R`i E d dl Z d dlZd dlZd dlZd dlZd dlmZmZmZmZm Z m
Z
m Z m Z m
Z
d dlmZ ddlmZ ej$ d Z e eeej/ d Zedk r eded ded d ed
ed efd Z ed
d Z edd Z eZ e
Z e Z e
Z!e
Z"e
Z#e
Z$e
Z%e
Z&e Z' ee& Z(e
Z)e Z* ee% Z+ ee! Z, ee" Z- ee# Z. ee$ Z/e
Z0e Z1 ee
Z2 ee
Z3 ee
Z4e Z5e Z6 e)e,ge jn _8 e2e jn _9 e2ge jt _8 e,e jt _9 e*e
ge jv _8 e-e jv _9 e4e.ge jx _8 e*e jx _9 e4e ge jz _8 e*e jz _9 e4 ee5 ge j| _8 e*e j| _9 e1ge j~ _8 e3e j~ _9 e e-ge j _8 e3e j _9 e(e( ee4 ge j _8 e*e j _9 e4 ee5 ge j _8 e*e j _9 e4e _4 e5e _5 e*e _* dZCdZDe(ge j _8 de j _9 e(ge j _8 e'e j _9 e)ee ge j _8 e-e j _9 e-e ge j _8 ee j _9 e-ee e ge j _8 ee j _9 e)ee ge j _8 e,e j _9 e,ge j _8 e e j _9 e,ge j _8 e
e j _9 e) ee( e e0ge j _8 e.e j _9 e)e e0ge j _8 e/e j _9 e/e
ge j _8 de j _9 e.ge j _8 e e j _9 e.e ge j _8 e
e j _9 e+ge j _8 e e j _9 e+ge j _8 e-e j _9 e)j e d e _U e
j e d e _V e(e _( e.e _. e-e _- e+e _+ de*dej dej d ej fdZYeYe j _Z eYe jx _Z eYe j _Z G d d Z[d e\d e,fd Z]d e\d e"fd Z^d e-d edz fd Z_d!e`e\ d e/fd"Zae j d#ej d ej d fd$ Ze d)d%ej d&e`e\ d'edz d dfd(Zfy# eW$ r
ed dw xY w)* N) CDLLPOINTERc_boolc_char_pc_int32c_longc_uint32c_ulongc_void_p) find_library ) _set_ssl_context_verify_mode.)
z,Only OS X 10.8 and newer are supported, not namemacos10_16_pathreturnc t dk\ r|}n t | }|st t |d S # t $ r t d| d dw xY w)z:Loads a CDLL by name, falling back to known path on 10.16+)r T) use_errnoz The library z failed to loadN)_mac_version_infor OSErrorr ImportError)r r paths /builddir/build/BUILDROOT/alt-python312-pip-23.3.1-3.el8.x86_64/opt/alt/python312/lib/python3.12/site-packages/pip/_vendor/truststore/_macos.py
_load_cdllr s] J ("D %DMDD)) JLo>?TIJs +. ASecurityz6/System/Library/Frameworks/Security.framework/SecurityCoreFoundationzB/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation r kCFAllocatorDefaultkCFTypeArrayCallBackszError initializing ctypesresult_argsc b t | dk( r|S d} t j | d }t j |t j
t j }t j |t j }|Tt j d }t j ||dt j } | s t d |j }|t j | ||dk( rd| }t! j" | # |t j | w w xY w)z<
Raises an error if the OSStatus value is non-zero.
r N 'Error copying C string from CFStringRef z8SecureTransport operation returned a non-zero OSStatus: )intr SecCopyErrorMessageStringctypescastr r r CFStringGetCStringPtrCFConstkCFStringEncodingUTF8create_string_bufferCFStringGetCStringr value CFReleasesslSSLError)r# r$ r% error_message_cfstring error_message_cfstring_c_void_pmessagebuffers r _handle_osstatusr; s% 6{a "!=!)!C!CFD!Q +1++ "FNN6??$C+
' !66 +W-J-J
?006F#66/-- F GHH llG " - $ $%; < 'R-LVHU
,,w
" - $ $%; < .s CD D.c 0 e Zd ZdZ ed ZdZdZdZdZ y)r/ zCoreFoundation constantsi iiiiN)
__name__
__module__ __qualname____doc__CFStringEncodingr0 #errSecIncompleteCertRevocationCheckerrSecHostNameMismatcherrSecCertificateExpirederrSecNotTrusted r r/ r/ s( " ,Z 8*0' # % rG r/ r3 c ^ t j t j | t | S N)r CFDataCreater! len)r3 s r _bytes_to_cf_data_refrL s& & &**E3u: rG c t j | }t j t j |t
j }|S )zi
Given a Python binary data, create a CFString.
The string must be CFReleased by the caller.
)r, r r CFStringCreateWithCStringr! r/ r0 )r3 c_strcf_strs r _bytes_to_cf_stringrQ s>
OOE "E
5
5**
%%F
MrG
cf_string_refc t j | t j }|Tt j
d }t j
| |dt j }|s t d |j }||j d }|S )z
Creates a Unicode string from a CFString object. Used entirely for error
reporting.
Yes, it annoys me quite a lot that this function is this complex.
r' r( zutf-8)
r r. r/ r0 r, r1 r2 r r3 decode)rR stringr: r# s r _cf_string_ref_to_strrV ( s
1
1w44F ~,,T2 22 64)F)F
CD D
w' MrG certsc t j t j dt j t j
}|s t
d | D ]{ }d}d} t | }t j t j | }t j || |rt j | |sgt j | } |S # |rt j | |rt j | w w xY w)zBuilds a CFArray of SecCertificateRefs from a list of DER-encoded certificates.
