R`i& U d dl Z d dlZd dlZd dlZd dlZd dlZddlmZmZm Z m
Z
ej dk( r ddl m
Z
mZ n% ej dk( r ddlm
Z
mZ nddlm
Z
mZ ej" rd dlmZ eez e j, e z e j, e z Zej0 ed< eez ej4 g eez f z Zej0 ed < dd Z dd Z G d
de
Z dej> ej@ z dedz d
dfdZ!y) N )_original_SSLContext_original_super_SSLContext#_truststore_SSLContext_dunder_class"_truststore_SSLContext_super_classWindows)_configure_context_verify_peercerts_implDarwin)Buffer_StrOrBytesPath
_PasswordTypereturnc t t dt ddlmc mc mc m} t | dt y# t $ r Y yw xY w)zqInjects the :class:`truststore.SSLContext` into the ``ssl``
module by replacing :class:`ssl.SSLContext`.
SSLContextr N) setattrsslr pip._vendor.urllib3.util.ssl__vendorurllib3utilssl_ ImportError urllib3_ssls /builddir/build/BUILDROOT/alt-python312-pip-23.3.1-3.el8.x86_64/opt/alt/python312/lib/python3.12/site-packages/pip/_vendor/truststore/_api.pyinject_into_sslr s9 C z*
;; \:6
s 8 AAc t t dt ddlmc mc mc m} t | _ y# t $ r Y yw xY w)z@Restores the :class:`ssl.SSLContext` class to its original stater r N)
r r r r r r r r r r r s r extract_from_sslr . s4 C 34
;;!5
s 2 >>c e Zd ZdZedefd ZdAdeddfdZ dBd e j d
e
d e
d e
d
e dz de j dz de j fdZ dCde j de j d
e
d
e dz de j dz de j" f dZ dDde ez ej* e z ej* e z dz de ez ej* e z ej* e z dz dej. e ddf ddfdZ dEdededz dedz ddfdZe j8 j: fd e j8 ddfd Z d ej> e ddfd Z d ej> e ddfd!Z!d"e ddfd#Z"dejF fd$Z$de%e ef fd%Z&de%e ef fd&Z'ejP dFd'ejR d de*ejF fd( Z+ejP dFd'ejR d de*e fd) Z+ejP dFd'e
dejF fd* Z+dGd'e
de*ejF e*e z fd+Z+ede
fd, Z,e,jZ d-e
ddfd. Z,ede
fd/ Z.e.jZ d-e
ddfd0 Z.ede fd1 Z/e/jZ d-e ddfd2 Z/ede j` fd3 Z1e1jZ d-e j` ddfd4 Z1ede j` fd5 Z2e2jZ d-e j` ddfd6 Z2ede jf fd7 Z4e4jZ d-e jf ddfd8 Z4ede
fd9 Z5e5jZ d-e
ddfd: Z5ede jl fd; Z7edefd< Z8ede jr fd= Z:e:jZ d-e jr ddfd> Z:ede jv fd? Z.TruststoreSSLObjectc R t | }t | | j |S )Nserver_hostname)super do_handshake_verify_peercertsr- )r$ retr% s r r/ z=SSLContext.__init__..TruststoreSSLObject.do_handshakeK s% g*,!$8L8LM
r& r N)__name__
__module__ __qualname__r/
__classcell__)r% s @r TruststoreSSLObjectr* F s
r& r7 )r _ctxr SSLObjectsslobject_class)r$ r' r7 s r __init__zSSLContext.__init__C s, (2 #-- %8 !r& FTsock server_sidedo_handshake_on_connectsuppress_ragged_eofsr- sessionc t | j 5 | j j |||||| }d d d t | |S # 1 sw Y xY w# t $ r j w xY w)N)r= r- r> r? r@ r, )r r8 wrap_socketr0 Exceptionclose)r$ r< r= r> r? r- r@ ssl_socks r rB zSSLContext.wrap_socketR s|
*yy,, ' /(?%9
- H + h H +
* NN s "A
A A A7incomingoutgoingc t | j 5 | j j ||||| }d d d |S # 1 sw Y S xY w)N)r- r= r@ )r r8 wrap_bio)r$ rF rG r= r- r@ ssl_objs r rI zSSLContext.wrap_bion sQ
*ii(( / ' ) G + + s !AA cafilecapathcadatar c > | j j ||| S )N)rK rL rM )r8 load_verify_locations)r$ rK rL rM s r rO z SSLContext.load_verify_locations s' yy..& /
r& certfilekeyfilepasswordc > | j j ||| S )N)rP rQ rR )r8 load_cert_chain)r$ rP rQ rR s r rT zSSLContext.load_cert_chain s' yy(( w )
r& purposec 8 | j j | S r" )r8 load_default_certs)r$ rU s r rW z SSLContext.load_default_certs s yy++G44r& alpn_protocolsc 8 | j j | S r" )r8 set_alpn_protocols)r$ rX s r rZ z SSLContext.set_alpn_protocols s yy++N;;r&
npn_protocolsc 8 | j j | S r" )r8 set_npn_protocols)r$ r[ s r r] z SSLContext.set_npn_protocols s yy**=99r& _SSLContext__cipherlistc 8 | j j | S r" )r8 set_ciphers)r$ r^ s r r` zSSLContext.set_ciphers s yy$$\22r& c 6 | j j S r" )r8 get_ciphersr# s r rb zSSLContext.get_ciphers s yy$$&&r& c 6 | j j S r" )r8
