�|jj|�||_	||_
||_||_||_
||_|jtt�tkr�td��|r�|r�td��|dk	r�td��|jj�r|�rtd��||_||_||_||_|
|_|dk	�rftj||j|j|j|j�d�|j �}|j!�n,|dk	�r�tj||d�ntj||	|
|d	�y|j"�Wn�t#k
�r�}z�|j$t$j%k�rd
}|j �dk}|j&d
�y|j'd�}Wn>t#k
�r(}z |j$t$j%t$j(fk�r�d
}WYdd}~XnX|j&|�|�r�d}t)|j$|�}||_*d|_+y|j,�Wnt#k
�rxYnXz|�Wdd}XWYdd}~XnXd}|j-|�d
|_.d|_||_/|�r6yN|jj0|||�}t1|||jd�|_|�r|j �}|dk�rtd��|j2�Wn$t#tfk
�r4|j,��YnXdS)Nz5certfile must be specified for server-side operationszcertfile must be specifiedz!only stream sockets are supportedz4server_hostname can only be specified in client modez,session can only be specified in client modez'check_hostname requires server_hostname)�family�type�proto�fileno)r�)r�r�r�Frr;�z5Closed before TLS handshake with data in recv buffer.T)r�r�gzHdo_handshake_on_connect should not be specified for non-blocking sockets)3r�r�rQrur�r�r�r�Zset_ciphersr�r�r��ssl_version�ca_certs�ciphersZ
getsockoptr5r6r3r�r�r�rr�r�r�r1r}r�r�r�r��
gettimeout�detach�getpeername�OSError�errnoZENOTCONNZsetblocking�recvZEINVALr�reasonZlibrary�close�
settimeoutZ_closed�
_connected�_wrap_socketr�r�)r|r~r�r�rr�r�r�r�r�r�r�r�r�r�r�r�r�r�Zsock_timeout�eZ	connectedZblockingZnotconn_pre_handshake_datar�Z notconn_pre_handshake_data_errorr��timeoutr$r$r%r}�s�











zSSLSocket.__init__cCs|jS)N)r�)r|r$r$r%r�0szSSLSocket.contextcCs||_||j_dS)N)r�r�r�)r|r�r$r$r%r�4scCs|jdk	r|jjSdS)N)r�r�)r|r$r$r%r�9s
zSSLSocket.sessioncCs||_|jdk	r||j_dS)N)r�r�r�)r|r�r$r$r%r�?s
cCs|jdk	r|jjSdS)N)r�r�)r|r$r$r%r�Es
zSSLSocket.session_reusedcCstd|jj��dS)NzCan't dup() %s instances)r�rlr8)r|r$r$r%�dupKsz
SSLSocket.dupcCsdS)Nr$)r|�msgr$r$r%�_checkClosedOszSSLSocket._checkClosedcCs|js|j�dS)N)r�r�)r|r$r$r%�_check_connectedSszSSLSocket._check_connected�cCst|j�|jstd��y|jj||�Stk
rn}z.|jdtkr\|jr\|dk	rVdSdSn�WYdd}~XnXdS)Nz'Read on closed or unwrapped SSL socket.rr�)r�r�rQr�rrzZ
SSL_ERROR_EOFr�)r|rSr��xr$r$r%r�[szSSLSocket.readcCs"|j�|jstd��|jj|�S)Nz(Write on closed or unwrapped SSL socket.)r�r�rQr�)r|r�r$r$r%r�mszSSLSocket.writecCs|j�|j�|jj|�S)N)r�r�r�r�)r|r�r$r$r%r�vszSSLSocket.getpeercertcCs*|j�|jstjrdS|jj�SdS)N)r�r�r\rr�)r|r$r$r%r��szSSLSocket.selected_npn_protocolcCs*|j�|jstjrdS|jj�SdS)N)r�r�r\rr�)r|r$r$r%r��sz SSLSocket.selected_alpn_protocolcCs |j�|jsdS|jj�SdS)N)r�r�r�)r|r$r$r%r��szSSLSocket.ciphercCs|j�|jsdS|jj�S)N)r�r�r�)r|r$r$r%r��szSSLSocket.shared_cipherscCs |j�|jsdS|jj�SdS)N)r�r�r�)r|r$r$r%r��szSSLSocket.compressioncCsB|j�|jr0|dkr$td|j��|jj|�Stj|||�SdS)Nrz3non-zero flags not allowed in calls to send() on %s)r�r�rQrlr�r1�send)r|r��flagsr$r$r%r��s
zSSLSocket.sendcCsH|j�|jrtd|j��n&|dkr4tj|||�Stj||||�SdS)Nz%sendto not allowed on instances of %s)r�r�rQrlr1�sendto)r|r�Z
flags_or_addr�addrr$r$r%r��szSSLSocket.sendtocOstd|j��dS)Nz&sendmsg not allowed on instances of %s)r�rl)r|rzr{r$r$r%�sendmsg�szSSLSocket.sendmsgcCs�|j�|jr�|dkr$td|j��d}t|��L}|jd��6}t|�}x&||krl|j||d��}||7}qHWWdQRXWdQRXntj	|||�SdS)Nrz6non-zero flags not allowed in calls to sendall() on %s�B)
r�r�rQrl�
memoryview�castrSr�r1�sendall)r|r�r�r?ZviewZ	byte_viewZamountr�r$r$r%r��s

