o
ai @ sF d dl Z d dlZd dlZd dlmZ d dlmZ dZG dd dZdS ) N)ProxySchemeUnsupported)sixi @ c @ s e Zd ZdZedd Z d:ddZdd Zd
d Zd d
Z d;ddZ
dddZ
d>ddZ d?dd Zd d Zd d Zd@d"d#Zd$d% Zd&d' Zd(d) Zd*d+ Zd,d- Zd.d/ Zd0d1 Zd2d3 Zd4d5 ZdAd6d7Z d8d9 Z dS )B SSLTransportaL
The SSLTransport wraps an existing socket and establishes an SSL connection.
Contrary to Python's implementation of SSLSocket, it allows you to chain
multiple TLS connections together. It's particularly useful if you need to
implement TLS within TLS.
The class supports most of the socket API operations.
c C s$ t | dstjr tdtddS )z
Raises a ProxySchemeUnsupported if the provided ssl_context can't be used
for TLS in TLS.
The only requirement is that the ssl_context provides the 'wrap_bio'
methods.
wrap_biozKTLS in TLS requires SSLContext.wrap_bio() which isn't supported on Python 2zXTLS in TLS requires SSLContext.wrap_bio() which isn't available on non-native SSLContextN)hasattrr PY2r ) ssl_context r /builddir/build/BUILDROOT/alt-python310-pip-21.3.1-5.el8.x86_64/opt/alt/python310/lib/python3.10/site-packages/pip/_vendor/urllib3/util/ssltransport.py$_validate_ssl_context_for_tls_in_tls s
z1SSLTransport._validate_ssl_context_for_tls_in_tlsNTc C sH t | _t | _|| _|| _|j| j| j|d| _| | jj dS )zV
Create an SSLTransport around socket using the provided ssl_context.
)server_hostnameN)
ssl MemoryBIOincomingoutgoingsuppress_ragged_eofssocketr sslobj _ssl_io_loop do_handshake)selfr r r r r r r
__init__, s
zSSLTransport.__init__c C s | S Nr r r r r
__enter__? s zSSLTransport.__enter__c G s | d S r )close)r _r r r
__exit__B zSSLTransport.__exit__c C
| j S r )r filenor r r r
r E
zSSLTransport.fileno c C s | ||S r )_wrap_ssl_read)r lenbufferr r r
readH r zSSLTransport.readr c C s |dkrt d| |S )Nr z+non-zero flags not allowed in calls to recv)
ValueErrorr# )r r$ flagsr r r
recvK s
zSSLTransport.recvc C s> |dkrt d|r|d u rt|}n|d u rd}| ||S )Nr z0non-zero flags not allowed in calls to recv_intor" )r' r$ r& )r r% nbytesr( r r r
recv_intoP s
zSSLTransport.recv_intoc C s |dkrt dd}t|?}|d!}t|}||k r.| ||d }||7 }||k s W d n1 s8w Y W d d S W d d S 1 sPw Y d S )Nr z.non-zero flags not allowed in calls to sendallB)r'
memoryviewcastr$ send)r datar( countview byte_viewamountvr r r
sendallY s PzSSLTransport.sendallc C s$ |dkrt d| | jj|}|S )Nr z+non-zero flags not allowed in calls to send)r' r r write)r r0 r( responser r r
r/ c s zSSLTransport.sendrc
C s t |h dkstd|f d|v }d|v p| }|s |s J d|v }d} |r,| d7 } |r2| d7 } t| | }
| j jd7 _|du rFd }|d
k rMtj}|d
krY|sWtd |
S |re|ret|
|
|} n|rnt|
|} n
|srJ t |
|} |r|| S t
| |||} || _ | S ) a
Python's httpclient uses makefile and buffered io when reading HTTP
messages and we need to support it.
This is unfortunately a copy and paste of socket.py makefile with small
changes to point to the socket directly.
> r9 bwz&invalid mode %r (only r, w, b allowed)r; r9 r: Nr z!unbuffered streams must be binary) setr' r SocketIO_io_refsioDEFAULT_BUFFER_SIZEBufferedRWPairBufferedReaderBufferedWriter
TextIOWrappermode)
r rH bufferingencodingerrorsnewlinewritingreadingbinaryrawmoderawr% textr r r
makefilei s@
zSSLTransport.makefilec C s | | jj d S r )r r unwrapr r r r
rT s zSSLTransport.unwrapc C | j d S r )r r r r r r
r zSSLTransport.closeFc C s | j |S r )r getpeercert)r binary_formr r r
rW r zSSLTransport.getpeercertc C r r )r versionr r r r
rY r! zSSLTransport.versionc C r r )r cipherr r r r
rZ r! zSSLTransport.cipherc C r r )r selected_alpn_protocolr r r r
r[ r! z#SSLTransport.selected_alpn_protocolc C r r )r selected_npn_protocolr r r r
r\ r! z"SSLTransport.selected_npn_protocolc C r r )r shared_ciphersr r r r
r] r! zSSLTransport.shared_ciphersc C r r )r compressionr r r r
r^ r! zSSLTransport.compressionc C s | j | d S r )r
settimeout)r valuer r r
r_ s zSSLTransport.settimeoutc C r r )r
gettimeoutr r r r
ra r! zSSLTransport.gettimeoutc C rU r )r _decref_socketiosr r r r
rb rV z SSLTransport._decref_socketiosc
C sR z
| | jj||W S tjy( } z|jtjkr#| jr#W Y d }~dS d }~ww Nr )r r r& r
SSLErrorerrno
SSL_ERROR_EOFr )r r$ r% er r r
r# s zSSLTransport._wrap_ssl_readc
G s d}d}|r]d}z|| }W n! t jy/ } z|jt jt jfvr"||j}W Y d}~nd}~ww | j }| j| |du rBd}n|t jkr[| j t
}|rV| j | n| j
|s|S )z>Performs an I/O loop between incoming/outgoing and the socket.TNF)r
rd re SSL_ERROR_WANT_READSSL_ERROR_WANT_WRITEr r& r r6 r)
SSL_BLOCKSIZEr r7 write_eof)r funcargs should_loopretre rg bufr r r
r s.
zSSLTransport._ssl_io_loop)NT)r" N)r" r rc )r )r9 NNNN)Fr ) __name__
__module__ __qualname____doc__ staticmethodr r r r r r& r) r+ r6 r/ rS rT r rW rY rZ r[ r\ r] r^ r_ ra rb r# r r r r r
r s<
-
r ) rB r r
Z pip._vendor.urllib3.exceptionsr Z pip._vendor.urllib3.packagesr rj r r r r r
s