session_statsr# s r rd zSSLContext.session_stats s yy&&((r& c t r" NotImplementedErrorr# s r cert_store_statszSSLContext.cert_store_stats !##r& binary_formc y r" r$ rj s r get_ca_certszSSLContext.get_ca_certs s r& c y r" rl rm s r rn zSSLContext.get_ca_certs r& c y r" rl rm s r rn zSSLContext.get_ca_certs rp r& c t r" rf rm s r rn zSSLContext.get_ca_certs ri r& c . | j j S r" r8 check_hostnamer# s r ru zSSLContext.check_hostname yy'''r& valuec & || j _ y r" rt r$ rw s r ru zSSLContext.check_hostname s #( r& c . | j j S r" r8 hostname_checks_common_namer# s r r| z&SSLContext.hostname_checks_common_name s yy444r& c & || j _ y r" r{ ry s r r| z&SSLContext.hostname_checks_common_name s 05 -r& c . | j j S r" r8 keylog_filenamer# s r r zSSLContext.keylog_filename yy(((r& c & || j _ y r" r ry s r r zSSLContext.keylog_filename s $) !r& c . | j j S r" )r8 maximum_versionr# s r r zSSLContext.maximum_version r r& c X t j j | j | y r" )r r __set__r8 ry s r r zSSLContext.maximum_version "22:: IIu
r& c . | j j S r" )r8 minimum_versionr# s r r zSSLContext.minimum_version r r& c X t j j | j | y r" )r r r r8 ry s r r zSSLContext.minimum_version r r& c . | j j S r" )r8 optionsr# s r r zSSLContext.options s yy r& c X t j j | j | y r" )r r r r8 ry s r r zSSLContext.options s "**22 IIu
r& c . | j j S r" r8 post_handshake_authr# s r r z SSLContext.post_handshake_auth s yy,,,r& c & || j _ y r" r ry s r r z SSLContext.post_handshake_auth s (- %r& c . | j j S r" )r8 r' r# s r r' zSSLContext.protocol s yy!!!r& c . | j j S r" )r8 security_levelr# s r r zSSLContext.security_level rv r& c . | j j S r" )r8 verify_flagsr# s r r zSSLContext.verify_flags s yy%%%r& c X t j j | j | y r" )r r r r8 ry s r r zSSLContext.verify_flags s "//77 IIu
r& c . | j j S r" )r8 verify_moder# s r r zSSLContext.verify_mode s yy$$$r& c X t j j | j | y r" )r r r r8 ry s r r zSSLContext.verify_mode s "..66 IIu
r& r" )FTTNN)FNN)NNN)NN).)F)=r3 r4 r5 __doc__propertytyper% intr; socketboolstrr
SSLSession SSLSocketrB MemoryBIOr9 rI bytesosPathLiketypingUnionrO r
r rT Purpose SERVER_AUTHrW IterablerZ r] r` Anyrb dictrd rh overloadLiterallistrn ru setterr| r
TLSVersionr r Optionsr r
_SSLMethodr' r VerifyFlagsr
VerifyModer rl r& r r r 9 s G
A4 A A
8
8
8$ "(,%)&*)-mm "&
# t
$&
@ "&*)-
-- --
t $&
( NRMQ48
e bkk# ..U1CCdJ
e bkk# ..U1CCdJ
S(D 01
+/)-
!
!4'
$&
&)[[%<%<5{{5
5
< 1E <$ <:vs/C : :3 3 3'VZZ ')tCH~ )$$sCx. $ __36 !>>%0
fjj
__ t(< tE{ __ vzz $ $fjj9IDQVK9W $ ( ( ( )D )T ) ) 5T 5 5 !''6 6$ 6 (6 ) ) ) *S *T * * ) ) )
S^^
) ) )
S^^
! ! !
^^
S[[
T
-T - - . .$ . . "#.. " " ( ( ( &coo & &
#//
d
%S^^ % %
D
r& r sock_or_sslobjr- c , | } t |d s|j }t |d s|j xs d}|D cg c]! }|j t
j # }}t | j || y# t $ r Y dw xY wc c}w )z{
Verifies the peer certificates from an SSLSocket or SSLObject
against the certificates in the OS trust store.
get_unverified_chainrl r, N) hasattr_sslobjAttributeErrorr public_bytes_ssl ENCODING_DERr
context)r r- sslobjunverified_chaincert
cert_bytess r r0 r0 s +F
&"89^^F &"89 ##%+ DTTCS4$##D$5$56CSJT
O
Us $B &B B
Br2 )"r platformr r r r _ssl_constantsr r r r system_windowsr r
_macos_openssl
TYPE_CHECKING pip._vendor.typing_extensionsr r r r r
TypeAlias__annotations__Callabler r r r r r9 r0 rl r& r r s
8?? !DDX__("BBD 4 %(%K"++c2B$BR[[QVEW$W!! W"%+C%K0P"P
v P
[
3 [
|MMCMM1DG$J r&