Responsibility of the caller to call CoreFoundation.CFRelease on the CFArray.
r zUnable to allocate memory!N) r CFArrayCreateMutabler! r, byrefr" MemoryErrorrL r SecCertificateCreateWithDataCFArrayAppendValuer4 )rW cf_array cert_datacf_data sec_cert_refs r _der_certs_to_cf_cert_arrayrb ? s 22** ^99:H
677
7+I6G#@@ 22G L
- -h E ((1 (( 6 O ((1 (( 6 s
AC1Dctxc # K | j }| j }d| _ t | t j d || _ t | | y # || _ t | | w xY ww)NF)check_hostname verify_moder r5 CERT_NONE)rc re rf s r _configure_contextrh ] s_ ''N//K C cmm47
+$S+6 ,$S+6s :A-A A-A**A- ssl_context
cert_chainserver_hostnamec d }d }d }d } |Kd } t |j d }t j d| }|r,t j | nt j dd }|}| j t j z rt j t j dt j t j }t j || t j | t j t t" z } t j || t j | n(| j t j$ z r t' d d } t) | }t j+ }t j- ||t j | |rt j | | j/ d }
|
r j@ k( s|t> jB k( rd}
n!| jD s|t> jF k( rd}
|
sd } t jI | }tK | xs d }t jM }t jO |t j | t jP | }||_) ||_* | |rt j | |rt j | y y # |rt j | w w xY w# |rt j | w w xY w# | rt j | w w xY w# |rt j | w w xY w# |rt j | |rt j | w w xY w)
NasciiTr z/VERIFY_CRL_CHECK_LEAF not implemented for macOS) binary_formr
Fz8Unknown result from Security.SecTrustEvaluateWithError: z Certificate verification failed)+rQ encoder SecPolicyCreateSSLr r4 verify_flagsr5 VERIFY_CRL_CHECK_CHAINrY r! r, rZ r" r] SecPolicyCreateRevocation#kSecRevocationUseAnyAvailableMethod%kSecRevocationRequirePositiveResponseVERIFY_CRL_CHECK_LEAFNotImplementedErrorrb SecTrustRef SecTrustCreateWithCertificates get_ca_certs SecTrustSetAnchorCertificates
CFErrorRefSecTrustEvaluateWithErrorr6 CFErrorGetCoderf
CERT_REQUIREDr/ rE rD re rC CFErrorCopyDescriptionrV SecTrustResultTypeSecTrustGetTrustResultSSLCertVerificationErrorverify_message verify_code)ri rj rk rW policiestrustcf_errorcf_str_hostname
ssl_policyrevocation_policyctx_ca_certs_der ctx_ca_certssec_trust_eval_result
is_trusted
cf_error_codecf_error_string_refcf_error_messagesec_trust_result_typeerrs r _verify_peercerts_implr j s
EH EHB, & "O
>"5o6L6LW6U"V % 8 8 O
"",,_=!44T4@J # #c&@&@ @%:: 22 ^ A ABH
- -h
C $ $Z 0 ( B B378!
- -h8I J $ $%6 7
%
%(A(A
A%&WX X 0/
;E ((*E 3 3x e!4
((/
0;/G/G 0H 0
L
; :: F 66ulK ",,\: 2 25$ ?!,,. ( B B 6<<)!
!A % J
"a
' J,,JK`Jcd
* 9 9( CM
&&#*;*;; !9!99 G$D$DD !
..!W%C%CC !
"&
B&4&K&KH&U# **=> 98 ! )1(C(C(E%//6<<(=> 223CD%5""/ + 6 $ $X . $ $U + u #",,_= #L ((/ ",,\: ~ '",,-@A ' $ $X . $ $U + sg Q 0O D4Q 4A O9 =.Q ,!P
DQ %BP3 O66Q 9PQ P00Q 3Q
Q 1RrI )g
contextlibr, platformr5 typingr r r r r r r r
r ctypes.utilr _ssl_constantsr mac_ver _mac_versiontuplemapr* splitr r strr r r BooleanCFIndexrA CFDataCFStringCFArrayCFMutableArrayCFErrorCFTypeCFTypeID CFTypeRefCFAllocatorRefOSStatusr| CFDataRef CFStringRef
CFArrayRefCFMutableArrayRefCFArrayCallBacks
CFOptionFlagsSecCertificateRef SecPolicyRefrx r SecTrustOptionFlagsr\ argtypesrestypeSecCertificateCopyDatar+ r{ !SecTrustSetAnchorCertificatesOnlySecTrustEvaluaters rp ry r rt ru r4 CFGetTypeIDrN r. r2 rJ CFDataGetLengthCFDataGetBytePtr
CFArrayCreaterY r] CFArrayGetCountCFArrayGetValueAtIndexr~ r in_dllr! r" AttributeErrorAnyr; errcheckr/ bytesrL rQ rV listrb contextmanager
SSLContextIteratorrh r rF rG r r s
% 8 x !!$ #c<#5#5c#:;< w
67H7K6LAN_`aNbMcd
JS J3 J4 J" H H
FO
W
FO h
W
N+
H% x h y=6Di5PH))24EH))10A/BH##,.7H##+3;X2FH&&/1)>-*N& ,;8??/,N( )N *N !,N *N 2 X 2 &** 2 FJJ 2 6:: 2 j 4D ' ' 02B & & /+; ( 9 u t .tE{ 7H < 7CNN 7vt/D 7 7 #'K, K,U K, 4ZK,
K, =
1
2<=s
O?W W/