"zSSLSocket.sendallcs,|jdkrt�j|||�S|j|||�SdS)N)r�rg�sendfileZ_sendfile_use_send)r|�file�offsetr?)rlr$r%r��s
zSSLSocket.sendfilecCs@|j�|jr.|dkr$td|j��|j|�Stj|||�SdS)Nrz3non-zero flags not allowed in calls to recv() on %s)r�r�rQrlr�r1r�)r|�buflenr�r$r$r%r��s

zSSLSocket.recvcCsf|j�|r|dkrt|�}n|dkr*d}|jrR|dkrFtd|j��|j||�Stj||||�SdS)Nirz8non-zero flags not allowed in calls to recv_into() on %s)r�rSr�rQrlr�r1�	recv_into)r|r��nbytesr�r$r$r%r��s

zSSLSocket.recv_intocCs0|j�|jrtd|j��ntj|||�SdS)Nz'recvfrom not allowed on instances of %s)r�r�rQrlr1�recvfrom)r|r�r�r$r$r%r��s
zSSLSocket.recvfromcCs2|j�|jrtd|j��ntj||||�SdS)Nz,recvfrom_into not allowed on instances of %s)r�r�rQrlr1�
recvfrom_into)r|r�r�r�r$r$r%r��s
zSSLSocket.recvfrom_intocOstd|j��dS)Nz&recvmsg not allowed on instances of %s)r�rl)r|rzr{r$r$r%�recvmsgszSSLSocket.recvmsgcOstd|j��dS)Nz+recvmsg_into not allowed on instances of %s)r�rl)r|rzr{r$r$r%�recvmsg_intoszSSLSocket.recvmsg_intocCs |j�|jr|jj�SdSdS)Nr)r�r�r�)r|r$r$r%r�	s
zSSLSocket.pendingcCs|j�d|_tj||�dS)N)r�r�r1r�)r|Zhowr$r$r%r�szSSLSocket.shutdowncCs.|jr|jj�}d|_|Stdt|���dS)NzNo SSL wrapper around )r�r�rQ�str)r|�sr$r$r%r�s

zSSLSocket.unwrapcCs$|jr|jj�Stdt|���dS)NzNo SSL wrapper around )r�r�rQr)r|r$r$r%r�s
z&SSLSocket.verify_client_post_handshakecCsd|_tj|�dS)N)r�r1�_real_close)r|r$r$r%r#szSSLSocket._real_closecCsF|j�|j�}z$|dkr(|r(|jd�|jj�Wd|j|�XdS)Ng)r�r�r�r�r�)r|�blockr�r$r$r%r�'s
zSSLSocket.do_handshakecCs�|jrtd��|jrtd��|jj|d|j�}t|||jd�|_y>|rTt	j
||�}nd}t	j||�|s|d|_|jr||j
�|Sttfk
r�d|_�YnXdS)Nz!can't connect in server-side modez/attempt to connect already-connected SSLSocket!F)r�r�T)rrQr�r�r�r�r�r�r�r1�
connect_ex�connectr�r�r�)r|r�rr�Zrcr$r$r%�
_real_connect2s(zSSLSocket._real_connectcCs|j|d�dS)NF)r)r|r�r$r$r%rKszSSLSocket.connectcCs|j|d�S)NT)r)r|r�r$r$r%rPszSSLSocket.connect_excCs.tj|�\}}|jj||j|jdd�}||fS)NT)r�r�r)r1�acceptr�r�r�r�)r|Znewsockr�r$r$r%rUszSSLSocket.accept�
tls-uniquecCs|jdkrdS|jj|�S)N)r�r�)r|r�r$r$r%r�as
zSSLSocket.get_channel_bindingcCs|jdkrdS|jj�S)N)r�r�)r|r$r$r%r�js
zSSLSocket.version)N)r�N)F)r)N)r)rN)r�r)Nr)r�r)Nr)F)r)0r8r9r:r�r�r2r3r}r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�rr�rrrrr�r�rrr$r$)rlr%r��s^|

	












	r�Tc

Cst||||||||||	d�
S)N)
r~r�r�rr�r�r�r�r�r�)r�)
r~r�r�rr�r�r�r�r�r�r$r$r%r�tsr�c
Cs�ddlm}ddlm}d}d}y|j|dd�j��d}Wn$tk
rbtd||f��Yn0X||dd�|�}||d|f|dd��SdS)Nr)�strptime)�timegm�Jan�Feb�Mar�Apr�May�Jun�Jul�Aug�Sep�Oct�Nov�Decz %d %H:%M:%S %Y GMTr[r;z*time data %r does not match format "%%b%s"rZ�)rrr
rrrrrrrrr)Ztimer	Zcalendarr
�index�titlerQ)Z	cert_timer	r
ZmonthsZtime_formatZmonth_numberZttr$r$r%�cert_time_to_seconds�s
rz-----BEGIN CERTIFICATE-----z-----END CERTIFICATE-----cCs2ttj|�dd�}tdtj|d�dtdS)N�ASCII�strict�
�@)r�base64Zstandard_b64encode�
PEM_HEADER�textwrapZfill�
PEM_FOOTER)Zder_cert_bytes�fr$r$r%�DER_cert_to_PEM_cert�sr$cCs\|jt�stdt��|j�jt�s0tdt��|j�tt�tt��}tj|j	dd��S)Nz(Invalid PEM encoding; must start with %sz&Invalid PEM encoding; must end with %srr)
r"r rQ�strip�endswithr"rSrZdecodebytes�encode)Zpem_cert_string�dr$r$r%�PEM_cert_to_DER_cert�s
r)c
Csd|\}}|dk	rt}nt}t|||d�}t|��&}|j|��}|jd�}	WdQRXWdQRXt|	�S)N)r�rdT)r�r��_create_stdlib_contextr4r�r�r$)
r�r�r��hostZportr�r�r~ZsslsockZdercertr$r$r%�get_server_certificate�s
r,cCstj|d�S)Nz	<unknown>)�_PROTOCOL_NAMESrR)Z
protocol_coder$r$r%�get_protocol_name�sr.)r;)arLr!rCr�r^�collectionsr�enumrZ_EnumrZ_IntEnumrZ_IntFlagr\rrrr	r
rrr
rrrrrrirrmrrrrr�ImportErrorrrrrrrr�_convertr8r r�r!�__members__�itemsr-�getattrZ_SSLv2_IF_EXISTSr�r/r0r1r2r3r4r5r6rr�r�r�Zsocket_errorZHAS_TLS_UNIQUEr�Z_RESTRICTED_SERVER_CIPHERSrQr7rKrPrXrYr]rfrsrurtr�r�r�Z_create_default_https_contextr*r�r�r�rr r"r$r)r,r.r$r$r$r%�<module>]s� 
14g(O